Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
File: Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json)
Hash identifier: ATctte+3R1oEdg0pi4Us1tO2M6LefnBtqfrpdKm8lZY=
Subject key identifier: A4:70:FC:23:01:14:52:EB:6B:DA:E6:CD:8F:91:10:8B:43:4F:BC:F9
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Certificate issuer: /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial: 019923313D1A2911237BAD9D583C173E0585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
Manifest number: 0B0A
Signing time: Sun 07 Sep 2025 08:00:53 +0000
Manifest this update: Sun 07 Sep 2025 08:00:53 +0000
Manifest next update: Mon 08 Sep 2025 08:00:53 +0000
Files and hashes: 1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: 1BF9ULP8el7UkigwYT9A/gF95iZIDE/sPSqW+RhQ/K8=)
2: NY6GkITWKlUtVSGSEXVFnWklUFA.roa (hash: bc90pfjZ3z6bn5Sd1cSbU6mDm4LudyLIA08FEeaNBvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:3d:1a:29:11:23:7b:ad:9d:58:3c:17:3e:05:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Validity
Not Before: Sep 7 08:00:53 2025 GMT
Not After : Sep 8 08:00:53 2025 GMT
Subject: CN=a470fc23011452eb6bdae6cd8f91108b434fbcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:e9:09:c5:9a:43:95:f5:10:9f:41:11:53:
f6:38:64:35:4d:72:58:0c:9e:ab:e2:9e:59:eb:05:
e1:5b:07:5a:34:17:54:96:d5:7b:6b:9d:46:63:47:
56:fc:c8:95:b0:9e:28:54:65:7a:70:c4:92:55:26:
3e:2d:0f:d6:14:d2:3e:ee:6a:df:94:8f:29:d7:37:
95:43:94:9f:a8:4d:fe:54:d4:4a:43:98:28:ed:4a:
9c:84:5d:fd:f1:fb:e0:36:a7:66:cf:03:92:27:85:
75:fd:cd:78:88:4f:df:bb:e8:6c:64:f2:bb:09:9a:
90:a9:e5:ac:70:f3:11:43:12:52:20:26:88:72:ab:
4d:e4:c9:1a:8b:fd:3c:91:28:05:07:9d:78:67:21:
d3:e9:63:95:af:64:4d:78:06:f2:41:7e:45:fc:95:
43:dc:00:2c:46:c3:07:c0:f8:de:20:74:0b:ca:6e:
53:7d:ae:2d:98:3e:6f:c9:95:f2:31:dc:81:85:ad:
b5:fd:4b:5e:ec:26:50:fa:fa:e6:4a:3c:aa:ec:61:
ce:f1:ad:77:17:25:53:4c:67:5a:31:ff:c8:14:51:
0f:9a:4a:8d:3a:c4:e3:ec:e9:f9:05:b9:76:15:07:
de:58:7d:b1:ea:f9:91:5c:9c:0e:ff:ee:05:a8:73:
81:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:70:FC:23:01:14:52:EB:6B:DA:E6:CD:8F:91:10:8B:43:4F:BC:F9
X509v3 Authority Key Identifier:
keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:64:ae:0a:65:70:ee:83:3c:5f:09:ef:a9:96:2b:b8:0a:35:
b0:63:2f:cd:5f:43:73:49:4d:23:04:45:cf:49:38:ef:37:e5:
77:5a:64:5c:dd:73:61:17:3e:95:64:77:d1:89:40:08:9c:eb:
60:43:f6:c7:74:40:a8:8b:ff:6c:3a:e3:f1:b0:76:25:8a:c5:
ea:72:c8:4a:2e:5c:8f:42:fb:61:d8:25:6e:f1:f6:f2:34:13:
d5:1c:d9:1e:04:3b:26:ab:26:18:53:25:9e:42:d9:46:8e:a6:
2d:a0:4c:ea:85:f4:67:93:13:ee:56:0c:a4:fd:85:6b:fc:4b:
cd:ce:59:59:ae:1b:06:6a:a2:79:19:57:d1:75:39:e3:80:1d:
6c:17:8b:a2:7c:5e:fa:0e:2c:b7:9b:34:b3:c1:a9:ba:34:90:
a6:cb:7f:32:85:36:f4:4c:68:00:91:4a:65:79:a9:17:a9:fb:
de:b5:b6:b6:34:0b:d8:6f:f3:2c:a5:f0:36:50:cf:6a:1c:7c:
45:bc:a5:4b:45:a8:45:3c:51:9a:10:b3:1b:4c:06:5f:5c:d2:
6e:7f:a7:98:50:8c:d4:7f:03:ad:ff:61:82:d1:e4:4e:b3:d1:
70:9d:42:8a:d9:81:54:0c:e2:84:c3:5e:b8:b8:de:30:0c:93:
05:0b:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:31 2025 by rpki-client