Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
File: 0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft (raw, json)
Hash identifier: SuYQ4JEkM/XT2qn6rigPnZp+lQZ+kghPtgefbTLUKLc=
Subject key identifier: 9B:61:75:4D:EA:D0:D8:24:B3:A4:8B:F9:6E:42:BD:C1:1A:71:F2:49
Authority key identifier: D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86
Certificate issuer: /CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86
Certificate serial: 01992330F56C0F6A6F69FE3931DCF85E0DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
Manifest number: 59
Signing time: Sun 07 Sep 2025 08:00:35 +0000
Manifest this update: Sun 07 Sep 2025 08:00:35 +0000
Manifest next update: Mon 08 Sep 2025 08:00:35 +0000
Files and hashes: 1: 0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl (hash: egRyJwRyjpSWaV9t2fL8DRErPVEM0D1Ai33E7NVjyws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f5:6c:0f:6a:6f:69:fe:39:31:dc:f8:5e:0d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86
Validity
Not Before: Sep 7 08:00:35 2025 GMT
Not After : Sep 8 08:00:35 2025 GMT
Subject: CN=9b61754dead0d824b3a48bf96e42bdc11a71f249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:74:57:ef:dc:b1:7e:c7:d9:2c:d1:05:d3:
f0:43:e8:df:70:a4:55:92:0f:15:73:65:cf:b0:32:
0f:01:22:2a:ba:50:b1:86:45:4e:7b:66:73:21:33:
26:f6:19:cb:6a:c6:b6:c8:7c:e4:0d:ad:84:17:a3:
fe:5a:e0:c0:5e:18:30:e7:33:3d:f7:9a:36:29:22:
51:43:a9:76:7d:00:37:ea:17:d0:a7:0f:dc:2d:35:
8d:f0:fb:ce:28:49:26:d1:54:58:53:7e:92:e1:00:
1e:43:ac:43:26:c3:3c:85:e7:e7:a3:d2:de:a6:9d:
61:1e:d7:7f:ae:ff:77:58:33:e2:a8:ad:60:ce:50:
98:b3:05:46:51:7e:b1:d0:4f:d5:4e:3d:75:1c:13:
ca:de:e9:3a:1e:01:f4:dc:6a:15:dc:07:e7:9c:22:
a0:0e:9e:0a:75:5b:7e:52:1f:74:4b:aa:2f:92:9a:
6f:f8:a6:59:e4:c7:f0:ed:03:1a:a5:ee:5a:66:59:
bd:8d:35:84:ba:a6:2a:7f:a5:00:2f:b2:d5:25:ed:
7d:7d:eb:48:4c:4f:be:5b:dd:ff:22:79:6a:1b:94:
f9:73:f2:86:d7:c5:2e:e2:fa:3f:74:44:79:6b:83:
7d:c6:58:fc:1b:a9:ee:44:7f:2a:f4:96:70:e3:60:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:61:75:4D:EA:D0:D8:24:B3:A4:8B:F9:6E:42:BD:C1:1A:71:F2:49
X509v3 Authority Key Identifier:
keyid:D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e6:79:4e:8a:f9:38:c7:af:8c:12:d7:64:68:a2:46:18:e5:
8e:45:4d:08:40:83:fb:fb:17:b1:ec:e5:bf:7e:b0:a4:a8:0b:
7c:f8:02:d4:5b:fe:26:9c:4a:d1:86:d9:24:c7:fb:f0:ab:6f:
d6:6f:eb:2a:71:1b:65:6f:61:32:9a:57:de:15:60:8e:a9:a8:
6c:ec:bc:98:3f:a9:f4:52:13:8d:be:f7:c2:9d:d7:d6:d8:9d:
8f:da:de:95:41:e9:22:f9:50:6a:5d:cc:b6:8f:d7:14:ab:44:
6a:26:17:b4:41:f6:a2:df:69:7f:5e:99:da:9b:1f:e6:62:22:
c3:27:30:31:17:d6:97:fa:51:7f:0d:92:37:fa:d8:4f:f5:cc:
1f:b2:a3:02:e1:cd:c9:84:f0:4a:63:86:07:c5:46:9e:2e:18:
85:79:e7:f6:a9:ff:a5:ad:2c:31:dd:89:22:f0:21:1d:1d:2e:
45:d4:03:d4:8e:70:b6:b3:d9:42:6f:ee:ad:8b:6b:55:0c:7f:
ff:42:f6:b0:5c:9a:3f:df:bd:8d:39:d2:09:01:ea:8d:63:59:
d5:ef:a2:90:b2:3a:a0:8c:e6:3f:b1:28:3f:e7:d9:20:1c:c7:
32:ed:f3:ab:d5:1a:0a:8b:0c:ec:d6:7e:cb:ff:d1:f6:47:48:
9e:e3:8f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:04 2025 by rpki-client