Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: tALQ+hzL1UCXs1zzfSOAdluhdDCgp5v8cCl6M68Aazs=
Subject key identifier: 25:AC:0F:61:F5:E5:49:91:39:E0:13:08:C1:23:CB:CD:8A:7B:BB:40
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 019A4EF5C42C6884FE34D333541D8780396D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0CE1
Signing time: Tue 04 Nov 2025 13:02:00 +0000
Manifest this update: Tue 04 Nov 2025 13:02:00 +0000
Manifest next update: Wed 05 Nov 2025 13:02:00 +0000
Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=)
2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: De25AOQcB0pYAuJBCpRmCeruveULHK+qie5MRlJvwX0=)
3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c4:2c:68:84:fe:34:d3:33:54:1d:87:80:39:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Nov 4 13:02:00 2025 GMT
Not After : Nov 5 13:02:00 2025 GMT
Subject: CN=25ac0f61f5e5499139e01308c123cbcd8a7bbb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:bc:3d:db:85:a5:33:29:57:3d:67:8f:27:
51:b0:98:90:4d:42:b5:3a:e8:d0:d3:35:1a:d0:c3:
c1:93:78:b0:17:76:80:c4:aa:cc:f6:09:a6:42:b7:
a7:70:31:e4:c0:df:b2:11:91:a5:70:55:c5:96:51:
cc:0d:f0:fc:67:4c:1e:93:e0:13:93:34:57:73:85:
2a:29:df:80:7e:1d:5d:9a:e5:13:61:77:95:a8:d9:
d3:62:cf:26:de:d5:85:4b:ca:ec:59:22:cf:e0:67:
d5:0b:75:b3:c3:3c:f4:00:b4:e2:e8:8f:5b:7f:3e:
eb:9c:fd:ba:7c:4d:af:98:f3:d3:bb:64:18:5c:04:
28:19:f9:50:05:b4:48:0b:7b:42:98:07:8b:05:ef:
aa:3c:ec:fb:12:ab:98:fc:59:33:a0:89:30:f9:ec:
27:d1:f3:27:1d:41:92:92:17:fe:f5:3b:df:ce:1d:
48:ef:b0:e6:d2:48:c6:29:0f:3d:65:3a:22:8a:04:
8d:3a:40:2a:2a:41:a5:3a:13:8f:cd:3c:ef:62:0e:
43:9c:d0:21:2e:66:ec:de:f2:0f:7b:c0:d0:8b:a0:
4a:b1:84:19:5c:20:ae:f8:c2:ad:df:8b:6d:7b:0b:
ef:43:ab:8e:34:3c:3a:be:3d:51:3e:43:6f:bf:e4:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AC:0F:61:F5:E5:49:91:39:E0:13:08:C1:23:CB:CD:8A:7B:BB:40
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e7:02:31:d8:00:ed:3f:36:3b:fd:63:65:92:23:f0:58:e2:
c8:15:84:c1:e7:a8:ca:7c:17:c6:26:26:2b:0d:69:d8:c5:d0:
14:12:9f:fb:bc:4d:1c:fd:67:97:b3:cc:a0:18:02:ee:60:78:
42:98:98:33:c7:45:95:d1:d3:05:ff:23:08:62:6a:66:c5:00:
da:94:c0:82:5a:ed:1c:15:29:99:2f:8e:88:35:50:7b:af:97:
57:c8:6e:55:5f:79:27:10:37:80:bd:a3:18:12:94:62:f3:4e:
ef:cc:55:54:80:13:ec:40:cb:af:8f:b6:7a:c0:29:65:de:a9:
63:e8:e3:97:4e:29:db:38:a6:00:d3:03:77:73:40:58:eb:92:
76:3d:ea:e7:69:4b:7e:4b:40:c3:be:39:43:a2:72:a3:a3:6c:
8e:1a:28:b4:66:88:bc:08:28:f5:07:c4:15:d0:f6:13:88:9e:
83:a8:10:50:37:3e:49:b1:e1:92:8f:e8:e6:cb:c1:be:f8:f8:
05:7e:a4:13:d0:67:1c:45:68:9d:09:e5:8c:9c:92:47:51:69:
4e:9f:33:78:80:c7:a8:b8:fc:bf:89:7e:ed:23:a2:9a:c6:aa:
05:64:67:51:68:f7:9a:5e:d4:3e:fe:cc:d9:84:f3:e1:a0:76:
a1:77:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:11 2025 by rpki-client