Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
File: dwrtd5md59Z-nfM_VVkd7e62JqU.mft (raw, json)
Hash identifier: oMpjhZQXsJGpTnExhKSJoqnfim9O2oSRyxI7p9syO8g=
Subject key identifier: 3E:B3:8F:53:11:74:11:39:4A:27:2D:B3:54:38:34:3D:CA:57:9A:AA
Authority key identifier: 77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5
Certificate issuer: /CN=770aed77999de7d67e9df33f55591dedeeb626a5
Certificate serial: 019922FAAA0C4ED17A221E9F77158BE25466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
Manifest number: 0874
Signing time: Sun 07 Sep 2025 07:01:16 +0000
Manifest this update: Sun 07 Sep 2025 07:01:16 +0000
Manifest next update: Mon 08 Sep 2025 07:01:16 +0000
Files and hashes: 1: HD-O2jkuswq0DBtkA_qMAtYHpi0.roa (hash: vMxKnkHwvEkLxZMUSLynqgj1bxvvWTA51P3OBUUHA7o=)
2: dwrtd5md59Z-nfM_VVkd7e62JqU.crl (hash: xm8jhNDRAA2Ekr5WmHbAZ85n44sQu2/SyHwa8jEruSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:aa:0c:4e:d1:7a:22:1e:9f:77:15:8b:e2:54:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770aed77999de7d67e9df33f55591dedeeb626a5
Validity
Not Before: Sep 7 07:01:16 2025 GMT
Not After : Sep 8 07:01:16 2025 GMT
Subject: CN=3eb38f53117411394a272db35438343dca579aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:2d:f5:69:1f:cd:8e:08:89:1d:0f:57:c1:
b0:d0:7d:59:67:ee:83:00:70:66:21:e5:cd:e8:30:
26:71:96:d5:12:d5:fc:6a:0a:aa:7f:43:d0:ac:cf:
7d:e1:c5:99:e9:d1:fe:e4:7f:58:5a:55:47:02:44:
e0:4b:47:0c:6b:18:d2:1e:41:67:3c:eb:2b:70:b0:
7a:4a:8c:6a:bd:c3:40:d3:b7:e8:07:e7:28:a6:b9:
84:c6:1a:ff:bf:0c:72:f8:f7:c4:6a:e4:b7:ea:cb:
d8:3a:18:7b:e5:47:38:82:c2:c5:0b:61:e6:be:41:
76:1f:11:9d:49:db:de:6a:8d:48:8d:61:9c:cb:b5:
7e:d1:19:52:04:05:dd:d2:7d:a2:91:89:3f:75:18:
6d:56:c3:e1:60:8d:3e:c8:97:b2:7d:27:4e:e5:f5:
e2:cb:97:8b:9d:12:38:5b:70:b3:81:94:b0:91:cb:
a1:e7:95:03:0a:25:dd:ff:3e:25:1e:9d:df:a0:6b:
63:ab:33:17:29:b1:4d:c8:9d:d7:91:10:04:6a:b5:
03:59:ba:cc:21:96:e2:86:4a:20:8e:eb:e5:28:ba:
c5:21:6f:e3:6c:6e:5c:f9:03:06:17:e0:c4:22:5a:
8d:46:9e:75:fc:ab:f8:39:52:17:8d:fe:fa:58:39:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:8F:53:11:74:11:39:4A:27:2D:B3:54:38:34:3D:CA:57:9A:AA
X509v3 Authority Key Identifier:
keyid:77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:20:51:b2:67:fa:c1:47:fd:47:fa:cd:74:bf:c7:41:19:5f:
a4:c7:e2:49:61:5b:5b:0f:11:5c:81:83:2a:d0:25:63:63:f6:
91:2c:f2:81:06:86:55:4e:9d:20:ea:01:b1:4d:1d:17:9a:30:
30:65:62:15:d5:bc:cb:49:c1:88:a6:0a:a8:09:60:b5:35:0e:
f8:8e:f2:1b:fa:c0:59:d5:22:56:69:72:bd:07:79:c4:bb:cb:
ca:43:e5:ab:21:52:79:3b:de:52:4b:5d:f4:4e:80:55:2c:df:
67:d8:91:53:f9:77:21:43:c8:cf:0f:be:a3:2a:8e:6b:08:a7:
39:94:57:d0:ad:84:7e:68:dd:3f:7b:0f:37:93:5d:6b:82:6e:
a3:5d:1c:77:7d:be:05:69:3e:92:f1:4b:df:5c:00:1b:5f:fc:
3b:e9:7f:a9:aa:98:6d:3d:f5:8e:34:7f:56:4b:31:0b:53:b0:
e4:5b:f0:32:6e:73:e5:59:18:b8:25:88:b8:d1:21:8c:ca:b5:
2a:a9:57:d7:c3:bb:52:76:13:2d:e2:28:08:2d:80:fc:7f:8e:
07:19:12:27:41:6a:e3:45:04:fe:e0:8b:cd:09:b3:26:d6:60:
bd:85:33:e0:0a:d3:ac:95:04:61:bf:44:7f:ce:c1:8c:1d:47:
f9:41:6a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:30 2025 by rpki-client