Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
File: w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json)
Hash identifier: EuWHsAor3CWhScM2LLcq+YTbv4xCeCNBnzHNel7fwCk=
Subject key identifier: 4B:6A:5B:D3:AF:8D:A6:86:00:2A:30:CC:7A:DA:3B:4F:5C:CA:C2:8F
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Certificate issuer: /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial: 019A22C03A4F95AB9C158CA4F10292B43D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
Manifest number: 0BA4
Signing time: Sun 26 Oct 2025 23:00:14 +0000
Manifest this update: Sun 26 Oct 2025 23:00:14 +0000
Manifest next update: Mon 27 Oct 2025 23:00:14 +0000
Files and hashes: 1: MSS8bajhBaU5VhOzrfA52HmDj84.roa (hash: YEJDRIIvwqwjWO6NfGeQmsZ7v3rXxoUkegHU1CblIHc=)
2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: 9ksro6WJzHpWOp1FTbFQOrkPYMJmXz0jNp9MsZbBAp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:3a:4f:95:ab:9c:15:8c:a4:f1:02:92:b4:3d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Validity
Not Before: Oct 26 23:00:14 2025 GMT
Not After : Oct 27 23:00:14 2025 GMT
Subject: CN=4b6a5bd3af8da686002a30cc7ada3b4f5ccac28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:e2:e9:c8:1e:af:7f:6d:6b:08:ac:e7:8c:
f6:d7:38:d7:44:a5:33:80:05:24:28:7c:ec:de:68:
ee:e8:cf:b6:92:fa:18:ab:26:70:e2:c2:63:cd:fd:
de:8d:78:37:74:0f:11:1b:e3:87:34:bd:b7:0c:f2:
a5:05:a7:a2:d9:a3:2b:0d:33:56:1d:ef:f8:fa:f4:
90:c7:93:19:03:9d:10:a6:27:eb:9f:88:e7:ff:57:
5e:46:36:3b:65:75:85:6d:b9:a8:1d:5f:a6:6a:43:
fb:ae:8c:a2:d3:30:23:73:d5:38:60:73:21:b9:ea:
b8:f4:77:51:3c:e2:9b:14:2e:19:a4:1a:31:69:b4:
0e:e0:de:2e:89:27:b0:30:b0:f7:6d:64:b4:e3:80:
78:c9:3a:34:56:6e:84:8f:86:19:b3:53:ca:69:30:
10:24:e4:50:a1:33:01:0d:bc:6e:a8:da:0f:02:95:
4a:9f:a1:82:36:00:74:0c:2b:d6:d0:36:94:fa:97:
d1:82:76:d8:6d:a6:f1:cb:02:a1:79:0f:05:8a:c2:
dd:11:80:30:51:29:35:21:ad:48:09:9b:77:fc:8d:
2a:91:4d:4e:08:ed:06:fa:8e:36:70:0e:f7:09:c2:
6a:7d:bb:fd:1a:46:8b:3b:30:b4:58:b6:08:1b:ca:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6A:5B:D3:AF:8D:A6:86:00:2A:30:CC:7A:DA:3B:4F:5C:CA:C2:8F
X509v3 Authority Key Identifier:
keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4c:86:47:57:2f:8e:d6:6b:24:8c:10:cb:13:b7:2d:4b:3b:
a9:64:d2:0d:45:0c:de:57:98:ca:b6:5c:c4:cf:d8:e2:6f:37:
68:19:1a:6d:e2:ef:63:e7:9b:cb:73:03:a8:8b:11:0a:0a:2a:
e6:7b:c0:33:d2:90:ce:29:76:26:9d:18:e0:bb:7d:da:19:d3:
76:33:35:2b:3b:b7:fb:66:26:a4:77:3c:1c:e8:21:5d:64:80:
4c:6b:04:0b:8e:38:f9:b1:5d:2f:ab:0e:58:08:ba:24:34:2b:
d9:b4:f3:90:d7:99:37:5e:62:fc:c7:d9:ae:e1:bc:57:2b:ef:
82:d9:0f:c5:45:da:c7:f8:53:91:74:1c:81:cd:3c:83:c2:0c:
f3:75:5c:c7:18:04:8a:4d:40:6f:c1:10:ba:63:81:b8:16:30:
a1:8d:b1:2c:18:c6:ab:51:08:87:0e:4e:2b:96:40:b1:ed:cb:
f1:6c:21:af:df:e6:24:37:ee:09:26:60:7e:e6:ef:32:92:4f:
17:b2:51:4f:d8:c3:83:85:87:d1:8a:14:c0:1b:7c:69:d1:43:
30:49:b3:c5:fc:07:54:de:62:dc:45:c4:24:7f:df:78:0e:a4:
80:a3:a1:b2:2f:7c:a8:76:9e:3d:04:59:3b:9c:bf:c8:8e:04:
9e:83:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:01:14 2025 by rpki-client