Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
File: dwrtd5md59Z-nfM_VVkd7e62JqU.mft (raw, json)
Hash identifier: MyoSyo77sGEhatRulHxyVnebZTrZYbS7CnwN3epIrcs=
Subject key identifier: 7A:6B:8A:E7:F1:27:1F:29:27:3C:71:0B:76:81:25:4B:49:31:6A:A0
Authority key identifier: 77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5
Certificate issuer: /CN=770aed77999de7d67e9df33f55591dedeeb626a5
Certificate serial: 019A71131A88200502D8AD80A9AB5A1BF607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
Manifest number: 0921
Signing time: Tue 11 Nov 2025 04:01:08 +0000
Manifest this update: Tue 11 Nov 2025 04:01:08 +0000
Manifest next update: Wed 12 Nov 2025 04:01:08 +0000
Files and hashes: 1: HD-O2jkuswq0DBtkA_qMAtYHpi0.roa (hash: vMxKnkHwvEkLxZMUSLynqgj1bxvvWTA51P3OBUUHA7o=)
2: dwrtd5md59Z-nfM_VVkd7e62JqU.crl (hash: E1SI83+Yey1McK5r7Dk9H7+LKIARO3IPOOC98rf8HY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:1a:88:20:05:02:d8:ad:80:a9:ab:5a:1b:f6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770aed77999de7d67e9df33f55591dedeeb626a5
Validity
Not Before: Nov 11 04:01:08 2025 GMT
Not After : Nov 12 04:01:08 2025 GMT
Subject: CN=7a6b8ae7f1271f29273c710b7681254b49316aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:b6:e2:98:5e:1a:bf:37:80:10:cc:cf:39:
8f:11:36:da:48:8d:04:fb:82:b5:81:c2:2a:c9:cd:
94:c9:af:b3:37:7c:90:a2:a6:9a:06:15:76:84:0d:
a0:27:b0:6f:02:a7:90:77:56:7c:98:cd:02:f3:30:
24:ca:35:92:96:6f:80:91:35:71:aa:31:64:91:07:
f0:c2:89:f7:e6:c1:cf:6a:c8:a2:d8:2b:fa:77:af:
9d:fb:71:ec:32:08:d5:d3:7b:96:b4:48:b6:1b:f9:
98:0a:48:52:53:75:32:53:ba:ab:aa:df:32:80:78:
5a:e0:f8:85:ee:94:bc:d0:b5:3d:10:e1:74:6c:31:
16:05:cd:55:80:e6:19:16:e8:13:77:4e:54:40:5a:
f1:2b:4c:e3:2a:82:b7:b4:eb:97:ca:d2:b1:68:9a:
10:65:09:84:f3:f0:ff:b9:39:35:91:e5:58:a2:ca:
4b:6a:c6:69:33:76:0a:13:f4:7b:dd:69:1c:07:53:
71:e4:d9:05:57:96:d1:cb:0a:ba:f4:2b:20:d6:d6:
62:1e:59:a1:2e:b7:0a:c3:2f:08:14:a4:4b:98:26:
5c:77:bb:d2:03:cc:14:d3:99:d6:f3:2c:eb:dc:62:
fc:35:de:7e:89:2f:48:c0:b6:cc:e5:04:03:fb:79:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6B:8A:E7:F1:27:1F:29:27:3C:71:0B:76:81:25:4B:49:31:6A:A0
X509v3 Authority Key Identifier:
keyid:77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:81:5a:e9:2a:3a:fc:84:a8:4e:94:f5:50:a5:00:ef:f5:30:
91:c0:21:37:71:ba:88:a8:e6:e3:f7:39:90:5f:4c:a0:bc:b3:
9c:a9:d0:ba:73:11:44:dc:3c:d8:e5:b5:ec:a0:8c:7b:f2:9d:
ce:c6:d4:01:6c:ee:35:71:ea:ba:12:0f:18:86:8f:36:cd:dd:
7f:ee:5d:36:d4:ec:17:85:54:19:4f:78:5b:cc:32:a5:f9:76:
c7:1a:92:06:99:78:1e:41:26:0f:d8:f3:33:42:4a:85:da:e9:
83:fa:02:f6:9a:c5:7a:c0:db:3d:bd:22:4e:90:fd:52:0b:86:
7c:a1:ed:33:f0:34:78:27:96:65:ec:d2:0c:d5:73:69:f9:57:
3b:1a:29:3c:e1:7d:e0:cc:71:e2:82:f4:17:ec:e2:19:18:f6:
71:5a:6b:9c:be:66:c0:07:85:0e:f6:f1:9c:dd:e1:5c:be:be:
52:59:37:e3:fd:8d:03:ae:73:50:8b:c3:b4:6c:1b:b5:d2:eb:
50:c2:40:0e:d4:ad:d5:21:cd:fa:bb:02:94:8a:50:7e:39:0e:
16:c6:72:22:df:46:e6:d0:c9:a0:bd:42:34:49:1f:22:5a:f3:
9b:a5:c8:7c:f3:3a:f2:63:c5:d7:56:7d:2f:9f:d6:86:7e:ba:
ae:3a:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:33 2025 by rpki-client