Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
File: DW-RpSFkBJQiOeaW5lzy03IU5K8.mft (raw, json)
Hash identifier: PCLWJf2DYSLe+P4Xim8WfF0IUMpXe9wbBxwHV/2JJpg=
Subject key identifier: 66:55:8D:C9:F4:24:31:D3:FD:9C:AC:2D:AB:D9:09:30:3C:39:7B:D6
Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
Certificate issuer: /CN=0d6f91a5216404942239e696e65cf2d37214e4af
Certificate serial: 01976F6319C7266FD982C0F3970B49EA842D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
Manifest number: 0B7A
Signing time: Sat 14 Jun 2025 17:00:54 +0000
Manifest this update: Sat 14 Jun 2025 17:00:54 +0000
Manifest next update: Sun 15 Jun 2025 17:00:54 +0000
Files and hashes: 1: DW-RpSFkBJQiOeaW5lzy03IU5K8.crl (hash: LKDmSNkXv2ZId9sMa94WZEc8lEjfxQw9Q4To8w7AwFA=)
2: OH-wToKKpcLXZiKSEV9kWfR3r9E.roa (hash: +uO0A8wLAnAMRWqRTo4QJmUxBjNPBXZGwGTwpjPRQZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:19:c7:26:6f:d9:82:c0:f3:97:0b:49:ea:84:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af
Validity
Not Before: Jun 14 17:00:54 2025 GMT
Not After : Jun 15 17:00:54 2025 GMT
Subject: CN=66558dc9f42431d3fd9cac2dabd909303c397bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:d3:ee:37:9f:9c:50:12:d9:1c:ec:fb:91:
cb:d1:e3:b5:65:d0:26:cf:b1:90:64:aa:7a:f0:ca:
92:6e:5b:83:f1:05:57:a3:b2:8d:f5:27:4b:b0:e5:
e4:5d:62:ba:ff:26:35:0f:42:4a:2c:d4:ae:bd:bf:
cc:66:37:ab:50:51:7a:bf:7b:3d:75:e6:61:02:cd:
d9:98:2a:34:96:77:83:76:09:93:d2:bb:09:89:52:
2b:08:c3:bb:09:20:56:1a:f3:e0:97:88:3d:92:c0:
e0:e1:42:a4:3c:97:cc:e4:91:22:06:a1:0f:39:a4:
c9:c0:68:53:fa:e5:94:f3:ed:2f:e0:f3:70:a2:1f:
1b:23:ca:63:0c:09:d8:32:e3:ea:73:70:61:8d:63:
01:ae:90:d9:3d:28:43:fa:d0:02:0b:85:2b:2f:48:
7d:52:2c:8d:1c:5b:e4:dd:3f:2f:7f:38:a9:33:b5:
b3:b5:f0:3c:ab:cf:fe:73:e0:db:ea:8e:b0:bc:8b:
18:f8:db:9b:c3:47:97:24:cb:eb:09:11:2e:a6:a5:
90:d9:8d:c3:b7:66:ca:99:3f:68:6a:1c:1f:cd:9f:
d2:3a:b7:6e:6c:bf:a7:e7:4d:39:40:2a:e4:62:37:
e5:9d:cd:d1:c6:12:2b:b6:24:12:c7:71:6f:5e:b9:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:55:8D:C9:F4:24:31:D3:FD:9C:AC:2D:AB:D9:09:30:3C:39:7B:D6
X509v3 Authority Key Identifier:
keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2b:10:0b:f5:aa:04:6e:c6:c0:ce:fc:7c:5d:29:52:96:26:
