Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
File: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft (raw, json)
Hash identifier: dpLaTcZKAMtK4HwS4Esn7XQTWT17KQqJ2Q/6oP3gh/k=
Subject key identifier: 0D:68:2C:75:EB:92:91:EE:B9:9F:80:A8:67:54:C8:44:23:FF:62:9C
Authority key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
Certificate issuer: /CN=0f657093f326547bf25a9985c81cf1403140a3a8
Certificate serial: 01993123E8FDEE79B8BF25D8E68EFDF8012E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 01:01:00 +0000
Manifest this update: Wed 10 Sep 2025 01:01:00 +0000
Manifest next update: Thu 11 Sep 2025 01:01:00 +0000
Files and hashes: 1: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl (hash: wUVUa4qNRMqOOAerdkycuQnw8plOiXTJUrdjDS7411M=)
2: w9q_FLnEYi6mMGLHNxrzvfLgYJ4.roa (hash: tRbBa7QkfAKJaQVPfhVVFf8/W8ntAnk0VCwj65NPw8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:e8:fd:ee:79:b8:bf:25:d8:e6:8e:fd:f8:01:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f657093f326547bf25a9985c81cf1403140a3a8
Validity
Not Before: Sep 10 01:01:00 2025 GMT
Not After : Sep 11 01:01:00 2025 GMT
Subject: CN=0d682c75eb9291eeb99f80a86754c84423ff629c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:f9:6a:dc:82:c8:f8:35:45:46:62:d3:3a:
76:c0:cf:c0:d3:29:d7:98:27:02:2b:b7:96:9d:d1:
d6:b6:26:8a:2f:fd:55:d6:12:5b:a5:5b:61:15:0f:
0f:3b:38:3f:12:40:72:14:9e:45:30:d7:92:4c:3b:
d0:66:1f:43:6d:71:a7:e7:bd:ab:a4:b2:e0:a2:2a:
72:8f:c7:6c:b3:5b:81:ee:09:fa:87:7d:e8:d0:22:
84:84:dc:35:dc:47:1a:5b:6f:e4:9f:33:19:8a:93:
72:46:e9:f2:6f:9d:1c:69:f7:17:05:e1:d3:57:de:
1a:11:40:e1:23:e7:08:15:0d:55:db:49:9e:cd:20:
c9:7e:3c:71:24:8a:22:73:19:c7:45:9f:91:0a:ea:
72:f3:38:37:33:99:24:c7:12:fc:b7:27:40:b7:35:
b4:c5:74:b5:ae:af:e4:f4:ba:5d:49:81:fa:16:20:
3d:25:03:6f:9f:fe:12:7f:6e:ec:20:ca:b0:35:a7:
51:7f:76:61:2e:c3:3b:d8:73:f2:23:87:ea:e7:81:
df:ac:22:cd:9d:0e:27:26:47:66:52:62:0d:67:bc:
6c:b8:20:28:ad:e5:38:f6:e4:ba:22:d9:59:49:0d:
9d:f4:c7:69:75:ec:f7:d7:78:65:1b:8a:d7:d9:91:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:68:2C:75:EB:92:91:EE:B9:9F:80:A8:67:54:C8:44:23:FF:62:9C
X509v3 Authority Key Identifier:
keyid:0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:53:f5:b4:36:46:82:03:2b:d8:25:c1:9f:07:b4:4e:11:e8:
16:89:d0:35:9a:c3:08:ec:fa:ec:65:4e:15:17:17:6c:90:50:
38:11:cb:81:5e:5a:3b:7a:0d:da:c7:70:89:ba:57:eb:c6:c1:
27:0c:02:f3:1f:b1:d6:b1:67:2a:d5:15:19:7b:31:b4:fd:9e:
c6:ac:33:c2:ad:20:65:f1:93:b0:50:80:db:30:2f:07:10:ff:
ee:be:59:84:7c:cc:29:ff:fb:91:d4:f3:6f:61:98:a2:5a:e2:
ee:d4:dd:9e:74:eb:b3:aa:f2:f0:8b:f5:48:77:0e:6c:b1:20:
15:6c:2b:2a:cf:2c:5b:63:58:2d:90:a4:25:00:d8:3a:b4:ab:
ed:48:a8:1d:10:d8:2e:4f:8d:06:55:98:20:16:d4:d4:43:e8:
7e:38:ea:01:a8:b7:68:b4:6f:84:10:0a:cf:a3:03:76:4a:a8:
0a:fa:6f:fb:d0:33:5e:42:ea:7f:dd:05:66:17:13:f4:12:70:
01:58:37:9b:7f:e1:92:1f:29:1e:39:ea:4e:99:fe:e3:f2:d5:
99:9a:c0:4d:cd:15:9e:9c:f5:b2:fc:97:c1:c9:36:5b:50:95:
dd:63:92:f4:da:27:5b:7d:92:2a:2c:ae:66:cb:ad:9b:f1:19:
ec:60:47:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:05:52 2025 by rpki-client