Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
File: dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json)
Hash identifier: D+uaZzcPqEjl6dFdG7G5vDvewikJ7yISXYGYU3q/eEM=
Subject key identifier: 85:B8:F7:46:0B:2F:3C:2E:CF:4D:C3:95:1F:DC:1E:4A:D4:FC:CD:C8
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Certificate issuer: /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial: 019A714A2AF186F163666A6629F1C8550A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
Manifest number: 0A7A
Signing time: Tue 11 Nov 2025 05:01:17 +0000
Manifest this update: Tue 11 Nov 2025 05:01:17 +0000
Manifest next update: Wed 12 Nov 2025 05:01:17 +0000
Files and hashes: 1: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: lyNo7dhSjWunLN1Z/xcB62ejHLT5oLhSzvLWruXeNjk=)
2: jgYJrOBGpxmFCRX1q-MlycW-osQ.roa (hash: zjiQPJ4SZc/bB7c5P+iOwvUmdfPHzDJrUsMFIzmnB8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2a:f1:86:f1:63:66:6a:66:29:f1:c8:55:0a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Validity
Not Before: Nov 11 05:01:17 2025 GMT
Not After : Nov 12 05:01:17 2025 GMT
Subject: CN=85b8f7460b2f3c2ecf4dc3951fdc1e4ad4fccdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:a2:90:16:86:94:02:22:77:6e:c0:fd:0f:
86:ea:42:6c:16:7a:72:ba:79:30:98:b4:d7:e4:79:
cc:61:74:0f:2f:53:be:6a:3b:da:d7:37:05:a0:83:
e7:94:63:f0:26:4a:ed:61:4e:c7:7d:e1:cf:84:72:
a7:ef:7e:00:8c:66:b0:39:ea:49:9a:2f:78:bc:3d:
0c:c3:a2:02:e1:eb:ee:cb:1c:d9:08:e6:f7:69:e2:
06:ab:1b:ec:e0:d8:44:cd:73:48:b4:e1:11:58:81:
74:76:a0:c4:29:3b:6e:d4:41:ae:e6:68:cd:6e:dc:
41:01:ec:99:8b:d9:e4:9c:77:5e:b5:1f:fd:8e:c6:
4c:6c:20:9f:f3:d2:4f:29:50:51:ca:20:7e:f1:62:
cb:36:ca:60:cc:72:ad:3a:30:7e:60:3f:23:cc:44:
2f:22:16:a6:42:e4:38:a0:92:c2:6c:ff:9d:24:0a:
02:46:40:37:94:62:ed:06:de:a9:ed:ae:d5:32:f5:
28:18:25:ef:c7:2a:af:5a:c0:59:92:89:10:1f:2b:
66:f9:23:a9:e0:64:e8:65:8a:e5:77:d9:dd:8e:75:
a8:8f:fe:1d:86:0d:ed:03:62:ca:75:7c:2c:ae:6a:
68:b5:a2:c1:31:1c:6e:d7:4b:8a:2f:f8:d4:40:9b:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B8:F7:46:0B:2F:3C:2E:CF:4D:C3:95:1F:DC:1E:4A:D4:FC:CD:C8
X509v3 Authority Key Identifier:
keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fc:f8:d8:d2:ee:e1:fd:bb:3d:a8:cd:be:6b:08:c4:fc:80:
94:f5:68:37:77:fd:33:a3:ef:da:91:37:80:70:a4:7f:7d:81:
1c:fa:43:95:60:a7:57:55:36:99:93:7c:dc:99:2a:55:1b:f3:
c8:e9:32:c0:8a:58:74:b8:db:e1:07:8a:f6:a2:aa:c4:5a:c3:
7d:e3:2c:a4:6a:a6:c5:26:32:d9:e4:1b:35:47:e8:b2:fd:47:
51:94:f1:06:f5:a7:93:0b:9c:26:1d:e1:a6:c6:21:24:72:d4:
80:61:f9:bc:4d:c9:8b:ca:3c:f3:ad:85:ab:cf:12:38:a1:55:
e0:bd:45:33:17:b1:b5:c5:21:bd:bb:99:5f:d5:c5:91:77:59:
6a:dd:48:81:cb:26:f4:3f:b4:7d:58:e8:cc:48:7c:b0:0e:de:
f4:ff:ef:b7:d2:dc:11:c0:85:c8:ea:b4:fc:db:8e:26:9a:51:
9c:07:d1:2a:de:1a:89:60:8c:1d:82:47:02:01:e2:07:8a:ab:
20:3d:3a:51:36:7e:b1:2e:3c:3c:80:2e:ab:6d:ae:a4:d3:fb:
d2:e2:4c:1a:2e:e4:ae:ab:2b:bb:27:ce:d0:0a:8b:38:b3:a2:
55:6f:44:36:12:5c:e5:0e:31:7d:c1:8e:04:33:73:89:0b:c8:
58:39:09:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:07 2025 by rpki-client