Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
File: Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json)
Hash identifier: 2JD5V7BSu+NXYkCHtCt8V85gEf7sXtGtAzyU1WQfH9Q=
Subject key identifier: 5D:13:22:95:F7:76:17:65:F5:21:3E:FA:38:A3:F6:1A:39:B8:85:76
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Certificate issuer: /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial: 019A5640566ECC6801F658C902AB1C1CE7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
Manifest number: 0BA9
Signing time: Wed 05 Nov 2025 23:00:48 +0000
Manifest this update: Wed 05 Nov 2025 23:00:48 +0000
Manifest next update: Thu 06 Nov 2025 23:00:48 +0000
Files and hashes: 1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: JQGZx9uj36xBMJWmVsG85KM4m2ApXxN3SaUerIGTRr0=)
2: NY6GkITWKlUtVSGSEXVFnWklUFA.roa (hash: bc90pfjZ3z6bn5Sd1cSbU6mDm4LudyLIA08FEeaNBvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:40:56:6e:cc:68:01:f6:58:c9:02:ab:1c:1c:e7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Validity
Not Before: Nov 5 23:00:48 2025 GMT
Not After : Nov 6 23:00:48 2025 GMT
Subject: CN=5d132295f7761765f5213efa38a3f61a39b88576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:77:8d:28:4f:e3:21:87:0f:46:2a:18:74:36:
fa:49:b8:c5:ba:d3:a1:4d:bf:60:3f:0f:95:8b:79:
96:e0:53:35:2b:4e:2b:d2:7e:8a:04:a6:92:83:fb:
09:d1:61:ba:4a:8a:17:33:9d:97:6e:8c:58:0c:61:
bc:b7:3d:88:ab:51:07:ec:1e:9d:c3:97:96:f5:ff:
48:9e:00:cb:05:b3:27:99:19:a4:e0:b3:93:69:22:
4f:89:12:ba:da:a6:6f:15:31:54:55:4a:21:5b:51:
a2:68:26:ad:86:a2:b8:d2:e1:49:be:09:bd:cd:34:
31:7d:ff:2e:f6:b9:8b:6b:eb:40:93:c2:5d:cc:f9:
d6:8b:6b:c0:94:0d:5f:70:c6:bd:25:12:0e:f2:e6:
2e:a3:a9:47:d8:4e:56:5d:5e:1f:e0:5e:d1:56:96:
1b:40:c6:f2:da:9f:b9:2e:04:16:ae:3a:cb:d6:a7:
23:95:60:14:9b:9b:12:f7:c9:77:af:83:00:82:b8:
01:b3:97:ab:e6:ad:b9:e1:af:76:55:80:2c:cc:7d:
b6:94:bd:21:be:39:29:a5:35:64:2d:92:b2:3e:a5:
30:7c:e0:fd:2b:76:49:50:7f:2d:e8:a9:25:8b:ad:
24:bc:b2:1a:0c:42:13:08:3b:24:27:58:6a:7f:25:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:13:22:95:F7:76:17:65:F5:21:3E:FA:38:A3:F6:1A:39:B8:85:76
X509v3 Authority Key Identifier:
keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:31:b9:0b:5d:a4:4e:9f:2c:69:c4:d2:6e:ca:52:94:aa:57:
c7:02:7a:f0:78:c6:c4:54:7e:31:37:36:c2:d8:71:0c:5b:03:
a8:eb:a7:4c:7e:9e:c8:bb:c4:90:cf:79:78:a4:48:b9:cb:c6:
f0:1f:ac:57:f2:a4:b5:ef:07:e9:0c:20:0f:49:bd:76:37:06:
22:ba:b7:b3:02:7c:3d:3e:44:71:1e:00:49:73:a5:28:df:cf:
86:a2:fe:3b:17:21:5b:a6:62:90:4c:59:23:34:85:47:a3:bf:
b2:0a:75:e6:aa:73:51:89:af:46:f3:a0:14:83:8a:5a:c6:01:
aa:28:89:95:6d:58:f5:84:98:b4:3b:ca:37:1e:62:d9:47:fe:
7e:89:72:5d:12:32:fa:ab:1b:78:4f:5d:59:a1:24:2a:c4:e4:
ba:17:c2:46:a9:93:79:8c:e5:ee:bc:49:e5:78:43:a2:4c:b7:
57:78:f2:e9:8e:9d:a8:cd:e9:9c:7b:35:ba:b9:d4:78:0c:ca:
da:8c:d6:49:88:c9:86:0e:53:79:51:38:b3:fb:0a:19:e1:f0:
fb:7b:2f:b4:7f:11:b5:bc:54:0f:87:1d:85:dd:84:d5:c6:66:
d9:f0:c5:2e:4e:21:4e:a9:76:9d:57:66:50:98:d8:17:ab:3d:
67:ef:d8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:36:42 2025 by rpki-client