Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
File: DW-RpSFkBJQiOeaW5lzy03IU5K8.mft (raw, json)
Hash identifier: MWCNMz3x9lmcpBLRxm/+zsKYH+EgS+7Qhef4/MbjWQo=
Subject key identifier: 12:A6:42:B5:26:65:1A:42:5C:E7:AD:38:07:77:40:A0:5D:6A:7A:29
Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
Certificate issuer: /CN=0d6f91a5216404942239e696e65cf2d37214e4af
Certificate serial: 019A71EECD7054CA3F8B021CC9A11E3F2FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
Manifest number: 0D09
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: DW-RpSFkBJQiOeaW5lzy03IU5K8.crl (hash: 4Wbgl3NmCHXZV+6o5AG+ZSl5DLyMJ5E6dYqDqJamT0Y=)
2: OH-wToKKpcLXZiKSEV9kWfR3r9E.roa (hash: +uO0A8wLAnAMRWqRTo4QJmUxBjNPBXZGwGTwpjPRQZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cd:70:54:ca:3f:8b:02:1c:c9:a1:1e:3f:2f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=12a642b526651a425ce7ad38077740a05d6a7a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:86:cc:21:1e:b2:a3:75:00:fc:a8:8a:1e:
50:cf:96:d2:c0:8d:5a:c7:f3:13:ef:eb:b0:aa:93:
1b:57:35:c4:ad:39:5c:23:22:ed:1f:84:74:7e:5c:
16:4b:7a:ba:5e:a1:aa:11:0a:2f:3a:18:df:65:b5:
44:16:3b:fa:10:91:e8:91:71:0a:18:65:e8:93:4a:
bf:e9:a9:08:58:a0:e2:c8:2b:fa:b0:80:f2:6d:4b:
88:45:5a:da:a8:49:15:c0:4a:c5:b1:2c:3e:12:d0:
bd:c1:03:89:46:07:a8:55:d0:04:0e:65:5d:f1:76:
64:85:75:28:d0:56:9d:5b:f1:84:5c:a1:ce:1f:4f:
d6:71:ac:dd:9f:79:73:1a:d2:38:2c:f4:e4:31:80:
eb:28:56:4b:92:6e:b0:57:e4:21:ce:77:e4:cc:13:
67:be:9c:d3:d4:1f:83:20:12:b9:36:21:15:71:b5:
86:e0:07:44:67:20:bd:a0:6c:1a:01:68:2e:a3:b1:
89:20:1a:c4:33:07:5a:d0:ee:06:f3:d0:3d:0b:c6:
3a:aa:32:c6:be:e3:07:d0:7d:9f:4b:e4:fd:05:67:
30:b4:4f:e5:2e:bd:67:9a:21:3a:71:4a:1c:83:86:
9e:0b:41:30:42:aa:04:df:b4:2c:34:fd:69:90:2b:
b4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:42:B5:26:65:1A:42:5C:E7:AD:38:07:77:40:A0:5D:6A:7A:29
X509v3 Authority Key Identifier:
keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:79:cc:c8:e9:a7:45:ff:ad:16:93:32:ce:0c:86:73:a6:f6:
12:37:89:b6:24:07:75:19:e0:55:a8:93:1e:db:53:97:42:3c:
a8:2d:fd:74:7c:48:0f:f7:99:49:29:33:2c:10:48:1a:7d:fc:
cd:21:1e:6f:89:f5:03:b1:5a:c3:95:b5:2b:17:5c:73:9a:3c:
1a:3e:9f:db:d7:5c:0b:de:24:bf:4a:50:04:dd:5f:19:97:77:
ba:80:46:cc:b9:a8:8e:71:25:4f:74:b4:b4:e8:fb:07:d5:98:
9a:9c:ab:b4:58:b8:ea:4f:57:88:ce:f5:28:18:a3:3a:83:49:
dd:3d:67:b9:a6:a6:fa:e6:ac:47:48:4a:e0:7d:a1:1f:44:fe:
3f:77:7a:ee:d4:a1:2a:ed:71:e0:df:06:ae:dc:a5:ce:43:14:
73:3a:54:8b:c6:db:e7:ed:3b:65:09:83:04:70:80:69:e6:1a:
7d:a9:58:ff:1c:41:6f:e5:21:b2:fe:f1:10:d1:7f:7f:87:f5:
a5:90:c3:18:5c:30:8d:14:8c:74:4a:2d:62:84:50:ce:d4:1f:
b7:d8:7b:8e:6c:7a:f2:3a:92:68:50:f5:a9:65:0f:42:af:e4:
27:80:7b:2d:73:aa:f3:7d:8d:da:44:d6:c2:ec:f4:55:47:64:
be:40:fd:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7s1wVMo/iwIcyaEePy/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmY5MWE1MjE2NDA0OTQyMjM5ZTY5NmU2NWNmMmQzNzIx
NGU0YWYwHhcNMjUxMTExMDgwMTA2WhcNMjUxMTEyMDgwMTA2WjAzMTEwLwYDVQQD
EygxMmE2NDJiNTI2NjUxYTQyNWNlN2FkMzgwNzc3NDBhMDVkNmE3YTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzuGzCEesqN1APyoih5Qz5bSwI1a
x/MT7+uwqpMbVzXErTlcIyLtH4R0flwWS3q6XqGqEQovOhjfZbVEFjv6EJHokXEK
GGXok0q/6akIWKDiyCv6sIDybUuIRVraqEkVwErFsSw+EtC9wQOJRgeoVdAEDmVd
8XZkhXUo0FadW/GEXKHOH0/Wcazdn3lzGtI4LPTkMYDrKFZLkm6wV+QhznfkzBNn
vpzT1B+DIBK5NiEVcbWG4AdEZyC9oGwaAWguo7GJIBrEMwda0O4G89A9C8Y6qjLG
vuMH0H2fS+T9BWcwtE/lLr1nmiE6cUocg4aeC0EwQqoE37QsNP1pkCu0PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKmQrUmZRpCXOetOAd3QKBdanopMB8GA1UdIwQY
MBaAFA1vkaUhZASUIjnmluZc8tNyFOSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jMTI2OTUtODllMS00NDgyLTk0ZTUt
YzQ3ZWFiMTdlOTNhLzEvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jMTI2OTUtODllMS00NDgyLTk0ZTUtYzQ3ZWFiMTdlOTNh
LzEvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHnMyOmn
Rf+tFpMyzgyGc6b2EjeJtiQHdRngVaiTHttTl0I8qC39dHxID/eZSSkzLBBIGn38
zSEeb4n1A7Faw5W1Kxdcc5o8Gj6f29dcC94kv0pQBN1fGZd3uoBGzLmojnElT3S0
tOj7B9WYmpyrtFi46k9XiM71KBijOoNJ3T1nuaam+uasR0hK4H2hH0T+P3d67tSh
Ku1x4N8GrtylzkMUczpUi8bb5+07ZQmDBHCAaeYafalY/xxBb+Uhsv7xENF/f4f1
pZDDGFwwjRSMdEotYoRQztQft9h7jmx68jqSaFD1qWUPQq/kJ4B7LXOq832N2kTW
wuz0VUdkvkD91g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:52 2025 by rpki-client