76:f8:fd:8e:ba:c1:d2:8c:c5:ea:42:75:a6:12:75:51:fb:00:
89:14:75:bc:1e:80:a3:d6:49:dc:4a:bd:4f:b7:c1:cf:eb:a5:
84:03:d6:39:ff:17:1a:49:d7:d5:32:11:65:5e:c6:4a:1b:3e:
60:4e:23:03:13:06:ed:2c:31:92:bb:10:15:e4:f9:20:07:72:
04:88:78:a4:45:a8:a2:40:8d:3f:a0:85:4d:52:b2:1b:f2:76:
58:fe:a3:79:58:5b:51:fa:56:2e:a0:f8:25:42:6e:6d:95:c6:
30:ad:1e:07:00:70:38:50:9e:a3:01:33:89:fb:dc:a9:0b:dd:
84:be:bd:c0:a4:d9:ac:e9:ac:61:97:7e:27:3c:b2:12:fb:24:
b7:56:a0:c6:95:42:45:58:b8:02:dd:b6:e7:46:83:27:7e:f5:
6d:ff:a1:74:31:27:fb:d7:b2:04:2a:c8:c8:64:a9:ae:48:df:
18:4e:d2:59:85:3b:ee:98:a2:9b:ed:a6:55:38:20:b3:c1:55:
23:18:72:81:52:71:a2:2f:fd:b6:60:a6:49:93:3f:3d:54:2b:
29:72:3e:ac:5b:08:d7:ef:49:83:32:e6:5a:f5:1f:e3:9d:8e:
52:94:ff:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYxnHJm/ZgsDzlwtJ6oQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmY5MWE1MjE2NDA0OTQyMjM5ZTY5NmU2NWNmMmQzNzIx
NGU0YWYwHhcNMjUwNjE0MTcwMDU0WhcNMjUwNjE1MTcwMDU0WjAzMTEwLwYDVQQD
Eyg2NjU1OGRjOWY0MjQzMWQzZmQ5Y2FjMmRhYmQ5MDkzMDNjMzk3YmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1vT7jefnFAS2Rzs+5HL0eO1ZdAm
z7GQZKp68MqSbluD8QVXo7KN9SdLsOXkXWK6/yY1D0JKLNSuvb/MZjerUFF6v3s9
deZhAs3ZmCo0lneDdgmT0rsJiVIrCMO7CSBWGvPgl4g9ksDg4UKkPJfM5JEiBqEP
OaTJwGhT+uWU8+0v4PNwoh8bI8pjDAnYMuPqc3BhjWMBrpDZPShD+tACC4UrL0h9
UiyNHFvk3T8vfzipM7WztfA8q8/+c+Db6o6wvIsY+Nubw0eXJMvrCREupqWQ2Y3D
t2bKmT9oahwfzZ/SOrdubL+n5005QCrkYjflnc3RxhIrtiQSx3FvXrmGOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZVjcn0JDHT/ZysLavZCTA8OXvWMB8GA1UdIwQY
MBaAFA1vkaUhZASUIjnmluZc8tNyFOSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jMTI2OTUtODllMS00NDgyLTk0ZTUt
YzQ3ZWFiMTdlOTNhLzEvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jMTI2OTUtODllMS00NDgyLTk0ZTUtYzQ3ZWFiMTdlOTNh
LzEvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSsQC/Wq
BG7GwM78fF0pUpYmdvj9jrrB0ozF6kJ1phJ1UfsAiRR1vB6Ao9ZJ3Eq9T7fBz+ul
hAPWOf8XGknX1TIRZV7GShs+YE4jAxMG7SwxkrsQFeT5IAdyBIh4pEWookCNP6CF
TVKyG/J2WP6jeVhbUfpWLqD4JUJubZXGMK0eBwBwOFCeowEzifvcqQvdhL69wKTZ
rOmsYZd+JzyyEvskt1agxpVCRVi4At2250aDJ371bf+hdDEn+9eyBCrIyGSprkjf
GE7SWYU77piim+2mVTggs8FVIxhygVJxoi/9tmCmSZM/PVQrKXI+rFsI1+9JgzLm
WvUf452OUpT/Hg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:24 2025 by rpki-client