Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File: DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier: B0jSl1+OWzmKWyazyYq18JmJzE6pWVl3JYYbEK2v61s=
Subject key identifier: 09:7F:27:9A:97:27:4B:7F:FF:EB:D0:76:02:DE:42:79:62:A4:67:46
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer: /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial: 019A281D9221E6843CB802DED8D86B65612A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number: 0A09
Signing time: Tue 28 Oct 2025 00:00:17 +0000
Manifest this update: Tue 28 Oct 2025 00:00:17 +0000
Manifest next update: Wed 29 Oct 2025 00:00:17 +0000
Files and hashes: 1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: K5vZn0qBWaR0zBrPI0yw7Y6Dh2+8nbD6utXX9tXBcDg=)
2: QGurDva1s4alg8iGu6qVYxbvUlE.roa (hash: eFsT2lU76i8V7l6B+0U5YuaE3bHnUDv4afzG2LbiiJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:1d:92:21:e6:84:3c:b8:02:de:d8:d8:6b:65:61:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Validity
Not Before: Oct 28 00:00:17 2025 GMT
Not After : Oct 29 00:00:17 2025 GMT
Subject: CN=097f279a97274b7fffebd07602de427962a46746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:9f:80:f8:e5:fa:04:a3:a1:b5:6e:9f:d8:
d9:64:4b:4e:39:33:6d:2b:e8:a8:37:40:03:67:d9:
20:70:80:a5:30:4d:80:ea:eb:a3:62:88:68:20:8a:
80:5a:46:54:e4:80:c0:ed:77:d3:6f:a4:a3:81:e5:
85:f2:7d:01:e5:a8:a3:c7:d0:d6:95:2a:d1:67:7d:
38:2d:56:97:60:37:eb:64:18:a4:34:34:43:32:1c:
5d:18:6f:bc:c7:04:6e:d6:20:8a:1a:69:0a:56:27:
84:16:1d:dc:09:ee:ca:5a:e0:2c:75:ff:e5:5a:fe:
90:8e:c2:86:c7:a0:85:2f:cf:26:59:73:61:df:dd:
8d:42:65:3c:3d:56:0e:08:1a:37:53:81:2d:3b:4d:
13:75:67:cb:ab:d0:d2:f5:9e:c1:1d:69:37:74:9e:
b0:99:50:4b:16:4c:5a:bf:aa:e9:7e:84:d6:4c:10:
d8:4f:7d:4a:ca:61:d2:cf:5e:1c:f9:03:8d:a4:71:
ed:60:7a:23:49:44:50:3e:e5:03:32:d6:e3:74:87:
a4:74:b2:c6:ae:2b:84:81:1e:29:cf:8e:bd:3b:79:
51:82:d9:5f:d6:bc:9d:e0:a4:1d:30:37:da:8d:de:
e6:c0:1c:dd:81:b3:92:af:00:ab:33:ac:01:ad:bd:
db:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7F:27:9A:97:27:4B:7F:FF:EB:D0:76:02:DE:42:79:62:A4:67:46
X509v3 Authority Key Identifier:
keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cb:9d:96:6d:b1:89:e8:d5:63:e3:44:aa:ac:df:2d:52:56:
7e:a4:e4:5e:b6:2d:da:df:68:77:bb:43:5d:4d:cb:db:4a:7b:
99:f2:a5:a4:38:69:ec:1b:b8:ea:a2:bd:eb:f4:57:3e:d8:de:
ef:85:ad:e0:ef:3d:e9:fa:9e:30:5f:ab:57:56:f3:3c:96:2a:
dd:ac:85:b1:b8:5d:b5:90:e5:3d:f6:2c:97:eb:f0:35:6c:90:
89:ba:71:8b:02:e7:a7:ef:26:e6:f3:f0:90:b7:d3:a3:79:db:
9e:14:6c:7c:f9:7c:fb:ba:16:83:93:f1:fe:35:78:fb:f8:87:
cf:9c:85:51:98:4c:ee:b6:56:82:56:22:bb:cf:b9:8a:f7:d6:
eb:c7:46:74:b6:b2:5c:67:2c:c2:68:e7:c7:15:a0:85:f7:c7:
99:07:85:0c:ef:4a:3d:52:45:07:4f:b9:3a:9f:8a:ef:ca:72:
47:8d:12:79:96:85:7d:67:17:97:48:bf:fc:bf:e0:1f:f8:72:
35:b8:d8:0b:fe:4b:09:e4:0a:dc:b2:7e:35:d5:e2:0d:92:b0:
2b:be:4b:92:a5:66:f8:be:1b:9b:df:90:50:7c:69:a1:b9:fd:
29:5e:f6:73:2a:21:45:37:26:8f:92:52:f1:4b:7c:5a:10:7b:
8a:52:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:59:50 2025 by rpki-client