Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
File: Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json)
Hash identifier: dhzm25Tt1dQxRJR1GX0xO6yXiJRxw90y1RrTcx1H03k=
Subject key identifier: BA:AD:9C:3D:94:01:82:71:D9:E7:F3:70:93:1D:03:0C:F6:E8:5C:95
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Certificate issuer: /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial: 019896373905D5BD1C369871CB6E0E00629F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
Manifest number: 0AC1
Signing time: Sun 10 Aug 2025 23:00:58 +0000
Manifest this update: Sun 10 Aug 2025 23:00:58 +0000
Manifest next update: Mon 11 Aug 2025 23:00:58 +0000
Files and hashes: 1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: EeC+H2jxJ24BCrxtO/UXWJd1MnTD5e8rdfCXJjovz1Y=)
2: NY6GkITWKlUtVSGSEXVFnWklUFA.roa (hash: bc90pfjZ3z6bn5Sd1cSbU6mDm4LudyLIA08FEeaNBvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:39:05:d5:bd:1c:36:98:71:cb:6e:0e:00:62:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Validity
Not Before: Aug 10 23:00:58 2025 GMT
Not After : Aug 11 23:00:58 2025 GMT
Subject: CN=baad9c3d94018271d9e7f370931d030cf6e85c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:b5:a3:30:c1:fd:c4:9e:e0:bb:eb:04:22:
0f:48:f6:69:fb:1a:22:12:3b:ba:6e:c1:4b:41:82:
dc:9e:93:7e:0d:29:af:78:49:0f:d9:0b:66:3a:be:
38:61:03:c3:cf:d8:01:9d:50:25:96:47:79:e9:44:
55:10:49:3c:05:3d:a9:f2:11:f9:27:87:ec:31:62:
fe:08:6a:54:21:f1:27:bb:4a:36:b0:40:bf:a5:8a:
de:a3:61:03:ae:5f:d0:9c:c4:2e:dd:b9:86:ef:4c:
18:77:b3:62:ee:5f:52:e4:4e:07:37:0d:7b:c1:41:
d6:7a:43:d2:c4:07:20:b0:99:0f:64:2a:e6:00:0a:
c0:26:6f:6d:d7:7a:e5:40:68:90:f0:8c:9f:ee:58:
09:c4:81:f1:1a:b5:54:55:f4:fd:d3:4d:a0:7d:e2:
d6:8c:8d:18:eb:f1:b9:cf:73:ab:27:52:7b:03:f6:
66:4f:68:85:0c:39:ef:0a:13:cc:49:f8:a2:c4:4f:
3b:3f:50:53:79:4a:f1:32:a3:0c:65:2b:0c:3c:f7:
88:a6:10:70:4b:40:16:6f:3f:d4:c1:1a:bf:26:2e:
e4:ec:f8:d6:16:23:ef:a0:b8:4a:fa:6d:b9:00:ee:
b5:bb:94:fa:da:1d:53:09:c1:31:a2:83:d5:08:87:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:9C:3D:94:01:82:71:D9:E7:F3:70:93:1D:03:0C:F6:E8:5C:95
X509v3 Authority Key Identifier:
keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:10:12:46:12:ce:8c:fc:1a:06:59:76:40:7d:5c:d7:76:06:
7c:a2:c4:3e:47:a5:72:58:c3:96:20:58:57:71:5d:a3:7b:a6:
ce:ad:c4:a3:5f:bb:e3:26:e5:fa:f0:24:ca:5b:74:b1:aa:fa:
d5:19:eb:72:c2:dc:15:be:33:e4:4f:61:b2:a1:67:19:3b:5a:
84:fb:b4:53:bf:0d:6b:1e:a8:66:e2:b8:30:08:36:77:8a:ac:
85:53:ab:62:3a:bd:5a:0b:8b:bb:0d:39:f5:04:dd:5a:4a:fc:
75:5d:46:45:c2:ca:52:90:f5:66:07:71:1a:c7:89:fc:bf:16:
0d:81:d8:86:ca:52:1a:e0:33:88:d1:83:25:ee:7f:25:84:6c:
5c:07:56:06:6c:4c:0e:f5:9c:ae:ae:1d:a3:26:d0:8c:e8:63:
66:6a:e8:26:f9:a0:e0:10:26:04:7b:10:c9:5d:b7:9d:6c:ea:
c1:dc:79:f4:33:7a:6d:3a:db:8a:7c:a2:6a:84:05:cd:b8:e1:
56:be:00:5e:38:a5:fa:e9:bb:09:5a:74:fc:8e:fb:c7:d9:2e:
5d:97:e9:0a:98:9d:46:db:06:4f:8a:67:85:70:58:b3:20:10:
71:65:96:fa:5b:b6:da:d2:29:64:4a:17:42:71:48:34:4b:39:
d5:fc:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:06 2025 by rpki-client