Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
File: DvD-irs27bvvRGptVK24YsSrO6E.mft (raw, json)
Hash identifier: yPhNYazZdekzt2og0tdlbsrKk7XTsfA7RKLPfI6C+80=
Subject key identifier: 2D:65:9B:09:DB:8F:5E:6C:9E:34:A3:09:C9:07:81:78:B5:82:16:80
Authority key identifier: 0E:F0:FE:8A:BB:36:ED:BB:EF:44:6A:6D:54:AD:B8:62:C4:AB:3B:A1
Certificate issuer: /CN=0ef0fe8abb36edbbef446a6d54adb862c4ab3ba1
Certificate serial: 0199239FC38E0BF6655786236E964DFB8049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
Manifest number: 0DA7
Signing time: Sun 07 Sep 2025 10:01:36 +0000
Manifest this update: Sun 07 Sep 2025 10:01:36 +0000
Manifest next update: Mon 08 Sep 2025 10:01:36 +0000
Files and hashes: 1: DvD-irs27bvvRGptVK24YsSrO6E.crl (hash: TOmH9yBkIg5ruvG68J2sc5edpGBiM1DYSIK2JoOpEW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:c3:8e:0b:f6:65:57:86:23:6e:96:4d:fb:80:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef0fe8abb36edbbef446a6d54adb862c4ab3ba1
Validity
Not Before: Sep 7 10:01:36 2025 GMT
Not After : Sep 8 10:01:36 2025 GMT
Subject: CN=2d659b09db8f5e6c9e34a309c9078178b5821680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:d1:dd:6f:fe:d5:7c:35:d1:47:71:7b:ec:
3f:8f:3f:11:ba:5e:83:15:20:fc:71:69:35:1c:ee:
1c:ee:7a:15:e7:cc:36:6a:7c:e6:7e:4d:a4:7f:62:
b8:cc:67:a6:65:36:25:9c:de:12:6a:c3:83:f1:50:
e0:06:e1:e8:29:33:e8:1d:48:55:19:bc:3f:03:9d:
84:d8:90:86:5e:2b:af:ad:73:68:9e:2d:4e:7b:92:
47:ba:8b:cf:d0:03:c0:62:8e:10:b8:fe:a6:a5:2f:
3f:11:f3:50:1c:18:b5:d0:73:59:5d:8b:4b:6f:c4:
ea:a3:ab:34:1d:c7:fa:e4:b8:28:31:04:69:13:5a:
46:f2:a8:04:4a:19:d0:e1:49:2e:d5:9f:45:5f:9b:
e4:19:2c:cb:8c:98:56:e7:f7:22:5d:bf:84:fd:1c:
24:14:ab:c1:2e:5e:00:2a:c6:e9:b0:2b:b0:b8:23:
89:dc:ce:5d:d0:2b:48:34:e5:3a:15:ad:f5:5a:23:
fd:63:03:31:b2:4e:5c:e9:47:a2:c0:4b:61:45:41:
12:97:7b:fd:eb:da:0a:4e:fe:90:2f:a7:08:0c:86:
e5:93:1e:8e:48:17:e0:25:54:ba:16:31:63:30:05:
9d:4e:ae:c8:b7:07:48:81:9b:b5:25:5a:ad:0a:b5:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:65:9B:09:DB:8F:5E:6C:9E:34:A3:09:C9:07:81:78:B5:82:16:80
X509v3 Authority Key Identifier:
keyid:0E:F0:FE:8A:BB:36:ED:BB:EF:44:6A:6D:54:AD:B8:62:C4:AB:3B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fb:66:e6:03:ba:1a:0d:9d:f3:9f:5a:3a:a7:52:21:c4:a5:
f5:70:48:de:82:7a:fb:1a:c9:2a:2b:d1:5d:78:84:3c:92:19:
76:6c:5c:47:4c:73:76:72:8f:8d:b3:3d:31:82:f6:c7:05:33:
3c:df:a0:18:fe:14:2c:81:18:e6:bb:f1:34:43:71:35:b3:13:
01:86:df:fc:6c:0a:f4:cb:8d:88:57:19:35:83:48:cb:22:17:
ea:03:60:5f:23:45:e2:09:3b:6b:94:8c:7c:d9:cd:3a:3a:2c:
a5:23:b0:9f:2b:76:d0:e2:57:d5:72:ef:7f:45:e3:19:9c:db:
36:2f:0f:c6:9c:47:b7:ee:c6:62:38:58:ca:97:46:84:be:8b:
77:86:59:6e:55:67:66:0c:50:1d:4d:cc:28:fb:3b:6c:3a:77:
47:56:19:a0:01:50:40:d9:a6:e6:c3:65:c1:35:78:2a:83:29:
e4:04:78:56:46:d0:38:cf:7a:1a:07:67:57:a6:3e:a6:f0:55:
f8:29:10:46:1b:37:ba:9b:39:c9:ec:e1:db:f0:ef:79:0c:4d:
77:27:24:4a:c6:35:da:1b:59:5b:a7:24:ca:d4:a3:8b:ca:34:
e1:b6:56:f1:25:5d:bf:58:4c:55:8e:1c:a1:16:6d:21:75:c0:
d3:7c:fd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:08 2025 by rpki-client