Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier: RS3okqQRS948VxCWu1H5e7FvIhFIzkJRETtLoZb9A5I=
Subject key identifier: 28:C5:CD:F6:9B:D9:02:89:AC:4C:02:35:68:D8:9D:0C:91:AB:37:0C
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial: 019935371F2A5B217FA401E80C229D5C80D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 20:00:28 +0000
Manifest this update: Wed 10 Sep 2025 20:00:28 +0000
Manifest next update: Thu 11 Sep 2025 20:00:28 +0000
Files and hashes: 1: 8sj8akoHRTPz11r3jLvMNT_NbaE.roa (hash: P2s2WOOKeXdgHhsxpLmfEClu5cRmFqEQjIJDZyeuzkg=)
2: WGokscrqIFlveSQ3XENDC_qxhbE.roa (hash: +LF+EeNcjsZJ5uw2CKGcqJlYFeUGcZcbeYs75HR4O74=)
3: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: SZh8HW5aFGKMl1p0HvJlix0gSjUrV6oOyocBEF1oyS0=)
4: dnAa52jzMLokgprr8j83t7M0O7A.roa (hash: RXb076NQLFmuO+ZHzSd4Sn5TggUypoGBas2+Hq6jEsg=)
5: wIY_dvatExTHxCY_kuzX-QET3Ok.roa (hash: kjV0Ojugy4LwLs+YAfKt1FqrpFMJ2uDqQ/zPE3W7Ris=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:1f:2a:5b:21:7f:a4:01:e8:0c:22:9d:5c:80:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
Validity
Not Before: Sep 10 20:00:28 2025 GMT
Not After : Sep 11 20:00:28 2025 GMT
Subject: CN=28c5cdf69bd90289ac4c023568d89d0c91ab370c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:dd:87:be:67:c7:01:75:d0:b8:15:e5:98:
dc:14:54:5c:ff:00:3f:00:48:2f:ca:4d:ad:73:6d:
37:9e:00:7b:ea:57:51:48:30:74:ec:fa:62:16:8f:
73:59:2f:f2:8d:99:42:58:cb:6e:c2:94:c7:d9:52:
a3:98:cb:e7:7b:11:b3:84:a9:3e:59:99:48:52:05:
10:cc:c3:13:44:ed:83:a0:b6:28:09:94:da:1b:49:
88:e3:da:63:62:d6:2b:77:c8:7e:c2:6b:fe:84:32:
ba:d2:86:62:96:f8:42:50:0d:20:95:2a:b7:53:ba:
d8:39:06:a3:db:dd:5b:5b:1f:8c:5f:18:a0:a8:e7:
76:62:5b:52:a6:43:e0:b1:cc:83:fd:bc:97:c9:17:
6b:fe:41:15:4c:08:94:d6:ef:5c:91:8e:e1:e5:4f:
4f:20:fb:a9:a0:22:0c:b6:b4:ad:c3:6e:87:5c:4c:
6f:68:69:0f:a5:09:83:51:36:68:0d:00:d5:17:b9:
af:29:28:9c:be:ff:b4:97:a4:d6:0b:88:9a:aa:73:
4f:ab:e2:9c:8d:a8:f7:bf:d3:39:13:fd:b2:ce:6e:
55:44:91:16:64:c5:57:b4:92:46:aa:5a:04:c9:92:
f4:0b:05:db:35:94:f3:d2:f8:63:95:22:a5:d4:60:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C5:CD:F6:9B:D9:02:89:AC:4C:02:35:68:D8:9D:0C:91:AB:37:0C
X509v3 Authority Key Identifier:
keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8e:52:5b:c0:4a:53:6a:e0:64:ee:b9:71:4e:3f:2f:01:8e:
2b:81:7a:7c:4f:28:f5:6d:41:59:72:0d:b8:15:4f:21:da:e7:
18:8e:58:a4:29:6e:ec:37:88:d8:fd:50:a7:91:8d:19:8e:29:
47:7f:6b:1e:b3:3b:e0:4d:97:61:15:37:d9:5e:7e:1b:3a:79:
83:f1:5f:ee:bb:32:58:68:46:c7:7a:10:37:cc:fb:a6:26:07:
8e:93:5a:b5:c0:1c:f8:c7:f7:96:d6:be:03:13:5b:2b:82:66:
e5:23:c9:85:19:c7:7b:cc:7e:50:b3:bb:df:e1:cc:c4:d5:db:
ce:1c:a0:4f:6a:ab:02:8c:69:95:c1:26:90:39:1b:7d:51:fa:
7c:c0:0a:b4:ad:e7:67:81:cb:32:9e:96:8b:cd:e7:4d:7a:20:
d4:f1:c7:8f:92:01:67:1e:3c:be:be:cd:e2:bf:5e:c5:d2:66:
f0:b4:aa:39:9e:89:57:03:52:85:7e:b6:fe:2f:0d:3a:11:14:
6a:ab:47:cd:dd:5d:65:70:51:1b:b1:de:ed:ce:81:97:bd:9d:
29:e0:79:a0:f1:3c:17:02:80:1a:6a:0f:7c:bc:75:20:18:47:
b7:59:04:9e:8f:69:9a:e6:27:1d:a9:2a:f3:35:0a:f5:64:7c:
0a:19:12:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:00:05 2025 by rpki-client