Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
File: dw0111Zu5yRuTSEzy95Ip3RCPHc.mft (raw, json)
Hash identifier: NWSQKIRPzJiVZ12TOvWHHHF+2DYgT5MezYUyL9ZuOWw=
Subject key identifier: BC:BC:D0:51:55:2D:1C:14:4A:CE:0C:F6:5B:CE:EA:F8:95:85:20:A5
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Certificate issuer: /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial: 0199FCFDAF7606A5DD4C264027D7A7ED982E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
Manifest number: 0AC6
Signing time: Sun 19 Oct 2025 15:01:47 +0000
Manifest this update: Sun 19 Oct 2025 15:01:47 +0000
Manifest next update: Mon 20 Oct 2025 15:01:47 +0000
Files and hashes: 1: SOT0W2XrP7CCow7oMidVP0WeTQc.roa (hash: LK/wr/vv637+E1XEkLAUiLeI/zSDn9f20e+XXEbQLBM=)
2: ZHw9z1FJzdvIzznM9dzN2O5C56I.roa (hash: bAuKlmhtwV1RMYb3UiAoj3013/bGmnUu7vNpvbyFAaw=)
3: dw0111Zu5yRuTSEzy95Ip3RCPHc.crl (hash: wVz/Mg17sx0C21oaTYncOYUv5GFqqPUIpwurrdgdHUo=)
4: kb1hhl4VhznPe9ar0pe3UEE3K-I.roa (hash: smgbn2o+yW8NSkrB4nhx/ecIptLt+NRlqrEvEJN1ma8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:af:76:06:a5:dd:4c:26:40:27:d7:a7:ed:98:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
Validity
Not Before: Oct 19 15:01:47 2025 GMT
Not After : Oct 20 15:01:47 2025 GMT
Subject: CN=bcbcd051552d1c144ace0cf65bceeaf8958520a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:96:d8:01:d8:ab:9c:e6:36:9c:97:9d:21:
a3:6e:bd:af:38:75:ad:5d:1f:df:63:40:08:a9:30:
c2:62:c0:4b:ec:29:58:dd:b3:8d:19:dc:83:2c:db:
ef:85:39:8d:ef:96:f2:1b:f1:13:e6:96:da:e7:bb:
20:06:9a:7b:b0:bf:a3:79:07:23:44:5c:46:45:98:
80:dd:50:3d:3c:27:76:55:37:96:95:3c:e5:30:d1:
c0:03:c4:8f:40:5a:f5:ad:cb:52:d6:c6:d0:23:83:
01:f9:9c:9d:a0:02:2a:62:54:ec:76:0f:a6:82:30:
22:04:32:3d:27:a4:5d:f9:4d:da:0c:53:21:55:b3:
0c:15:87:f7:a0:4c:d5:ce:29:9e:e7:95:10:99:d8:
c2:2e:77:48:ca:70:c2:9a:39:ac:96:bc:d2:d0:ee:
f7:2b:95:7b:bc:d2:ca:e7:4b:5d:f5:72:3a:83:82:
bf:87:1f:e5:a5:22:a3:2d:6c:e6:af:9f:60:0b:6b:
17:5b:ce:9a:ed:70:b3:d8:bf:9c:cd:36:f1:27:82:
1e:f3:44:4b:93:1b:f5:53:3c:46:12:48:b4:56:c6:
2d:1f:25:9a:ad:ec:e7:84:8d:72:a9:71:1f:00:e5:
cf:7c:2d:da:3f:5e:1f:7f:4c:33:e9:ea:ee:1b:96:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BC:D0:51:55:2D:1C:14:4A:CE:0C:F6:5B:CE:EA:F8:95:85:20:A5
X509v3 Authority Key Identifier:
keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9b:a3:4e:2b:c7:83:34:c0:c9:45:78:5d:2e:80:c3:f5:30:
63:60:8b:6e:b4:36:13:f6:0b:3f:75:67:99:6f:4d:3a:43:b0:
a2:83:a8:0f:4c:cb:c3:24:ad:79:2d:f3:8b:c6:7a:87:6c:02:
c4:ef:51:a0:8f:fd:8d:16:5f:8d:e7:7a:a4:a3:58:d6:05:91:
a0:c7:93:13:64:01:9e:9a:d4:37:f3:42:ab:d1:99:49:f7:ab:
8e:39:5b:78:66:79:c3:5f:1a:f2:3e:c6:92:0a:aa:1f:35:59:
8c:ca:43:89:e6:b6:e5:1b:01:13:54:ed:3d:ec:a2:63:ac:96:
cd:41:d6:0c:d4:67:35:a5:5e:2b:16:34:63:59:68:e0:f4:c3:
05:33:ab:fb:92:3a:e8:a4:81:f4:3c:6a:0a:42:91:56:29:46:
6f:c6:2f:6e:ef:b1:95:43:8c:c5:e3:e8:95:dd:8e:d3:89:50:
24:36:94:bd:91:02:9b:d3:54:94:12:4a:6b:79:4d:d2:01:67:
94:ce:88:c2:8f:9d:d0:67:06:1d:68:23:07:7c:d8:e0:59:e1:
9c:b1:97:4f:25:03:da:86:5a:c5:63:91:20:2d:81:2c:81:b8:
f2:f5:63:d5:39:02:00:12:84:b1:8f:28:b9:6d:c6:fd:47:65:
53:a8:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:45 2025 by rpki-client