Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier: 6yUDYJOIJQS7JOncGs7i90xTKzuagfDTElCjB0JiNHQ=
Subject key identifier: 2D:2E:D9:29:4C:85:A2:95:9F:54:C2:63:16:0B:F2:56:D7:BA:1C:F2
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 0199228D0BD36318CCFAC1CAF2BA33D4F545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number: 0A7F
Signing time: Sun 07 Sep 2025 05:01:32 +0000
Manifest this update: Sun 07 Sep 2025 05:01:32 +0000
Manifest next update: Mon 08 Sep 2025 05:01:32 +0000
Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=)
2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: TATlDW66zUtzSoY30n/rvN3PNnKXPkkOem4I4AAbk2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:0b:d3:63:18:cc:fa:c1:ca:f2:ba:33:d4:f5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: Sep 7 05:01:32 2025 GMT
Not After : Sep 8 05:01:32 2025 GMT
Subject: CN=2d2ed9294c85a2959f54c263160bf256d7ba1cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:9e:13:e2:67:57:dd:7c:47:7e:95:30:56:
98:79:f3:2f:ce:fd:5d:9f:5a:db:98:e9:74:5f:6c:
78:97:08:95:6c:18:1b:57:b0:4f:40:eb:83:8f:8c:
ee:4f:b8:dd:28:52:67:3f:80:1c:1c:df:67:d5:09:
2f:ff:31:3a:29:bd:ed:79:9c:88:13:1f:49:d5:14:
74:76:a1:88:cf:9e:33:c6:8c:d0:30:14:0c:37:42:
5f:93:c4:ff:46:25:0f:f5:6e:be:2a:fc:1d:6c:e3:
9d:80:a5:85:ad:3c:28:7e:2f:2e:4e:5c:29:57:10:
2f:b5:3e:f3:04:be:50:31:26:4f:b4:e3:38:e1:fd:
e2:0f:8d:ce:d7:a8:08:c4:de:d7:a8:80:8e:74:b0:
e8:be:77:3d:4d:ea:24:e4:7f:13:8f:85:92:e0:06:
fe:9b:97:0e:bf:03:bf:04:df:1a:c8:e0:98:57:a6:
3a:1e:c3:05:2c:99:d7:c2:a7:10:07:a3:48:35:3e:
7a:90:f6:ac:d4:2f:b3:1c:43:53:59:51:4e:68:f8:
68:67:dc:7e:29:8a:34:e1:36:8e:3d:9e:04:e8:e1:
90:a5:02:1e:e9:0c:a6:ee:b0:01:77:2b:ea:3b:bd:
d8:0f:01:ab:48:e4:d5:b7:26:4a:73:d9:c2:32:43:
12:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2E:D9:29:4C:85:A2:95:9F:54:C2:63:16:0B:F2:56:D7:BA:1C:F2
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:44:9d:99:d1:69:f2:5c:30:84:6d:42:d0:7d:40:c4:1d:9d:
04:f1:ad:e0:35:48:29:69:b4:73:7f:5c:39:4d:2d:b4:6c:46:
5f:ce:91:57:2f:b3:b1:b9:c2:20:e0:3e:ef:d4:7e:82:b3:2f:
9a:92:d4:96:84:2c:5e:fe:a6:b2:62:14:3f:8d:4f:b3:2f:a0:
a7:f5:d5:4b:e8:3e:f7:ff:23:21:18:27:62:20:c7:0f:2b:18:
80:e7:f3:dc:24:9b:ef:0d:4f:f0:ae:e6:74:99:9e:f5:cb:3e:
0e:10:7b:80:5a:3d:04:4a:8b:cc:11:26:64:d2:75:1f:b1:2c:
f9:79:d2:de:ca:89:ff:a8:62:47:f0:93:8c:c3:e2:0c:d0:d5:
f9:fb:79:b6:8b:c4:98:0e:27:25:c8:0e:1c:b3:4d:5f:07:b1:
e4:95:57:28:d7:5f:ab:62:e6:52:c5:38:f3:66:f1:e8:b6:e9:
96:f0:f0:05:a7:f2:e3:e6:cc:93:39:af:3a:00:bf:74:25:d9:
dd:7e:f2:4f:42:88:e3:b2:75:bb:e5:b7:16:a3:87:4d:68:b4:
4b:d6:54:bf:a8:86:da:7c:8b:d8:11:d2:9a:a1:f2:ef:00:37:
3b:85:25:5d:0a:0c:ba:c3:f4:4c:68:f1:40:ae:dd:8c:50:7f:
7c:1f:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:16 2025 by rpki-client