
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File: w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier: SGHyxtiHaEOhKtM5/sPXVNCM9WFoHfLoDK65LJON5mY=
Subject key identifier: 45:0E:AC:6E:8D:FB:AE:E2:23:13:70:00:BF:81:19:4F:B9:0D:C8:E2
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 019A0AEF0D6F71BFAAA7B6C37CD71AE1E241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number: 137C
Signing time: Wed 22 Oct 2025 08:00:29 +0000
Manifest this update: Wed 22 Oct 2025 08:00:29 +0000
Manifest next update: Thu 23 Oct 2025 08:00:29 +0000
Files and hashes: 1: 1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa (hash: qUFNGxht8SatseV7uTcgdf36n0Wje2HhZXA6lIEPzt8=)
2: jb-zD-QZseypOhoYrz7-lEkthR4.roa (hash: NVATDU2rQowVsA5kxCOsDlRv1YWlJaECqpg6RYlVt8g=)
3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: Axb40mA8ll7wNt2xRQ+x5zfe9PXNc/FSmIb/qehEURE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ef:0d:6f:71:bf:aa:a7:b6:c3:7c:d7:1a:e1:e2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: Oct 22 08:00:29 2025 GMT
Not After : Oct 23 08:00:29 2025 GMT
Subject: CN=450eac6e8dfbaee223137000bf81194fb90dc8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:15:1c:c7:9b:81:6b:33:86:5a:c2:29:ac:
d7:e5:dc:f4:08:71:de:73:b9:59:08:25:21:d3:f2:
fe:7a:f2:30:a1:20:55:26:64:12:25:1c:30:37:33:
79:02:56:ec:10:1a:03:af:a1:f2:0b:4a:34:67:a3:
08:ff:9a:54:5c:9c:cb:9e:8e:e9:ba:19:fd:a4:fb:
59:db:7c:d1:a6:82:7a:15:e4:22:f8:55:fa:e8:cc:
fc:6c:43:0b:f6:a1:09:13:3e:c2:02:f3:8b:16:3f:
de:6a:79:1f:5f:ad:db:ba:55:56:51:52:4d:1d:43:
ea:fd:7d:5b:84:ee:48:d2:a5:45:f7:15:f8:1a:c5:
66:25:c6:25:0c:68:f1:04:27:18:e5:0b:bb:15:58:
bd:3f:b4:c0:7e:28:64:77:84:9a:a4:67:a9:a1:5e:
99:07:5a:30:9e:65:87:b7:35:a8:7b:a1:8d:21:a1:
8e:42:95:35:20:0d:d7:d8:88:75:15:72:95:68:90:
83:46:6f:87:68:3d:ff:56:95:b9:91:7c:0e:d2:11:
e3:1b:68:04:8c:33:1d:9f:8a:b8:ae:b7:b5:80:83:
4f:a5:64:d4:a7:bf:c5:43:d9:37:ac:32:61:03:16:
66:00:64:06:10:6f:b0:07:80:66:a7:70:ae:fd:84:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0E:AC:6E:8D:FB:AE:E2:23:13:70:00:BF:81:19:4F:B9:0D:C8:E2
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:d2:10:0d:bf:8a:2f:f1:42:df:49:1a:bb:e8:17:d5:3e:60:
80:fe:a8:52:12:62:f3:9e:2b:db:7e:b6:18:18:b9:b0:c2:81:
ee:45:88:66:8d:ce:7f:a2:f8:3d:fd:61:2b:59:2d:00:47:a6:
d4:e0:fb:c8:5f:13:3f:50:53:27:1c:bf:f2:80:27:ae:06:9d:
d2:83:6b:6f:82:5d:4e:4c:03:d7:30:94:8f:c8:18:b1:6f:95:
14:3b:2b:1b:f4:a7:b9:7e:81:55:68:0c:9f:62:59:91:8f:4d:
61:b2:5e:de:76:df:f4:24:96:e0:7b:77:6a:13:91:79:c7:14:
5e:85:de:da:8d:f2:93:0a:5a:0a:e8:53:06:d1:97:ea:29:7e:
6d:f2:23:da:ce:a6:8f:ce:12:f7:a1:aa:fd:51:09:d2:92:73:
0f:42:31:94:be:7a:2b:6f:81:4f:4e:37:c6:08:b9:4e:ec:79:
3a:6b:67:d6:0f:be:d3:aa:48:f7:3e:6d:d3:cf:94:fd:b4:ad:
75:8f:82:3a:0f:27:cc:99:ae:48:60:0f:d1:49:d9:73:7e:52:
5d:96:f6:c3:29:3d:15:47:05:26:bf:90:40:1d:b9:46:a7:e5:
70:4b:7c:93:8b:f8:62:2b:c8:1a:3d:41:9a:1c:f9:0d:33:d3:
9e:47:aa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:22:58 2025 by rpki-client