Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
File: D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json)
Hash identifier: 4hSVh55KvUS0nVqAREIfuZIK+aKRPHWIE2P8goDF53I=
Subject key identifier: 8D:3D:FB:57:E8:2F:3F:93:B5:99:5D:E2:E1:F5:6D:34:53:FF:9E:80
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial: 019A706E6C6A70BF0295E5743DB46E9E6700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
Manifest number: 160D
Signing time: Tue 11 Nov 2025 01:01:16 +0000
Manifest this update: Tue 11 Nov 2025 01:01:16 +0000
Manifest next update: Wed 12 Nov 2025 01:01:16 +0000
Files and hashes: 1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: 9TsCcCeYV8pHcjNgS+HiFgVgylWAweuBNXstvBIPKXo=)
2: JILzl612YbahGyGIhRmTzqH6qN0.roa (hash: KYoAnBG9y6ABJD4N2SyEiYvwxlPEdpp7VacwTGrZd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:6c:6a:70:bf:02:95:e5:74:3d:b4:6e:9e:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
Validity
Not Before: Nov 11 01:01:16 2025 GMT
Not After : Nov 12 01:01:16 2025 GMT
Subject: CN=8d3dfb57e82f3f93b5995de2e1f56d3453ff9e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:a9:87:20:1d:7d:fe:2e:60:8c:2d:ff:73:
d1:7f:b3:41:00:10:96:1d:ed:34:1a:94:6b:20:d7:
6a:6e:d0:50:52:75:a9:de:ef:32:6a:42:5b:31:48:
3a:ad:7d:3c:80:c4:42:15:16:4f:7c:0a:6b:e7:f0:
96:98:16:f7:d7:bd:e4:f4:95:52:a5:71:8b:a7:19:
57:ed:86:c9:95:70:ce:15:7f:59:71:d7:9b:11:4a:
e3:33:ec:ba:88:b2:4c:f5:e9:69:1c:76:8a:9f:c0:
15:87:f9:32:54:d0:ef:db:8f:55:2c:e0:d6:a2:09:
ca:88:bb:cc:5a:57:a4:86:41:02:60:5d:f0:f9:07:
33:60:dd:c9:da:49:4f:fa:9f:56:f9:3f:f5:2c:8f:
01:9c:de:69:0b:a1:cc:46:b8:c5:d2:87:e8:ad:7e:
95:6d:a6:5e:aa:a5:d1:a7:2f:0d:99:7b:7a:cd:eb:
d5:5c:9c:86:ec:e2:14:f8:db:1a:32:c3:3a:30:f7:
70:9a:c6:86:a4:58:a5:cc:cb:f8:33:f4:c9:75:d4:
f8:96:22:8f:ed:7b:70:cd:44:26:bf:6a:5d:da:9a:
06:d3:79:26:54:03:3f:58:85:57:ef:a9:bb:12:d2:
47:ce:a3:30:ef:35:67:9e:ec:ed:dc:9a:3c:b7:6a:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3D:FB:57:E8:2F:3F:93:B5:99:5D:E2:E1:F5:6D:34:53:FF:9E:80
X509v3 Authority Key Identifier:
keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c8:58:64:c4:65:43:5f:b1:f3:7a:95:ec:b6:99:d3:b4:e8:
0e:57:e4:b8:32:45:5b:5d:60:6c:65:a7:3b:4a:21:6c:cc:d6:
ff:62:41:07:d2:ef:ee:b3:a6:11:45:24:40:a4:fe:54:fc:65:
6a:0b:17:a8:0b:a1:75:24:25:4c:20:35:3e:5c:08:df:92:a0:
a1:03:b8:67:1d:ad:d3:40:e3:15:2d:4d:b3:87:60:7d:dd:01:
dc:90:59:8a:78:92:0e:cd:b1:18:6f:44:37:e1:d0:2c:fa:1d:
31:c8:48:88:69:8d:8f:39:92:5f:fb:fb:9b:90:3a:8b:ba:fe:
83:c9:cb:f4:9b:05:96:97:b0:61:fc:ec:43:27:78:40:db:08:
5b:0f:98:3f:6a:29:54:99:46:2e:da:01:5a:e9:53:d4:7e:2c:
e5:6b:f4:53:90:25:73:d3:56:59:f6:94:20:d7:41:f1:b7:3b:
9c:85:05:1d:9a:ed:29:97:a3:47:3f:37:50:29:8a:e8:1e:9b:
e8:7a:bf:2f:74:f9:f7:dc:da:79:2a:90:25:c6:ec:db:48:c0:
7e:71:33:18:15:06:da:55:f7:0c:77:ee:ef:f1:52:1d:b0:c4:
3c:07:37:59:64:68:00:53:bd:56:31:3b:7a:f8:8e:21:0f:be:
41:93:cb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:54 2025 by rpki-client