Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
File: D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json)
Hash identifier: SESusBWxfSm4SSsA1diNPpp4MLqcjzsicVJXEmZOMKU=
Subject key identifier: AE:9D:E2:88:A5:DE:A6:3F:E4:E3:F9:35:CE:D2:F7:30:9D:F2:5A:84
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial: 019A006C361777FD0212ABABE8551973F699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
Manifest number: 15D3
Signing time: Mon 20 Oct 2025 07:01:22 +0000
Manifest this update: Mon 20 Oct 2025 07:01:22 +0000
Manifest next update: Tue 21 Oct 2025 07:01:22 +0000
Files and hashes: 1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: Db7fbrQGzaXwlTMnT5lhpnysiaj6HO0nPpFoD3TzrE4=)
2: JILzl612YbahGyGIhRmTzqH6qN0.roa (hash: KYoAnBG9y6ABJD4N2SyEiYvwxlPEdpp7VacwTGrZd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:36:17:77:fd:02:12:ab:ab:e8:55:19:73:f6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
Validity
Not Before: Oct 20 07:01:22 2025 GMT
Not After : Oct 21 07:01:22 2025 GMT
Subject: CN=ae9de288a5dea63fe4e3f935ced2f7309df25a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:1e:e9:f8:f2:0c:b5:86:45:06:9d:02:af:
43:b7:48:2b:01:1a:b3:f4:d5:b8:ea:ad:14:87:5b:
7f:15:1d:76:fb:3d:e5:f9:e8:c8:ed:4c:f3:5a:24:
a9:cf:2e:96:bf:be:fd:c1:65:09:03:a9:91:b3:21:
38:3c:37:81:19:75:33:aa:e1:68:fc:85:46:e9:0f:
6d:25:45:8c:d9:54:0c:4c:dc:bd:53:dc:20:b5:a4:
17:1b:12:ee:b8:c5:9e:55:94:c7:08:50:07:1f:f1:
e2:97:c8:0c:f4:38:c5:7c:cb:2f:04:2b:eb:81:28:
88:02:1b:29:fc:3e:f3:ea:47:80:c1:a8:25:60:73:
1d:61:65:7a:f8:ca:5b:7b:fc:43:e8:04:43:9a:35:
02:df:80:5b:21:1e:ca:5f:f8:be:91:38:54:c9:75:
83:13:cb:8e:df:6c:7f:4e:cc:33:a1:e3:90:00:20:
58:af:c2:08:17:ed:27:9a:e6:1d:da:be:12:74:44:
03:f2:1f:10:99:58:2e:44:80:1e:36:d5:67:db:ae:
cc:55:31:2a:db:40:f3:76:32:f0:a3:3f:af:5c:be:
05:07:37:57:df:b2:48:91:7e:58:db:5d:ec:93:db:
22:65:77:f7:89:d6:ef:12:30:ad:ed:6f:3d:f7:67:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9D:E2:88:A5:DE:A6:3F:E4:E3:F9:35:CE:D2:F7:30:9D:F2:5A:84
X509v3 Authority Key Identifier:
keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5b:a1:8b:2b:f4:72:34:27:1d:41:d4:c6:c7:1f:2b:bc:58:
7d:76:90:62:48:08:46:7a:dd:39:06:df:44:32:05:4d:8f:b0:
ff:e9:c4:f6:c7:97:04:ee:c6:13:7d:1c:41:1e:0e:d0:6d:c3:
37:a8:3c:55:c3:84:1c:cd:30:97:69:03:94:64:f8:85:f6:f2:
7e:3f:3b:84:12:72:9f:38:1c:cb:3e:ef:eb:5e:1d:2d:4f:ec:
6e:cd:ac:25:f2:dc:1f:50:6a:e9:9d:f3:c0:11:fe:c8:58:1e:
dc:ae:83:a3:87:bd:f2:9f:a4:69:9e:94:d6:32:95:db:95:6a:
c1:90:d0:a3:93:13:a6:c8:01:fe:e8:ce:fe:00:0f:99:d6:09:
90:41:5a:dc:e4:9c:06:9b:0c:bb:6e:a1:ba:f6:b8:f0:a0:4e:
ee:53:48:16:5e:f2:a7:d7:b5:64:87:dc:5b:c5:6a:95:41:02:
e5:48:9e:8f:33:51:c8:7d:87:3d:de:9b:7f:c7:c7:3a:c8:2f:
9f:ab:68:96:89:3d:10:47:79:47:21:a7:91:60:ba:f6:28:a0:
60:5b:a2:16:00:74:b8:93:2d:a5:a5:b4:1d:f9:a1:59:a9:53:
16:66:5f:30:fb:00:75:41:39:6a:21:38:c1:55:7c:6c:32:92:
4e:90:2f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:53 2025 by rpki-client