Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier: S7rZs1eyvsrK83t374OhkUuvtlolJk2Ff8tyUGEFFTw=
Subject key identifier: 68:08:3A:80:C0:B1:56:C7:4B:87:1C:CB:4A:38:CB:66:70:54:B5:B4
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 019A4D742EE0D31225321504264E6199A3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number: 1423
Signing time: Tue 04 Nov 2025 06:00:50 +0000
Manifest this update: Tue 04 Nov 2025 06:00:50 +0000
Manifest next update: Wed 05 Nov 2025 06:00:50 +0000
Files and hashes: 1: 8JHdroSmFbW7TogZWDAIS298pfo.roa (hash: goVtVxuEC9QAmF+Kz0vzUzxl+/V8u83qUjrsL0jlHNw=)
2: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: oi1Ce8fz4mv9u7N8LpcAlF+tRph4F9k/H8NHPAEksWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:2e:e0:d3:12:25:32:15:04:26:4e:61:99:a3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: Nov 4 06:00:50 2025 GMT
Not After : Nov 5 06:00:50 2025 GMT
Subject: CN=68083a80c0b156c74b871ccb4a38cb667054b5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:60:12:47:c3:9c:ee:d1:d8:5f:91:61:03:
fa:8f:5f:cb:7f:63:99:b7:f9:e7:fe:bf:89:bc:31:
c6:5b:c2:40:5f:4c:83:8a:01:4e:28:89:47:67:f6:
69:9f:95:19:8f:3c:eb:00:b7:62:14:d6:5d:8b:a7:
6c:1e:dd:ed:7d:f6:d3:5d:db:e8:74:68:bd:b7:bb:
3c:d1:b4:04:cb:f1:34:3a:ac:0b:63:09:73:3d:d2:
53:49:88:90:45:22:de:bf:1a:f2:b4:e7:71:e2:fa:
03:62:04:19:26:a5:48:31:fd:6a:31:62:af:d9:d9:
46:d9:48:d0:39:1f:19:fa:9e:fe:6b:7a:1e:db:57:
29:55:a6:bc:dc:2d:f4:53:29:12:8e:41:ed:fa:6f:
82:aa:22:a7:31:ab:f9:ae:2a:98:7e:59:b8:1f:bb:
82:ea:6d:fb:55:19:53:5a:1d:d8:8a:2a:d0:49:e8:
f1:f1:2c:35:f1:3e:08:26:1c:5c:17:31:ac:48:86:
ee:ba:93:d2:c2:dc:dc:02:06:28:c0:e8:df:de:bf:
c8:1f:d8:eb:ef:1e:b4:a2:8e:f9:38:a5:8b:07:9a:
e8:d5:ce:95:6c:3b:5f:3f:7b:bb:73:69:f9:0f:6a:
c6:06:50:04:8c:04:b7:c6:bd:71:87:7f:1f:ee:08:
44:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:08:3A:80:C0:B1:56:C7:4B:87:1C:CB:4A:38:CB:66:70:54:B5:B4
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b8:c5:fc:2f:ab:cd:c3:5f:6c:3e:50:39:0d:d7:7f:4d:29:
ce:18:ac:e1:01:b0:fd:ac:09:34:d9:0c:19:0d:40:fa:7d:45:
8f:f2:b4:6d:16:70:4b:04:aa:cb:f4:5c:1d:91:51:29:b0:97:
68:84:de:6f:d5:99:ff:41:8f:1b:fa:82:84:32:8a:4f:fc:58:
1b:9d:78:36:32:9b:bc:f2:98:ca:4c:29:9b:5e:f0:d3:5a:f8:
86:38:35:36:a3:8b:e3:6d:d2:d0:c6:5f:9e:b6:e8:04:1c:03:
2b:99:97:2e:80:56:b9:0b:a7:7f:85:1b:de:e3:ec:c8:4d:69:
c5:bb:56:17:6a:e8:e4:1e:ce:86:01:e1:9e:7d:01:0d:ae:3b:
5f:6d:09:15:16:b5:37:fe:a7:c2:a5:3b:d4:6e:32:4e:12:e8:
0e:b0:45:75:b2:6b:9a:e3:50:f9:09:f3:07:f7:eb:8a:47:27:
fc:31:fa:84:11:dd:85:53:23:ae:52:7f:b8:5c:92:07:21:f9:
c8:7d:36:ae:73:01:e3:72:3c:91:16:12:dd:cb:d3:73:a9:43:
bf:47:6b:6c:f7:39:53:a6:36:fa:3e:94:27:88:20:e8:a4:99:
cf:59:7e:32:a3:05:4d:b2:46:58:51:e9:7b:cb:a7:3e:8e:7c:
d8:e4:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:31 2025 by rpki-client