Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
File: dw0111Zu5yRuTSEzy95Ip3RCPHc.mft (raw, json)
Hash identifier: PktklbSQ0zSeub6rg/b0f39TjJXF21NjII7SRzmPnWo=
Subject key identifier: 3A:A7:20:13:04:37:9B:64:7F:7C:33:BD:27:E2:CB:2B:FE:C5:5D:A3
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Certificate issuer: /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial: 01987E9CAC9EABD13FF89DC342C368CA58E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
Manifest number: 0A00
Signing time: Wed 06 Aug 2025 09:00:53 +0000
Manifest this update: Wed 06 Aug 2025 09:00:53 +0000
Manifest next update: Thu 07 Aug 2025 09:00:53 +0000
Files and hashes: 1: SOT0W2XrP7CCow7oMidVP0WeTQc.roa (hash: LK/wr/vv637+E1XEkLAUiLeI/zSDn9f20e+XXEbQLBM=)
2: ZHw9z1FJzdvIzznM9dzN2O5C56I.roa (hash: bAuKlmhtwV1RMYb3UiAoj3013/bGmnUu7vNpvbyFAaw=)
3: dw0111Zu5yRuTSEzy95Ip3RCPHc.crl (hash: QECFo8eZtdbxpfAJEiQ17ovzxiSDgNx8rvLhgEBU4Ho=)
4: kb1hhl4VhznPe9ar0pe3UEE3K-I.roa (hash: smgbn2o+yW8NSkrB4nhx/ecIptLt+NRlqrEvEJN1ma8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:ac:9e:ab:d1:3f:f8:9d:c3:42:c3:68:ca:58:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
Validity
Not Before: Aug 6 09:00:53 2025 GMT
Not After : Aug 7 09:00:53 2025 GMT
Subject: CN=3aa7201304379b647f7c33bd27e2cb2bfec55da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:3f:41:a4:73:d2:2f:5a:9a:cc:bf:84:08:
bf:93:e1:19:49:9d:a7:1a:60:d3:04:80:24:bc:b1:
fc:49:6e:b6:6a:4f:bd:ac:50:8d:ff:3e:b7:bc:53:
06:6c:e6:18:d9:11:04:b3:46:fc:02:3d:c1:bf:3b:
2e:b6:20:31:f4:f7:28:5d:e0:9b:b9:c7:af:bc:8a:
4f:e5:43:b2:93:a5:57:ce:b2:d7:39:7c:ef:a2:81:
fd:94:cb:71:e1:c3:36:29:fc:a6:90:f9:1b:72:72:
f2:0a:ed:8d:78:2a:02:eb:fb:a4:76:26:cc:93:77:
3e:68:b5:4e:f9:3a:dc:74:41:10:64:96:66:5a:46:
b5:1f:40:67:2a:b9:b2:19:d1:94:a1:7f:c7:9c:2a:
19:f8:a3:c7:95:03:a2:44:b2:eb:ed:d5:02:7a:4e:
e4:d4:22:23:b6:6c:b5:49:52:6f:96:7e:fc:8e:5e:
26:06:0d:3e:b5:5c:0f:a8:a0:35:5d:3b:d1:76:46:
f5:21:6e:73:27:b0:9c:8e:24:46:c9:15:c9:d4:bf:
e0:30:ee:a1:d6:ff:d7:22:11:49:c4:a0:8c:68:b6:
20:a9:23:55:43:60:31:85:4d:36:9c:91:e5:ee:29:
d0:56:95:78:95:91:06:09:00:27:be:90:61:30:5c:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A7:20:13:04:37:9B:64:7F:7C:33:BD:27:E2:CB:2B:FE:C5:5D:A3
X509v3 Authority Key Identifier:
keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:00:79:a0:49:8d:fc:99:56:af:78:43:45:ff:2e:8c:07:91:
3a:37:ed:bb:d6:d2:38:7d:d6:2f:58:8b:8d:dd:38:f8:66:ea:
ef:36:b0:c5:9f:e4:54:97:d2:b2:5f:c2:f7:72:93:aa:a9:de:
e2:d1:94:bf:e4:58:1e:28:e3:29:da:71:9c:55:85:d3:90:06:
10:75:f7:46:12:2a:36:1c:ef:b1:04:51:5b:29:42:7b:a5:54:
28:c4:09:4c:78:48:75:7d:82:e5:59:4f:31:8b:54:71:79:39:
e1:61:24:d2:99:50:fe:0a:4c:1d:49:91:d9:e3:4b:ea:d3:a1:
f8:ba:5a:0c:f4:df:fc:20:21:a7:a7:bc:b5:92:df:fb:d4:4f:
70:a3:3d:07:60:bd:2d:2b:8c:50:7f:0c:6b:99:70:83:59:b9:
37:29:35:3f:a7:72:9d:7d:7d:5f:3b:26:30:2d:6c:ff:a2:4e:
3d:2c:a1:a9:d5:76:bc:c7:af:7e:bc:34:14:c8:41:18:9f:e8:
ac:20:18:45:8f:a2:15:59:d0:84:f3:e8:cd:f0:db:cb:a9:df:
c3:09:81:17:f5:b7:c1:1f:38:88:66:c8:34:08:4e:81:4b:13:
ba:42:44:5e:23:72:e1:96:dd:b6:81:ea:73:23:37:a5:59:d8:
7c:10:c2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:53 2025 by rpki-client