Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: Y2pHEabzmKUxicq0qTpfDJyblU+3RvallUzOXpsgCNs=
Subject key identifier: BB:30:F9:A5:D9:74:3A:EC:C2:10:6F:95:34:FB:3E:60:15:50:EF:DC
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 0198D705F1A9B908D2466EB3E3C60E19B487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 0E44
Signing time: Sat 23 Aug 2025 13:02:27 +0000
Manifest this update: Sat 23 Aug 2025 13:02:27 +0000
Manifest next update: Sun 24 Aug 2025 13:02:27 +0000
Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: OLtoRgiE80/ysBpRtsdUmk8ecnFN9GP2rJC72mH5B7A=)
2: ffTvs6YF_hXAEglDFhneoTAWA7Y.roa (hash: McS9n7bcKq8O21qZ8IIp3IHODw/eCLO/50XCpVXjy20=)
3: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f1:a9:b9:08:d2:46:6e:b3:e3:c6:0e:19:b4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Aug 23 13:02:27 2025 GMT
Not After : Aug 24 13:02:27 2025 GMT
Subject: CN=bb30f9a5d9743aecc2106f9534fb3e601550efdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:ec:17:29:04:5f:77:35:58:80:cb:4e:ca:
9e:70:de:f5:8c:6e:e2:a1:90:60:33:18:48:25:79:
39:aa:1f:c0:ff:0b:ce:a3:30:07:1e:df:fc:d2:c5:
bc:20:0b:35:47:92:ee:99:43:50:5b:a1:31:51:31:
09:9b:30:f4:89:5e:0a:06:bb:48:4d:13:3e:79:08:
f6:7d:28:af:9e:8d:e2:fa:da:58:73:43:13:26:d0:
5a:14:40:cb:24:97:94:d8:cb:a1:cc:cc:20:78:65:
36:91:f6:80:ca:9b:7c:5d:11:fd:58:1d:1c:ec:53:
e5:8f:eb:cc:16:f1:45:79:59:76:aa:9d:34:6d:55:
5b:6f:96:e0:ca:a0:10:3e:11:cb:12:c5:d8:3c:13:
9f:c1:23:5d:83:38:50:8b:01:c4:06:43:9c:06:48:
6e:c1:9f:4f:82:60:08:94:83:e6:80:8a:12:88:9d:
84:8d:63:e7:b7:75:79:21:5c:78:5b:e6:ce:58:22:
4e:37:76:ad:69:fa:b2:99:32:67:3a:5c:0d:e7:e0:
ec:2e:f0:66:33:16:07:9f:08:17:18:2a:38:59:8e:
7e:c5:48:c4:aa:33:dc:48:f0:77:02:a7:8d:78:45:
3c:44:09:69:b3:42:5a:7f:0f:ba:ba:33:55:91:b8:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:30:F9:A5:D9:74:3A:EC:C2:10:6F:95:34:FB:3E:60:15:50:EF:DC
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:71:82:95:f5:6d:38:6e:4a:8b:aa:89:62:b1:53:8c:34:62:
df:d4:ac:10:06:c9:99:54:fe:54:5b:c7:72:36:1b:3c:1a:80:
84:c3:ee:d4:de:8e:ee:23:40:33:cb:27:86:f7:b8:28:ee:1b:
46:3b:14:09:ff:9f:a6:61:b6:fb:7e:c1:59:f3:9e:29:4b:7b:
6e:3d:ee:18:e5:bb:2b:87:b8:e6:5a:e2:d0:f2:c5:f1:74:88:
c9:22:ef:02:87:9d:43:e8:87:ca:90:78:4d:4b:7a:9a:84:53:
76:21:1d:72:c0:dd:e6:4b:d7:0c:05:83:99:c8:f6:03:bf:8a:
48:04:c8:61:33:ac:46:58:43:14:09:57:08:f2:0f:76:2d:2d:
fe:46:a0:5d:4d:2a:98:bf:bb:5c:76:81:89:71:cf:ee:c2:c9:
a5:ea:51:90:c0:f6:b3:6c:bd:fd:83:54:88:e3:a4:51:23:fc:
ab:c4:96:85:04:f4:98:c3:a2:8f:a7:4a:0b:51:10:24:be:48:
e8:2f:57:70:64:d6:57:69:eb:06:f7:6c:77:25:17:38:d6:95:
9d:dc:bd:54:ca:a0:5d:93:ce:db:cd:8e:05:05:c6:de:bb:c0:
f1:84:79:df:f9:d8:3d:a0:e4:eb:e4:3d:5c:a2:40:ed:5e:a8:
47:ce:27:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:28 2025 by rpki-client