Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: 3z+5cleMaH4t+nmg55Ldvkkz5MCLeF/lgJ2hRY8a95s=
Subject key identifier: F0:81:03:53:B5:C0:5A:72:02:77:A8:2A:33:05:02:4F:2C:F9:EC:AF
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 01988F90A41D6228B960C5E9ED3AD8F6ED6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 0E1F
Signing time: Sat 09 Aug 2025 16:01:17 +0000
Manifest this update: Sat 09 Aug 2025 16:01:17 +0000
Manifest next update: Sun 10 Aug 2025 16:01:17 +0000
Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: poYicBw/zImS+zahCjMe0oLfBkAJxmWzMsxo7v46Qs0=)
2: ffTvs6YF_hXAEglDFhneoTAWA7Y.roa (hash: McS9n7bcKq8O21qZ8IIp3IHODw/eCLO/50XCpVXjy20=)
3: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:a4:1d:62:28:b9:60:c5:e9:ed:3a:d8:f6:ed:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Aug 9 16:01:17 2025 GMT
Not After : Aug 10 16:01:17 2025 GMT
Subject: CN=f0810353b5c05a720277a82a3305024f2cf9ecaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:94:01:27:30:10:c9:55:46:2a:d7:06:19:
1f:c6:ad:42:74:a4:1d:e7:cf:e0:b9:57:94:00:49:
e7:5f:76:b3:02:b2:64:dc:4a:6f:76:94:90:b0:d5:
63:7f:ae:33:c4:72:79:05:f5:a2:f0:a8:a7:5e:00:
7c:63:3d:a2:2e:df:4d:3f:3b:4b:c6:45:e3:68:34:
e5:5b:3e:e4:ff:0f:ce:13:4a:2d:19:3f:b3:c4:03:
b6:0a:be:bc:50:86:1b:9c:ee:fe:1a:b4:0e:37:e6:
65:25:8c:8b:39:ae:07:ad:52:11:24:ac:2a:3c:61:
27:4f:5a:59:96:6e:ae:c5:36:28:63:05:e7:2a:88:
23:60:0c:f1:f8:0a:d1:1e:3e:4b:cb:af:d8:64:ec:
79:c5:7c:71:9a:49:ca:2b:b9:42:c5:49:e4:ba:0f:
c6:8b:c8:df:3e:19:47:c0:de:31:8a:a0:a7:b9:ab:
58:92:c7:c8:30:46:a7:58:ac:29:4a:9a:58:b6:c8:
5a:0b:4d:f6:4e:a7:15:3d:a2:04:d0:ef:e2:78:c1:
d1:19:4b:c9:dd:74:b9:73:0c:31:f1:f2:f9:30:27:
70:23:aa:b6:08:4a:66:ef:fa:65:19:a8:2f:34:56:
eb:fe:18:fb:99:81:23:01:3c:cd:53:30:4f:80:72:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:81:03:53:B5:C0:5A:72:02:77:A8:2A:33:05:02:4F:2C:F9:EC:AF
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d8:8f:86:47:60:70:28:ea:a9:8d:97:a4:42:d9:40:86:4f:
dd:78:56:6d:68:66:ed:b6:87:6c:64:01:f4:80:84:56:1f:84:
a2:45:a8:91:f6:98:7e:5c:33:a1:55:aa:4f:f6:c8:dc:e4:5a:
22:ef:40:07:90:05:d0:ba:35:2a:c2:14:fc:5b:6c:a8:d0:7a:
a0:08:aa:c0:b0:79:66:7c:24:63:04:a3:cc:e6:bb:fa:f3:c2:
dd:06:b5:ec:07:d8:7d:e0:f6:bf:db:17:69:77:04:2e:72:a5:
ff:e2:50:cf:aa:24:18:c8:a4:ca:48:67:60:2b:7b:5d:c7:2f:
f3:3f:04:20:3e:05:01:27:2f:3c:db:60:98:e1:bb:1b:b5:3c:
4c:e4:a9:2d:c7:23:74:d9:d3:40:1f:8a:51:f7:c4:56:e7:0f:
8b:0b:d4:22:ea:7e:aa:31:b4:b0:58:16:6c:50:6e:3d:73:01:
89:ca:19:16:ba:b1:c8:a7:e9:c9:58:b0:6b:c3:41:db:6f:60:
81:28:27:dd:94:a7:f1:5e:d9:c9:2b:81:44:b4:c9:d5:bc:f3:
3a:e0:b1:0e:74:a9:e2:80:2c:ed:e5:90:13:b8:37:82:8f:23:
47:7b:c4:21:37:03:41:31:7a:39:9d:6e:bf:ff:96:da:66:87:
10:49:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:26:43 2025 by rpki-client