Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier: 3ONbRftemuHAGv/i0mqDJu3i5zTLPtSHkGNmo3Od9z8=
Subject key identifier: D7:95:52:9C:80:89:3A:8C:E9:2C:79:9F:2F:9D:30:1C:13:E0:0C:5F
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 019A71B830BED0CAC8A816203F1A5A3934D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:27 +0000
Manifest this update: Tue 11 Nov 2025 07:01:27 +0000
Manifest next update: Wed 12 Nov 2025 07:01:27 +0000
Files and hashes: 1: C8on01Bgko2Wx9jKjMpn7FCShCI.roa (hash: NvYVpYNTacJm9Dvti1H+p4nGJK6g8JeQhPdSMYmd5BQ=)
2: lBLUc28nwdLkSsrePQSmyxKstGI.roa (hash: vrIWIUHlJDuCxB1hzJyqC5GbG7oElAvbtOgjYcaloKs=)
3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: c5vr//OQOIO70A3qNPLorSp7nqazN42eIsj+icMU7z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:30:be:d0:ca:c8:a8:16:20:3f:1a:5a:39:34:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Nov 11 07:01:27 2025 GMT
Not After : Nov 12 07:01:27 2025 GMT
Subject: CN=d795529c80893a8ce92c799f2f9d301c13e00c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:8f:fb:bd:bf:9b:0c:c6:4e:f2:97:38:1b:
ad:c0:f0:ed:3d:4b:23:fb:10:4f:55:ab:53:2e:82:
be:17:d0:34:dc:68:17:3f:f8:6d:d7:38:a6:57:4b:
27:86:9c:d8:08:a5:9b:da:7c:f9:a6:43:43:50:4b:
50:50:2a:d7:6f:17:3a:29:f2:1d:81:46:59:a8:ae:
ab:a3:63:20:49:9e:35:6e:3a:98:ce:8c:44:37:eb:
ec:eb:43:4d:25:bd:82:8b:14:c0:4b:6d:d4:ad:be:
73:70:b7:e1:d0:9c:6b:12:d5:e7:23:cd:c5:9a:11:
0b:6d:94:dd:0a:3a:ed:99:b1:6b:1f:f3:35:7a:c9:
5e:22:f4:66:e3:b1:c4:e9:fb:b0:0a:41:e3:e9:f4:
54:f1:5f:d3:e4:00:b2:11:67:e9:c2:07:e8:2b:5e:
01:76:19:ac:37:00:c7:ee:e8:0f:7b:55:df:b7:d2:
c8:43:90:c0:c6:eb:ea:33:a6:b3:75:1e:6d:78:e7:
b8:1d:46:23:b2:89:89:7f:ba:93:d8:a5:43:34:10:
31:4e:dd:bb:00:93:22:6a:45:56:b8:a5:dc:58:f9:
6e:88:50:16:1a:6b:62:49:31:ab:6d:0f:46:a4:d1:
8a:01:46:c4:8d:40:e9:c9:02:b7:9f:34:ef:25:d6:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:95:52:9C:80:89:3A:8C:E9:2C:79:9F:2F:9D:30:1C:13:E0:0C:5F
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:31:43:05:4a:eb:31:ab:c7:ca:59:09:a2:c2:b8:70:b8:5c:
cc:81:f1:f0:64:b1:13:1d:41:f8:76:9c:e5:04:58:c3:90:4b:
01:a8:b4:47:bd:76:9e:99:c3:12:e8:78:20:b3:ca:6e:48:26:
c5:7d:23:18:a9:df:3a:6b:d0:16:bd:53:30:fc:0b:0b:8a:50:
04:59:7a:d0:4c:32:4c:27:7e:63:b2:e7:f5:40:c5:23:1d:45:
b3:6e:f7:8b:9b:a7:ae:76:ac:08:f2:93:fd:de:75:02:9b:cd:
ea:6b:6f:ea:dc:e7:d8:db:d6:38:c0:59:cf:47:ab:f2:cd:1c:
3d:31:83:d3:71:7e:e6:aa:8c:81:72:80:b8:d4:cb:6f:2e:a6:
a7:ff:8b:e8:58:09:f6:65:df:5e:17:12:57:d7:6f:b0:05:8f:
9e:cc:33:c9:f1:d4:63:98:56:d4:2c:ee:16:48:ca:19:c9:4e:
79:17:9b:aa:02:5a:ad:cd:94:31:15:cb:05:98:36:4c:d0:1d:
94:07:ce:97:55:cd:c3:c7:97:33:c6:87:79:41:c1:1d:d9:cc:
03:d4:07:e0:c7:8c:6a:9d:bf:c5:c6:d2:c7:a1:74:fe:f3:36:
ea:30:36:26:2e:bd:2d:bf:30:b5:85:b1:4a:1b:17:34:02:b2:
76:30:cd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:26 2025 by rpki-client