Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: vsRs4MJC53g3DWL+3Hl1bg/PPsk6E+CSnd17J2rKlPU=
Subject key identifier: 9A:8D:AF:1F:61:54:E8:17:B0:82:3F:FC:AA:BE:1C:0B:AB:0F:37:45
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 019A0035AB5FB0F2AD7BEB626C5B63FEAD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 0EDE
Signing time: Mon 20 Oct 2025 06:01:48 +0000
Manifest this update: Mon 20 Oct 2025 06:01:48 +0000
Manifest next update: Tue 21 Oct 2025 06:01:48 +0000
Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: J5r0iQtnQJKtPi+1SjB2Nxl5vlNvA+kK3OyTxbbiftU=)
2: ffTvs6YF_hXAEglDFhneoTAWA7Y.roa (hash: McS9n7bcKq8O21qZ8IIp3IHODw/eCLO/50XCpVXjy20=)
3: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:ab:5f:b0:f2:ad:7b:eb:62:6c:5b:63:fe:ad:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Oct 20 06:01:48 2025 GMT
Not After : Oct 21 06:01:48 2025 GMT
Subject: CN=9a8daf1f6154e817b0823ffcaabe1c0bab0f3745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:10:7d:78:9a:2a:74:b7:60:c6:e5:5b:05:3d:
95:d1:4d:4d:4c:b5:d2:0f:40:6e:43:3d:83:bd:c4:
36:d3:49:7f:06:d6:d7:98:da:a0:25:82:9a:be:28:
53:4f:3b:cb:20:54:db:b4:6b:fe:d5:a3:67:b8:72:
1d:07:1a:77:c5:e0:e6:28:aa:1c:c7:49:2e:be:f8:
f8:1e:a1:f4:8c:61:86:c1:14:18:88:36:81:c6:91:
3c:10:59:8a:73:89:ed:c5:25:5d:37:75:20:6f:ea:
39:cb:7d:ea:53:5b:1c:df:4f:f8:8a:8c:08:b9:5a:
39:cd:30:1c:44:d5:7e:91:a4:57:35:f4:d1:fe:f5:
ff:4a:82:98:1e:b1:a2:a8:bd:e5:ff:2e:20:7c:e0:
01:44:35:eb:ba:d8:0e:24:31:3e:ea:a1:1a:e6:3a:
e5:bb:f2:3c:bb:bf:a6:c0:86:c5:59:7e:e5:29:ef:
1c:69:68:50:10:43:41:3c:8b:60:27:a8:50:07:ee:
a4:fd:99:03:d9:5a:6a:7b:3e:6c:5b:0f:4e:42:26:
9c:65:5d:d0:a3:82:9c:25:f2:cf:0e:4e:87:e5:f6:
e7:48:c4:8f:27:32:ff:14:32:32:5a:39:9d:90:be:
dc:01:52:32:3f:45:7f:14:b0:07:86:5d:cc:1a:c2:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8D:AF:1F:61:54:E8:17:B0:82:3F:FC:AA:BE:1C:0B:AB:0F:37:45
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a4:a8:74:dc:5b:3a:b0:77:51:2d:c3:a1:da:94:10:54:d9:
95:f0:db:b4:05:d0:b3:c8:59:a2:29:4c:6c:25:7f:41:6b:30:
05:d3:ff:aa:7e:90:b2:70:16:00:39:9c:58:bb:ba:ff:12:b7:
9f:ff:a5:bd:05:bd:2a:b3:48:6e:43:64:5b:ee:bf:e9:04:df:
4b:a1:57:df:88:52:f1:fd:a0:47:92:f0:ec:42:c3:d7:70:4d:
d6:6d:9d:e9:bf:21:82:da:a2:a0:ca:36:ae:bd:7f:cf:85:df:
aa:cd:d4:dd:23:6e:0a:c6:ee:5d:06:fe:5d:c7:61:7c:ab:3f:
d1:9a:91:52:1b:eb:55:11:1c:45:48:7d:95:10:f7:3a:02:3f:
15:96:05:7b:66:18:50:39:4a:72:e1:f5:9d:ba:33:6f:49:0d:
3d:20:7b:12:40:56:a3:78:74:22:00:7e:99:72:f1:5f:23:57:
d9:7d:de:2d:d2:83:1d:42:66:c2:57:b3:0f:3e:eb:64:57:e9:
00:ef:e0:b7:f4:ee:38:49:b9:60:44:d7:68:6a:54:d5:be:39:
06:0c:4d:8c:06:48:8e:5e:40:5a:f7:b8:55:e9:16:ad:f0:df:
87:f0:76:41:60:a3:b2:c1:0c:58:6e:47:49:3d:ac:72:12:aa:
c8:30:c9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:21 2025 by rpki-client