Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
File: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft (raw, json)
Hash identifier: sUmjEluoE7bGPCSsOHWPxXMiehVzrRFKFFy8qrZN8i4=
Subject key identifier: F5:7B:A0:1D:FF:AE:B9:23:DE:57:5B:64:F1:43:EF:80:22:6B:A6:7B
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Certificate issuer: /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial: 019A725CC7B98CF972FE6EE8C76E5A892FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
Manifest number: 15B8
Signing time: Tue 11 Nov 2025 10:01:14 +0000
Manifest this update: Tue 11 Nov 2025 10:01:14 +0000
Manifest next update: Wed 12 Nov 2025 10:01:14 +0000
Files and hashes: 1: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl (hash: ewo2Vt+y7qi9QCyt/zD7HLUH/j82/ppP+DKYYnwG1PQ=)
2: s3lH6NKYWmmwJhlNdBC0Z4wTX7s.roa (hash: yGRXRmilLINdMy7QeallAtPWcWMTpoSWpUomtg+4yo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c7:b9:8c:f9:72:fe:6e:e8:c7:6e:5a:89:2f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
Validity
Not Before: Nov 11 10:01:14 2025 GMT
Not After : Nov 12 10:01:14 2025 GMT
Subject: CN=f57ba01dffaeb923de575b64f143ef80226ba67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:31:e2:ab:52:d6:81:2b:d1:77:fc:4a:4c:
1f:06:03:43:ad:88:f8:fb:80:84:16:c9:a6:0e:97:
71:53:70:b6:2a:dd:54:e0:82:f0:3d:d9:04:ed:0f:
11:1e:43:97:5f:cf:ca:fb:f0:72:1d:cc:75:2c:51:
ee:d4:3c:6e:b8:b2:95:55:da:21:46:ed:17:c3:f7:
d5:ab:44:0a:c3:3c:89:3b:a6:f2:33:87:85:17:bd:
42:08:34:8e:78:ed:95:33:8e:c0:9f:a7:f9:00:5a:
36:64:42:25:ac:19:04:f7:3a:bd:be:76:6a:5c:f0:
ea:bf:b0:dd:38:f6:60:21:13:71:aa:cc:71:10:2d:
6c:58:95:cf:dd:3e:09:63:34:2d:3d:4b:be:2c:5b:
4c:34:4d:3f:a2:ff:b4:0b:47:3f:2d:01:ec:14:25:
06:89:7f:68:3e:61:88:d2:85:da:44:ea:92:58:c2:
1b:df:6a:50:1f:75:20:1f:d5:a4:46:d4:1d:42:44:
7c:50:5e:42:a0:e3:c1:e4:3f:93:25:2b:25:72:c9:
8c:3f:41:51:4a:74:81:3d:a6:45:79:3c:98:80:b9:
05:4d:ca:0e:96:e5:04:05:10:f1:4f:54:3c:75:0d:
be:6b:9c:f9:36:64:e0:d8:f1:a6:90:9c:f5:dd:17:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7B:A0:1D:FF:AE:B9:23:DE:57:5B:64:F1:43:EF:80:22:6B:A6:7B
X509v3 Authority Key Identifier:
keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:29:19:08:c9:0d:04:39:52:59:a0:c0:e3:cf:57:f8:03:86:
5d:a3:52:50:1b:9c:21:71:b8:d0:10:13:57:dc:5a:ab:ba:88:
1a:a5:13:ff:22:f6:b5:a8:54:9d:e2:8d:0e:3f:22:0b:da:9f:
2d:36:26:1e:2c:e1:c4:f0:ac:46:e8:c7:15:6e:90:92:e2:c9:
03:30:ac:b1:7e:83:5c:77:71:1f:a6:2c:93:db:9a:58:b8:d4:
2e:a2:23:69:1f:7b:fb:5d:28:bd:29:7f:7b:3f:b5:c8:01:62:
ca:40:6f:e0:b6:25:9f:10:fc:10:89:9a:d2:68:ef:5a:77:cb:
e3:23:dd:ee:0c:06:35:50:1b:93:31:29:ec:cd:e8:be:07:7f:
4a:22:17:c8:3e:44:63:d1:94:d3:c3:56:a0:d0:0d:38:e8:d2:
23:9b:b5:db:61:ee:c4:b4:4f:49:17:79:fb:ee:04:87:5a:60:
45:73:01:fb:85:a4:36:7b:2d:07:3b:c5:20:a8:31:bd:31:65:
8b:82:ca:47:a5:39:c2:91:a2:72:c6:ac:d3:44:17:1e:22:43:
f1:83:15:20:9c:70:18:8c:2e:79:81:9e:51:4b:d7:34:39:9e:
7a:c4:66:0b:0f:7f:4f:69:2e:cb:eb:04:a0:ae:3b:c0:80:c9:
65:e6:f9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:29 2025 by rpki-client