Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: GH9SekRx65oLMJo8Re/PtJBGRVMMNpm6RTqAvERLBmU=
Subject key identifier: B8:55:51:42:F0:9E:D1:76:B1:6F:83:69:8A:55:F3:11:40:B0:8E:09
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 01992255397950C90E0F410A78EDCEAB216B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 0366
Signing time: Sun 07 Sep 2025 04:00:34 +0000
Manifest this update: Sun 07 Sep 2025 04:00:34 +0000
Manifest next update: Mon 08 Sep 2025 04:00:34 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: HJoLoYnm+6iD1IgMAIAErMTaAEUdRnj/keZTbT57PJM=)
2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:39:79:50:c9:0e:0f:41:0a:78:ed:ce:ab:21:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: Sep 7 04:00:34 2025 GMT
Not After : Sep 8 04:00:34 2025 GMT
Subject: CN=b8555142f09ed176b16f83698a55f31140b08e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:50:df:bb:6c:e1:1d:f5:2d:2d:53:fe:85:90:
c9:b5:85:ec:d4:cc:ab:6e:e6:31:cc:e7:dd:e7:52:
73:45:3c:d2:11:04:0f:f2:d5:55:05:ad:fb:90:9a:
df:44:a9:27:a9:40:58:c4:bb:c5:c4:00:00:b3:d2:
36:b2:1f:13:96:ac:d5:6d:c8:4a:15:52:55:7f:87:
5c:18:fb:34:e7:03:a0:a3:04:9d:36:0c:a8:44:1f:
fe:9b:8e:8e:6a:f7:26:30:c3:f1:dd:03:b4:f5:ee:
e2:1c:31:3d:a6:d1:d7:5d:c0:0a:d0:b9:f8:2d:65:
d6:19:6c:b5:a4:57:f2:43:82:7e:cb:f5:18:4b:c6:
46:b6:a9:d2:bf:2a:fa:b1:2c:56:ff:2e:5e:4d:bd:
e8:51:fa:19:5a:75:a9:59:dd:14:21:5f:10:51:da:
41:16:2d:71:65:1b:ae:6d:c8:71:3d:72:e2:5e:d8:
04:f9:3c:13:a3:f9:f0:4d:3b:97:90:ad:8e:4c:cb:
8e:83:3c:2b:0f:4c:97:5f:ab:49:70:ba:28:6b:58:
65:ae:64:ec:64:b5:29:85:cc:02:11:3a:64:1b:de:
5e:c3:83:63:53:c6:3b:02:56:9e:c6:76:4a:a9:7f:
dd:4b:65:af:6f:e1:5a:eb:a8:c9:ac:bb:db:87:4c:
19:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:55:51:42:F0:9E:D1:76:B1:6F:83:69:8A:55:F3:11:40:B0:8E:09
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:82:d0:3c:6b:d4:b0:05:bc:ee:3b:5b:07:c0:77:dc:4c:b1:
03:0a:1b:f2:8c:da:d4:79:53:6d:02:29:34:a5:a9:77:a2:6d:
1b:52:5e:c2:09:08:04:8c:63:46:c2:6e:ad:02:08:6a:26:35:
5c:3b:a4:03:d5:55:75:1f:46:0d:c2:d8:b3:06:ce:e1:85:0e:
c2:19:94:b8:45:e9:f7:92:b3:6b:86:f1:63:83:88:72:e4:71:
45:ac:44:a2:ec:a2:7b:28:59:58:d0:e7:27:73:01:de:d5:1f:
68:05:60:7c:a6:91:33:78:81:3d:1d:bf:2b:1b:48:ab:6c:1c:
d2:a1:2e:32:ad:8b:81:02:3f:28:89:c5:5c:40:34:b0:80:dc:
32:eb:94:f0:cc:5f:d8:21:a8:86:d9:40:9f:29:e7:22:49:95:
3a:c8:fa:d7:18:dd:cc:a6:72:23:1e:4a:4c:bd:69:c7:a6:e0:
f6:25:cf:19:2a:aa:39:10:05:66:7e:f2:c8:75:06:a3:bf:1c:
1f:d9:eb:f1:e0:66:56:8e:b0:f6:3d:c1:74:75:15:f4:e6:e7:
d8:ab:56:6d:68:60:f9:65:a2:72:d4:36:7b:22:02:2f:06:ee:
13:c3:7d:48:aa:aa:27:56:5b:e5:fc:3d:ce:41:4f:74:21:cd:
06:0a:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:38 2025 by rpki-client