Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
File: warwQ_4gnANFNiIF-Mx81hlRwn4.mft (raw, json)
Hash identifier: 3KRzznNq9Kp7G4lsWWk1WDVR3zDqjdOXhdb/oYqO6Zw=
Subject key identifier: FD:37:04:F1:57:01:A8:34:4B:1F:D1:BA:04:A2:1A:17:8A:6E:4D:6E
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial: 019A73A71FF83D03F1E3363DF0863BA4BEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
Manifest number: 0F97
Signing time: Tue 11 Nov 2025 16:02:03 +0000
Manifest this update: Tue 11 Nov 2025 16:02:03 +0000
Manifest next update: Wed 12 Nov 2025 16:02:03 +0000
Files and hashes: 1: oLyY8vvBAfeOhRsj9eexvuktQm4.roa (hash: scoM8Sq6POvOb7psz/VnzYZYQjNB2n1Y53tdfQTGFcc=)
2: warwQ_4gnANFNiIF-Mx81hlRwn4.crl (hash: vW9IxlV7WmH70eJ+9b832qZt03g/aLp7jtK6s2H4DSI=)
3: yuwuNuzvATZfP3JuA06dTGzQ9o8.roa (hash: iaJVdCZsnNb9Cyubf2e2B713adANaUt93mNYt5mCPK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:1f:f8:3d:03:f1:e3:36:3d:f0:86:3b:a4:be:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Validity
Not Before: Nov 11 16:02:03 2025 GMT
Not After : Nov 12 16:02:03 2025 GMT
Subject: CN=fd3704f15701a8344b1fd1ba04a21a178a6e4d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:4d:40:ff:75:6a:d4:33:f2:92:ed:8c:4d:
f8:27:41:d8:f2:f8:3e:aa:5f:43:ee:df:36:67:dc:
bd:84:32:14:81:b5:06:77:e0:e6:d8:4e:73:f6:4b:
e1:e6:f8:6e:26:d1:c0:13:ef:bc:77:1a:66:02:6f:
2f:59:b1:4a:ca:38:da:ef:f5:eb:f0:55:d6:95:7a:
79:9c:7f:90:c8:12:92:8a:5c:31:c6:2b:c7:66:b7:
c3:09:cc:0f:33:0e:1c:ac:4e:14:d9:1b:22:07:c5:
ff:35:97:c6:d9:0c:e0:c0:7d:ab:77:ff:14:d6:0e:
ed:a8:e0:69:e4:a6:7f:e3:81:eb:d3:11:47:e0:4d:
41:2d:cd:06:83:42:03:55:5e:da:f6:e4:70:7e:80:
18:5a:0e:01:2a:94:5c:76:d1:92:b5:08:6a:0b:7c:
98:90:b2:15:33:92:d8:bc:e1:11:49:ea:01:c4:2c:
9a:ce:f7:b6:2e:e4:70:19:5e:51:9c:9e:de:d4:6d:
2a:18:76:1c:ae:d1:82:93:1e:d5:f0:06:52:2d:1b:
bb:0d:3a:85:cd:e1:56:a2:0d:f4:1c:62:95:57:5f:
7c:9a:66:04:d3:29:ef:6a:ef:1e:c7:e5:fd:68:9f:
7c:47:09:1f:0c:a6:7f:ec:83:25:d9:fd:04:2d:c1:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:04:F1:57:01:A8:34:4B:1F:D1:BA:04:A2:1A:17:8A:6E:4D:6E
X509v3 Authority Key Identifier:
keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:03:31:6b:b6:d3:07:be:0b:a6:15:80:76:ee:8b:68:d4:46:
2d:88:c7:bb:10:ea:dc:72:47:88:e9:6e:a1:9d:b3:04:38:d0:
95:a8:43:8a:0c:2e:1a:54:55:94:ca:d1:12:71:13:18:82:30:
04:13:68:c2:49:a5:11:73:64:0b:57:e0:88:60:98:16:42:9c:
67:48:af:b1:9e:7e:36:89:e3:cb:7e:e6:cd:a7:ad:51:f8:5d:
b6:fa:a0:53:4b:a6:be:a9:7c:dd:6f:34:35:ed:43:4a:65:94:
a6:ba:af:97:c5:a1:7e:d8:4f:59:00:7d:7e:4b:cd:54:27:7d:
85:7b:0f:25:1d:bc:b5:9e:3e:2f:54:c6:da:82:c2:fa:91:62:
95:c3:a2:a4:3d:0c:26:a9:52:e6:a6:2d:4c:22:4f:b4:15:9e:
e9:83:82:4f:c1:13:b9:d6:39:90:29:da:58:03:6a:9c:93:8c:
5f:1d:39:b1:c4:bf:74:46:9d:c6:f8:6f:a6:22:c0:69:93:3c:
d3:20:0f:53:bf:c7:e6:2a:b2:4b:2c:20:2e:ca:08:ea:c5:8f:
c3:b1:9b:49:08:fe:d0:7e:1d:39:10:fb:72:2a:a0:0a:29:13:
cb:90:03:99:e9:ff:0a:98:30:0f:bb:fa:bd:0f:46:3c:cf:9b:
b4:55:a3:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzpx/4PQPx4zY98IY7pL72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWFmMDQzZmUyMDljMDM0NTM2MjIwNWY4Y2M3Y2Q2MTk1
MWMyN2UwHhcNMjUxMTExMTYwMjAzWhcNMjUxMTEyMTYwMjAzWjAzMTEwLwYDVQQD
EyhmZDM3MDRmMTU3MDFhODM0NGIxZmQxYmEwNGEyMWExNzhhNmU0ZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6tNQP91atQz8pLtjE34J0HY8vg+
ql9D7t82Z9y9hDIUgbUGd+Dm2E5z9kvh5vhuJtHAE++8dxpmAm8vWbFKyjja7/Xr
8FXWlXp5nH+QyBKSilwxxivHZrfDCcwPMw4crE4U2RsiB8X/NZfG2QzgwH2rd/8U
1g7tqOBp5KZ/44Hr0xFH4E1BLc0Gg0IDVV7a9uRwfoAYWg4BKpRcdtGStQhqC3yY
kLIVM5LYvOERSeoBxCyazve2LuRwGV5RnJ7e1G0qGHYcrtGCkx7V8AZSLRu7DTqF
zeFWog30HGKVV198mmYE0ynvau8ex+X9aJ98RwkfDKZ/7IMl2f0ELcHhzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP03BPFXAag0Sx/RugSiGheKbk1uMB8GA1UdIwQY
MBaAFMGq8EP+IJwDRTYiBfjMfNYZUcJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQt
Yjc1NzhiMTBiYTdlLzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQtYjc1NzhiMTBiYTdl
LzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAMxa7bT
B74LphWAdu6LaNRGLYjHuxDq3HJHiOluoZ2zBDjQlahDigwuGlRVlMrREnETGIIw
BBNowkmlEXNkC1fgiGCYFkKcZ0ivsZ5+Nonjy37mzaetUfhdtvqgU0umvql83W80
Ne1DSmWUprqvl8WhfthPWQB9fkvNVCd9hXsPJR28tZ4+L1TG2oLC+pFilcOipD0M
JqlS5qYtTCJPtBWe6YOCT8ETudY5kCnaWANqnJOMXx05scS/dEadxvhvpiLAaZM8
0yAPU7/H5iqySywgLsoI6sWPw7GbSQj+0H4dORD7ciqgCikTy5ADmen/CpgwD7v6
vQ9GPM+btFWj+A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:47:37 2025 by rpki-client