Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: 1cvhXKoXkBJ8QYvHHmfpHnEVb7T1lt7ACmGVvzo467k=
Subject key identifier: 92:91:7D:55:60:4E:76:EB:10:F0:84:88:62:9D:19:E6:4D:69:53:F9
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 019A50E43B70D2C6EC2BE4401CAABE02DD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 22:02:05 +0000
Manifest this update: Tue 04 Nov 2025 22:02:05 +0000
Manifest next update: Wed 05 Nov 2025 22:02:05 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: iO/D48PYWKf7bdGfOsR1kPSRE9aPc69Xg7qqdoUvR1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:3b:70:d2:c6:ec:2b:e4:40:1c:aa:be:02:dd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Nov 4 22:02:05 2025 GMT
Not After : Nov 5 22:02:05 2025 GMT
Subject: CN=92917d55604e76eb10f08488629d19e64d6953f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:35:31:61:ad:0f:6f:bc:6a:9d:08:ee:13:
28:af:a2:74:24:31:03:48:d9:dc:30:5f:75:11:41:
fe:41:d0:2a:fb:50:85:f6:23:d5:9e:84:fd:c7:2d:
07:5c:0b:4e:e6:2f:33:c0:bb:9f:55:fa:64:c9:49:
ac:ea:c3:60:df:da:1b:47:39:ac:e9:cc:67:8b:e0:
e7:e8:5b:7f:87:ee:6d:6a:e6:d0:f1:aa:ce:aa:61:
0a:72:4d:9c:bd:28:bc:fb:74:38:52:e7:14:58:7d:
f5:30:5d:1a:e2:e5:5d:d0:9b:d3:86:de:36:bf:00:
71:75:99:ce:a4:54:46:f5:93:95:e7:1e:c3:a8:fe:
32:a1:b8:6e:56:33:ea:98:8d:aa:27:93:bd:5a:3e:
2f:56:12:ac:5c:0a:84:26:d0:8a:18:ca:d4:bb:c0:
88:32:1a:c8:2c:27:63:83:d8:95:9f:44:df:29:8a:
dc:2a:db:41:8a:7a:74:f7:46:01:86:86:57:48:89:
70:00:c8:4c:bd:94:11:39:5d:a1:67:fc:8d:5d:50:
fd:c1:df:f8:18:b4:99:4c:20:7b:78:8e:07:be:cd:
27:9a:7a:a5:f7:82:5d:dc:18:03:cd:45:d6:eb:7e:
6a:d7:7b:9d:98:8c:da:fc:eb:48:77:0b:87:aa:af:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:91:7D:55:60:4E:76:EB:10:F0:84:88:62:9D:19:E6:4D:69:53:F9
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:27:c2:9d:a4:76:b9:ef:e3:24:c3:2f:f6:64:b0:69:25:24:
a0:73:ba:c3:29:b1:f3:4b:08:7c:f0:7a:d9:d6:4a:1a:d0:ef:
53:8e:f7:b5:19:00:c3:37:10:2c:7d:0e:c4:0b:29:b5:16:a6:
27:c1:7e:23:ae:d5:ae:97:72:b6:c9:98:45:30:9d:5c:8a:19:
5d:3e:25:42:90:48:73:29:69:5e:b3:fd:e6:12:ef:f2:90:12:
3c:95:58:fb:4a:b9:30:3c:d0:40:44:cb:ab:cc:ac:00:69:b7:
14:45:f6:34:2f:8d:37:5b:95:77:c2:f3:57:92:19:4f:1a:90:
ba:ac:2a:0b:65:61:3a:27:7e:d5:36:43:5d:37:1e:97:98:62:
24:79:50:4a:1f:35:13:30:1e:94:52:31:9f:33:83:9f:f0:3b:
72:0d:ec:e2:cb:47:40:20:c8:dc:ba:ed:61:c0:bf:61:48:1b:
ca:8b:0f:52:4d:77:3e:74:f5:b5:c2:f5:ca:da:6f:aa:a8:d0:
52:80:32:16:df:90:bf:aa:77:25:c9:a5:51:6d:3c:f1:83:25:
18:81:bb:cc:bc:13:cf:8f:4a:1a:80:9e:1d:47:a0:d6:68:a5:
10:91:99:3e:8b:04:a7:fd:67:9b:94:99:51:92:14:ea:1f:79:
25:e6:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:26 2025 by rpki-client