Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: KmCcTbDK/DbdGEsxTRCPZYSmpQkxH+D9kwWlIVOy/Mk=
Subject key identifier: A0:5F:E6:71:E0:C5:B8:4F:D0:A8:BE:F7:C8:BD:85:5C:C6:7B:1C:35
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 019A4EF50E89107919923001DCA2CE686136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 164C
Signing time: Tue 04 Nov 2025 13:01:14 +0000
Manifest this update: Tue 04 Nov 2025 13:01:14 +0000
Manifest next update: Wed 05 Nov 2025 13:01:14 +0000
Files and hashes: 1: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: yBBSu0BnvQCcpi997jh02GbF1r56J6CraCaIYJ/VJuM=)
2: U2UqHVAbFqT-DpJ2VeePtrrb8ik.roa (hash: pXyykD/gM3hsVstV7hOq0+tHLwMN2H8uNSnz2A5Kgw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0e:89:10:79:19:92:30:01:dc:a2:ce:68:61:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Nov 4 13:01:14 2025 GMT
Not After : Nov 5 13:01:14 2025 GMT
Subject: CN=a05fe671e0c5b84fd0a8bef7c8bd855cc67b1c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:7f:cf:2d:0d:1b:27:4d:e1:0c:42:d3:d5:
27:44:b6:62:eb:9f:46:a6:ab:3a:b5:72:d9:a3:55:
dc:ff:3f:12:e8:68:1d:0e:fa:cd:dd:82:c2:2d:83:
ed:7c:59:8e:c1:be:82:7a:0f:0d:6d:62:77:b0:af:
d9:39:2e:e3:d6:02:35:10:7c:fc:2f:96:e6:a8:61:
56:fb:26:6e:1d:97:d2:42:86:a1:9d:1a:ca:a2:41:
63:b1:d8:ac:8c:b6:51:3f:22:f7:40:1c:54:e8:4a:
8c:dc:13:f0:ce:5c:96:d8:0f:0e:9a:47:7d:d9:1a:
7e:23:4b:b7:07:b6:5c:df:c5:57:41:fb:72:6a:fc:
94:57:79:0f:e1:aa:49:ff:46:b7:83:88:91:38:89:
b7:6e:f1:0a:a4:b9:bc:b9:66:32:bc:fb:27:bf:e6:
34:a0:92:a5:60:cd:49:02:03:cd:4f:3e:a0:cc:f9:
a6:3b:99:fe:30:f3:b3:6b:a6:7e:54:d6:d4:b8:c8:
0a:a7:98:f7:c5:8c:06:a1:5a:60:c5:be:0c:b0:46:
f9:1c:1e:a8:11:4b:3d:f9:a1:9e:aa:19:bb:58:12:
97:ae:d7:c1:e0:73:f6:6e:1c:33:93:3c:cf:c0:a2:
5c:10:60:8f:99:36:e1:91:6e:2a:9b:b8:13:89:13:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5F:E6:71:E0:C5:B8:4F:D0:A8:BE:F7:C8:BD:85:5C:C6:7B:1C:35
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:54:82:86:2b:82:3a:1b:0f:ae:f7:e6:ba:70:2c:a2:e8:dc:
61:f0:f2:bf:90:b3:8a:e2:d4:a8:44:e4:f8:26:ee:2a:b5:85:
92:f0:d9:0a:d7:af:36:da:55:e6:7f:13:ad:4c:ae:a2:ae:8c:
f1:c6:37:78:b3:04:f1:5e:93:12:ee:2b:14:1b:52:bb:a6:97:
36:99:33:49:8b:0f:a3:34:1f:fa:49:d8:7f:0c:04:c9:0d:71:
10:0e:ba:33:e6:e0:43:14:9d:45:6e:da:7d:9d:ba:6a:3a:6c:
2b:05:ea:54:27:cd:9f:3a:5c:75:54:9b:68:ea:a2:36:50:a8:
47:65:51:e9:77:d8:bd:a4:4d:cd:8f:93:b6:59:a5:78:80:04:
8f:c8:17:7d:13:0e:24:38:f4:28:db:45:64:28:cf:ec:88:44:
8c:5f:df:82:92:39:89:6b:0e:2a:28:71:53:30:20:f5:68:3b:
f4:35:ef:b9:a1:ae:8e:d6:ba:79:ce:8b:3e:2b:6d:95:e8:b1:
ce:a2:91:2b:32:c7:17:8d:e2:c7:79:70:88:33:bf:e9:37:02:
d2:83:20:4e:ff:ae:23:5e:05:8b:1f:b7:f6:4a:b3:49:4c:6f:
37:26:ed:32:71:2e:5d:29:f0:a7:6e:c5:61:4e:08:01:e3:46:
b1:b5:31:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:48 2025 by rpki-client