Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: P/BNEvQENwcC2C82vGciIS5G1dQysVPgssf19SJGkMc=
Subject key identifier: F4:68:7F:6F:EE:92:08:E0:D3:E6:A3:60:D2:66:45:D8:E9:E7:EE:E4
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 01991E78A9F338AE5BE26BE7D6DEBCA52853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 0E69
Signing time: Sat 06 Sep 2025 10:00:48 +0000
Manifest this update: Sat 06 Sep 2025 10:00:48 +0000
Manifest next update: Sun 07 Sep 2025 10:00:48 +0000
Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: dUO3pMBFaVR5c0E87BD3zEih3UvXWJgJmIIFcZ1Orf4=)
2: ffTvs6YF_hXAEglDFhneoTAWA7Y.roa (hash: McS9n7bcKq8O21qZ8IIp3IHODw/eCLO/50XCpVXjy20=)
3: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:78:a9:f3:38:ae:5b:e2:6b:e7:d6:de:bc:a5:28:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Sep 6 10:00:48 2025 GMT
Not After : Sep 7 10:00:48 2025 GMT
Subject: CN=f4687f6fee9208e0d3e6a360d26645d8e9e7eee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:0f:6e:b5:bb:74:91:44:3a:ce:af:ea:4a:
01:5d:9c:4b:be:7c:45:9b:72:f5:f0:84:e5:ba:fc:
79:67:74:03:ce:06:3f:b7:51:0b:c7:42:85:34:c6:
98:81:ff:c8:5c:f0:f3:36:ea:d6:1b:90:49:57:a1:
e5:8e:02:45:6d:03:14:5b:65:fd:2d:1c:31:fe:bc:
64:64:19:81:93:d3:d7:54:a0:21:82:51:de:5d:fb:
22:1c:10:19:44:eb:10:ab:26:df:68:19:cf:31:2c:
06:d2:21:d5:4a:ff:e5:af:17:7d:93:e7:54:b1:95:
17:74:14:ea:fb:2d:3c:20:24:f4:10:49:26:78:71:
64:0a:7a:87:a7:27:01:cd:2e:38:96:46:ad:08:eb:
17:0e:67:30:d5:31:61:51:df:a5:32:17:e3:05:21:
ab:b0:6a:8d:a0:de:21:77:4d:23:f4:36:e5:ae:b3:
a3:b5:48:ed:67:1b:35:1d:01:13:64:99:a9:94:fe:
94:58:75:79:32:dd:5a:ea:c5:97:9e:00:49:99:61:
f6:71:2d:0b:04:d8:92:f3:e2:ee:25:50:c5:cd:80:
59:6b:f9:5d:ae:07:fe:18:fc:43:60:a5:04:8e:4e:
f7:d5:89:4b:7e:35:64:42:d0:ec:9d:b2:88:e1:ab:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:68:7F:6F:EE:92:08:E0:D3:E6:A3:60:D2:66:45:D8:E9:E7:EE:E4
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:83:f1:5b:fb:ef:ba:18:f5:58:34:d4:91:45:3e:5c:00:cd:
6b:d8:95:c0:50:51:61:82:57:8b:7e:9b:6f:02:17:7b:d4:66:
c1:ad:ce:17:8a:9d:57:35:d3:62:92:ef:b7:57:db:76:41:63:
9a:30:3e:73:b5:98:e4:6f:7f:74:2b:d1:72:dc:61:d7:0a:71:
a9:9e:9f:91:58:fd:13:da:e6:7d:34:7d:3b:6e:90:1a:5b:33:
0a:e3:db:85:75:c3:45:34:02:94:9c:b4:db:39:a8:24:e7:53:
73:14:26:57:9b:f0:0d:57:9c:79:58:90:42:55:bf:93:5f:07:
38:1b:28:64:24:f9:eb:8b:d7:d3:21:da:43:af:2e:50:00:e9:
5f:0a:f4:ea:1c:f0:f4:84:73:65:70:e9:66:18:ec:a2:ea:f6:
0f:f5:86:74:ae:45:71:4d:3a:1e:61:ac:7e:4a:4f:94:a4:b3:
95:de:76:57:6b:99:40:d2:05:2c:05:d8:0b:6e:03:00:27:ee:
fd:b9:c5:f9:0a:f5:f2:e0:60:85:10:40:f4:63:2f:eb:42:c7:
48:ac:79:29:69:29:ec:a5:af:bd:ca:bf:1e:3a:b4:51:4b:33:
63:5f:de:e7:49:c4:80:8f:4a:96:c8:a2:b4:7e:d8:15:1d:16:
58:35:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:25:09 2025 by rpki-client