Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: Dyv4f/hd5zayWFQR2gBgtYxAqXva04rwkpJOFtuXP/M=
Subject key identifier: 47:E5:7C:53:23:AB:D2:7A:4F:8D:92:4E:71:A9:76:F4:90:0B:4F:4C
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 01976997C5929CF8879F597A0F4A076A69CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 14:00:43 +0000
Manifest this update: Fri 13 Jun 2025 14:00:43 +0000
Manifest next update: Sat 14 Jun 2025 14:00:43 +0000
Files and hashes: 1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=)
2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: QHuO0Nq5OZUutZdU6L+CeV6ajSvC/X436VOUuebEYLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:c5:92:9c:f8:87:9f:59:7a:0f:4a:07:6a:69:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Jun 13 14:00:43 2025 GMT
Not After : Jun 14 14:00:43 2025 GMT
Subject: CN=47e57c5323abd27a4f8d924e71a976f4900b4f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:a9:c5:53:da:c8:22:2e:d6:4a:98:ae:14:
e6:86:9f:af:4f:8b:03:2c:13:16:b0:f3:95:98:33:
3d:67:0a:71:06:9b:97:c7:22:14:86:18:0b:f1:06:
93:d8:f4:97:c1:59:28:fc:25:cf:5b:da:bc:85:83:
71:82:96:b4:c0:d7:2f:d8:e9:08:fe:2d:74:46:7d:
0e:89:a6:ed:b4:02:a9:03:09:37:76:48:2a:96:09:
96:b2:bc:64:42:2b:a3:51:4e:23:dd:e9:3c:ab:5d:
ce:30:90:29:bc:60:d6:2d:3b:ea:de:1a:e5:7b:5a:
da:a3:61:2b:2a:cc:d7:9f:e6:42:8f:d9:b3:45:7a:
31:d9:0a:29:29:38:b5:c6:d6:69:35:0b:fb:c4:de:
f6:53:94:0b:b6:43:40:a9:c2:74:e0:d3:7e:67:ff:
d6:ae:44:da:46:dd:3c:e1:e0:e2:ff:a1:af:18:0e:
d9:5e:96:10:34:fb:c9:18:11:63:52:a2:3a:54:14:
81:80:97:46:2e:06:25:3a:e9:7a:4e:f3:b0:c2:d9:
be:78:0c:05:79:60:aa:af:93:ad:5a:e0:f7:7c:f2:
d5:c1:2f:46:d2:1d:d0:3b:b9:be:9d:a2:7c:7a:55:
48:7d:c7:8e:98:b4:80:4b:52:19:96:b4:39:83:06:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E5:7C:53:23:AB:D2:7A:4F:8D:92:4E:71:A9:76:F4:90:0B:4F:4C
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8b:21:27:2f:04:bb:21:ca:97:d3:b4:4f:da:fa:6e:92:09:
38:83:5d:59:4a:ac:37:ce:92:a2:dc:93:f7:df:f6:9d:93:61:
e4:f7:a4:31:ec:fd:95:e8:2c:0e:aa:60:ef:d5:d1:07:e4:8e:
18:d7:fd:25:a0:f2:3c:e0:91:77:4c:bc:fc:d5:74:e4:a9:1b:
ee:c1:5b:d5:48:f2:5d:50:20:24:92:d1:cf:dd:07:9c:9b:10:
a6:d5:38:cd:2b:b2:42:72:5f:28:81:8e:67:ee:c6:0b:47:28:
bb:50:37:ae:a4:e6:60:20:06:9d:0c:c7:20:fa:cb:96:6d:6a:
69:22:d4:23:87:f5:5a:a8:20:a6:20:65:4f:cd:c3:5c:58:cd:
1b:c5:ad:62:41:b5:69:c0:98:2f:34:50:6f:87:8e:f5:c2:64:
41:7d:9c:b2:96:5f:b6:d6:84:69:8e:72:5e:c8:4e:8c:e1:11:
e0:d5:2f:f8:f0:bb:50:8d:af:27:cc:01:4e:37:44:5d:aa:f6:
70:88:6b:5a:6d:8e:76:f9:3b:a4:96:c6:6d:54:95:c9:92:ec:
8a:8d:8f:24:88:a4:c9:3d:b5:4c:ab:62:2c:49:0c:8f:03:ae:
79:bc:6d:24:52:53:13:0b:d6:9b:86:fa:a8:ab:5a:30:2c:b3:
25:e8:45:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl8WSnPiHn1l6D0oHamnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYTRiYjY5YjNmNTY4MDUxNDBlZmFlMjQzZTRkZDRiMzZj
MGRkMWIwHhcNMjUwNjEzMTQwMDQzWhcNMjUwNjE0MTQwMDQzWjAzMTEwLwYDVQQD
Eyg0N2U1N2M1MzIzYWJkMjdhNGY4ZDkyNGU3MWE5NzZmNDkwMGI0ZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbqpxVPayCIu1kqYrhTmhp+vT4sD
LBMWsPOVmDM9ZwpxBpuXxyIUhhgL8QaT2PSXwVko/CXPW9q8hYNxgpa0wNcv2OkI
/i10Rn0OiabttAKpAwk3dkgqlgmWsrxkQiujUU4j3ek8q13OMJApvGDWLTvq3hrl
e1rao2ErKszXn+ZCj9mzRXox2QopKTi1xtZpNQv7xN72U5QLtkNAqcJ04NN+Z//W
rkTaRt084eDi/6GvGA7ZXpYQNPvJGBFjUqI6VBSBgJdGLgYlOul6TvOwwtm+eAwF
eWCqr5OtWuD3fPLVwS9G0h3QO7m+naJ8elVIfceOmLSAS1IZlrQ5gwYgUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEflfFMjq9J6T42STnGpdvSQC09MMB8GA1UdIwQY
MBaAFAyku2mz9WgFFA764kPk3Us2wN0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQt
ZDdmNDVlMGE3NzM2LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQtZDdmNDVlMGE3NzM2
LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4shJy8E
uyHKl9O0T9r6bpIJOINdWUqsN86SotyT99/2nZNh5PekMez9legsDqpg79XRB+SO
GNf9JaDyPOCRd0y8/NV05Kkb7sFb1UjyXVAgJJLRz90HnJsQptU4zSuyQnJfKIGO
Z+7GC0cou1A3rqTmYCAGnQzHIPrLlm1qaSLUI4f1WqggpiBlT83DXFjNG8WtYkG1
acCYLzRQb4eO9cJkQX2cspZfttaEaY5yXshOjOER4NUv+PC7UI2vJ8wBTjdEXar2
cIhrWm2Odvk7pJbGbVSVyZLsio2PJIikyT21TKtiLEkMjwOuebxtJFJTEwvWm4b6
qKtaMCyzJehFHQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:56 2025 by rpki-client