Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
File: D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft (raw, json)
Hash identifier: idrsAwJslCGhfcykgM/B/QWsnO6/pG2lLqKosob+Pf4=
Subject key identifier: 72:65:A9:10:8B:5E:20:30:D4:AC:C8:A2:94:A2:4E:04:B5:76:BF:CE
Authority key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Certificate issuer: /CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Certificate serial: 01993124CDB09F77B0BED8945E526F872303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
Manifest number: 0EDF
Signing time: Wed 10 Sep 2025 01:01:59 +0000
Manifest this update: Wed 10 Sep 2025 01:01:59 +0000
Manifest next update: Thu 11 Sep 2025 01:01:59 +0000
Files and hashes: 1: D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl (hash: l/csOQfCvoyjrf1dNO8DrSOoU4QBWvMQTRpQ2AGdlAI=)
2: FIHDrOZdPItJ1g7-VrAk_uoQnSo.roa (hash: 1BVoM3pIwN+Dth/AavDroFy4/aBiv0LMqKNh/mLZqqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:cd:b0:9f:77:b0:be:d8:94:5e:52:6f:87:23:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Validity
Not Before: Sep 10 01:01:59 2025 GMT
Not After : Sep 11 01:01:59 2025 GMT
Subject: CN=7265a9108b5e2030d4acc8a294a24e04b576bfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:85:a0:24:22:75:21:f4:70:6f:31:01:7e:c6:
5e:24:d9:f5:38:07:59:5f:80:7e:be:84:d8:84:99:
f2:dd:b1:70:4b:99:73:d8:40:54:65:27:50:bf:ff:
fb:d6:c2:e5:2a:51:37:06:31:12:33:cf:c5:03:6c:
d6:c6:18:74:cb:d1:f7:53:9c:71:5d:37:a8:a1:8d:
06:c5:32:cb:5b:10:2a:44:02:3f:0c:ae:88:08:d2:
10:89:75:ac:d8:af:48:21:8b:b7:a1:10:2f:d6:91:
74:c6:e2:3d:fd:35:c0:ec:94:c4:99:8a:85:84:5e:
57:1f:47:12:4e:fb:9f:67:08:b8:eb:d2:ca:a9:f4:
f2:47:39:f5:a2:04:cc:c2:37:f8:ca:ec:f9:65:35:
26:7c:64:c7:b3:98:c2:64:b9:20:17:cd:01:9a:8c:
52:46:17:30:82:4b:d4:b6:58:15:7e:62:80:76:80:
64:19:c1:b1:ad:72:e4:8b:40:ef:3c:fb:18:b0:87:
c9:54:ed:99:96:71:81:6e:06:a7:0a:97:d8:ec:8e:
2f:14:22:d0:09:ff:38:cc:0e:31:1b:ef:c3:91:84:
6e:30:73:b8:3f:86:37:d9:7b:9f:09:61:80:0c:47:
b6:e1:36:e2:f5:55:93:f0:1a:d6:79:51:62:23:b1:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:A9:10:8B:5E:20:30:D4:AC:C8:A2:94:A2:4E:04:B5:76:BF:CE
X509v3 Authority Key Identifier:
keyid:0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b3:d7:8c:32:2d:6e:0a:dc:45:a5:91:30:2e:4d:f2:f9:bf:
83:37:04:5d:a0:65:23:1e:9b:b8:bc:4d:9c:ed:05:77:ea:c0:
7b:84:ee:08:31:54:91:7b:a2:08:0a:d6:b7:65:79:78:f7:f5:
aa:7c:0e:c5:c2:f5:29:59:99:63:84:20:58:54:aa:ff:c0:e4:
09:48:c5:2d:38:58:35:79:a7:1c:ac:1e:0d:cd:3d:0a:5e:e6:
6e:c0:c2:7f:59:5b:52:00:88:3e:c2:73:d0:c1:ec:f2:41:29:
96:22:85:d1:d7:24:46:96:b0:76:07:2f:97:ca:d2:b6:a4:70:
95:d8:c0:4b:64:7e:5f:ae:be:aa:34:dc:89:b8:cd:49:34:6c:
5c:1c:31:27:ae:24:96:1a:aa:a1:4c:f1:f2:92:3e:9b:7a:63:
4b:32:30:ad:54:40:35:88:61:38:10:98:6a:c0:bc:f8:d5:d9:
12:4d:8f:bf:5a:c0:67:ca:29:f4:48:34:e3:a1:01:4c:e9:83:
91:4d:89:dc:46:1f:c1:f4:56:36:5e:27:c8:a4:e0:42:33:eb:
d3:71:ec:c2:3d:e6:af:ed:7e:3f:6b:6f:10:94:d0:00:9a:b7:
ce:ca:2e:73:45:9e:03:1d:23:e3:6e:46:92:30:da:d9:ee:ea:
b4:e1:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:30:24 2025 by rpki-client