Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: BhiSb8j6EwPIDn1G3uQx7QI4+jajUfEwViytlDY9MS8=
Subject key identifier: 3E:03:62:A6:72:B9:A8:B0:69:46:5D:EA:1E:F6:B4:C1:24:D8:B5:37
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 019956E891185119620A83654D3688E7120D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 040F
Signing time: Wed 17 Sep 2025 09:01:45 +0000
Manifest this update: Wed 17 Sep 2025 09:01:45 +0000
Manifest next update: Thu 18 Sep 2025 09:01:45 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: HjWm6I1tLy+pmUSCn5z7X0EeCDqXkcIZS+18ljMPaRc=)
2: PPz_1wH3hqFDjLC-MrIMRrZJxeQ.roa (hash: ZY1q21nV+Hi/oVRVSMTtHd27zoQ6myzruEINZqqxjKM=)
3: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (hash: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:e8:91:18:51:19:62:0a:83:65:4d:36:88:e7:12:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Sep 17 09:01:45 2025 GMT
Not After : Sep 18 09:01:45 2025 GMT
Subject: CN=3e0362a672b9a8b069465dea1ef6b4c124d8b537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d9:e3:62:17:b3:d4:41:ce:6b:8f:5e:f4:66:
04:07:4e:b9:82:b8:a2:7e:3c:e5:2b:63:27:28:1a:
ab:36:70:2c:18:05:0d:97:58:45:95:64:e3:d7:0c:
57:23:ae:11:fc:61:f9:44:f6:9b:77:9a:ed:1e:88:
50:aa:ae:e9:da:42:fc:9b:da:5b:5c:df:43:4d:ed:
05:2a:eb:95:49:bd:4d:95:d8:d0:e1:d2:d1:e7:9b:
eb:6c:9f:84:e5:54:f0:4a:ec:ba:4f:3c:27:ec:37:
0c:0d:e7:74:cd:a3:9f:cf:ad:9b:14:97:7d:67:a4:
84:f9:d9:91:bf:65:a9:0d:81:d6:16:a3:34:88:c7:
22:9f:fa:60:92:8c:74:a7:ff:a8:66:31:8f:85:1c:
57:7f:5c:df:1e:f8:6a:12:f0:2c:00:9f:c8:8f:84:
7b:80:4a:25:3c:26:39:c9:51:21:8f:8f:46:b6:0e:
7d:0d:9c:4b:02:b2:ab:79:f8:b1:31:6e:55:0c:62:
e5:6c:ac:c6:0d:47:5a:30:d0:e4:79:b1:26:13:fc:
d5:dd:1a:5a:d8:05:a1:47:50:2a:92:e5:8a:c3:f6:
41:b6:39:15:82:43:97:6a:f4:ef:98:60:06:79:c9:
d1:66:ee:85:9d:d7:b6:24:2c:fa:ff:f4:22:50:d5:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:03:62:A6:72:B9:A8:B0:69:46:5D:EA:1E:F6:B4:C1:24:D8:B5:37
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:98:d3:99:2f:7a:a1:04:d0:4b:58:c9:a2:41:26:05:1a:d7:
1d:72:52:96:65:66:da:64:c7:bb:b1:44:0b:75:79:60:36:97:
4e:2e:ef:6d:65:8f:e9:c8:b3:05:03:f9:5d:65:dc:21:b5:da:
70:8f:97:68:c8:59:6c:0f:e4:b8:a0:b2:3b:bc:25:dd:a5:2c:
0c:4d:2a:06:ee:1d:18:6f:4e:dd:7b:bc:94:dc:e6:c9:df:ca:
5c:78:c3:62:2d:27:eb:81:a2:5c:c7:c5:1e:ca:f7:30:2a:0a:
b4:47:1a:d9:52:f9:19:c5:a1:db:a8:20:dc:45:09:22:70:8f:
fe:b0:4c:19:43:4f:18:d1:7a:25:e0:59:e7:ce:3f:35:cd:4c:
cf:4e:db:5c:a7:84:82:9d:3b:ee:a6:29:48:a0:41:96:13:1c:
b0:f3:27:72:75:c2:bf:2b:61:18:ee:7b:76:05:34:81:ec:0c:
4b:5f:b0:ba:e1:15:3a:ac:bc:35:ea:46:bd:65:e7:a1:55:30:
e9:b1:55:ba:45:1b:db:ab:57:91:b9:54:26:c9:54:52:45:6c:
c4:32:7e:26:b0:23:e8:3c:15:97:5f:ee:cf:45:09:8f:6a:68:
54:5a:10:6d:b7:c1:11:66:b3:fe:80:e0:6c:e7:74:0a:87:46:
9e:c9:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 14:03:42 2025 by rpki-client