Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
File: dwHuTBoib59iQp81dWp4mApbRXo.mft (raw, json)
Hash identifier: yGrlIyuoKTJiOLzeoNvPRxqdHeFRUgynDTtrG+BOhE0=
Subject key identifier: 9B:C3:3B:22:34:57:B1:B0:BF:08:B8:7F:E7:F5:86:BD:1C:57:62:9A
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Certificate issuer: /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial: 01988BB3D16779B3C789FD8616DF26214FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
Manifest number: 15BC
Signing time: Fri 08 Aug 2025 22:01:14 +0000
Manifest this update: Fri 08 Aug 2025 22:01:14 +0000
Manifest next update: Sat 09 Aug 2025 22:01:14 +0000
Files and hashes: 1: dwHuTBoib59iQp81dWp4mApbRXo.crl (hash: yLUCTSvMrrAp/1Gx5TDXaRr7S1y3J1X2nNkX2XHVw2A=)
2: eNeF4nAZ4czrvnsr1aVLaDs6aOA.roa (hash: tYhPAoHdmBCSAa68GIa0M0wkQIoMsHZdOyQCiBG9waM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:d1:67:79:b3:c7:89:fd:86:16:df:26:21:4f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Validity
Not Before: Aug 8 22:01:14 2025 GMT
Not After : Aug 9 22:01:14 2025 GMT
Subject: CN=9bc33b223457b1b0bf08b87fe7f586bd1c57629a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:48:0a:5d:73:0d:9e:f1:d2:34:75:4d:d2:b5:
e4:79:b9:59:98:9f:52:94:7b:f7:97:cd:1a:19:f9:
d9:26:2b:e9:99:df:e8:1a:59:0a:8b:0f:10:c1:c0:
d6:df:8f:c9:bf:95:e3:83:50:33:44:59:85:66:a7:
13:9d:9b:5a:0a:5a:72:cb:f2:81:43:ef:67:2c:b5:
db:38:84:ba:7c:ef:2a:3d:84:df:67:ca:22:96:d9:
34:89:e9:9e:d5:ed:ca:29:2c:60:f4:57:91:0a:f3:
6f:21:0a:4e:4d:9f:b9:c5:cd:03:ad:f7:45:eb:bc:
f4:19:3e:dd:2c:22:a4:4c:d8:5e:bf:85:de:f1:29:
1f:ec:e3:ff:47:f5:e4:03:a7:cc:5f:3f:cd:11:7c:
2d:25:63:32:83:4a:e7:8d:71:4d:05:e4:09:d0:da:
49:e1:85:1b:84:1d:18:4f:87:98:a2:c2:7b:77:c2:
9e:cc:3c:d8:1d:58:dd:cd:03:a1:aa:66:0b:9b:fc:
c3:b7:76:9c:d7:27:b4:15:dc:d5:92:fa:81:08:64:
bf:70:8f:25:15:df:4b:1d:ac:93:95:67:54:f1:c8:
2c:a6:e8:74:ad:04:7a:2e:df:8f:ed:39:c0:47:e1:
61:7e:ec:9a:25:69:87:87:40:cb:38:67:0d:d9:76:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C3:3B:22:34:57:B1:B0:BF:08:B8:7F:E7:F5:86:BD:1C:57:62:9A
X509v3 Authority Key Identifier:
keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1a:ab:c8:a5:f6:d1:8b:7e:2a:75:1d:43:0b:3f:9b:f7:1d:
89:60:be:a7:ad:26:7e:ba:44:85:f8:58:97:83:a9:6b:96:80:
29:b7:a7:11:39:04:35:ca:c3:3f:df:28:46:22:10:d4:04:6a:
50:b6:dd:07:fe:71:6e:06:70:01:32:1e:a0:ac:ba:a2:46:12:
18:11:bd:98:d3:09:7b:ae:5e:33:8f:84:47:f7:43:8b:9a:f7:
be:c8:a4:33:28:3a:1c:28:aa:2d:7b:0e:3d:c2:c4:c1:d2:2e:
21:d4:f6:52:74:a2:62:46:98:b9:b9:f8:a5:fb:dc:a8:1c:1e:
bf:14:31:91:53:03:ca:c7:a3:27:b0:76:df:98:ce:5c:06:18:
3f:7a:8a:2b:80:5f:21:d1:64:89:29:52:bf:c7:49:40:c6:40:
b3:c6:ad:5f:f7:56:69:a0:b8:f3:24:ca:19:d6:3d:a7:dd:2e:
6a:7d:c1:9d:8f:70:3f:a9:9a:48:df:b0:56:2e:b1:4c:8f:aa:
a8:a9:c5:41:a5:2c:ff:9f:2c:e3:18:80:b6:8f:15:df:cf:cd:
27:f3:c7:72:c2:85:74:6a:3a:d4:2c:50:4b:be:a7:04:8c:b0:
a3:aa:12:5d:9a:c4:80:21:23:8e:38:35:25:24:1a:55:40:8a:
5d:cb:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:45 2025 by rpki-client