Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
File: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft (raw, json)
Hash identifier: gjK0HN3VAph/36lBtnQlpGXMCPuDGSbuZXss625HLIo=
Subject key identifier: FF:29:91:D0:29:F1:6E:C8:E0:B1:42:B4:38:21:81:F0:6F:C3:5B:16
Authority key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
Certificate issuer: /CN=0f657093f326547bf25a9985c81cf1403140a3a8
Certificate serial: 019A228AE2F5D17378A718B2357784CE85FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 22:01:58 +0000
Manifest this update: Sun 26 Oct 2025 22:01:58 +0000
Manifest next update: Mon 27 Oct 2025 22:01:58 +0000
Files and hashes: 1: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl (hash: cfUQFSoOzL1hnI5iutzgiyEtE3O7g0m8FZAa87+SHDE=)
2: w9q_FLnEYi6mMGLHNxrzvfLgYJ4.roa (hash: tRbBa7QkfAKJaQVPfhVVFf8/W8ntAnk0VCwj65NPw8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:e2:f5:d1:73:78:a7:18:b2:35:77:84:ce:85:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f657093f326547bf25a9985c81cf1403140a3a8
Validity
Not Before: Oct 26 22:01:58 2025 GMT
Not After : Oct 27 22:01:58 2025 GMT
Subject: CN=ff2991d029f16ec8e0b142b4382181f06fc35b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:ad:83:4d:65:44:98:b1:4c:f2:86:6b:87:
bd:41:9e:d0:d3:5b:81:e8:88:9e:f3:56:2d:20:ed:
40:a3:e0:d7:0d:91:27:ec:80:8b:c1:2a:56:23:3e:
e9:d8:4c:47:ee:fb:37:f8:53:77:ac:ca:2c:68:41:
6d:19:e7:d8:aa:32:7c:91:df:53:3b:cf:cc:63:3a:
1a:14:63:18:a4:2c:90:dd:6f:a4:69:ff:50:cb:fc:
93:71:6b:02:45:1b:45:33:b5:cf:fd:29:a7:a3:82:
af:a9:d7:d6:2b:73:b6:e5:7a:84:81:1a:b8:88:61:
1d:d2:df:dc:df:6e:50:48:60:7b:90:eb:21:f7:4c:
fa:c5:96:54:c8:ef:b8:20:7f:64:a4:66:07:73:d7:
6c:7c:06:67:35:de:41:5c:28:3b:8c:05:c8:ae:85:
49:82:e9:72:e0:cb:7d:d6:91:e8:ff:e5:63:c0:95:
64:e4:b2:37:72:21:3c:50:ac:96:23:18:ba:b7:99:
86:36:fc:84:4e:f9:38:96:e8:29:3c:ee:61:b7:6d:
f5:c3:b2:ba:08:09:11:de:ec:9b:76:bb:9f:a6:e1:
f3:a9:7a:c6:6d:ba:c2:c9:9f:f2:69:ef:a3:21:7c:
81:f0:2f:f1:13:94:29:99:38:3d:04:cc:0b:3d:87:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:29:91:D0:29:F1:6E:C8:E0:B1:42:B4:38:21:81:F0:6F:C3:5B:16
X509v3 Authority Key Identifier:
keyid:0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:22:42:23:cf:d2:59:ab:b1:fc:39:02:f9:29:4a:75:b5:7a:
7a:ea:3d:ac:83:37:30:cd:88:63:67:8a:61:f3:a3:8a:a5:3a:
63:10:69:7b:e5:d6:2f:49:07:fa:d0:8b:5a:70:8f:4a:ab:ac:
79:30:26:59:69:22:8b:c4:c9:c4:ec:09:e8:27:36:34:62:23:
9b:d7:63:d1:c8:ff:9c:52:c6:4b:1a:b5:54:d9:78:6d:ef:31:
c4:8b:8e:da:6f:ac:66:8b:85:ca:56:37:d3:ef:06:fc:d0:a7:
86:43:73:99:56:ec:4d:b8:82:7d:37:b9:ac:68:76:fa:84:50:
33:fa:d7:45:a7:35:6d:0f:0e:93:a6:34:7e:d5:d7:d3:08:49:
93:c8:ce:6c:b8:65:b1:df:44:a3:d3:e8:2a:b2:e0:85:4d:e8:
5b:db:d9:a0:2a:b7:7b:a3:09:50:34:2e:13:2d:c8:8f:61:ed:
df:75:3c:55:cf:e9:66:43:75:e8:82:18:be:0b:13:5c:78:76:
a4:6b:8a:e1:35:6f:c1:cc:46:be:28:8a:02:2b:d6:fa:be:24:
f2:00:c5:65:38:5a:cd:e6:e6:fe:9c:70:26:ec:13:7b:2e:1e:
5c:2c:ee:85:85:d3:1f:80:95:b8:a3:cc:5b:d7:76:96:05:40:
0e:37:6e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:42:06 2025 by rpki-client