Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
File: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft (raw, json)
Hash identifier: z2s9FX6dn1+sc5B4aCBZSl83w8ZOr9/7DLy5BUq90Kk=
Subject key identifier: 24:14:D5:C9:AF:57:B3:72:1A:29:71:07:FA:13:1C:F7:41:A1:5D:E8
Authority key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
Certificate issuer: /CN=0f657093f326547bf25a9985c81cf1403140a3a8
Certificate serial: 0199FFC8842BB1D982406D25A21AB5A34939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 04:02:35 +0000
Manifest this update: Mon 20 Oct 2025 04:02:35 +0000
Manifest next update: Tue 21 Oct 2025 04:02:35 +0000
Files and hashes: 1: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl (hash: TyR/+A2liAlv0g+InyZiUBRAFw8Dsv/kT4hHGNLjiM4=)
2: w9q_FLnEYi6mMGLHNxrzvfLgYJ4.roa (hash: tRbBa7QkfAKJaQVPfhVVFf8/W8ntAnk0VCwj65NPw8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:84:2b:b1:d9:82:40:6d:25:a2:1a:b5:a3:49:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f657093f326547bf25a9985c81cf1403140a3a8
Validity
Not Before: Oct 20 04:02:35 2025 GMT
Not After : Oct 21 04:02:35 2025 GMT
Subject: CN=2414d5c9af57b3721a297107fa131cf741a15de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:91:fc:31:7e:19:15:7e:34:7e:7d:7a:54:
e3:a6:d1:44:d3:4b:b5:fe:bc:6b:3c:d3:e3:ec:0a:
09:40:f3:d7:38:d6:6e:26:4a:18:40:86:18:72:2b:
49:48:5c:e7:b9:fb:e0:f2:d7:4d:02:ac:11:9d:ee:
ca:e1:50:bd:c4:04:84:0b:15:d5:e8:ce:82:44:83:
87:58:cc:a1:92:03:2b:1a:36:c9:7e:99:ff:65:c8:
28:64:1d:35:07:f5:c0:a2:9f:94:b6:27:ea:28:e6:
0f:62:ad:45:d9:62:51:64:a3:0b:78:37:e1:7d:1d:
ea:e3:e9:bd:fa:b0:68:f4:71:09:8e:87:d4:3d:2d:
b8:35:ca:70:14:73:d4:2a:36:72:9f:e3:fc:c1:93:
27:1a:09:76:3f:ab:a6:37:23:55:29:02:96:43:0d:
3a:de:93:84:bd:c8:30:4a:76:34:d2:0e:b1:db:fd:
4d:8d:9e:19:7f:51:2b:fe:64:67:6e:81:9f:36:88:
05:29:bb:7c:f7:30:44:54:f5:9b:da:75:3a:80:83:
7e:da:c0:f0:df:16:8f:44:29:7d:ef:1f:a0:76:d9:
e9:e9:b0:6d:88:6f:e4:e5:ff:91:02:52:44:a9:1c:
61:7e:b6:d2:53:dc:f5:6a:8f:b6:fc:d6:2d:fa:2c:
4e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:14:D5:C9:AF:57:B3:72:1A:29:71:07:FA:13:1C:F7:41:A1:5D:E8
X509v3 Authority Key Identifier:
keyid:0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:25:79:d4:95:58:e3:64:3d:84:ec:5e:d0:b6:33:ee:ba:df:
b5:14:af:58:65:c1:8f:9b:9c:be:8c:fa:c4:78:39:89:38:78:
85:35:f3:45:c9:ee:c9:7b:1d:02:8a:d0:b1:c7:7d:1d:ad:4f:
a9:57:d5:33:2d:f6:ea:6e:bb:2f:ea:ef:53:17:a6:8f:b9:ab:
97:7d:3c:8e:65:ca:91:e6:cd:22:e0:4a:38:a4:90:fb:d8:f8:
3a:83:ca:95:1f:bb:96:5e:69:38:cd:67:9b:bb:98:a0:b8:7d:
79:2b:be:16:02:11:08:dc:08:71:52:52:9f:9b:35:03:89:19:
13:5d:44:f3:19:21:8c:51:88:4d:90:ca:bf:e4:75:1f:83:3f:
73:04:27:3a:2e:45:ba:75:7d:6a:70:27:47:23:59:6b:ff:ba:
70:09:6f:e2:96:9d:85:92:35:d7:00:a9:a8:53:a3:c3:98:e7:
e3:5e:58:c8:bd:9b:ec:c7:90:c9:dd:1a:ed:95:b3:ac:24:e9:
7f:88:e3:8b:c1:b0:b5:a5:08:7e:2d:24:4e:33:7d:0e:b5:92:
d2:1e:34:99:68:66:3e:c5:38:60:36:8c:df:b7:3c:c7:46:74:
80:ce:c5:8b:c0:c3:9c:f2:46:c3:a6:cc:de:71:28:59:bf:59:
62:01:3d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:42 2025 by rpki-client