Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
File: dwHuTBoib59iQp81dWp4mApbRXo.mft (raw, json)
Hash identifier: S44rHJWxolGN/K4us2LJCDLNdqPyvgEX6UeeqNMGhb4=
Subject key identifier: 2D:CF:7D:2F:05:61:5F:F5:EF:DC:C2:29:6A:87:40:FA:41:E1:FF:C5
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Certificate issuer: /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial: 019A72261F2687342B93A12AAA14319CFBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
Manifest number: 16B8
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: dwHuTBoib59iQp81dWp4mApbRXo.crl (hash: /lLambo/Hd+bcGmwX6e/4cpkfuA+o9wggAH2asOcYqs=)
2: eNeF4nAZ4czrvnsr1aVLaDs6aOA.roa (hash: tYhPAoHdmBCSAa68GIa0M0wkQIoMsHZdOyQCiBG9waM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1f:26:87:34:2b:93:a1:2a:aa:14:31:9c:fb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=2dcf7d2f05615ff5efdcc2296a8740fa41e1ffc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:82:a4:e2:05:a6:1e:06:18:10:0b:91:e1:
6c:7b:5e:79:e0:1a:37:bd:59:47:99:db:88:72:ac:
8f:ad:d7:50:e9:06:1b:0b:dd:77:03:70:31:9f:98:
eb:bc:d6:e5:ad:f6:cc:e5:41:41:92:b6:47:ef:f7:
f7:ee:78:2f:16:df:21:4a:39:9a:e2:5e:e2:82:55:
6e:de:07:64:c8:c8:f0:44:01:f7:d5:e7:17:a6:d6:
ac:05:df:8a:a2:d3:af:73:3d:8f:d1:62:dc:68:2b:
ae:2d:60:4c:e3:71:99:c7:8a:b7:a8:7d:24:38:c6:
64:1a:f4:cd:ab:85:27:b3:82:bf:8a:a2:b0:42:e9:
7b:4b:cd:2e:3e:1e:4b:ba:b8:48:86:93:4b:c4:f9:
0c:32:ed:8a:a9:ed:c4:e3:d6:cd:29:d7:43:75:02:
70:61:6b:6f:79:17:6e:ee:c9:cd:19:96:8c:1a:e1:
7d:fe:1d:1a:0f:06:ee:be:98:a6:0a:dd:46:e9:08:
d8:f2:ab:b5:f0:98:5b:b1:3c:20:b5:4d:30:6f:8c:
02:bc:30:f8:a2:ee:57:93:3d:22:85:fb:48:e2:df:
ce:34:a8:a5:71:69:42:c8:da:c7:09:a8:45:a5:03:
4d:05:fa:27:fc:a8:e4:18:2a:8e:e8:08:08:53:aa:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CF:7D:2F:05:61:5F:F5:EF:DC:C2:29:6A:87:40:FA:41:E1:FF:C5
X509v3 Authority Key Identifier:
keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fd:d2:39:51:e6:45:72:22:cb:ae:9c:f4:e9:af:a1:21:bf:
9f:f3:00:c4:8a:96:0e:49:0a:76:e8:40:38:13:2c:10:35:96:
31:86:7a:d1:40:44:fe:1b:14:5a:c6:27:02:b6:46:db:dd:43:
a9:80:54:f3:ef:bd:5a:dd:af:24:11:9c:b2:02:9a:08:d3:2f:
77:d7:97:1e:43:95:6f:75:84:65:cb:85:db:72:6c:be:8b:43:
24:2e:01:d3:50:32:10:22:ea:d1:6d:95:ab:cb:f6:84:98:ce:
d8:38:0b:c6:84:4a:e1:20:10:a4:38:c0:3c:e8:ee:52:ad:57:
e7:35:a5:1a:50:f1:cd:3b:a1:75:cb:35:43:cb:4d:0c:1b:1f:
b9:3b:77:38:1e:dc:3d:37:73:c7:44:0c:01:6f:67:37:32:07:
1d:8b:2a:a5:a5:3e:9b:4a:86:e4:52:49:54:7b:48:a3:c8:8b:
b3:29:80:2c:1d:92:7c:65:c3:7f:ef:b4:7e:e3:3f:90:37:5f:
06:88:4e:32:0a:1f:0b:6c:6f:84:c3:aa:bb:34:85:cf:10:06:
29:74:3a:c9:4e:12:d4:bf:31:cd:c7:86:c1:d2:89:39:16:29:
7a:4f:55:f3:34:42:c8:4c:bf:b1:4c:78:c6:32:4d:8f:9d:c7:
a1:a8:81:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:33:03 2025 by rpki-client