Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier: V6yfzAyZAG+vLmAx9PfKpwipApc6hXfNgKWDVauc6U8=
Subject key identifier: 00:41:A2:03:CA:09:6B:5E:FA:82:0A:8C:A5:D5:03:00:9E:CC:12:DE
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial: 0198D660BD79B0B2E5C868FEDB2AB17DE131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number: 0F0A
Signing time: Sat 23 Aug 2025 10:02:00 +0000
Manifest this update: Sat 23 Aug 2025 10:02:00 +0000
Manifest next update: Sun 24 Aug 2025 10:02:00 +0000
Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: Hy5hME1mxZNpRg4mft7sO7CPVe9kfnOQ63U+8p3Nq7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:bd:79:b0:b2:e5:c8:68:fe:db:2a:b1:7d:e1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Validity
Not Before: Aug 23 10:02:00 2025 GMT
Not After : Aug 24 10:02:00 2025 GMT
Subject: CN=0041a203ca096b5efa820a8ca5d503009ecc12de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:26:d3:db:5b:4f:15:a6:04:96:05:e2:07:
92:80:ca:af:a2:b0:00:26:7c:6c:91:31:e6:98:b5:
d2:b0:fa:b9:e4:25:ea:b9:cf:99:ef:17:52:d0:33:
75:de:ab:41:79:1d:88:e0:85:41:87:21:0c:96:46:
52:6a:73:8d:bf:35:05:bc:9d:07:e4:6b:49:99:f8:
25:ea:34:72:e2:79:79:a0:a6:00:c0:62:d9:a4:01:
59:4e:94:54:d6:da:70:01:d2:ac:58:57:b0:43:91:
97:a8:7b:98:ff:d3:04:5e:cb:05:7f:d0:32:57:ba:
9b:d2:f7:48:ed:4d:77:83:c4:54:65:f7:20:72:39:
4e:29:da:c7:85:79:3d:8b:26:ef:dc:5e:2d:f8:50:
b9:86:7f:a6:f4:79:fa:76:27:b0:3c:f5:6c:82:d0:
91:39:ee:0c:1d:bb:f4:ca:d3:de:ba:f7:00:a5:b7:
37:0d:61:a9:e6:c6:ab:a6:df:23:05:f3:14:92:41:
57:78:f8:5d:5f:de:b9:c1:74:39:cb:de:ee:75:dd:
f3:8f:55:37:0e:da:5f:d2:c2:2e:51:01:01:e4:93:
ff:d9:ce:32:92:09:03:e4:10:cf:5e:4d:a8:df:62:
77:19:7f:fb:70:3f:19:5f:7a:60:66:89:ac:fb:2e:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:41:A2:03:CA:09:6B:5E:FA:82:0A:8C:A5:D5:03:00:9E:CC:12:DE
X509v3 Authority Key Identifier:
keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a1:90:13:e2:61:43:86:96:45:70:ee:c7:2c:06:ef:e1:d0:
c7:3b:81:82:bd:2d:87:fa:a8:d0:46:8c:73:ba:76:a0:e6:4b:
e2:c9:0a:7a:60:9c:20:5f:fd:47:02:a7:60:b6:7e:21:18:b0:
b8:db:ab:34:02:64:f3:52:53:2f:18:36:6d:e5:59:e6:13:91:
91:15:7e:f5:c9:46:6e:26:89:16:a5:8d:29:62:88:eb:3e:49:
9f:0b:3f:fb:c9:c4:ca:13:db:15:f9:20:d1:d3:8e:43:e9:52:
34:a3:5f:ff:aa:f0:ee:96:0a:9d:49:57:db:39:b7:a3:92:64:
74:f5:6e:da:94:ab:02:db:83:47:ad:15:67:38:ba:49:ab:6a:
c0:25:53:c4:0e:ba:ee:e8:63:34:db:56:47:4b:50:f2:a6:ac:
77:b8:72:30:9d:8e:eb:30:0e:25:4d:9f:3a:1d:fe:3b:77:7d:
b5:88:6e:cd:b2:8a:4f:5e:f8:23:be:5e:f7:80:ab:2b:76:d7:
35:a8:a0:2b:03:60:77:e6:9c:08:d2:ef:20:1d:2c:61:85:41:
e7:44:df:8b:61:da:b2:09:e3:a3:e4:37:09:37:68:07:0a:37:
8a:d1:20:97:a8:14:40:e5:a2:d6:23:a8:54:84:6b:ef:e8:aa:
af:39:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:02:39 2025 by rpki-client