Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File: DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier: 0tEbNpoNGktbjBBoOwrIMW7vCXjJen82erbXEmYU6gs=
Subject key identifier: A6:8B:04:C0:2A:A5:5E:D3:AC:F8:75:25:A6:8C:69:F9:4B:B0:B9:48
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer: /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial: 019932DB82CFCA7E50513BCFBB0C202B4997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number: 098A
Signing time: Wed 10 Sep 2025 09:01:10 +0000
Manifest this update: Wed 10 Sep 2025 09:01:10 +0000
Manifest next update: Thu 11 Sep 2025 09:01:10 +0000
Files and hashes: 1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: i9jr2vSWPoEcAJ+zGO500N1MTESTsj/bSKGBJsoOk34=)
2: QGurDva1s4alg8iGu6qVYxbvUlE.roa (hash: eFsT2lU76i8V7l6B+0U5YuaE3bHnUDv4afzG2LbiiJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:db:82:cf:ca:7e:50:51:3b:cf:bb:0c:20:2b:49:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Validity
Not Before: Sep 10 09:01:10 2025 GMT
Not After : Sep 11 09:01:10 2025 GMT
Subject: CN=a68b04c02aa55ed3acf87525a68c69f94bb0b948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:d2:d3:d1:eb:0c:71:97:ed:d0:1a:ae:14:
03:02:aa:f6:3a:9b:8a:f6:94:f5:a6:44:1a:a2:3b:
10:8c:7c:c3:97:d7:dd:5b:db:1a:59:26:e9:a0:34:
61:6b:5a:f5:b0:ee:93:ce:51:45:77:25:ce:19:8e:
fc:fc:09:65:6e:43:14:d3:a5:76:2f:91:4c:fb:71:
31:24:93:ef:fc:ed:3c:ef:d0:ec:96:b8:c7:49:bd:
1d:db:93:44:1e:37:df:30:d4:2b:50:68:af:e8:23:
ef:94:8f:9e:6d:2b:8c:8a:bb:42:b7:08:1b:7c:83:
60:51:5a:79:10:ce:29:a4:3e:e1:28:69:ea:b0:74:
18:8f:f4:3e:c8:d0:82:92:17:7d:aa:da:ef:ca:05:
c2:aa:7d:c3:7a:d8:58:ca:70:7c:d4:7e:42:64:14:
1a:80:64:4f:32:8b:17:98:e6:73:f3:0f:e1:7a:31:
43:d9:34:dc:37:e3:c6:5c:15:df:5a:1f:48:47:9d:
8c:93:92:5a:a0:62:ef:e6:9e:01:41:a1:99:dd:f2:
42:bb:12:aa:92:25:ba:94:d3:79:74:11:83:c2:08:
b5:c0:78:f8:d4:80:e9:eb:2d:82:d6:ef:8d:29:33:
bd:89:79:79:31:d4:73:26:05:76:3f:ad:c6:3d:c8:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8B:04:C0:2A:A5:5E:D3:AC:F8:75:25:A6:8C:69:F9:4B:B0:B9:48
X509v3 Authority Key Identifier:
keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:42:b7:b7:8b:00:0d:df:cc:a9:bd:0f:e1:cd:ff:96:5d:65:
7b:45:00:4c:02:ba:1d:70:19:ba:ab:4d:fa:95:54:25:ee:80:
61:40:87:d9:49:5f:8e:1e:8c:15:96:df:22:e2:80:12:da:43:
1d:eb:4c:c5:b4:aa:fc:8c:5f:35:f2:37:7a:a5:45:db:67:a6:
4c:b5:aa:46:bf:72:f1:55:4d:fb:34:73:33:45:51:ff:0d:66:
fe:54:9b:96:cc:f9:68:95:56:1f:f8:15:c7:7e:87:c7:fd:e0:
81:92:78:4a:b3:0e:6a:fe:2f:72:04:e9:51:3c:35:b6:82:af:
0b:80:fe:af:cf:42:4e:d4:eb:71:83:12:69:4a:32:70:a5:c7:
8d:fe:11:e3:5d:dd:d3:7b:4b:a6:a7:80:40:42:63:8b:64:e4:
c6:f0:ad:6b:68:c4:b9:ad:68:fc:a1:e2:eb:6c:04:fc:e1:31:
56:f9:d9:7d:ba:a2:4c:c7:12:3a:e7:56:69:90:04:77:1b:9e:
cb:5b:6e:61:5a:6a:0b:e1:3f:45:97:45:5c:f8:5f:1a:aa:28:
91:a8:2a:05:92:06:f2:19:d0:1c:48:19:00:b4:c0:cb:b1:93:
04:65:01:01:dd:05:5b:67:01:4e:d1:73:9a:3f:63:b1:59:0f:
2e:2b:5a:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZky24LPyn5QUTvPuwwgK0mXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmJiNTllOTdiZjNiMWVmYzM1NjlkZjk1NmM0NWU0NzI4
NDk4NjEwHhcNMjUwOTEwMDkwMTEwWhcNMjUwOTExMDkwMTEwWjAzMTEwLwYDVQQD
EyhhNjhiMDRjMDJhYTU1ZWQzYWNmODc1MjVhNjhjNjlmOTRiYjBiOTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkPS09HrDHGX7dAarhQDAqr2OpuK
9pT1pkQaojsQjHzDl9fdW9saWSbpoDRha1r1sO6TzlFFdyXOGY78/AllbkMU06V2
L5FM+3ExJJPv/O0879DslrjHSb0d25NEHjffMNQrUGiv6CPvlI+ebSuMirtCtwgb
fINgUVp5EM4ppD7hKGnqsHQYj/Q+yNCCkhd9qtrvygXCqn3DethYynB81H5CZBQa
gGRPMosXmOZz8w/hejFD2TTcN+PGXBXfWh9IR52Mk5JaoGLv5p4BQaGZ3fJCuxKq
kiW6lNN5dBGDwgi1wHj41IDp6y2C1u+NKTO9iXl5MdRzJgV2P63GPcgivQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaLBMAqpV7TrPh1JaaMaflLsLlIMB8GA1UdIwQY
MBaAFA1rtZ6Xvzse/DVp35VsReRyhJhhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYt
ZTk1NGUxNmFiMjdkLzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYtZTk1NGUxNmFiMjdk
LzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUK3t4sA
Dd/Mqb0P4c3/ll1le0UATAK6HXAZuqtN+pVUJe6AYUCH2Ulfjh6MFZbfIuKAEtpD
HetMxbSq/IxfNfI3eqVF22emTLWqRr9y8VVN+zRzM0VR/w1m/lSblsz5aJVWH/gV
x36Hx/3ggZJ4SrMOav4vcgTpUTw1toKvC4D+r89CTtTrcYMSaUoycKXHjf4R413d
03tLpqeAQEJji2TkxvCta2jEua1o/KHi62wE/OExVvnZfbqiTMcSOudWaZAEdxue
y1tuYVpqC+E/RZdFXPhfGqookagqBZIG8hnQHEgZALTAy7GTBGUBAd0FW2cBTtFz
mj9jsVkPLitaCw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 12:20:44 2025 by rpki-client