Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: qvYIUn8UwVoMm1DiJmKlwTBz3fvd+Zrsu1XcRZXKyvI=
Subject key identifier: 7E:8E:15:9F:D6:5C:BB:90:FE:28:E2:65:1F:C5:4E:51:73:25:21:3E
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 019A7225D0A831011E4130B676C90F6C0ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 0F19
Signing time: Tue 11 Nov 2025 09:01:12 +0000
Manifest this update: Tue 11 Nov 2025 09:01:12 +0000
Manifest next update: Wed 12 Nov 2025 09:01:12 +0000
Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: tOB1xl5fHua0pXVKGR0QoV7rUEPVFWoNsmjRMV1V9Q0=)
2: ffTvs6YF_hXAEglDFhneoTAWA7Y.roa (hash: McS9n7bcKq8O21qZ8IIp3IHODw/eCLO/50XCpVXjy20=)
3: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d0:a8:31:01:1e:41:30:b6:76:c9:0f:6c:0e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Nov 11 09:01:12 2025 GMT
Not After : Nov 12 09:01:12 2025 GMT
Subject: CN=7e8e159fd65cbb90fe28e2651fc54e517325213e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:f3:f4:c9:34:2f:9c:82:8c:4f:35:de:f7:
31:89:a2:32:a1:09:12:2d:e0:85:61:d1:1b:ea:97:
53:0b:22:23:e6:13:ba:42:78:61:3c:a1:54:36:48:
67:90:af:fc:ca:61:52:dc:69:70:ee:1a:b2:44:b5:
a2:82:42:70:37:a4:91:de:ab:5f:3a:73:8e:59:22:
31:b1:48:ec:a9:dc:d2:df:14:9e:ad:d5:24:4d:34:
2a:2a:40:7d:09:79:aa:8e:4d:e5:8f:a5:ab:ba:fc:
db:17:c1:52:17:a0:31:5b:5d:ac:74:59:30:19:a3:
e0:39:a9:4b:ba:30:e0:47:8b:c3:ac:f3:c1:dd:e5:
0a:53:df:db:b6:4a:b0:56:75:72:97:3c:7a:7c:8b:
c1:a4:22:c1:ad:82:b4:6d:1c:e9:87:ff:cf:07:ab:
5c:ec:8d:bc:c2:08:3e:0c:28:2d:f6:be:ac:c9:7b:
8b:8d:05:db:da:a2:70:63:ea:4f:55:6a:19:9e:ab:
b1:f0:22:e2:be:6c:28:4f:3d:70:f7:bc:17:c8:fa:
86:d0:6f:cc:38:5b:be:d5:97:0d:97:ea:7e:53:90:
ff:55:5d:4d:45:c8:e6:d4:d9:7c:a6:46:3d:4e:15:
68:8e:22:cd:db:d8:6b:c8:4b:6d:7c:91:2a:59:bd:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8E:15:9F:D6:5C:BB:90:FE:28:E2:65:1F:C5:4E:51:73:25:21:3E
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:39:73:3b:17:84:25:b4:d2:8c:78:18:a2:e1:0f:f9:13:26:
a4:02:58:c4:8c:a0:8c:1f:87:ad:9d:53:30:37:9d:e5:10:07:
86:53:06:b5:6a:ee:74:7e:c8:78:95:fe:21:20:7a:ff:14:a0:
4d:c5:dd:60:bd:61:22:b0:a5:c1:4b:fd:65:49:fb:e8:d4:41:
22:d2:85:1d:f0:1c:03:3f:f4:83:69:16:89:66:1c:b8:38:cd:
0a:59:85:43:f2:db:f4:6f:99:76:82:48:d7:d4:2d:b8:69:46:
b7:c5:d8:9f:b2:51:e8:a7:2c:6f:14:0e:41:23:8b:7a:1f:17:
58:57:ed:b8:26:36:45:00:39:ad:d3:83:5d:ba:81:d1:fd:85:
86:b0:5a:0c:00:4c:09:3c:b6:c3:cb:c9:df:88:67:41:c8:d9:
f3:d9:cf:3f:2a:84:01:aa:04:02:af:6c:24:c0:14:82:95:6f:
3e:0b:8a:c5:de:c2:35:6e:ff:73:81:16:55:bc:d3:30:be:f3:
9e:5f:d6:8e:aa:21:ca:aa:28:fd:ce:f5:97:02:08:ef:01:0d:
22:6b:fa:6e:40:b2:b9:6e:9a:c4:ce:5f:3e:2f:d2:43:f7:ff:
7d:c3:51:5f:1d:c5:4d:2f:c0:0d:e0:dd:bc:4b:52:54:56:5e:
ca:e1:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:59 2025 by rpki-client