
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
File: Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json)
Hash identifier: MZQdMMomn5MmdsPTvVuIeTcEA+3dQWcYgGYRyJIt7Yw=
Subject key identifier: 06:AE:84:83:CE:48:3E:D1:20:FF:E3:4E:6E:FE:DF:41:AC:2D:17:3E
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Certificate issuer: /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial: 019A01481DE2F86EDDBC552565E5E6A7A8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
Manifest number: 0B7D
Signing time: Mon 20 Oct 2025 11:01:34 +0000
Manifest this update: Mon 20 Oct 2025 11:01:34 +0000
Manifest next update: Tue 21 Oct 2025 11:01:34 +0000
Files and hashes: 1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: U4jRwU27mCWjsfGFtcfeef2qCHO34syCX/vWvMe3f6M=)
2: NY6GkITWKlUtVSGSEXVFnWklUFA.roa (hash: bc90pfjZ3z6bn5Sd1cSbU6mDm4LudyLIA08FEeaNBvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:1d:e2:f8:6e:dd:bc:55:25:65:e5:e6:a7:a8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Validity
Not Before: Oct 20 11:01:34 2025 GMT
Not After : Oct 21 11:01:34 2025 GMT
Subject: CN=06ae8483ce483ed120ffe34e6efedf41ac2d173e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:5c:9b:fd:55:e0:e2:f5:1c:47:a0:fc:20:
5e:d9:00:7e:cb:26:99:bd:39:d2:e9:b8:66:80:cb:
5b:01:f3:af:d6:d9:c0:ac:d5:d6:b9:c4:d7:e8:a0:
37:c0:ac:1c:82:04:25:29:ca:59:7e:e5:68:7a:82:
d4:03:87:df:be:c8:c3:4f:1b:62:c5:f6:1a:ed:12:
7b:4f:e0:f0:23:0e:18:18:40:df:c8:a0:57:ad:8c:
ea:a6:d2:d2:cb:46:a1:32:99:f4:b4:34:49:84:bd:
58:c4:4f:42:6c:c7:be:9d:ce:cd:88:18:2d:fc:21:
a2:93:22:50:5a:fd:d3:f6:67:b5:d4:3f:85:11:0c:
c3:36:24:ea:23:4a:e3:be:25:f6:37:ae:45:5a:0f:
a8:27:a9:ad:ff:31:e4:7a:3a:22:d4:b5:c7:f7:1b:
d8:f9:5e:16:61:11:80:75:b4:64:76:09:a0:7e:11:
a6:24:5a:dd:07:71:7d:48:ed:df:c9:d5:9c:f2:90:
c2:28:f6:eb:26:0c:e2:b0:3f:56:2d:fc:18:65:e3:
fe:16:6a:bc:41:e3:47:7d:89:7a:4e:52:0e:fa:58:
07:1b:75:f8:59:9d:86:17:f6:78:1d:78:a0:64:e8:
ee:e7:4a:33:2b:11:ae:27:87:b7:b2:0d:fe:bd:44:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AE:84:83:CE:48:3E:D1:20:FF:E3:4E:6E:FE:DF:41:AC:2D:17:3E
X509v3 Authority Key Identifier:
keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:30:3b:1e:36:be:8c:9b:96:3d:15:86:7b:91:18:b5:b2:84:
e0:a5:5c:03:52:8b:ba:c0:32:63:b1:74:54:df:3f:46:72:e2:
5e:3a:06:f7:29:b9:cd:f2:45:1d:50:89:e8:d8:e7:29:aa:a0:
13:e4:9f:83:4a:d3:c3:9a:7e:e9:32:9a:67:15:b0:a6:b0:c8:
20:37:31:4d:01:8f:62:07:e5:3f:55:4f:55:20:be:c8:4e:68:
0d:49:1e:e4:16:6a:2a:1d:d0:df:da:32:e7:cc:fb:dd:48:df:
d1:ed:66:d1:88:58:57:de:ac:5c:23:e4:b4:e5:51:06:5a:e6:
35:74:fb:43:43:32:5e:f2:b1:69:bc:f8:5a:6c:47:e3:2e:74:
17:4b:c4:00:e1:88:b6:9a:75:16:23:a5:94:7c:4a:56:e3:56:
b8:1d:ee:46:fc:a1:29:cb:43:75:3b:e7:8e:88:ed:bd:e8:17:
6f:cb:ed:5e:0a:e5:4f:e6:61:31:0d:5c:f0:0a:ab:3d:89:6f:
0d:1a:fa:29:56:f1:20:fc:8e:17:09:23:b9:a0:6d:83:f9:6e:
3a:c9:66:58:a6:42:b6:c6:00:4e:24:4c:c4:63:08:e8:d0:8e:
24:a6:4c:ed:ac:ae:45:40:75:a2:66:fc:f6:06:43:56:da:c9:
a3:d9:04:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:12 2025 by rpki-client