Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier: CmcV4PDZWI8dyyYBmI5f0oVuC3JZG2WUMdk3TM9JxCI=
Subject key identifier: 52:82:29:76:B9:4E:84:89:62:EC:F7:F8:73:2D:33:0E:7F:70:51:99
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer: /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial: 019A51F570D06EFBDA2F0A12DB77C7D6D057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number: 0B79
Signing time: Wed 05 Nov 2025 03:00:30 +0000
Manifest this update: Wed 05 Nov 2025 03:00:30 +0000
Manifest next update: Thu 06 Nov 2025 03:00:30 +0000
Files and hashes: 1: Zeibnx0jQfHrKCngsBYyNBtyCY8.roa (hash: 1tTIgh7rGioAClAEx5jMHBx5r9sM7mmraGPRQnv9pR0=)
2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: T6gWwXrdL0n3glAwrDexHjNoXticLw9dHSrT+zPTc8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:70:d0:6e:fb:da:2f:0a:12:db:77:c7:d6:d0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Validity
Not Before: Nov 5 03:00:30 2025 GMT
Not After : Nov 6 03:00:30 2025 GMT
Subject: CN=52822976b94e848962ecf7f8732d330e7f705199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:5a:d3:2a:89:a0:55:ce:94:d6:85:98:23:
2c:ad:86:d6:7d:ac:f1:7c:81:a7:23:b7:7d:0e:2b:
b9:57:55:77:ed:72:e2:58:38:ec:53:b1:73:ac:33:
e6:bf:91:29:f2:d8:34:32:8b:fa:5b:70:6d:25:62:
56:82:47:9f:c2:47:a1:77:46:48:40:11:1b:97:4c:
5f:3c:81:81:15:78:1b:1e:97:9a:3d:27:21:2b:ea:
f6:be:1c:26:c9:ea:14:01:3d:cd:94:b3:bb:3c:e5:
9c:6f:27:b2:5f:ab:3e:70:6f:d7:f8:95:9c:e8:df:
9e:66:e3:e4:ab:c3:96:14:9c:d9:fc:d2:b0:23:78:
05:18:5d:69:16:c1:cf:ed:69:a8:ac:05:38:42:cb:
cf:70:54:16:94:57:06:fe:b9:de:b1:b6:38:7f:f5:
69:79:b7:e2:7b:57:ad:43:ed:1b:88:00:18:4e:f7:
b8:8b:67:e3:33:d8:47:41:4d:6b:84:8a:9a:c6:44:
e1:20:dd:a3:06:8e:32:94:3e:86:8a:df:e4:9b:20:
6e:eb:e0:c9:ee:88:07:2f:f5:c7:4e:1b:88:06:4a:
37:09:8e:a5:6a:78:43:af:4f:76:0d:c9:6c:ec:54:
49:a5:ce:d3:cf:e2:b3:76:45:20:ec:50:a7:29:01:
ec:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:82:29:76:B9:4E:84:89:62:EC:F7:F8:73:2D:33:0E:7F:70:51:99
X509v3 Authority Key Identifier:
keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2e:70:29:f8:6f:dc:97:d0:32:bf:5d:33:6c:95:8b:c7:0b:
23:d5:76:e7:01:80:81:6f:b9:46:0b:15:84:30:bd:6b:93:15:
7c:fa:d5:07:16:73:67:37:d3:2c:30:30:6d:27:61:70:0c:e2:
cc:61:4c:bd:22:0d:b5:cb:27:cc:2f:f6:33:82:a8:0a:a2:4c:
6c:75:35:bb:c9:ea:e6:a5:df:18:5a:ac:1b:de:58:0a:79:a8:
ca:37:a9:95:38:5f:09:fa:1b:1a:e7:2e:74:85:2a:05:4a:db:
3b:a9:e5:2d:86:67:d5:3c:06:07:04:4e:fe:ef:82:30:2a:d8:
77:86:45:9d:1e:88:28:3b:3f:02:a6:08:75:d3:0a:90:ff:e9:
33:80:84:50:12:d1:42:cf:3a:2c:0a:ec:59:ae:16:9b:2d:9f:
43:26:39:91:64:a3:bc:7d:bc:ee:fc:92:cd:74:b4:fe:c6:f3:
07:64:fc:c7:9d:a4:f7:f8:0a:bf:3f:24:c4:18:74:60:8d:9e:
bc:f8:d3:ea:4a:4f:6b:81:84:65:b3:1f:3f:3a:2d:bd:e8:f8:
66:33:80:27:2f:50:f6:7e:59:dc:f4:82:57:66:1c:39:0f:ab:
92:4e:79:e3:11:20:7b:2b:b6:43:a0:c6:f7:25:8a:2d:46:90:
e2:5a:53:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:17 2025 by rpki-client