Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: TZTqD6vsXg4rXdlnMHPCfvcctSWBccwGrDBsrXXx8es=
Subject key identifier: D9:F7:83:58:53:03:01:11:86:F5:8B:C6:FB:61:27:B0:66:31:19:BB
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 019A2A44736FFFEFD8888A2A88FCBB4A27E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 10:02:00 +0000
Manifest this update: Tue 28 Oct 2025 10:02:00 +0000
Manifest next update: Wed 29 Oct 2025 10:02:00 +0000
Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: FkEi6Jy+htislclDuem8/HsbqpojHoFOv3SI2pvVFGI=)
3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:73:6f:ff:ef:d8:88:8a:2a:88:fc:bb:4a:27:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Oct 28 10:02:00 2025 GMT
Not After : Oct 29 10:02:00 2025 GMT
Subject: CN=d9f783585303011186f58bc6fb6127b0663119bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:06:12:6a:3e:42:2d:aa:80:f5:aa:81:a2:
ae:90:38:16:25:2c:e4:5e:1e:66:6d:31:b5:82:67:
19:6e:04:6d:30:aa:58:80:93:df:54:4c:73:10:eb:
eb:74:ff:41:01:b8:3d:94:38:4b:fc:e6:57:e0:8b:
1e:76:b6:df:90:e1:60:d5:6e:c6:4f:d1:94:82:b6:
1a:50:0f:dd:09:81:6f:91:72:87:07:34:9a:ef:88:
a5:4f:d7:55:2a:b4:c7:85:cd:62:18:a7:a0:73:91:
8e:c7:3e:00:a6:58:71:e3:b1:04:31:0b:9c:2f:a4:
75:a0:d8:29:b0:ee:2d:be:da:7a:e9:cb:0c:1c:87:
51:38:81:95:9e:a1:8d:c5:84:35:a2:a9:c3:4e:97:
68:b7:a8:60:08:9d:e3:2a:ae:df:c0:4e:84:96:db:
85:b8:cc:d5:d6:d0:6f:46:66:a5:14:2f:dc:f6:0d:
d6:e8:df:49:42:83:af:22:90:e9:24:6d:fb:12:af:
4b:b1:56:d1:b7:5d:23:88:81:1e:12:c0:68:95:a2:
e1:d1:93:83:27:9d:6d:f9:f9:c7:7f:04:ab:ac:10:
aa:39:32:37:26:b5:c3:8e:cd:33:9f:7f:a7:01:34:
57:38:ae:32:26:1c:ba:10:fb:dd:fc:05:37:75:55:
48:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F7:83:58:53:03:01:11:86:F5:8B:C6:FB:61:27:B0:66:31:19:BB
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:89:33:2f:78:85:c8:9e:9f:61:fb:11:a1:71:1d:16:9f:28:
7d:d3:5f:69:4d:f4:2a:6f:9c:57:75:06:5e:4d:51:c9:c1:78:
d3:6b:f2:c3:ee:98:d5:62:fb:6b:76:a4:83:be:ed:1c:02:9e:
7e:45:94:db:a9:a5:64:95:c2:9b:4e:7d:61:bf:5e:04:bd:a1:
47:88:81:10:44:d5:9f:1d:87:59:b1:1c:21:41:7d:17:ba:0c:
41:03:50:46:6c:0b:5f:66:3c:2c:17:5c:21:17:ef:5d:1b:bb:
60:07:36:36:7f:93:49:b9:fa:e5:99:64:73:86:d0:eb:fe:24:
84:d2:2b:0f:44:77:e8:29:21:c4:1e:35:d0:66:36:29:61:8b:
b9:22:fd:b1:7e:3b:a7:5e:79:ad:c0:a0:81:21:6b:e9:9f:07:
a6:13:e8:2f:80:2b:0a:94:1a:10:2d:be:6d:09:8e:79:ea:77:
08:32:6f:62:4e:bf:1d:9e:6c:64:3d:ba:d0:da:00:67:46:14:
8b:aa:d1:4d:a1:f2:50:1e:ef:c2:a9:3e:39:91:ec:0f:c5:7f:
09:9c:fd:2e:0b:e8:e7:ce:41:a0:ee:08:9c:48:10:73:61:74:
ac:ea:9f:0f:09:8d:d9:54:6a:44:7b:8d:de:25:43:c5:4a:92:
de:c2:79:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:40:19 2025 by rpki-client