Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: ER6nyvaXL8H5voiggXbHUL3jRKaElotn/AUug+lkYjI=
Subject key identifier: 8F:3A:52:47:CB:97:14:FA:9B:ED:22:EA:73:DE:DC:13:E2:F9:BB:F5
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 019873E30EDB08892F703F2B0CB44ADB7AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0BEB
Signing time: Mon 04 Aug 2025 07:01:56 +0000
Manifest this update: Mon 04 Aug 2025 07:01:56 +0000
Manifest next update: Tue 05 Aug 2025 07:01:56 +0000
Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=)
2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: xGJyHIKi3rZkbPrbLdGe/nbZOfjOOk8nMDvenDn5qiA=)
3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:0e:db:08:89:2f:70:3f:2b:0c:b4:4a:db:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Aug 4 07:01:56 2025 GMT
Not After : Aug 5 07:01:56 2025 GMT
Subject: CN=8f3a5247cb9714fa9bed22ea73dedc13e2f9bbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:ff:ea:af:d5:7b:ef:96:34:ab:6d:a7:69:
1f:22:d0:a8:f7:3b:ff:67:a5:c6:df:a9:6f:8b:79:
c1:c5:f7:92:cb:ba:0e:d9:c7:49:fa:25:c0:0c:0a:
06:fb:14:c8:9f:39:df:9e:35:67:fd:fc:d9:03:f8:
0a:cb:42:91:53:89:32:63:90:b4:4d:64:c6:1f:f0:
d2:ae:6e:c0:6a:5c:51:ea:5a:df:ba:5d:c1:15:9b:
52:52:22:4e:03:e3:ad:f7:f4:89:d4:29:26:32:d6:
68:0a:25:6a:73:40:74:36:5c:42:38:c7:b4:ee:f6:
c0:84:55:8d:41:d1:27:bc:d2:bb:b8:f8:35:46:f4:
1e:27:7a:22:e9:06:a7:2d:f6:9c:6e:95:f3:b5:84:
a2:0f:e2:94:c6:26:2a:ea:f8:f5:5d:f6:3b:58:07:
d2:5c:f9:c9:ea:90:3e:99:c1:10:71:f9:de:ba:bd:
2c:98:99:f4:b1:0d:39:44:8a:55:2d:57:79:70:cd:
1d:1f:b7:9b:cb:cc:2a:e1:25:25:56:d7:a4:95:10:
70:e6:a9:9e:75:92:09:a3:4d:b1:1b:46:e4:35:92:
11:36:6d:62:62:8d:e7:f3:f2:9d:17:31:aa:65:32:
b9:5a:f4:c2:09:84:bc:c3:89:99:00:42:e8:3d:f9:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3A:52:47:CB:97:14:FA:9B:ED:22:EA:73:DE:DC:13:E2:F9:BB:F5
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ae:5d:c1:00:ce:7b:92:c6:1e:31:99:a8:cd:96:6c:0d:bc:
13:1f:88:9d:44:b7:1b:6c:54:d8:34:a0:bc:73:eb:3a:8e:1f:
d8:2b:da:54:1c:72:d1:42:9d:67:51:7a:67:eb:e2:8c:37:b3:
68:f0:0d:70:f3:08:1d:b0:2f:17:68:4b:fb:60:56:48:c9:ad:
fd:aa:74:4c:8e:95:b3:9e:98:a0:8c:48:4b:70:32:a4:df:19:
b1:94:91:05:c9:5a:63:2c:9f:36:4e:c6:35:4d:01:6e:88:27:
b2:09:a9:63:ab:91:da:80:2c:4f:80:c7:03:2f:f2:ad:24:7e:
10:cf:2f:f4:17:65:fc:70:26:42:ef:47:59:0b:b7:4b:1f:f7:
da:67:74:a8:63:80:c8:69:d2:a9:93:0a:81:de:63:37:da:10:
02:52:17:1a:94:36:b8:5f:1c:aa:a6:fe:ea:8c:16:b4:20:8c:
18:fe:e1:43:2a:0d:29:77:c1:62:30:fd:00:04:d8:37:ca:e3:
ea:bf:a5:6c:86:fc:9d:c3:1b:9a:d3:4c:a9:1e:91:af:5e:d9:
9a:33:0e:38:d8:c3:79:74:48:cc:3f:cb:a4:95:22:e7:4f:87:
d5:87:3c:86:55:ba:c5:bd:a4:fa:61:7c:78:14:80:5b:29:42:
60:72:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:07 2025 by rpki-client