Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier: BrYe9Z/zW4tB8Hcu0Zrl0Klq5+BqetAxr6/x5Kv7LYY=
Subject key identifier: 87:F0:2F:8F:C5:3C:37:4D:E9:2A:29:77:F0:62:49:84:86:AD:01:91
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial: 0199239FB6AF81FB0BB37004F726DE5EE19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number: 0F32
Signing time: Sun 07 Sep 2025 10:01:33 +0000
Manifest this update: Sun 07 Sep 2025 10:01:33 +0000
Manifest next update: Mon 08 Sep 2025 10:01:33 +0000
Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: rAWYT7MuMTelAv0gtSDxgFBVgSzwVr/IuHa+rVCJDm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:b6:af:81:fb:0b:b3:70:04:f7:26:de:5e:e1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Validity
Not Before: Sep 7 10:01:33 2025 GMT
Not After : Sep 8 10:01:33 2025 GMT
Subject: CN=87f02f8fc53c374de92a2977f062498486ad0191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:9c:e7:89:0b:4d:8c:c1:8d:b6:a3:5b:c0:
5a:40:9a:02:4e:d0:76:3f:51:66:5d:84:de:fd:31:
0a:d1:11:74:84:ed:77:31:59:37:c2:13:ab:43:43:
15:67:5d:ba:49:e5:94:58:1c:91:d3:06:68:b3:31:
9b:4b:58:86:d4:ed:26:7e:84:8a:15:a9:ba:a8:e4:
99:35:34:e9:1e:45:fc:5a:44:1a:17:b9:6b:cb:c6:
5b:85:a9:99:dc:3c:b1:58:58:ef:82:95:b1:d8:f1:
a9:5f:30:28:01:92:fb:ea:44:de:b8:ac:f1:86:8c:
ad:81:18:27:57:06:b5:d4:06:ed:af:87:1c:54:48:
4f:fc:7d:a4:2a:f4:38:d7:b1:6d:02:ff:b0:7a:44:
f3:bd:2e:0e:8e:e8:51:d2:f1:9b:73:09:bc:5f:62:
8e:23:46:6f:5d:a8:97:13:a3:03:98:a5:96:b2:bf:
8b:a5:94:51:9b:b7:bf:77:17:df:85:01:0d:00:af:
6d:5f:4f:88:c8:45:84:e5:10:26:14:3a:0e:88:34:
df:85:19:37:d5:66:81:e9:95:28:65:a2:a2:9a:0c:
e1:d1:66:2b:d4:3f:fd:ec:b7:aa:73:bc:b5:78:6e:
f5:fe:d5:d7:5a:bf:f4:1d:b8:6f:ba:11:f6:a7:66:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F0:2F:8F:C5:3C:37:4D:E9:2A:29:77:F0:62:49:84:86:AD:01:91
X509v3 Authority Key Identifier:
keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:37:3a:40:a5:6f:ba:f4:c1:3f:8f:85:8a:29:a1:47:a5:19:
09:ec:32:fe:6e:d6:40:39:da:80:5d:ce:ce:7c:c0:de:df:38:
84:54:fd:1d:40:9c:52:16:5e:36:c7:15:05:4a:8f:eb:c5:c1:
2f:a0:65:17:d0:43:b5:c4:cc:ae:74:9b:1c:71:b0:2b:45:71:
f5:94:37:0a:9b:12:cd:86:1b:1a:08:7d:30:7a:bd:55:95:31:
7f:a4:f3:b0:38:8e:f4:ab:4d:0e:86:49:ab:91:82:06:e4:c8:
34:3c:b3:84:6a:eb:e7:57:14:62:d6:d4:74:5b:67:62:6e:d7:
86:f5:bc:9c:69:ec:d7:ba:07:4f:41:1f:ba:28:73:f8:06:f8:
6d:2b:aa:c4:2d:b5:d8:d4:48:dd:28:29:06:e4:69:0d:1b:40:
8f:49:31:fd:a3:f5:7a:6b:e4:01:97:60:f0:44:18:e2:7e:90:
be:9c:44:b4:95:6d:71:ad:ba:b5:75:2d:af:9c:6b:0d:50:6b:
6e:86:48:65:b6:fd:22:34:84:16:33:b3:d1:7c:58:5c:17:19:
61:e7:b9:15:43:ea:ba:ff:98:5f:d4:55:ee:ac:74:30:9d:13:
2b:a0:2c:b4:32:d6:61:60:ee:c8:98:43:67:ac:23:c2:bf:46:
23:e4:52:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:30 2025 by rpki-client