Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
File: DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft (raw, json)
Hash identifier: wnCHn0hRJ6Z53KBNVSFtAXR3QZ8gE5yA6yrDZ/eKlBo=
Subject key identifier: A6:71:35:9B:A2:91:A5:8A:B8:25:98:F2:F3:DB:9F:8B:12:F5:ED:78
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial: 019A4F2AE89B451AFA779992AFDC52545F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
Manifest number: 0923
Signing time: Tue 04 Nov 2025 14:00:03 +0000
Manifest this update: Tue 04 Nov 2025 14:00:03 +0000
Manifest next update: Wed 05 Nov 2025 14:00:03 +0000
Files and hashes: 1: DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl (hash: 8LqWhu9pH+Yq8o8Svmb4BeKTwrr1hKkGQdl4tIboltE=)
2: EjaSjQvA_h8ofCWrzWooV6nayF8.roa (hash: gCmjXDkeCn1nqh4fUFSkYceSyNQm14lj5sOPimTxKOE=)
3: wS1UXRfPtMS1NBYtNz71NeZmtRk.roa (hash: iGK/CXBp/TXIP03g8PJuN3+7774KqoPIJH5kjoUJiwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:e8:9b:45:1a:fa:77:99:92:af:dc:52:54:5f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Validity
Not Before: Nov 4 14:00:03 2025 GMT
Not After : Nov 5 14:00:03 2025 GMT
Subject: CN=a671359ba291a58ab82598f2f3db9f8b12f5ed78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:a6:f7:ee:85:66:40:b0:f6:27:f9:d9:90:
b4:02:00:df:93:c5:a5:2b:b0:c9:e5:a8:1e:3e:60:
92:7a:65:9a:06:13:b2:9d:d7:00:51:d9:36:28:c5:
83:14:7d:e7:c6:c3:6e:44:1c:da:b2:ec:fb:bf:f3:
37:bb:3b:87:c0:07:54:75:de:66:95:63:d2:0f:c4:
c7:f2:3e:f1:74:cc:10:47:16:71:1d:8c:fc:84:88:
60:66:d6:be:79:ca:05:cc:68:cb:75:58:e1:b6:4e:
26:0e:a9:84:b5:7f:42:28:c7:a7:53:df:0e:79:ba:
9e:89:e8:a6:3d:37:34:18:c1:51:5d:2d:51:57:9f:
39:07:82:1f:68:00:1f:93:36:14:1d:60:4e:cd:65:
6b:a5:92:c1:a0:b8:4a:1f:1e:70:22:61:28:4c:95:
ba:55:dd:d0:15:c7:36:8e:31:d5:2f:86:6b:8b:98:
2f:09:7b:c0:fa:e9:88:e1:5f:7f:3a:29:67:72:86:
ac:a5:92:d1:d3:0f:09:9e:7c:f7:62:c0:c9:5e:00:
92:52:ba:76:72:48:13:64:30:ef:cf:8f:b3:ec:f6:
b4:96:6a:54:73:1b:32:42:3e:d1:20:27:db:9a:c8:
fe:82:51:a3:c8:c6:23:2b:10:48:0d:ed:04:3c:23:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:71:35:9B:A2:91:A5:8A:B8:25:98:F2:F3:DB:9F:8B:12:F5:ED:78
X509v3 Authority Key Identifier:
keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:86:0c:d8:00:85:ab:c5:d5:8b:cf:3e:59:2a:f3:26:96:fd:
b5:41:ed:2f:35:da:e9:e5:f1:23:da:6b:22:21:fa:f8:a9:af:
6f:d7:ae:20:5a:67:4b:5f:a0:24:a6:67:5b:db:94:e1:41:1f:
72:99:3c:0f:ee:3c:84:13:e3:84:00:a3:1e:7d:94:dd:bc:db:
93:6b:c2:9b:df:62:c0:c4:b4:0d:81:57:25:df:f6:77:5b:50:
de:c7:07:66:e6:b7:10:97:bd:6f:b9:a6:32:91:64:07:b1:a9:
12:64:82:de:78:cc:d3:37:2e:b8:14:13:e2:2c:81:fb:c4:1d:
35:02:10:fc:d9:d4:3d:ca:46:8c:ff:45:32:90:0d:c5:74:da:
4a:18:36:ec:61:2e:eb:43:7d:05:e6:41:e4:2a:da:91:3e:86:
98:7b:a8:a4:fd:d4:cb:85:74:d9:12:4f:e7:54:2c:65:a7:12:
ca:5b:6f:e5:71:f0:ee:95:54:f9:f6:79:72:fd:46:36:ea:3a:
04:fd:21:a8:82:3c:0b:81:b6:33:5e:62:61:88:3f:61:e8:30:
72:98:fb:52:67:6b:cb:69:78:d7:6f:c8:25:71:59:28:64:20:
dd:8b:63:d8:86:39:0c:0c:47:e5:85:df:96:ac:22:3e:ca:79:
2c:25:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:33:44 2025 by rpki-client