Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier: ePaULL2N/mbL7uUlPuXwGVoh4aMtzkVzIc+IdaVdiV4=
Subject key identifier: E1:8D:89:B6:DE:4D:57:AC:DA:0B:2B:FC:0D:74:AC:94:C0:74:AB:E4
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial: 019A71B84F3C508B441080086702CDB46AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number: 0FDF
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: zOw6stqKC6NzCGwBYfnViQ4CcFLhBeV5scJ7w6iSjfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4f:3c:50:8b:44:10:80:08:67:02:cd:b4:6a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=e18d89b6de4d57acda0b2bfc0d74ac94c074abe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:92:bd:99:d0:35:5f:76:5d:17:c6:6d:e3:
5d:ec:c2:1b:92:a0:36:89:63:e4:07:4a:b0:b0:fd:
fc:55:f6:c9:67:d7:96:a9:b9:83:93:12:0a:10:78:
fa:29:c9:bc:d3:c1:65:94:17:3e:23:63:6c:1d:bf:
a1:61:cc:47:2a:cf:e8:ba:eb:15:90:9c:a1:a6:40:
11:92:13:12:d3:31:7e:de:79:95:87:c1:65:90:e2:
ab:cf:8d:f7:42:77:26:9c:a6:a4:ca:9b:79:67:fa:
13:73:3a:13:af:a4:02:1f:cd:f7:86:25:7e:36:af:
27:9e:37:cc:4e:7f:a8:1a:2e:8c:84:ba:94:88:2d:
12:7a:d9:3a:4b:24:d7:ac:26:07:26:6a:b0:d2:63:
96:52:33:20:4c:b8:dc:61:7e:07:9e:ab:4a:71:64:
e9:cb:88:c8:03:a5:8e:c4:21:44:d6:9a:f5:72:3b:
86:18:59:66:99:71:bf:9b:be:17:a4:ae:5a:b5:55:
9d:27:91:20:58:89:fe:81:f3:e6:3b:75:44:4a:e3:
80:55:bf:68:a9:44:8e:f8:f6:aa:7b:85:ac:98:a4:
1c:85:5c:0e:31:cc:5a:27:52:bf:f2:ac:b5:71:29:
4c:7b:34:32:7c:b4:09:0f:22:d9:ff:3f:bb:d4:0d:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8D:89:B6:DE:4D:57:AC:DA:0B:2B:FC:0D:74:AC:94:C0:74:AB:E4
X509v3 Authority Key Identifier:
keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b0:76:2d:0d:f2:96:fb:a6:a9:f4:de:e6:a4:9b:c6:85:38:
c3:c0:5d:0f:92:16:75:9b:65:54:2e:03:90:c2:41:f2:7d:f9:
17:b6:32:a3:de:ce:09:0c:12:92:3a:17:01:ae:38:c1:19:eb:
b3:4a:9d:ef:12:4c:5d:3b:14:4c:a4:bb:d0:8b:4a:e4:a4:82:
ef:d0:0e:1d:14:99:dc:02:6c:da:07:ea:27:61:4c:e7:a6:fc:
55:e6:2d:6a:92:54:d3:e1:69:69:d2:6c:35:f9:09:77:2a:34:
cf:97:e8:1d:a6:0e:23:2a:bb:45:4c:66:4f:22:76:64:bc:e8:
c5:b7:5c:aa:b1:c2:62:a1:db:e7:c7:cd:d8:32:52:d6:4e:7e:
da:36:d8:31:06:99:c2:d5:a7:24:5e:a7:bc:d7:5f:ad:f1:e2:
a3:11:af:f2:0d:ef:75:7b:a4:68:20:5e:36:3b:aa:1e:59:14:
6e:39:9f:4a:2d:d2:76:e1:98:d3:c5:ae:97:0a:13:d4:42:6e:
94:e4:27:00:e4:9a:15:38:bb:4e:c4:82:33:80:7c:aa:65:8e:
44:74:50:c5:37:44:73:09:61:fd:38:64:c4:61:c9:ab:95:75:
8d:22:86:50:4b:3a:34:96:ff:07:1c:b2:4b:ef:84:fc:8b:6f:
32:14:1e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:33 2025 by rpki-client