Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File: RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier: yXzNpNsesEAj4L5hGlBfwcRNx6i9oE2GNoUn32zjHT8=
Subject key identifier: 67:C6:3E:E5:A8:67:82:3A:6E:48:A9:68:86:67:26:A7:3D:CC:70:1A
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 019A71808285316D9D41BC9F01FAA4FA1574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 06:00:38 +0000
Manifest this update: Tue 11 Nov 2025 06:00:38 +0000
Manifest next update: Wed 12 Nov 2025 06:00:38 +0000
Files and hashes: 1: HJuvWWI1qAqft10oKlJtZleuo2g.roa (hash: u8HfwrfCCFHcB5jvs7dyE9ffRxdRXb4g1HqA18Sf8YE=)
2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: jTu090aQHOOHpoUhwdIflnBXvczLadIEK15dvRjtoug=)
3: wtjN78Y_d1b6O6UDtSU2B1I3v9Y.roa (hash: ReqT7jsHEoa7AvfRGw7Yv2wPcS9GQjwhHtVeUywingA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:82:85:31:6d:9d:41:bc:9f:01:fa:a4:fa:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Nov 11 06:00:38 2025 GMT
Not After : Nov 12 06:00:38 2025 GMT
Subject: CN=67c63ee5a867823a6e48a968866726a73dcc701a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:c6:2f:6c:ab:c3:c8:3c:78:38:7e:8a:ae:
e8:e8:bb:bd:2a:78:34:4f:f5:a2:52:80:b9:2f:c9:
79:bf:2b:b4:ba:a8:cb:f4:dd:e7:04:1e:08:0e:1e:
5e:75:ae:3f:ff:86:a0:86:0e:02:ea:aa:22:67:b7:
31:31:dd:27:89:2a:14:b1:e8:a8:ef:6b:8d:bc:18:
15:7c:a3:f4:f2:2f:fb:86:f0:8d:d2:48:99:29:79:
ee:b4:31:68:f5:15:ef:9e:f8:bb:c8:6d:d9:ff:48:
10:e8:94:0b:d5:cd:b3:ea:ef:f0:30:ce:44:7a:b2:
f5:ae:5c:c9:5e:bb:a4:2b:1a:35:0f:e3:6e:e2:b4:
10:f3:31:39:a8:07:ac:29:9e:6d:cc:25:da:70:09:
42:14:ee:7d:55:ee:6c:84:e2:b2:84:23:26:a8:ac:
92:17:f4:0d:97:85:b5:f0:34:11:d4:fc:cb:43:25:
c5:09:74:b5:bb:bc:e4:9b:eb:fa:09:61:63:63:01:
da:d2:6b:c6:bc:15:9e:32:c8:83:9b:c5:4c:25:f0:
e2:08:f7:6b:73:bd:3d:c2:ec:a3:3a:3f:66:bc:5f:
c8:f8:83:53:f8:b7:cc:69:48:ae:30:ef:85:d9:be:
b7:a5:ac:57:c0:77:9d:11:f5:0a:6c:34:17:28:d4:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C6:3E:E5:A8:67:82:3A:6E:48:A9:68:86:67:26:A7:3D:CC:70:1A
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:84:3b:be:80:fd:b6:e9:d6:76:51:c1:ec:22:31:ee:23:3e:
02:ad:77:36:b4:8b:bc:f9:68:c7:64:aa:13:e5:56:64:5e:b3:
2c:b5:b4:41:c5:12:6a:f6:67:f9:18:79:51:65:14:a9:c2:69:
51:b4:c5:86:8a:62:0c:ce:0d:8a:1f:f0:31:be:9d:d3:51:c3:
39:2e:bc:9e:1f:ed:96:1a:f4:4a:6d:86:6c:e4:10:54:4b:37:
82:14:52:af:8e:16:7f:d2:c8:b6:e9:d0:cd:dc:34:59:67:33:
7f:3d:a3:2b:cd:48:c8:57:64:a0:83:b9:bf:41:fa:38:4a:cb:
6d:06:b9:99:17:04:5d:01:d2:ab:ea:73:0e:dc:07:2d:c3:38:
b5:73:76:2e:53:4d:f6:5e:6b:1f:2e:dd:e2:81:8f:dd:64:c2:
f7:00:9a:1f:8b:6b:b1:93:ba:de:8d:0e:73:a3:2e:ca:42:21:
89:82:2b:15:70:5d:20:45:c5:b9:53:df:21:87:c4:56:82:62:
bc:3a:b1:bf:40:ec:e9:4f:1b:2d:05:d0:c1:e3:57:b9:72:a5:
e2:4b:63:73:d4:59:97:cf:d4:c8:df:8a:1d:ef:8d:84:2c:7d:
f5:c5:c9:fa:6d:57:74:64:5b:22:96:63:d9:37:36:3a:7e:29:
1e:63:9a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:54 2025 by rpki-client