Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
File: DW-RpSFkBJQiOeaW5lzy03IU5K8.mft (raw, json)
Hash identifier: EFASXLoYcN69K861LTGXC8aOdvMTft0oKAONuTxwra4=
Subject key identifier: 73:61:4B:CB:FD:05:13:DE:3F:4B:99:C2:CA:D0:D9:BE:36:1B:F7:42
Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
Certificate issuer: /CN=0d6f91a5216404942239e696e65cf2d37214e4af
Certificate serial: 019A4D3CF11FD56D83C4281F307BFCD3AEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
Manifest number: 0CF6
Signing time: Tue 04 Nov 2025 05:00:30 +0000
Manifest this update: Tue 04 Nov 2025 05:00:30 +0000
Manifest next update: Wed 05 Nov 2025 05:00:30 +0000
Files and hashes: 1: DW-RpSFkBJQiOeaW5lzy03IU5K8.crl (hash: 10MgXvjxeANqiKeB8g6pGiylBzZrS6QmejaQnAoQTnQ=)
2: OH-wToKKpcLXZiKSEV9kWfR3r9E.roa (hash: +uO0A8wLAnAMRWqRTo4QJmUxBjNPBXZGwGTwpjPRQZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f1:1f:d5:6d:83:c4:28:1f:30:7b:fc:d3:ae:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af
Validity
Not Before: Nov 4 05:00:30 2025 GMT
Not After : Nov 5 05:00:30 2025 GMT
Subject: CN=73614bcbfd0513de3f4b99c2cad0d9be361bf742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:fb:c8:b6:db:de:52:7e:78:45:27:29:a2:
25:b1:6f:95:b1:5d:73:e5:cb:cb:64:e6:15:2f:ce:
2d:a1:69:72:54:b5:4d:7f:47:d3:a4:2c:a2:d7:94:
4e:75:e0:7a:1c:07:40:8a:b0:fa:e0:88:e2:2c:d7:
95:4d:b5:8f:33:77:03:49:d9:cf:7d:99:d6:64:1f:
27:61:5b:dc:f2:2d:1a:95:76:e5:0f:2f:5e:c2:3f:
f2:11:b7:fd:c6:1a:ff:53:0a:05:cf:67:3d:d0:5d:
f3:95:5b:fb:5c:c9:67:f4:eb:85:0a:79:2f:ce:f0:
c0:f4:4b:06:78:1d:2d:73:5c:40:9a:02:37:4b:72:
54:84:a1:a5:00:90:cd:1b:52:34:91:c3:9d:a0:c4:
9c:2d:b4:34:d2:37:c7:94:1c:c5:19:8a:96:cd:82:
e9:07:f6:b4:e8:38:3f:d1:ef:23:f1:5e:ba:3d:b7:
4a:33:99:26:57:ec:5d:df:8d:c2:ea:43:18:d2:65:
e7:b2:83:90:d0:fe:e7:c7:34:71:a1:7c:30:56:2b:
af:b0:64:e5:83:76:b6:f8:18:44:82:af:33:6a:98:
cd:81:bf:a4:d4:23:14:40:00:33:4c:51:c0:78:45:
d1:01:8c:22:a7:82:90:36:cd:22:04:b3:ce:21:fe:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:61:4B:CB:FD:05:13:DE:3F:4B:99:C2:CA:D0:D9:BE:36:1B:F7:42
X509v3 Authority Key Identifier:
keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:51:dd:dd:93:04:ee:c3:f8:fc:9e:cd:83:b3:23:05:a8:89:
8a:42:d6:fa:c9:9c:ba:37:00:cb:7d:77:4d:2a:b0:5d:ff:4a:
d2:c7:fa:94:0b:7f:6d:bb:6f:7d:76:48:e5:2f:45:98:f1:e2:
5e:3b:6c:63:89:c9:f6:b2:14:8b:79:3f:b4:b5:7e:0c:07:7c:
2d:46:49:6c:1b:4c:22:eb:dc:4b:9d:1b:e7:2c:a9:34:c6:41:
56:de:7a:07:c8:ce:e3:07:21:a2:89:51:a6:52:56:e2:31:3a:
ec:8e:10:75:f3:32:fa:13:3a:a8:a0:c1:88:d1:3e:71:40:c8:
50:de:57:a7:96:7b:b3:ef:de:03:3d:c9:f5:3a:d0:c1:10:11:
10:4e:9a:9e:c1:47:8e:bb:a5:5e:ab:56:c4:d5:99:fe:98:63:
e7:a5:a3:3a:dc:44:fe:17:06:61:cd:2e:6e:c0:db:3a:63:c6:
60:ac:6a:4b:df:cb:59:3d:97:09:d9:be:b2:c6:f6:ca:cc:4f:
9f:f4:5a:c2:3a:39:24:e4:6e:c9:15:9c:9d:b2:d4:27:09:eb:
8a:47:78:e9:5e:e4:f7:a5:88:68:48:43:cc:81:5a:53:a0:38:
1c:12:70:b9:70:6f:3d:92:27:ce:1f:b9:0b:41:83:9f:a8:dc:
ef:96:b0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:09 2025 by rpki-client