Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
File: dw0111Zu5yRuTSEzy95Ip3RCPHc.mft (raw, json)
Hash identifier: poZzODxMG/aJFCu5+cIfe6cgwmYpWpQaXp7kGw6BDUc=
Subject key identifier: 77:DE:EE:3F:2C:37:B2:E5:8F:E1:8D:25:E5:0A:96:EA:68:C1:9D:2B
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Certificate issuer: /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial: 019A72CA19CC5961AAD279608F63F43B6330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
Manifest number: 0B03
Signing time: Tue 11 Nov 2025 12:00:38 +0000
Manifest this update: Tue 11 Nov 2025 12:00:38 +0000
Manifest next update: Wed 12 Nov 2025 12:00:38 +0000
Files and hashes: 1: SOT0W2XrP7CCow7oMidVP0WeTQc.roa (hash: LK/wr/vv637+E1XEkLAUiLeI/zSDn9f20e+XXEbQLBM=)
2: ZHw9z1FJzdvIzznM9dzN2O5C56I.roa (hash: bAuKlmhtwV1RMYb3UiAoj3013/bGmnUu7vNpvbyFAaw=)
3: dw0111Zu5yRuTSEzy95Ip3RCPHc.crl (hash: jmaviNlUFxto78Pugc5aPeedjJE/7GiJz/F/6FOF9qo=)
4: kb1hhl4VhznPe9ar0pe3UEE3K-I.roa (hash: smgbn2o+yW8NSkrB4nhx/ecIptLt+NRlqrEvEJN1ma8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:19:cc:59:61:aa:d2:79:60:8f:63:f4:3b:63:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
Validity
Not Before: Nov 11 12:00:38 2025 GMT
Not After : Nov 12 12:00:38 2025 GMT
Subject: CN=77deee3f2c37b2e58fe18d25e50a96ea68c19d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:0f:b9:9d:b9:77:e1:44:d6:14:b6:6d:75:
4f:a2:67:d0:0d:48:24:ab:98:21:bc:90:fa:a0:b5:
f2:e8:ee:73:18:d5:50:ea:e3:b9:e8:85:d5:53:3d:
e4:3d:41:09:09:69:97:9e:4c:86:71:25:13:f1:c9:
b8:53:b0:25:da:15:43:42:15:0d:f1:cc:5e:45:dc:
28:c0:04:69:44:27:08:a3:b0:2c:26:a5:3c:bd:8a:
9d:c3:c6:3a:b7:59:ca:79:23:6d:ae:25:8e:35:b0:
1c:33:86:46:90:d0:41:c3:70:e5:1d:01:f9:75:b9:
78:4c:5a:5e:d1:ce:a5:93:1c:9b:ff:89:44:1a:c5:
d9:55:2c:2f:58:e7:4d:62:ba:fb:fc:09:b6:16:10:
4c:1b:cd:59:4c:a2:2b:be:bd:9d:43:b0:c7:61:73:
cf:0d:22:5f:fa:cb:2f:0f:6d:98:44:f6:e3:88:9b:
58:4f:12:57:e4:ea:f9:bc:cc:95:36:06:9a:e6:88:
17:d8:7c:6e:2f:83:5d:85:07:22:a5:1a:90:c0:22:
f0:6b:47:99:c4:b2:b8:c1:ce:f1:cc:56:5a:bd:c3:
ad:b3:47:bd:cb:6b:a4:49:95:d6:49:e8:4a:24:d9:
dc:28:1e:61:0c:0c:81:81:0d:2f:85:78:b0:1c:ef:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DE:EE:3F:2C:37:B2:E5:8F:E1:8D:25:E5:0A:96:EA:68:C1:9D:2B
X509v3 Authority Key Identifier:
keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3b:4e:7e:31:97:f3:b4:2f:77:c3:05:58:dd:f4:74:77:39:
d0:8d:9f:54:22:77:48:11:ab:df:1e:b5:31:d5:96:e7:29:49:
12:59:2e:27:9b:e5:5a:06:dd:ff:7e:9f:f2:01:ed:27:46:00:
02:9e:35:60:24:ce:95:11:a8:d5:ea:ac:1c:8b:b6:ad:2c:47:
18:dd:f5:b6:78:44:1d:3a:5b:5b:c8:de:9a:1d:e4:36:c1:c2:
34:cb:6a:cc:62:a7:50:cf:e3:b2:98:d1:fa:a4:6a:41:41:6e:
4e:26:79:31:7b:3e:29:aa:1a:14:78:ed:07:55:01:0a:80:2f:
bb:dc:b0:e6:36:f6:dd:e9:b8:17:03:53:34:b7:cd:28:72:e8:
dd:02:f4:ef:a1:5a:7e:82:2f:34:29:f4:f2:9d:32:d8:af:ae:
6e:d1:f3:ce:1c:04:64:62:fc:45:75:b8:82:8e:af:ae:0e:d4:
20:6b:91:2c:ba:ce:2c:ee:b1:70:15:4f:7f:b4:7f:f7:01:aa:
62:40:ab:78:dc:df:6b:54:e6:8b:0d:fc:a6:b7:ed:12:0c:84:
2d:20:4f:13:ae:b9:d1:e2:6c:54:4a:8e:94:da:6b:b8:2d:86:
9b:fc:fb:94:5f:cb:98:a5:65:21:d4:c8:b9:e4:a5:25:65:5b:
e6:fa:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:56:50 2025 by rpki-client