Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: WR8QMvMBgfk2uKfb8BYiEcn6ZJnLeYnqtlmUInBYmoI=
Subject key identifier: 30:BD:81:36:86:E7:14:92:8A:5A:63:2A:86:C8:5E:F9:61:3E:24:A3
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 019A72261749AEAEAF6DF2C316A819F8CD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 13CD
Signing time: Tue 11 Nov 2025 09:01:30 +0000
Manifest this update: Tue 11 Nov 2025 09:01:30 +0000
Manifest next update: Wed 12 Nov 2025 09:01:30 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: 9wcQvn3DQME35k/OGBScCznMXrYoODzjaIlNHW62eyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:17:49:ae:ae:af:6d:f2:c3:16:a8:19:f8:cd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Nov 11 09:01:30 2025 GMT
Not After : Nov 12 09:01:30 2025 GMT
Subject: CN=30bd813686e714928a5a632a86c85ef9613e24a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:ce:21:07:79:bc:02:2d:e4:34:27:a3:9a:
63:11:91:9c:49:33:8c:07:cd:0c:ec:78:ed:03:d6:
8f:88:e8:77:c3:e1:ea:45:14:74:00:5d:11:f0:54:
ad:de:fa:02:3c:9d:bf:90:b1:1e:fc:5a:88:5c:b4:
33:59:68:02:a1:df:8b:38:2f:4e:49:fa:4a:42:a4:
31:4e:ed:0d:0a:2a:ce:c2:f8:c1:d3:a2:8a:76:d5:
1a:30:d2:92:1a:d4:d2:f1:c8:ad:51:b0:09:56:dd:
1c:9f:1b:62:4c:23:07:dd:cb:e1:fe:c8:fc:5e:b7:
4d:f7:10:89:38:db:d1:9e:c2:1f:72:92:d0:d1:5a:
95:03:da:6d:c3:0d:2e:c3:a5:b4:92:4a:4a:fc:21:
2e:ce:02:ba:d7:f4:4e:20:43:17:37:b6:89:fb:aa:
84:0b:4f:44:dc:06:4d:59:79:73:2e:d0:bf:38:ad:
8e:34:58:d9:60:da:75:65:1b:f1:3c:07:39:a5:96:
4a:e5:cd:05:68:8e:ee:02:40:76:c4:dc:f4:df:aa:
c9:40:92:ea:fc:c2:61:5f:73:35:a4:11:e3:a7:3e:
9a:b5:02:6a:83:62:6f:b9:73:7b:36:e6:99:fd:9d:
df:18:52:3d:50:68:10:0a:9c:ba:83:f9:83:93:84:
8e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BD:81:36:86:E7:14:92:8A:5A:63:2A:86:C8:5E:F9:61:3E:24:A3
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b9:58:10:4a:bd:5e:04:f2:63:1c:4c:53:e0:86:a1:5a:9c:
d1:ca:c9:7c:da:80:c3:62:7c:98:ef:93:b0:e4:e1:00:74:6b:
aa:0f:2a:7b:76:38:ad:e8:f0:c5:22:66:ed:ff:b6:07:15:b4:
f2:b3:28:61:27:eb:46:fe:42:83:a0:fa:2c:1a:55:28:2e:df:
fe:9e:ba:6d:00:c1:fe:1f:96:4a:a1:ae:3e:be:18:2d:ff:1e:
f2:21:6d:9c:be:33:7c:fe:53:f4:ea:73:4d:dc:7c:93:c0:58:
84:58:d6:3b:70:ef:93:5f:73:2a:ba:86:db:6c:4c:9d:e2:a2:
e7:9f:07:f9:32:71:ce:aa:f2:a0:bb:2f:19:f3:e2:4f:4a:e4:
8f:48:ca:1c:9e:13:3a:0d:54:61:50:57:6c:e4:9d:4b:84:22:
12:9c:49:2d:bb:3a:a9:65:5b:21:fc:5f:a6:61:73:7e:95:b1:
48:62:af:40:25:e1:ae:44:97:f6:0c:6f:74:0a:25:13:0f:dd:
07:10:af:33:76:b2:31:03:22:90:8f:54:d2:25:cb:1f:a2:29:
8e:19:e3:8b:ef:cc:e0:69:36:72:42:a8:f8:b0:b4:cd:12:e6:
b8:27:82:38:4e:d5:34:45:13:2a:94:42:74:a1:21:b5:f7:75:
c3:f1:a2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:21 2025 by rpki-client