Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
File: DWutPz3QrFVvP3qA0cabn9lk3Ww.mft (raw, json)
Hash identifier: 5v6Ocp0mu0GrorA9jXo75PPr5JRbUrCsPPiRGL5++MQ=
Subject key identifier: 33:52:98:B4:73:A8:EA:EE:06:86:B2:D3:81:66:44:2E:DA:F1:B9:EA
Authority key identifier: 0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C
Certificate issuer: /CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
Certificate serial: 0199228C3DBF82611A2B6B9DD1FB9B63D938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
Manifest number: 106D
Signing time: Sun 07 Sep 2025 05:00:40 +0000
Manifest this update: Sun 07 Sep 2025 05:00:40 +0000
Manifest next update: Mon 08 Sep 2025 05:00:40 +0000
Files and hashes: 1: DWutPz3QrFVvP3qA0cabn9lk3Ww.crl (hash: MUf3iaUZgKuD67/gJuLdqIbnlEUJgZ0rq0iQledfWAk=)
2: clB1f_NiIoBJs06I1N2ua9KcprY.roa (hash: Hc2uBMDIF+2ALpimHYsk+DChTWTq8OrIlMci+ZWtnyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:3d:bf:82:61:1a:2b:6b:9d:d1:fb:9b:63:d9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
Validity
Not Before: Sep 7 05:00:40 2025 GMT
Not After : Sep 8 05:00:40 2025 GMT
Subject: CN=335298b473a8eaee0686b2d38166442edaf1b9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:98:93:32:ec:7c:43:de:95:cb:21:e2:31:
69:b5:22:db:50:9d:f8:91:e1:5f:77:1b:2d:c3:16:
0c:25:53:9b:f3:62:88:6e:40:fd:6b:2f:c3:aa:e6:
ee:42:25:3c:da:dd:cc:07:32:ac:76:e2:0f:3d:6a:
9c:f2:85:20:bc:3c:28:e5:1b:b0:99:ed:d9:74:4d:
2a:26:3e:bf:fd:1d:ac:6b:cc:ed:09:07:87:f4:e6:
ae:2a:6c:fc:31:6a:0f:fa:af:70:ed:07:e7:6b:b1:
ab:c5:48:6f:28:ce:2c:74:d5:6e:77:2d:2c:aa:a9:
f4:5c:a1:bf:62:50:8b:47:39:6d:1c:3c:ed:83:ed:
8d:65:1a:3a:c0:96:ab:aa:51:c2:29:ba:db:d2:b5:
b1:93:b0:13:0e:96:d4:26:30:00:b2:d5:c1:8b:ea:
e0:70:6a:ad:44:f6:02:e8:85:1a:06:bf:66:29:a3:
03:d9:82:19:15:c1:e5:79:b1:da:c5:0c:81:93:2b:
f2:2b:4f:e8:44:92:1d:74:d1:34:88:42:9d:05:4a:
d0:53:96:82:cf:95:cc:ae:1c:c4:82:1f:70:0a:1f:
06:6c:94:11:d5:e0:03:e6:ee:89:6e:0e:3e:8d:71:
47:6d:fd:55:3f:40:e6:65:60:f4:39:a9:1b:a7:ab:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:52:98:B4:73:A8:EA:EE:06:86:B2:D3:81:66:44:2E:DA:F1:B9:EA
X509v3 Authority Key Identifier:
keyid:0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:96:d0:2a:a6:3b:df:02:a0:c5:a0:85:a1:4a:c0:f8:fa:7c:
a2:bf:55:a3:0a:8f:1c:6f:83:2f:1b:b5:76:42:46:53:4d:58:
40:51:99:4c:4a:7b:45:bc:62:40:da:1d:47:f8:24:a1:55:84:
55:7c:32:5e:97:fb:2b:53:b5:fe:39:c8:fd:13:6c:6a:b2:82:
30:64:b7:a8:c3:45:72:d3:46:15:b9:51:95:9b:6d:a0:2e:e1:
20:03:8e:e6:ef:59:f1:ff:77:e5:ca:c9:95:b8:93:88:6e:9d:
d0:fd:99:cd:18:f5:df:0f:4f:f7:35:d6:5a:28:29:0d:d6:0a:
0b:91:0b:62:7e:0e:99:ac:29:76:1c:05:0f:2b:e2:c1:ca:b5:
87:b3:02:ec:ff:4b:b4:2a:ab:0c:6f:13:84:33:65:80:e2:16:
5d:88:03:97:88:3f:5e:34:e2:58:a7:14:ec:48:ae:28:5f:0f:
c9:ca:2b:78:63:99:3f:4d:15:c9:cf:76:fa:1e:7c:87:47:dd:
01:b4:4a:c2:f4:31:95:4f:ca:16:2b:b7:da:ec:d7:d9:23:32:
6c:d6:ed:d8:60:8e:0c:a4:d0:01:af:14:c1:76:7d:d7:3e:5f:
d3:56:1d:96:00:bb:3d:b8:a8:7d:d8:f5:ef:17:ec:81:9f:20:
65:a2:26:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:43 2025 by rpki-client