Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier: Jc2KWrikKvoipAJlF7PGSP8en/iK/foQl8j1n4lt2mw=
Subject key identifier: 80:C0:B9:CA:29:B7:F6:A6:24:EB:88:2C:B0:EA:0E:FA:0F:45:46:CD
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 01993649BA46EFF45EB47162931FAE952C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 01:00:25 +0000
Manifest this update: Thu 11 Sep 2025 01:00:25 +0000
Manifest next update: Fri 12 Sep 2025 01:00:25 +0000
Files and hashes: 1: 1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa (hash: DMlPQL5W5NIfofMivrzJcYQP+Q8OdiiG+2ZjJ0SbGWs=)
2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: shcMWraoVfDmHYFD/0x8N0f48A6lviZGXcDBFNGG0gQ=)
3: gP1adqpN3jFkt9OdAVoyA-6IhBE.roa (hash: LIhJSQT5pr5zAf/JFHVd3amDAMZCN7LCkj2NZQ4RFrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:49:ba:46:ef:f4:5e:b4:71:62:93:1f:ae:95:2c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Sep 11 01:00:25 2025 GMT
Not After : Sep 12 01:00:25 2025 GMT
Subject: CN=80c0b9ca29b7f6a624eb882cb0ea0efa0f4546cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:f3:06:16:b0:37:31:79:26:31:d5:7c:be:
cf:dc:e9:ce:fb:f1:3a:2b:be:b0:a3:0a:88:13:39:
ba:30:aa:a5:31:1f:6a:5f:47:db:2f:fd:da:3d:48:
ef:be:a3:58:11:03:b4:cf:51:5e:34:15:e5:58:89:
c1:ee:dd:fd:ad:d5:95:e8:b7:37:69:f3:ca:b3:86:
9c:22:75:45:3c:1d:d9:7e:69:de:aa:0b:20:54:43:
9b:b9:63:c9:b1:b1:04:81:13:ce:3f:cc:c5:d7:12:
93:64:24:aa:c6:fa:99:55:60:30:33:3f:67:5b:69:
4d:2e:1f:93:f8:65:ca:a0:05:2c:cb:90:75:84:49:
8d:fb:45:1a:cb:70:3d:fd:56:e1:51:19:70:15:fe:
48:ed:9e:27:2c:56:d6:39:fb:35:37:35:43:46:87:
a2:bb:e5:31:75:f4:a0:ee:f3:a8:54:ad:1f:36:8e:
da:32:da:f8:0e:7e:80:6e:1c:74:0c:60:db:56:9e:
8b:c2:af:43:eb:f4:6b:68:0d:85:a1:5f:ca:01:e6:
f7:b9:ec:4f:33:c8:be:6d:42:e6:b2:9f:0e:27:f5:
1c:3f:32:85:66:7a:b8:1f:e2:5c:4f:74:67:23:02:
90:d2:3f:13:cc:f6:cd:ef:89:d1:ff:74:8f:33:05:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C0:B9:CA:29:B7:F6:A6:24:EB:88:2C:B0:EA:0E:FA:0F:45:46:CD
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:47:6c:19:56:c1:b8:8a:9b:f7:3c:0e:aa:b2:0a:ee:8d:39:
21:5f:40:ed:b6:dc:5e:28:b8:30:48:9b:e8:51:fd:bb:32:7c:
0b:19:6c:80:2f:a8:ea:2c:30:f6:aa:45:4a:2c:ac:83:04:cc:
f0:df:e7:46:09:fc:43:26:90:5a:cb:9c:06:16:12:e6:1a:5a:
6a:39:60:1c:23:f5:b2:30:6a:66:66:61:4d:33:f4:89:07:34:
2c:10:2c:f2:fc:1d:ba:79:5b:3b:0a:39:73:ed:0f:02:64:12:
0e:3e:ee:a3:4a:25:3e:75:bc:89:db:ce:f6:a3:7c:eb:10:e6:
33:7c:6d:db:bb:c1:40:ff:63:64:0e:38:26:17:f4:2d:e1:41:
33:f7:2a:0f:a5:fb:cc:df:bc:d8:34:48:2e:10:99:60:37:d3:
3c:52:58:13:95:34:09:b6:e9:e9:70:98:60:85:58:ea:d7:11:
ad:84:c6:d6:52:31:2b:ee:c2:d6:29:09:99:f9:36:31:34:e5:
65:f2:a3:3d:69:a6:d4:30:09:54:85:48:d9:3f:8d:64:b1:fb:
b7:f7:b3:80:5e:93:3b:5d:1a:96:23:10:4b:db:e5:e8:26:fe:
76:94:03:c0:30:4f:72:37:c7:db:52:b7:da:4d:d3:ea:4f:5d:
66:79:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 10:48:12 2025 by rpki-client