Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier: p1SmZrJbiIKAc2Zf5Ti0x8/OCEwouTdckqksR8y1oLk=
Subject key identifier: 6A:39:53:6D:08:D2:74:5E:A0:FF:2B:BC:93:23:69:4C:BB:88:96:AB
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 019A73A786520F0E4A1797805832FDFA6DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 16:02:29 +0000
Manifest this update: Tue 11 Nov 2025 16:02:29 +0000
Manifest next update: Wed 12 Nov 2025 16:02:29 +0000
Files and hashes: 1: 4mL1zKKLOxGn25fl7m9On5y2ZYA.roa (hash: 9EgYMO8cQ5z/aiE1aC8zT4GRbu01MVUJ2bPVFVsvu8U=)
2: jdL88fKfBRcDZQd2LJ3KQAGZWz0.roa (hash: Rtx6TLOA/PMGBKD0sU4jO9D8OJMlb2E7ArhYwQT50vQ=)
3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: m91sVk8Mv/velvS8tH4jPMlQAMV7Y4E0BMdoKB97QYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:86:52:0f:0e:4a:17:97:80:58:32:fd:fa:6d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: Nov 11 16:02:29 2025 GMT
Not After : Nov 12 16:02:29 2025 GMT
Subject: CN=6a39536d08d2745ea0ff2bbc9323694cbb8896ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:a0:c4:e8:4f:77:4e:49:0d:e1:5a:da:cc:
79:98:01:67:f0:5e:dc:55:8f:6f:93:dc:26:18:93:
9b:35:22:c8:5d:4a:17:d1:18:a4:57:82:0d:40:f9:
c1:f0:c8:c7:14:15:96:a3:c4:ea:31:40:d2:78:e4:
12:4d:b9:bb:39:d3:b5:b4:a0:60:61:b8:dc:15:31:
15:1c:45:28:9c:98:52:46:da:47:0d:f4:fe:43:93:
12:68:c1:1c:9a:c8:d9:68:8d:21:28:c2:db:21:ee:
2d:29:50:2a:9a:33:7f:8f:b0:5d:f1:be:fa:9d:0f:
f0:be:e2:30:a2:3c:2f:10:07:d5:b2:cd:25:f2:32:
16:7d:b1:a3:6a:76:bb:b7:32:8b:5b:66:7f:a3:f9:
40:b4:fa:a7:26:37:37:d0:0d:26:68:77:44:2d:01:
51:1e:61:52:d7:d0:d7:3d:76:94:5f:04:1c:5c:8f:
3d:a7:61:fb:0d:3b:1a:65:25:11:7c:16:7a:84:77:
16:cc:d2:87:a5:3d:5e:5a:ee:ae:dd:5b:f1:89:c3:
f1:55:78:52:b0:8d:e5:9e:8a:89:31:4a:df:3c:58:
2c:e7:35:e5:45:e3:1e:76:6c:df:6d:7f:b4:92:10:
36:dc:fe:de:64:7c:18:48:af:a5:c2:ee:f0:4a:e7:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:39:53:6D:08:D2:74:5E:A0:FF:2B:BC:93:23:69:4C:BB:88:96:AB
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c5:da:ba:8f:b3:8f:49:70:a3:b3:f8:dc:81:81:15:42:17:
09:fe:a2:e1:a1:c0:8c:4e:43:96:ba:97:3c:51:56:51:3d:de:
78:89:dd:57:23:ed:6d:2e:cc:01:02:35:86:8d:73:23:3c:c9:
6a:93:a4:48:fd:bd:b3:99:ae:73:0c:b1:72:8e:68:a0:7f:2a:
b9:68:66:14:56:8e:ad:25:eb:a9:c4:fe:8f:93:22:e6:4a:92:
94:52:f8:47:61:92:8b:17:82:4c:ea:e6:78:98:8d:7c:82:16:
8a:65:ed:00:b2:6a:70:a9:3b:10:2b:7c:a3:39:9e:ea:f0:61:
f5:4d:77:24:15:20:5d:b9:e2:b5:d6:d7:8d:ee:3d:2d:75:a5:
c2:2f:10:c7:f9:55:7a:f6:4d:37:90:4d:50:45:cf:2b:17:77:
9f:b7:20:0d:2d:7b:e4:ed:be:67:0c:ca:3b:6f:be:d1:c6:4b:
73:ec:c2:a6:ad:b4:fc:a2:40:75:2c:be:64:77:fd:f4:98:60:
28:af:1d:01:19:b7:5c:6b:f5:4d:1b:b8:f8:45:8c:55:6f:1e:
4f:9b:45:1c:7d:42:13:d3:3a:84:07:ed:14:f2:aa:47:31:e2:
31:3a:45:74:f7:60:cd:27:e5:83:5f:aa:c0:ec:b8:cd:74:37:
af:fa:b6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:11 2025 by rpki-client