Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
File: dw0111Zu5yRuTSEzy95Ip3RCPHc.mft (raw, json)
Hash identifier: 9ljbfuq31KXlirpdN25Iff42tcsR02AfsgV6TCE2S2E=
Subject key identifier: 3A:CF:7B:D3:B7:E5:E5:56:B9:FE:3F:E5:9E:34:E5:FE:D6:12:61:D9
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Certificate issuer: /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial: 019A4E18797214B5033A95327AEAC062318A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
Manifest number: 0AF0
Signing time: Tue 04 Nov 2025 09:00:17 +0000
Manifest this update: Tue 04 Nov 2025 09:00:17 +0000
Manifest next update: Wed 05 Nov 2025 09:00:17 +0000
Files and hashes: 1: SOT0W2XrP7CCow7oMidVP0WeTQc.roa (hash: LK/wr/vv637+E1XEkLAUiLeI/zSDn9f20e+XXEbQLBM=)
2: ZHw9z1FJzdvIzznM9dzN2O5C56I.roa (hash: bAuKlmhtwV1RMYb3UiAoj3013/bGmnUu7vNpvbyFAaw=)
3: dw0111Zu5yRuTSEzy95Ip3RCPHc.crl (hash: CqFIjHGtJyziyavrrMv3zg70G9e6rRooU2Y5931Ljxc=)
4: kb1hhl4VhznPe9ar0pe3UEE3K-I.roa (hash: smgbn2o+yW8NSkrB4nhx/ecIptLt+NRlqrEvEJN1ma8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:79:72:14:b5:03:3a:95:32:7a:ea:c0:62:31:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
Validity
Not Before: Nov 4 09:00:17 2025 GMT
Not After : Nov 5 09:00:17 2025 GMT
Subject: CN=3acf7bd3b7e5e556b9fe3fe59e34e5fed61261d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f4:87:f1:52:a7:8c:24:5d:be:b3:c8:f1:9a:
6d:88:1f:ca:4d:f9:a7:d7:26:4f:f4:ae:85:d8:fd:
0d:4e:94:c8:27:23:71:1a:28:3b:aa:47:06:89:72:
00:1e:0b:98:3d:44:83:d2:1f:3e:82:97:c3:38:54:
f8:d7:6a:dc:42:ef:2e:28:83:24:ec:48:5d:a6:d6:
23:38:82:92:10:cf:b8:33:00:35:e9:27:db:3e:b1:
2b:8f:77:2d:7e:2f:a7:74:46:86:97:42:70:82:8c:
4f:65:63:e5:61:83:07:52:58:93:15:57:8a:1b:ab:
ea:95:bf:35:d7:b2:81:72:57:03:40:f8:17:7a:75:
ea:05:e8:d5:f4:0e:81:90:f5:27:79:bd:b1:e6:e6:
06:da:42:7d:a8:d1:e3:33:4e:13:23:aa:61:c4:7d:
8b:7e:6e:b7:e9:72:29:27:87:93:b0:42:4f:7e:8e:
35:f9:19:94:d6:52:38:b6:dc:6e:2e:76:2e:ee:d5:
37:da:06:44:f7:83:6b:59:d7:fd:e5:2c:25:d0:2c:
f5:33:80:85:18:15:d7:a2:f6:ff:ab:b0:75:65:ea:
71:24:5d:62:00:57:e3:28:b8:61:c7:93:52:4c:75:
0c:dd:7d:3b:0f:04:b4:29:1d:22:c2:9e:87:2f:bb:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CF:7B:D3:B7:E5:E5:56:B9:FE:3F:E5:9E:34:E5:FE:D6:12:61:D9
X509v3 Authority Key Identifier:
keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7b:11:67:74:93:91:26:2d:43:1e:dc:df:bd:19:47:e9:17:
d1:bb:05:28:bb:96:56:9b:d6:93:37:82:cd:71:15:56:a0:bb:
26:ea:67:09:4e:54:e5:e4:16:a3:5b:72:21:eb:32:03:51:96:
5d:9e:03:c4:51:66:bf:73:65:37:7d:88:44:73:1d:91:a8:ab:
03:71:a9:a8:47:6f:6d:91:6b:3e:5c:a6:96:05:79:3d:ca:0b:
3c:9e:fe:f1:f5:49:75:6b:cb:48:fd:36:23:85:ce:dd:75:34:
cb:24:46:27:b7:0a:63:12:27:27:5b:71:be:2b:62:68:24:64:
a8:21:89:d5:c0:af:d5:2a:10:bf:36:bf:02:24:64:1b:8c:74:
1d:10:8c:f9:af:b5:a6:fc:22:78:46:05:9b:e9:10:b5:e7:1b:
be:90:fc:f2:a6:bb:9b:a4:62:f5:8d:04:4d:4d:ec:62:ec:dc:
cd:11:fd:fb:ad:d0:71:d7:14:d9:5a:24:31:7e:c0:85:c2:af:
4a:94:55:d0:8f:2b:cf:ce:dc:cb:c9:10:60:04:e1:50:ca:ea:
1b:4d:0b:b3:4d:5e:7b:81:ae:a2:4d:c1:40:d3:9b:c5:64:6b:
33:00:52:f2:90:dd:77:f7:4e:9e:ed:62:13:fa:00:a0:ff:f3:
95:9f:a8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:11 2025 by rpki-client