Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
File: dw0111Zu5yRuTSEzy95Ip3RCPHc.mft (raw, json)
Hash identifier: twl/Dyv9FSq1qqyD0arM9zciBAeEYNSvM9gNG7M0J/Q=
Subject key identifier: 71:08:DD:D5:CC:81:78:B3:64:95:59:16:49:F1:C5:E3:56:71:C6:F5
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Certificate issuer: /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial: 0197B7B364B95D460C363A3A6A9AD159237A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
Manifest number: 0999
Signing time: Sat 28 Jun 2025 18:01:16 +0000
Manifest this update: Sat 28 Jun 2025 18:01:16 +0000
Manifest next update: Sun 29 Jun 2025 18:01:16 +0000
Files and hashes: 1: SOT0W2XrP7CCow7oMidVP0WeTQc.roa (hash: LK/wr/vv637+E1XEkLAUiLeI/zSDn9f20e+XXEbQLBM=)
2: ZHw9z1FJzdvIzznM9dzN2O5C56I.roa (hash: bAuKlmhtwV1RMYb3UiAoj3013/bGmnUu7vNpvbyFAaw=)
3: dw0111Zu5yRuTSEzy95Ip3RCPHc.crl (hash: YHgtx1IynXhXekzZKNPywtP7EhlTzwDSoVjFL/Fo7ks=)
4: kb1hhl4VhznPe9ar0pe3UEE3K-I.roa (hash: smgbn2o+yW8NSkrB4nhx/ecIptLt+NRlqrEvEJN1ma8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:64:b9:5d:46:0c:36:3a:3a:6a:9a:d1:59:23:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
Validity
Not Before: Jun 28 18:01:16 2025 GMT
Not After : Jun 29 18:01:16 2025 GMT
Subject: CN=7108ddd5cc8178b36495591649f1c5e35671c6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:de:f3:1a:77:52:44:3a:75:12:e9:c0:d9:
d6:18:4f:a6:b8:d7:5e:4c:4f:ac:7e:14:7a:7f:7f:
c6:39:cc:10:7f:e9:8d:06:e8:75:2d:a9:fe:ad:d4:
92:71:ae:e9:cc:8c:ae:1a:83:34:5b:15:cb:04:22:
4c:53:8e:f3:7a:c7:c3:e7:c6:3f:c4:7b:b8:31:4c:
52:a6:87:30:9f:af:8c:ac:a6:26:35:9c:fc:c4:9c:
eb:21:16:9c:db:7d:af:e9:cf:55:5e:5e:d1:33:0a:
a5:08:10:ad:9b:41:88:49:22:f8:11:5a:58:65:e4:
3a:7d:93:a3:2a:70:b5:3b:ea:d4:2e:5b:c9:96:20:
c1:a3:8f:c7:bb:ac:0b:65:77:e5:45:07:ce:94:70:
4e:55:98:8c:95:93:6a:72:bc:33:43:a8:1b:9a:e5:
2f:94:b6:4a:d4:ec:74:09:ee:7e:63:3f:38:af:dc:
d9:2e:78:83:a9:9f:5c:e2:33:87:be:7b:e4:c7:05:
5b:d7:a6:74:ed:cc:e6:c0:f7:11:d3:27:94:bb:52:
6a:50:fd:37:b3:27:eb:6a:d4:4f:37:0c:c2:10:0c:
fa:9b:43:90:99:cb:2c:90:08:70:70:1c:f1:28:61:
eb:73:2e:39:d2:e0:14:3f:1d:37:f2:92:5b:7b:e9:
0c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:08:DD:D5:CC:81:78:B3:64:95:59:16:49:F1:C5:E3:56:71:C6:F5
X509v3 Authority Key Identifier:
keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e2:46:66:6f:74:7a:e5:5b:17:31:00:94:5a:04:2c:52:92:
13:86:fd:88:2a:0a:6b:e4:72:61:d1:2f:3b:2c:f5:5e:67:33:
22:78:ff:31:c7:d1:17:30:ee:dc:1b:82:24:bd:c1:05:a5:ef:
c7:5f:3a:c4:d9:6d:be:13:97:35:7f:bf:8c:5f:93:a2:25:7a:
0c:42:b9:fe:f1:62:3a:97:45:4d:8b:fc:d2:28:f4:3f:6c:3a:
51:63:77:01:9f:b6:82:fa:23:c0:04:fb:38:4e:4e:21:43:2c:
d6:8c:63:93:b8:78:61:cc:be:1a:f7:ba:bf:b3:29:99:40:62:
7d:aa:83:eb:21:39:dd:ef:5d:df:b1:38:d7:1c:74:e4:2e:9d:
e5:0d:ff:fe:53:e2:60:f8:fc:34:bf:d5:ed:4d:d6:ee:02:69:
52:49:24:6c:9a:a2:27:87:10:cb:39:08:b6:bd:ea:eb:70:ee:
ef:f0:9c:a4:10:c5:fc:ba:f8:0f:0e:7f:cf:76:15:e0:80:44:
f2:6f:a7:19:b8:71:ac:f3:a2:61:82:34:f8:f0:c6:8e:27:b7:
ee:17:ae:63:d5:c8:bb:0e:8d:74:72:87:e5:1f:fe:10:f0:11:
48:15:e5:fc:54:93:0b:8b:62:94:21:ba:f8:8b:ad:e6:e2:34:
7e:07:07:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:58 2025 by rpki-client