Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier: 0VEwmy4SH5MrGJVmSMh/Viz8eK+0qvxv4KRbaKM23Y0=
Subject key identifier: 58:49:4D:9E:E2:2D:F1:9E:4E:2E:41:A9:A8:4A:95:E2:1E:1C:51:4A
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial: 0199228C2AA108166F6DDA6FFFE1295BE223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number: 1151
Signing time: Sun 07 Sep 2025 05:00:34 +0000
Manifest this update: Sun 07 Sep 2025 05:00:34 +0000
Manifest next update: Mon 08 Sep 2025 05:00:34 +0000
Files and hashes: 1: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: NBVBwAWnGrOHXg2Cr+Wk2bkyJTfZ3STr/IuodAkMnqE=)
2: xzA5d-E1vgeb4mwlvmzNBazR01w.roa (hash: ajfP28ApDq4Q5y/sbVJlhsT7w2HrFwDNTtJP+3l1w9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:2a:a1:08:16:6f:6d:da:6f:ff:e1:29:5b:e2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Validity
Not Before: Sep 7 05:00:34 2025 GMT
Not After : Sep 8 05:00:34 2025 GMT
Subject: CN=58494d9ee22df19e4e2e41a9a84a95e21e1c514a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:70:09:80:6d:5b:5b:57:ca:52:6e:db:ea:
93:6f:c6:c7:b6:24:cf:c0:a7:04:84:06:bc:15:c1:
de:76:87:4f:5d:e5:50:2a:d0:10:5c:6f:87:c2:df:
1b:2e:4d:46:90:6f:b7:68:a2:de:b9:0f:45:a7:96:
e0:dd:ed:c0:74:a3:00:27:d3:06:ac:06:cf:22:1b:
20:e9:48:d2:fd:bd:a0:4b:b1:ed:91:39:0f:cb:1f:
ab:16:a1:38:c8:b1:97:63:9e:3b:4c:2e:e8:35:80:
9f:26:5a:08:8a:69:09:fa:43:b9:58:d7:b4:e5:61:
0c:47:30:f4:37:28:f5:af:75:1c:10:85:9f:71:a6:
f0:ad:ec:47:57:ce:20:c2:1d:c6:5f:81:5f:40:ec:
06:8d:aa:88:8c:ee:b0:e4:03:d1:c0:f2:67:11:f7:
c8:5a:fe:b3:f8:d6:b4:40:4f:9b:b3:d3:5f:85:f5:
93:33:1a:94:4c:7f:c9:5d:ec:06:0d:e2:e7:05:76:
24:16:a8:0e:78:ff:e3:e2:81:df:bf:66:12:8f:59:
35:3b:32:0c:f6:54:9a:24:32:24:dd:74:01:8d:81:
af:df:c5:14:44:e9:7b:9e:cd:fb:43:a3:24:1c:51:
47:e3:22:81:2e:4e:1c:26:54:25:2d:97:07:15:ff:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:49:4D:9E:E2:2D:F1:9E:4E:2E:41:A9:A8:4A:95:E2:1E:1C:51:4A
X509v3 Authority Key Identifier:
keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:37:7f:76:a2:82:a7:c0:a8:e2:fe:46:22:2c:16:43:80:ee:
45:06:5b:ae:a1:f9:0c:ad:75:b2:27:45:2c:cc:0c:78:e0:85:
e2:76:cb:b0:90:78:2b:2d:e8:70:33:83:7d:cc:9a:d1:8c:43:
e0:5c:92:62:c0:60:59:1f:05:d4:69:1a:eb:60:35:8a:15:39:
ef:e5:7e:56:34:9d:3f:8b:51:af:fb:29:8c:1b:fa:f1:55:43:
08:11:47:21:84:f5:c4:b9:df:aa:fe:f5:80:d8:61:cc:1b:f0:
79:1d:15:22:63:ef:ed:7b:87:43:f1:65:62:98:7d:03:e7:d9:
54:b8:97:ba:fa:ea:b6:e6:96:ce:f6:ae:a0:b7:28:6a:f6:1d:
97:64:5e:7c:e4:f7:cf:a8:14:1f:e2:a6:ff:19:5b:38:da:cc:
c0:3d:e3:3b:07:67:3b:b2:16:ef:a5:a2:1a:91:0a:e3:e5:06:
32:2d:83:bb:e1:d9:e1:ef:59:c4:6b:35:3c:64:91:bc:08:6f:
43:ca:10:fc:83:bb:82:76:11:91:15:5f:5c:9b:2c:d0:4b:de:
50:27:fe:6d:4c:13:4f:45:6b:34:00:7a:b0:7c:97:0b:39:a8:
20:d8:92:bc:a7:c7:fb:6c:84:cc:c2:51:7a:2d:96:7e:75:12:
f1:d3:73:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:48 2025 by rpki-client