Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
File: dw0111Zu5yRuTSEzy95Ip3RCPHc.mft (raw, json)
Hash identifier: 3VUU+/OPQlN9kjp8wlIlbp6Os6Ww2j6sN3nnFcd7Du8=
Subject key identifier: 0C:F2:9A:CE:91:27:00:AD:9D:A4:04:7B:2C:64:02:9D:DA:05:49:5C
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Certificate issuer: /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial: 019922C3783839BD13F683B8B5CF6990783A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
Manifest number: 0A55
Signing time: Sun 07 Sep 2025 06:00:59 +0000
Manifest this update: Sun 07 Sep 2025 06:00:59 +0000
Manifest next update: Mon 08 Sep 2025 06:00:59 +0000
Files and hashes: 1: SOT0W2XrP7CCow7oMidVP0WeTQc.roa (hash: LK/wr/vv637+E1XEkLAUiLeI/zSDn9f20e+XXEbQLBM=)
2: ZHw9z1FJzdvIzznM9dzN2O5C56I.roa (hash: bAuKlmhtwV1RMYb3UiAoj3013/bGmnUu7vNpvbyFAaw=)
3: dw0111Zu5yRuTSEzy95Ip3RCPHc.crl (hash: /rC8mLYdRY+4oUOdXQlgDpL1vEYF2I4VjPRwxqo0uWk=)
4: kb1hhl4VhznPe9ar0pe3UEE3K-I.roa (hash: smgbn2o+yW8NSkrB4nhx/ecIptLt+NRlqrEvEJN1ma8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:78:38:39:bd:13:f6:83:b8:b5:cf:69:90:78:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
Validity
Not Before: Sep 7 06:00:59 2025 GMT
Not After : Sep 8 06:00:59 2025 GMT
Subject: CN=0cf29ace912700ad9da4047b2c64029dda05495c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:49:3f:7e:c7:f3:05:12:f2:26:94:62:32:
ab:84:8d:e5:4e:b0:2a:5b:79:50:be:59:9d:43:d0:
33:e2:86:35:75:79:ed:49:66:02:0c:ef:d2:d3:8e:
2c:a9:18:4a:f5:b3:38:55:e6:a9:0a:57:14:61:84:
3d:c3:7a:bf:e7:d4:39:69:15:f6:1d:8b:cd:e4:3e:
0f:e6:91:ae:41:80:ea:9a:89:af:82:e1:92:43:0b:
63:c4:be:74:30:5a:26:b1:ab:9c:7e:5e:44:3d:20:
60:0a:07:9f:49:8c:ba:7d:97:28:29:a6:1a:58:a5:
01:99:06:80:e6:3c:cd:52:50:73:54:cb:78:cb:3b:
ab:06:be:f7:a4:78:35:ba:74:44:51:5c:fb:6b:1e:
50:d4:53:a6:de:78:ac:a4:f7:5d:24:77:16:ca:5c:
1c:1f:32:4e:d0:43:b9:16:ab:a8:28:02:4f:e7:79:
b6:81:39:aa:df:34:fc:13:89:28:f7:0f:61:1e:d3:
41:e3:61:0e:8d:5a:bb:93:21:ef:a9:ce:49:fe:47:
a4:89:52:da:e5:55:be:86:a6:7f:c2:41:ac:c4:eb:
b0:13:5f:c1:8e:37:69:b4:9f:5e:aa:39:76:2a:b1:
0f:91:d7:c5:b6:42:13:1a:2f:df:29:03:30:02:9d:
fc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F2:9A:CE:91:27:00:AD:9D:A4:04:7B:2C:64:02:9D:DA:05:49:5C
X509v3 Authority Key Identifier:
keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:23:ab:53:7d:75:74:ea:19:a5:95:ee:d4:2d:12:15:d0:98:
fd:77:79:63:98:1c:22:cb:39:90:40:62:94:ff:cd:64:0c:99:
60:0a:12:d4:56:20:5d:7d:9f:31:3c:08:48:b6:69:78:80:39:
33:e9:23:d7:79:f4:a7:b3:8c:b0:26:3f:4e:ca:b1:f2:9b:0e:
74:4b:40:60:72:a8:71:e1:dd:71:ca:cd:b7:55:92:2e:48:ac:
82:14:cf:92:e2:d1:84:c9:8b:27:d7:d7:cb:b8:2c:d0:8e:90:
b3:4e:db:6f:48:19:39:27:fb:a1:24:66:ae:25:e7:37:27:ce:
c7:23:15:e1:a4:e1:8c:73:2b:21:0c:6d:64:93:07:cb:af:d8:
ee:1e:3a:d1:ba:c7:f5:97:1d:ad:4b:b3:2b:8e:94:25:ae:cf:
ce:f3:f4:71:b2:ab:03:18:2c:2c:6b:f9:4d:25:79:db:d1:c8:
0f:46:f1:f3:94:b0:16:77:32:28:69:51:d3:6a:04:34:a4:4b:
e1:3a:35:3b:33:0e:fe:9b:86:61:f2:dc:cb:f7:dd:bb:2d:ad:
60:cd:7c:73:b1:ab:01:e4:7f:3a:bf:d6:67:15:7b:fb:0a:a0:
ac:4b:f1:cb:44:c1:51:42:ec:d0:9c:11:ea:d2:73:d4:cc:4b:
40:48:df:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:21 2025 by rpki-client