Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: kreBzqEFjkpKyP8cLvrxdxJekCbbUhcIG1b2/VwugFg=
Subject key identifier: 92:12:4A:70:F0:6D:C0:42:CD:10:2C:98:FD:6A:3B:AC:35:65:AC:E5
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 0199FCFDA91CAB33E72F4AEDE7999E6E1D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 0465
Signing time: Sun 19 Oct 2025 15:01:46 +0000
Manifest this update: Sun 19 Oct 2025 15:01:46 +0000
Manifest next update: Mon 20 Oct 2025 15:01:46 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: uYPp+LKmBYD7g3g03rOcHkvpemOWig/7W268IcbBi0Y=)
2: PPz_1wH3hqFDjLC-MrIMRrZJxeQ.roa (hash: ZY1q21nV+Hi/oVRVSMTtHd27zoQ6myzruEINZqqxjKM=)
3: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (hash: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a9:1c:ab:33:e7:2f:4a:ed:e7:99:9e:6e:1d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Oct 19 15:01:46 2025 GMT
Not After : Oct 20 15:01:46 2025 GMT
Subject: CN=92124a70f06dc042cd102c98fd6a3bac3565ace5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:bb:8e:94:09:30:6c:1b:2b:1e:e4:f9:0e:
1e:ac:f3:fe:c1:1e:e0:af:b4:df:d1:01:e6:96:5e:
fe:07:68:c9:80:25:c5:f7:ed:a3:55:e6:36:85:91:
6c:2d:0a:d5:f6:7c:0f:66:c0:a2:2a:e0:15:57:d7:
d2:4b:27:f9:93:66:56:e7:ad:99:4b:92:61:00:0a:
ff:57:db:9d:13:1e:99:d7:08:18:9b:c3:c4:9c:fc:
fc:fc:27:b5:f7:af:38:3e:e0:9d:6c:b8:59:bd:55:
6a:32:3f:66:12:1f:67:22:95:ac:1b:8d:1f:25:26:
30:a3:10:98:f7:6f:b2:4d:f3:ff:00:22:44:74:ae:
3c:39:b9:6a:e2:b7:0d:39:b8:7d:47:e5:62:3a:42:
94:52:4d:37:cb:5f:23:8d:73:02:8e:c4:0f:eb:d4:
16:4f:29:99:86:57:1a:53:43:85:11:f4:a4:4c:e8:
41:74:7b:15:52:a5:0c:ee:4d:d6:ff:39:d9:05:56:
92:7b:12:98:a9:96:89:a8:a2:a7:eb:09:bf:ca:0a:
12:4e:4d:47:77:d5:97:10:d7:0d:84:9b:e6:81:4e:
73:88:79:79:9b:0c:a3:60:c5:73:61:13:7f:79:24:
62:0e:cf:83:09:d5:36:38:8b:16:6e:4a:93:f1:7a:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:12:4A:70:F0:6D:C0:42:CD:10:2C:98:FD:6A:3B:AC:35:65:AC:E5
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:62:41:18:2a:a9:4b:6a:68:39:3b:3a:bb:14:1f:1a:a8:1b:
64:14:b8:66:07:c9:ec:ee:83:ee:a0:1a:aa:27:7a:06:1d:72:
12:13:28:d0:e9:bc:61:43:ef:f2:4e:c1:71:44:0a:2d:e6:74:
c3:57:38:cc:4d:2f:fb:d5:50:a3:88:bf:23:1c:1e:fc:c2:2f:
6a:02:7d:d6:90:fc:57:66:fb:f6:e9:ce:36:da:60:e1:e2:75:
5d:8c:72:48:67:70:fc:35:ae:82:f8:ee:fb:77:a4:33:4a:37:
90:ed:33:e1:dc:0e:8c:00:7e:60:1e:f5:d5:ac:36:78:74:15:
66:9b:5e:ad:f0:39:80:59:19:1b:7d:7f:8d:9b:5b:4f:92:ee:
53:e1:d1:45:aa:9d:68:a6:a1:b2:fe:95:50:c7:b8:1d:66:9c:
cd:4c:2a:5a:2c:e0:59:5c:05:14:f6:0e:09:ef:49:2a:85:25:
78:a7:c7:82:7d:0e:47:52:4b:83:75:4c:0f:d0:46:0e:db:68:
10:a7:59:e1:c6:89:46:bb:84:9a:c2:96:5f:0a:79:43:59:e0:
3d:f9:69:fe:dd:d0:67:f1:31:e0:4f:87:c4:87:cc:ae:a6:9b:
fe:d6:f3:25:cd:67:9f:bc:35:e4:cc:d5:3f:df:10:48:5d:90:
82:06:8c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:16 2025 by rpki-client