Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: i1zWN+5ZVB50OULS16nGYgWx1PeCnt/GMBDt8mEkpyE=
Subject key identifier: FD:48:CB:13:C3:2A:C1:EC:AF:6D:33:CF:80:51:1D:F5:30:30:F3:1C
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 0199221E44752017489F512D0D3D82A12D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 131F
Signing time: Sun 07 Sep 2025 03:00:32 +0000
Manifest this update: Sun 07 Sep 2025 03:00:32 +0000
Manifest next update: Mon 08 Sep 2025 03:00:32 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: Uw9S3r3uVrbdmxIqi9oHNb8vJPxBaMFLzwuyV2wiUyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:44:75:20:17:48:9f:51:2d:0d:3d:82:a1:2d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Sep 7 03:00:32 2025 GMT
Not After : Sep 8 03:00:32 2025 GMT
Subject: CN=fd48cb13c32ac1ecaf6d33cf80511df53030f31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:7a:f0:b3:9d:8e:cd:db:63:68:1a:5d:65:
d4:f0:9b:cb:90:f9:32:62:32:ca:0f:15:b2:e2:20:
9a:1a:95:4c:86:fc:f2:2c:ec:c3:12:e4:d6:9e:8f:
87:82:32:fe:30:91:4f:9a:14:2a:33:3f:40:ea:ed:
e0:c6:e9:69:b4:4a:9e:68:db:55:83:14:f9:49:93:
1d:1f:e6:81:ba:ce:0d:a1:aa:b2:c8:18:89:22:93:
e0:d3:ea:96:87:bd:55:e4:29:b4:8c:ce:8e:22:4a:
24:78:d7:80:db:d8:9c:5b:b8:37:2d:f6:db:b8:34:
c0:9e:34:94:3a:53:6b:dd:cd:a0:dd:75:bd:42:29:
c9:87:c0:74:f5:7b:cc:0f:7d:3b:a3:e3:fc:2b:cd:
4c:0b:0c:25:c3:b7:03:63:7a:32:2b:bd:ed:c9:f4:
f3:d9:69:c4:1b:2d:48:ec:d0:0d:9a:f3:20:46:a6:
e7:39:46:08:0b:95:25:11:0e:27:67:4e:f6:78:9b:
35:8b:d8:f7:cf:d9:95:9e:7d:0e:07:e9:6e:b7:47:
93:92:dc:25:f2:52:53:ca:43:ac:32:9c:a0:9f:46:
60:8d:06:b5:ad:64:0d:f9:7c:14:6d:70:60:f5:37:
e5:e2:5b:2e:17:9b:36:04:3b:2d:89:db:ba:04:a0:
d7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:48:CB:13:C3:2A:C1:EC:AF:6D:33:CF:80:51:1D:F5:30:30:F3:1C
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7b:7c:b0:25:c4:45:c7:39:81:3e:41:de:5e:e6:8b:5d:d1:
75:2e:5f:8a:e4:20:da:59:92:c5:d4:7c:38:a2:42:6b:b5:d1:
7d:4a:c1:9c:25:06:4b:a3:19:f2:0f:dd:06:b4:0c:3a:a3:54:
6a:6c:e0:cb:02:2f:ca:ec:09:50:b0:92:10:d4:10:ab:67:7b:
df:c9:8c:0b:64:d5:a6:ee:72:25:2f:fd:8d:e2:1b:83:1c:87:
ce:50:53:63:05:fe:be:99:da:ed:98:a2:e9:74:5e:a4:ca:e2:
96:13:35:da:fa:67:34:1c:23:e6:d1:48:f3:dc:40:b1:b7:b4:
91:66:61:19:25:dd:cf:5f:16:b6:92:ec:23:63:15:38:43:60:
e3:7b:47:0e:34:82:35:5b:ad:09:cd:5f:1f:f1:c0:09:b4:9e:
65:74:8f:ac:a5:30:29:f3:3d:13:35:9f:62:12:4a:5b:a4:5d:
f5:ea:30:ea:21:08:70:f7:9a:a4:62:cb:08:18:44:1d:72:fe:
6a:2c:38:d4:10:7e:55:f2:d1:3c:1c:9d:09:c3:d0:d0:fd:b7:
53:fa:69:72:65:7f:7e:8c:89:30:47:bd:b8:e7:60:89:f4:88:
09:77:0e:c9:10:d7:be:57:6c:e0:f2:33:1a:09:00:0f:0f:35:
6c:46:6e:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHkR1IBdIn1EtDT2CoS1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDgwODlhYWE3YzI4MzY1NGJjZGE1MGE5MzM0NjRlNzEy
NzkxYjAwHhcNMjUwOTA3MDMwMDMyWhcNMjUwOTA4MDMwMDMyWjAzMTEwLwYDVQQD
EyhmZDQ4Y2IxM2MzMmFjMWVjYWY2ZDMzY2Y4MDUxMWRmNTMwMzBmMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rB68LOdjs3bY2gaXWXU8JvLkPky
YjLKDxWy4iCaGpVMhvzyLOzDEuTWno+HgjL+MJFPmhQqMz9A6u3gxulptEqeaNtV
gxT5SZMdH+aBus4NoaqyyBiJIpPg0+qWh71V5Cm0jM6OIkokeNeA29icW7g3Lfbb
uDTAnjSUOlNr3c2g3XW9QinJh8B09XvMD307o+P8K81MCwwlw7cDY3oyK73tyfTz
2WnEGy1I7NANmvMgRqbnOUYIC5UlEQ4nZ072eJs1i9j3z9mVnn0OB+lut0eTktwl
8lJTykOsMpygn0ZgjQa1rWQN+XwUbXBg9Tfl4lsuF5s2BDstidu6BKDXyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1IyxPDKsHsr20zz4BRHfUwMPMcMB8GA1UdIwQY
MBaAFA8ICJqqfCg2VLzaUKkzRk5xJ5GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgt
NjMwNDIzMmJlYzNjLzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgtNjMwNDIzMmJlYzNj
LzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXt8sCXE
Rcc5gT5B3l7mi13RdS5fiuQg2lmSxdR8OKJCa7XRfUrBnCUGS6MZ8g/dBrQMOqNU
amzgywIvyuwJULCSENQQq2d738mMC2TVpu5yJS/9jeIbgxyHzlBTYwX+vpna7Zii
6XRepMrilhM12vpnNBwj5tFI89xAsbe0kWZhGSXdz18WtpLsI2MVOENg43tHDjSC
NVutCc1fH/HACbSeZXSPrKUwKfM9EzWfYhJKW6Rd9eow6iEIcPeapGLLCBhEHXL+
aiw41BB+VfLRPBydCcPQ0P23U/ppcmV/foyJMEe9uOdgifSICXcOyRDXvlds4PIz
GgkADw81bEZuCA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:23 2025 by rpki-client