Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: W0FKazC45VoBHtqLdjjdkLtTACj+bTTgEFGpAHvAZZI=
Subject key identifier: 10:19:0F:91:8D:5B:C0:25:29:5C:BC:21:5F:7D:61:6E:36:97:D9:61
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 01992E9069D3E41C2D89F5EBB31368E03A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 167A
Signing time: Tue 09 Sep 2025 13:00:40 +0000
Manifest this update: Tue 09 Sep 2025 13:00:40 +0000
Manifest next update: Wed 10 Sep 2025 13:00:40 +0000
Files and hashes: 1: IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa (hash: sPByzBItFj1JqphVomCmYz50m1zlhsIta4Uhmwr6ALo=)
2: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: GpRq3KaZWeHSnfu1MlqpbJq+iP6DZJFNlNPACJvlHQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:90:69:d3:e4:1c:2d:89:f5:eb:b3:13:68:e0:3a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Sep 9 13:00:40 2025 GMT
Not After : Sep 10 13:00:40 2025 GMT
Subject: CN=10190f918d5bc025295cbc215f7d616e3697d961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:e0:65:23:3d:6e:e3:76:ae:cd:56:4b:3c:
6e:76:df:e3:50:c6:23:fa:43:a7:a6:cc:17:74:fa:
de:3d:6c:a1:90:d3:2e:94:22:ee:17:b1:08:50:18:
d4:e1:eb:a8:43:1e:a1:c2:e3:a4:b0:3f:57:1a:50:
a4:22:87:2e:c6:f8:86:e9:36:e7:3b:a7:f1:3f:e0:
86:97:07:6e:30:9a:f0:8f:33:1d:9e:a3:bb:27:04:
6c:c5:d0:09:91:43:70:f1:b8:69:90:86:06:57:c4:
9e:db:b0:ce:f6:65:6e:3d:e6:ad:fc:04:4d:8a:dd:
21:5d:96:20:17:89:db:81:d0:3b:07:f2:85:ba:75:
01:b0:fd:90:0b:55:b1:0e:3c:92:13:a5:4b:da:10:
48:61:1e:9e:6f:f6:e6:1d:25:f9:bc:e1:87:ea:5a:
44:df:d0:1c:21:12:5b:3d:7f:60:14:3e:36:c4:b6:
34:a8:7a:3b:a8:bb:ba:e4:c7:f0:c1:29:9e:f9:28:
45:f9:4d:a4:78:c1:51:67:02:f9:8f:d5:94:5d:f1:
9c:3a:0e:30:30:b2:cd:61:ee:69:10:68:16:ef:60:
07:4f:db:c4:11:1b:34:e5:63:a5:c2:8f:e6:08:68:
7e:05:ca:c3:bb:20:8a:0a:22:ab:c4:25:b5:45:cf:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:19:0F:91:8D:5B:C0:25:29:5C:BC:21:5F:7D:61:6E:36:97:D9:61
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:dd:ab:8c:c1:28:3a:9a:21:4c:3f:68:3a:a1:33:85:2c:82:
f2:1e:a3:d0:e6:db:51:14:30:b2:33:8a:f7:50:66:82:a8:d8:
ed:12:09:97:65:18:43:0d:eb:9c:d2:61:4b:a2:34:a6:6b:3d:
9a:2c:6c:4c:c2:8d:2c:5b:e5:d0:b7:0e:e0:67:54:19:6b:7e:
b6:58:f5:f1:20:55:da:80:cd:f3:62:04:4e:76:5f:72:55:cd:
43:bd:a2:19:9f:14:8d:97:24:fd:5c:2b:7c:57:b4:cc:c8:00:
fa:9b:30:ce:c1:7f:50:cc:45:d7:b2:b8:d2:a5:ab:a9:47:a1:
f5:14:0e:34:f5:6a:f6:74:73:b9:11:14:89:6c:78:e1:46:72:
51:1f:50:b6:ba:74:4f:0e:d2:df:2d:94:87:5e:8f:9d:0e:3f:
34:11:d9:1c:18:71:b1:b8:51:79:89:f5:f7:6a:cc:3d:16:33:
d7:d9:bf:9c:82:84:dd:eb:c3:7b:ff:a1:3a:ac:3b:01:27:e9:
20:17:68:65:2c:d9:47:55:74:2e:47:b8:fd:59:c0:b7:94:8a:
8c:ee:25:c7:08:27:1f:c8:c1:74:1e:1e:ac:4d:f5:24:52:8d:
f6:bc:14:1b:77:5f:83:a5:9a:48:17:23:ff:88:4f:be:67:83:
b6:04:72:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 16:31:36 2025 by rpki-client