Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
File: warwQ_4gnANFNiIF-Mx81hlRwn4.mft (raw, json)
Hash identifier: lvEGmLPal8x+9iVohxtvkmdmSCxhPPFy23s/o3jbfsg=
Subject key identifier: FC:62:C9:DC:77:12:CC:0B:30:52:5F:74:0F:15:3A:CB:A2:D5:52:F2
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial: 019A71B8C2EAAA93813504FB5F29532D315C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
Manifest number: 0F96
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: oLyY8vvBAfeOhRsj9eexvuktQm4.roa (hash: scoM8Sq6POvOb7psz/VnzYZYQjNB2n1Y53tdfQTGFcc=)
2: warwQ_4gnANFNiIF-Mx81hlRwn4.crl (hash: 5JPD/MRTLeSORL5pUg6TddGcsJ0/WjvhnlUIZAql3ik=)
3: yuwuNuzvATZfP3JuA06dTGzQ9o8.roa (hash: iaJVdCZsnNb9Cyubf2e2B713adANaUt93mNYt5mCPK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c2:ea:aa:93:81:35:04:fb:5f:29:53:2d:31:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=fc62c9dc7712cc0b30525f740f153acba2d552f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:5c:b9:ba:08:91:a0:63:05:e9:54:9c:a7:
2f:78:16:9d:15:23:8e:17:0e:84:da:0b:2c:33:50:
22:4a:fb:b8:51:00:ff:c1:2f:62:26:b2:9c:7b:f6:
96:7f:89:36:92:9e:89:03:31:16:d4:60:a5:42:b2:
96:70:7b:aa:4b:19:e2:2f:bf:11:4f:6d:c0:fc:fe:
c6:f8:b2:08:37:4a:48:52:d3:7e:33:85:a2:29:7d:
e1:b8:71:84:dc:73:1c:57:5e:b9:4d:71:84:d8:65:
9c:c1:3f:06:7a:0f:1f:d2:42:54:4c:ef:11:cb:9a:
8e:4b:2a:f8:75:92:2c:d6:f1:08:c4:a2:14:15:83:
4a:e5:0f:6a:ab:ff:54:68:c6:97:1a:83:23:53:88:
e0:eb:59:22:7b:e3:46:1f:60:e9:47:a7:92:d2:ef:
86:e4:88:c9:d3:9c:90:a8:3c:60:85:97:64:9c:d8:
4f:4d:3a:92:1f:ea:ca:2d:30:a9:d5:d5:1d:f7:a7:
7f:60:36:fd:38:9f:3b:96:88:0a:6b:bd:75:27:fb:
b4:35:50:99:37:f8:60:38:02:42:a8:14:62:a3:90:
96:d6:65:a5:23:37:fc:30:f9:36:c7:8b:b7:7a:94:
e7:2c:01:49:dc:fe:34:77:8e:9f:9c:d9:25:e5:f1:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:62:C9:DC:77:12:CC:0B:30:52:5F:74:0F:15:3A:CB:A2:D5:52:F2
X509v3 Authority Key Identifier:
keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:80:5a:09:34:32:78:fe:b0:20:18:52:bd:62:b9:d7:43:a4:
e7:bf:bc:6a:2a:9b:ff:30:9b:9f:c2:35:cb:64:f6:aa:6e:fd:
5a:6e:f1:b6:a0:8b:f8:a0:78:16:ec:eb:dd:17:04:c2:2f:10:
37:2c:b3:e8:f9:27:ca:ed:5f:d3:23:54:2a:7f:53:1d:02:79:
42:46:96:cf:f8:dc:2e:1e:ba:94:31:dd:72:3a:50:d0:6e:76:
0e:94:4e:9f:8a:cb:e9:bd:41:59:7e:9d:28:8d:44:8e:73:03:
79:a5:c4:82:81:92:19:85:08:a9:26:90:cc:d2:1d:6c:ad:79:
96:65:db:64:77:37:a0:96:b5:99:26:ff:3c:a6:5a:1a:f1:8a:
3c:31:8a:23:93:b6:4d:15:23:f6:d4:4e:59:b0:89:4a:c5:81:
ca:4e:cc:4f:65:83:cd:f7:46:4d:75:2b:94:e6:b8:bb:b9:99:
c2:76:85:0b:0e:a4:87:5f:af:4c:42:0d:32:aa:ec:05:17:1a:
73:30:65:8e:a2:2f:21:f5:f8:af:b3:63:ea:65:2f:0e:50:e3:
39:b7:38:60:53:9e:6d:90:29:6c:b8:58:26:23:1a:c7:ad:2b:
d9:b8:d2:31:d5:a3:53:12:96:c8:c3:0c:0d:56:aa:f1:2e:2a:
f7:9a:33:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:02 2025 by rpki-client