Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: 9lTCIvMIvynMuar94R0F8jvpEDCjBw4nsg8GNWvBoXI=
Subject key identifier: 73:F1:6A:7B:33:20:29:13:1C:72:73:78:0B:38:7D:41:69:CD:D1:EF
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 019923D5C6FEA0745CB47F3AE59A39D43946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 167D
Signing time: Sun 07 Sep 2025 11:00:36 +0000
Manifest this update: Sun 07 Sep 2025 11:00:36 +0000
Manifest next update: Mon 08 Sep 2025 11:00:36 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: c7oVaprqUgdx5paTGD0VYjY1PVHeIgmI2EEbbDK84nM=)
2: EU9ZI9FwGK9Je2LIHv8oyryDbQ0.roa (hash: lg1hblUtV5bfdjAsYpP/FKql2pfxKFHlS2JkI4euny0=)
3: UttiV2rZhXbpiEroK90NOoWzeyo.roa (hash: clJAUfrgzlJXm2cn+fD7HIKwQaoQPkMOMFf6DpqSgo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:c6:fe:a0:74:5c:b4:7f:3a:e5:9a:39:d4:39:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Sep 7 11:00:36 2025 GMT
Not After : Sep 8 11:00:36 2025 GMT
Subject: CN=73f16a7b332029131c7273780b387d4169cdd1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:87:8d:c5:eb:15:b2:49:b8:45:76:0d:72:
90:ba:f5:87:01:5d:68:5f:a1:c3:0a:60:54:ce:a6:
a8:3d:30:ff:cd:cf:92:67:fb:cb:0f:21:58:f9:d7:
38:3a:4a:f7:83:ef:80:d9:b6:d0:a9:4c:71:26:13:
1b:61:07:d7:d7:f0:9e:33:ad:f6:35:97:f1:83:89:
2e:97:75:fd:33:60:fc:06:a4:46:1a:cb:14:16:3a:
bc:2d:77:47:6e:ff:83:1c:3a:85:12:14:00:af:9e:
73:fb:74:70:74:a4:62:78:3e:dd:52:59:63:1f:25:
58:a6:60:2e:d5:93:eb:cf:7c:96:e6:4b:ff:24:e1:
1f:c4:5e:cd:88:c5:30:35:1f:87:69:54:fb:cb:ff:
a6:e8:66:a6:39:39:d5:6f:47:8b:18:6d:94:1c:b4:
b3:b6:a0:0f:eb:c8:ea:3d:5a:bc:17:38:93:7b:c8:
ad:6c:ca:f1:b3:2e:29:a3:b0:99:08:12:49:87:43:
b7:3d:68:ba:e6:0b:40:79:11:89:fc:37:d4:2e:dd:
09:61:e9:df:73:d8:8a:a7:f4:30:ba:24:4b:e9:43:
fe:8a:7f:b7:4f:bd:e1:0e:68:3d:f2:1c:d9:b3:31:
08:e9:2c:5f:96:f7:c4:90:f5:bd:d5:4c:15:1a:ed:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F1:6A:7B:33:20:29:13:1C:72:73:78:0B:38:7D:41:69:CD:D1:EF
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a5:2e:47:7b:7c:60:fb:66:a3:e6:e5:f4:12:6a:06:21:2f:
b6:cb:38:6c:06:ce:b3:25:d4:3d:d1:52:fe:0c:c4:c8:28:4a:
a9:e0:0f:8a:7d:d1:36:3b:57:63:19:ae:e5:18:b7:6b:94:f7:
c1:90:c5:fa:1a:ee:5b:fa:aa:bf:ec:57:c5:40:fd:59:10:c4:
82:b0:f0:27:6a:9f:75:9e:54:6b:59:bf:1c:01:77:2e:66:07:
fa:f6:bb:cc:1a:59:86:e3:ca:3b:16:cb:6e:96:13:b7:37:a3:
59:8f:71:5c:a7:48:5d:96:46:df:6f:bf:4b:57:57:a6:81:b1:
fa:a8:aa:3e:9d:63:71:0c:85:af:4d:cc:2f:f6:ff:72:64:6a:
17:2a:27:ee:40:7a:04:ab:be:61:a9:47:40:de:3b:1f:29:56:
f4:16:34:5a:b3:b0:51:c3:8a:57:64:a1:e2:1d:26:60:e6:6e:
3e:ab:87:31:ec:97:d1:c5:c8:d2:ba:7b:ca:a1:13:87:94:50:
cb:fe:22:e3:91:14:7d:a0:96:d8:a5:dc:5c:ed:02:ad:f1:c1:
10:3e:53:66:5a:8b:ab:c1:9b:06:7a:8e:d6:dd:7f:a5:d2:2e:
1f:d9:42:ed:bb:7c:c9:28:44:e0:41:ef:d1:cc:52:1e:f2:d0:
b1:48:9a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:58 2025 by rpki-client