Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
File: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft (raw, json)
Hash identifier: VKJGBDhr0+Ilf7Y7iv8ifkiTPNc4z//LuB/rpQ/UDsQ=
Subject key identifier: 43:BB:9E:DC:5D:D5:65:D1:8E:83:5D:27:DB:FE:15:6B:FD:23:C7:7B
Authority key identifier: 77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
Certificate issuer: /CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Certificate serial: 019A725C960E795916BA0E4DCFA470A571E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:01:01 +0000
Manifest this update: Tue 11 Nov 2025 10:01:01 +0000
Manifest next update: Wed 12 Nov 2025 10:01:01 +0000
Files and hashes: 1: WpMT8suijybaT-axFHyfyzyaTBs.roa (hash: I0+iXOVNpy84NiUe0arMh2Z225OGAdH9+ziecARxFHA=)
2: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl (hash: lOvzNjsDNkiaNM8FkH70I9kgYEhhzZvRP1e4I2mHLok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:96:0e:79:59:16:ba:0e:4d:cf:a4:70:a5:71:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Validity
Not Before: Nov 11 10:01:01 2025 GMT
Not After : Nov 12 10:01:01 2025 GMT
Subject: CN=43bb9edc5dd565d18e835d27dbfe156bfd23c77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:a6:f1:88:b7:bd:d5:ef:ee:92:48:88:82:
60:f5:2b:4b:39:a3:58:a1:d9:bc:bd:3c:5a:f0:c3:
7b:49:e9:c1:9c:fa:dd:d7:ea:36:98:7b:8b:d9:2e:
d2:94:52:d9:97:1f:3f:28:f7:7a:0d:fe:44:3e:9a:
ac:30:30:25:87:0f:20:94:65:d0:21:8d:91:77:70:
1d:2d:30:79:b8:1f:96:d7:78:2c:a9:17:24:e2:93:
5e:6d:0a:f1:0f:5a:77:d5:ac:6d:7a:09:33:0e:36:
c9:d4:31:35:2f:0a:10:df:50:38:fc:52:0b:05:21:
36:6c:12:ab:0e:4b:55:de:97:a1:28:45:9e:a2:e4:
ca:b7:a1:c0:76:76:20:fd:76:88:c8:23:88:69:7a:
7e:a7:26:58:de:68:37:41:08:3a:92:57:bc:d7:70:
78:bd:23:04:69:d0:7d:46:3b:29:ae:b6:e4:80:b2:
49:10:3b:92:3b:32:f6:db:d7:b2:24:15:0d:b7:09:
13:25:f3:00:22:5c:01:e9:69:2c:0b:85:35:9d:b5:
33:7c:9a:29:b0:b9:b6:65:12:f0:61:cd:a1:49:23:
f2:05:5f:d0:47:a1:c2:e7:87:31:89:94:e1:77:40:
4a:50:9b:09:64:08:82:a7:18:e3:1e:2b:2f:bd:98:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BB:9E:DC:5D:D5:65:D1:8E:83:5D:27:DB:FE:15:6B:FD:23:C7:7B
X509v3 Authority Key Identifier:
keyid:77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ef:a6:27:2e:65:8e:69:c3:6c:a1:1e:0d:cc:66:17:67:a8:
ea:37:e8:99:1c:10:e7:42:5c:04:89:a3:6a:b9:60:30:51:2c:
4b:ad:3a:43:5e:c3:c4:0c:d2:91:0b:84:52:0c:a7:b7:84:fe:
15:83:c2:92:24:78:c6:3f:a8:51:76:bb:24:89:81:1a:1e:9b:
fb:41:e0:64:68:1e:69:3c:08:f5:43:25:4c:d9:71:f6:55:95:
39:60:5c:88:f6:e6:d8:65:bd:ea:2f:9b:24:f1:9f:d9:60:cf:
8f:57:71:78:c5:95:ee:18:03:7b:cd:e8:45:61:5f:1b:fe:1f:
e8:09:14:bd:ce:32:ed:1e:05:0d:5d:4b:fa:39:05:71:1f:87:
96:52:64:00:34:71:da:8b:e8:5f:ef:6f:8a:f1:04:71:ac:79:
b6:c7:8c:fb:eb:22:bd:0a:64:a6:0a:17:b6:14:de:98:aa:1d:
83:3e:50:7c:f0:e3:4c:17:85:a4:85:0c:31:c0:4c:82:f8:35:
59:e0:ee:a6:d9:c0:d6:7d:c7:64:df:dc:47:e7:86:34:a6:9d:
c4:a0:ab:8f:99:e7:19:8d:e2:ac:8e:fd:98:bd:d9:f8:b2:78:
9c:e9:2c:df:8d:27:ff:30:73:6f:8f:cd:0a:5c:f5:a4:eb:c9:
1f:db:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:37 2025 by rpki-client