Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
File: DLvQEU2XGWdQ1IxeElbtBVpeniw.mft (raw, json)
Hash identifier: YAKJqJoKVsfVrCj0FOjs2/6r1S3ChuuS3qzbWFIKPHE=
Subject key identifier: 02:99:BD:1E:25:B4:9B:E4:DB:B9:2D:82:35:7D:D8:31:F5:BB:6C:97
Authority key identifier: 0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
Certificate issuer: /CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Certificate serial: 019923D5FBF4121A832772819B9192D2FB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
Manifest number: 0ACA
Signing time: Sun 07 Sep 2025 11:00:50 +0000
Manifest this update: Sun 07 Sep 2025 11:00:50 +0000
Manifest next update: Mon 08 Sep 2025 11:00:50 +0000
Files and hashes: 1: C1pdtFvgr0xoHUm63plkKuj-C_Y.roa (hash: b/y/wC9aBMLG4uCve6DdHlmgdXRsPrspZQT4HGYlIp0=)
2: DLvQEU2XGWdQ1IxeElbtBVpeniw.crl (hash: sK67bZlyEjaHXfROxWqeXMC8Xf3oYgRfJsg2D0va4Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:fb:f4:12:1a:83:27:72:81:9b:91:92:d2:fb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Validity
Not Before: Sep 7 11:00:50 2025 GMT
Not After : Sep 8 11:00:50 2025 GMT
Subject: CN=0299bd1e25b49be4dbb92d82357dd831f5bb6c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:35:61:f1:8d:f5:fe:28:e7:b7:2a:16:1d:
02:d4:c3:91:af:98:29:c9:57:a9:e1:97:ba:30:b5:
ef:14:26:d2:8e:29:1e:6c:2e:e4:90:f0:f9:ce:9f:
0a:96:60:e6:9c:54:7d:f4:91:d2:1b:4b:22:ca:20:
e7:ee:45:42:8d:e3:e0:43:aa:71:6b:ae:f0:28:3b:
13:34:d7:08:b6:e2:6e:c2:6f:c9:87:36:64:1b:01:
cb:b8:9b:00:7c:20:d9:03:06:3e:ab:4c:dd:f1:d9:
3e:56:6d:3b:66:2a:d7:f5:7b:e8:53:da:99:bd:22:
5b:32:c5:23:ec:01:eb:94:54:40:95:03:e9:7e:9d:
7a:50:83:9d:19:93:2d:74:5d:21:a6:02:f3:66:83:
0c:72:6c:e3:af:75:43:e8:26:37:9a:c0:8f:14:37:
89:ae:be:7a:10:a2:b7:0d:ee:6b:e6:b8:f4:ae:1d:
da:bd:7a:63:b7:1c:dd:67:b6:4f:bf:f4:88:2c:4c:
c3:7b:62:7f:d5:e7:0e:0c:69:20:18:d9:9d:9d:f4:
65:c5:d6:46:a5:77:b7:85:b8:c4:2a:78:4c:60:9a:
04:b8:d6:3b:ff:6d:1b:66:68:b8:cf:e2:39:17:57:
df:c2:e9:ec:c3:c6:7d:2d:a7:d0:2f:ed:40:04:cd:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:99:BD:1E:25:B4:9B:E4:DB:B9:2D:82:35:7D:D8:31:F5:BB:6C:97
X509v3 Authority Key Identifier:
keyid:0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a1:c7:e9:2e:0c:2e:d7:87:08:50:5b:69:b9:9b:d6:88:f3:
d0:71:ac:be:f3:43:d1:19:b8:f9:39:b3:b9:9c:9a:87:72:94:
a8:3f:d2:c1:c3:32:59:b6:27:5f:80:a5:42:6a:9a:5e:4e:67:
ab:f1:b3:ac:77:c5:22:3d:40:6a:a3:58:14:13:07:36:6f:26:
ba:16:49:a2:19:ec:4d:03:6d:67:d1:14:c4:a0:d5:76:43:da:
74:46:97:62:2b:69:ea:59:76:7b:e5:c7:22:fd:9c:d1:e9:57:
61:c5:fc:2d:43:3a:24:16:ba:9c:e8:0a:30:2b:ee:4d:2c:1f:
ab:f9:a8:e1:98:7f:ea:72:c3:d6:4a:75:04:ba:29:ef:f4:dd:
2c:79:ef:16:dc:e5:60:de:78:35:60:40:22:c4:17:db:ed:b9:
35:51:e6:8f:63:d8:58:c4:78:bf:c1:3b:f2:26:ad:bf:50:0a:
6c:65:fd:b4:ac:9f:5c:09:4d:a2:cd:6d:d1:6e:a2:58:a6:0f:
92:44:be:55:c9:26:a6:51:23:54:f1:64:4f:41:f4:ea:7c:7c:
29:ab:b5:b2:33:0d:db:d5:12:48:cd:fa:03:0c:27:e7:91:67:
17:54:e1:68:b9:fd:73:19:82:ff:06:02:28:fb:0e:ba:ee:d6:
23:9e:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:35 2025 by rpki-client