Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File: DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier: j1PxxYVomaxM0fU2D+EUSdxdMYigFFdvFjp/rIIGBb4=
Subject key identifier: 2D:9B:F3:FA:37:4F:20:D1:63:DA:E9:8E:29:21:E4:72:6A:56:0F:DF
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer: /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial: 019A4EF5CF71897AE190E2B1B60CA472434F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:02:03 +0000
Manifest this update: Tue 04 Nov 2025 13:02:03 +0000
Manifest next update: Wed 05 Nov 2025 13:02:03 +0000
Files and hashes: 1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: L5b+vy5KEvxG/7uG0tuAIT5iIhFHZmIxQzJ4LKKJa0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:cf:71:89:7a:e1:90:e2:b1:b6:0c:a4:72:43:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Validity
Not Before: Nov 4 13:02:03 2025 GMT
Not After : Nov 5 13:02:03 2025 GMT
Subject: CN=2d9bf3fa374f20d163dae98e2921e4726a560fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:29:14:4a:b8:e4:b0:11:e3:ea:d9:b5:93:
f1:cd:11:5e:3d:74:92:1b:50:6f:d4:dd:64:a7:db:
7f:a8:84:f3:a3:2d:68:44:a8:0b:d6:45:cd:3c:d9:
d6:5c:b4:10:bc:d9:f5:ca:86:f1:ea:73:1e:8e:57:
77:5c:74:18:66:38:3f:eb:f8:8b:74:90:eb:5b:37:
3d:8a:99:9c:70:38:2a:90:b8:cb:29:57:8b:06:25:
7d:d3:a5:89:81:92:7e:91:ba:c5:34:8d:73:34:16:
46:f5:01:57:ba:f8:91:bc:c8:0c:0e:1f:1a:55:c0:
e7:9d:3a:95:9f:f9:4c:3c:b7:12:25:97:7b:c1:77:
69:18:bb:bf:a8:18:5b:48:a4:a4:6a:5d:7e:4d:1b:
45:db:5c:da:e7:ff:ca:08:0e:fa:90:1a:85:c9:8a:
6d:23:04:51:a0:fd:3a:22:3d:f1:b7:8e:6c:c0:60:
f6:33:d3:71:b9:40:8c:34:e2:19:e0:02:49:a8:0f:
6f:57:bf:5f:c8:eb:35:e1:1f:cc:a6:4f:21:6c:8a:
4f:cb:e3:3a:26:63:69:cc:59:a4:dd:c3:f1:6b:cf:
7f:fb:fb:64:a1:0f:fd:56:04:36:84:1f:d8:b1:c6:
19:32:ca:6a:3a:d9:f0:71:40:58:0b:35:ff:1f:ac:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:F3:FA:37:4F:20:D1:63:DA:E9:8E:29:21:E4:72:6A:56:0F:DF
X509v3 Authority Key Identifier:
keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bd:a8:38:57:0c:0b:fc:fb:6e:f2:72:33:36:51:b9:3d:66:
33:10:18:bf:f5:41:de:12:85:32:ec:dd:27:8f:aa:20:81:f8:
d1:53:ad:96:62:4c:29:5a:97:3a:be:53:61:d4:2d:72:96:fe:
26:fa:2c:fe:6d:8e:11:70:a6:27:78:68:14:ac:02:58:9d:53:
c0:6e:af:12:e3:c4:bb:17:06:8d:3f:ae:7b:ce:81:ba:78:e0:
78:4f:23:a6:34:39:8c:d1:99:15:e6:28:0b:84:37:fc:a5:90:
53:2a:45:39:a4:1d:57:de:42:c6:fe:2b:b9:3a:58:45:8f:12:
98:1d:1a:63:0b:2a:5e:27:cb:e9:d7:4e:b6:f4:68:31:39:5a:
23:a0:d7:82:ad:39:20:47:2a:7e:a3:fd:59:54:fb:a6:1e:f5:
a1:ad:ad:9f:03:1e:45:bd:1d:53:21:93:de:ef:43:e4:31:1b:
77:13:43:27:43:90:c8:64:c4:ed:3b:1c:12:3a:96:8c:6f:e6:
8c:28:97:37:96:f1:51:c5:72:32:d2:35:56:d2:92:fa:8b:86:
d1:18:5a:19:34:d0:74:02:cf:b1:3d:0f:9a:16:49:20:a5:4f:
c7:da:df:75:58:d9:2e:60:fe:08:e3:33:67:26:d6:f8:88:ea:
3c:56:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:03 2025 by rpki-client