Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File: DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier: J33n9XtyT/yRfNCSCxRD241uow8xJytVYYLAnbgTOAk=
Subject key identifier: 3D:B3:A1:BD:A4:5B:2F:E9:2E:3C:8F:AE:A4:7B:23:EF:F5:12:4E:6C
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer: /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial: 0198D62987FE9D598155B8466F9C0FD7F181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number: 095A
Signing time: Sat 23 Aug 2025 09:01:42 +0000
Manifest this update: Sat 23 Aug 2025 09:01:42 +0000
Manifest next update: Sun 24 Aug 2025 09:01:42 +0000
Files and hashes: 1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: dAKCLvcvweOKe/EsSv0cGmAClN3PRC1PcWoFrNL26I8=)
2: QGurDva1s4alg8iGu6qVYxbvUlE.roa (hash: eFsT2lU76i8V7l6B+0U5YuaE3bHnUDv4afzG2LbiiJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:87:fe:9d:59:81:55:b8:46:6f:9c:0f:d7:f1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Validity
Not Before: Aug 23 09:01:42 2025 GMT
Not After : Aug 24 09:01:42 2025 GMT
Subject: CN=3db3a1bda45b2fe92e3c8faea47b23eff5124e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:d7:5c:d0:ae:63:cd:5f:46:3f:c0:2d:38:
67:10:0b:5f:3a:f8:ee:62:0f:75:c8:20:fb:c6:80:
3c:ab:3a:71:04:73:2b:37:03:62:d1:97:4b:47:7f:
5a:a8:b7:3c:48:c4:48:42:66:90:ee:56:81:e7:29:
03:42:cd:0f:26:6e:b2:03:ef:40:8e:0d:98:c0:2a:
96:cd:76:75:29:57:0a:55:70:66:0c:89:35:b6:e6:
98:73:0c:3f:5f:cd:74:d5:9e:3e:b6:d7:39:17:93:
1d:8a:c8:84:44:c2:0e:46:a2:a4:64:bb:71:da:2c:
9d:cd:44:a4:0c:08:3d:9b:69:37:57:ba:c7:bc:c6:
4c:dc:a6:80:9f:42:01:21:d1:c7:64:1c:3f:a1:8e:
9d:03:0d:c1:22:cc:ab:e0:d0:9a:2a:9c:b0:91:af:
3c:08:e5:f0:c4:8d:ae:2a:7d:22:67:3c:9a:cc:64:
e3:e8:ef:c4:18:59:7a:5f:8c:11:d8:5e:8d:17:40:
c8:b3:a9:32:6e:12:c2:8d:fe:6a:54:d3:bc:62:d0:
f5:bc:d4:ba:48:fb:16:5d:72:5b:8f:af:65:be:8c:
9b:53:1e:5d:2a:04:de:9b:4d:a1:f4:08:5d:e9:62:
17:5e:4d:69:09:10:0f:78:82:18:9b:86:8f:97:a6:
69:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:A1:BD:A4:5B:2F:E9:2E:3C:8F:AE:A4:7B:23:EF:F5:12:4E:6C
X509v3 Authority Key Identifier:
keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3a:1e:2c:d4:98:e1:bb:a9:2a:6d:9b:5d:42:cb:6e:62:27:
6c:61:cf:9e:c6:bf:3b:d0:07:47:23:3b:1e:e9:20:e3:ab:d8:
ef:48:81:62:bb:14:5e:18:b0:c3:27:90:20:4e:1b:11:18:0f:
e0:0b:68:e3:ba:c3:47:71:88:67:96:ce:db:78:df:12:0a:45:
91:f3:ec:a1:37:ee:67:d2:35:09:01:a5:21:ca:87:cf:7a:f4:
ef:ca:c1:cb:bc:5a:53:70:16:f5:31:ee:6e:cd:89:63:73:33:
26:10:0b:51:8c:46:c2:50:d9:8d:b2:81:78:96:1c:35:37:fe:
83:1c:4c:83:1e:48:b3:ea:df:74:01:c3:7d:c3:b3:11:c0:6f:
3a:4a:fd:99:70:8d:32:2a:5a:02:78:78:31:32:86:f9:1d:ed:
03:27:2b:f1:77:0e:e6:d4:04:e7:a4:4b:6c:8b:bf:80:22:c4:
4e:2e:5f:55:ef:c7:fc:06:87:b4:14:3d:1a:e2:34:57:70:4e:
6c:05:1e:39:5e:37:50:9e:7d:08:c1:82:b8:9c:51:36:fe:df:
01:0b:f9:ab:b6:ae:5a:a8:c0:64:82:5c:92:c7:a3:59:c7:1e:
e7:ff:40:f0:87:ab:8b:34:ef:ef:eb:22:e5:d3:ae:9b:e1:53:
38:7e:57:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:00 2025 by rpki-client