Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
File: w0CU4yNtzRyDURN5Gjgk2ilz35s.mft (raw, json)
Hash identifier: Jzl2+AOv6LSGJ4jFanA066jJjtn6HWelyPpjS4iPwY0=
Subject key identifier: CD:41:09:AD:C9:EC:8A:01:8B:08:86:DA:FB:0D:4D:08:88:CE:FE:9B
Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
Certificate issuer: /CN=c34094e3236dcd1c835113791a3824da2973df9b
Certificate serial: 019A4EBD453FB4AEEC2E5C09F6AAA2A44673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
Manifest number: A7
Signing time: Tue 04 Nov 2025 12:00:18 +0000
Manifest this update: Tue 04 Nov 2025 12:00:18 +0000
Manifest next update: Wed 05 Nov 2025 12:00:18 +0000
Files and hashes: 1: 4RPSqbfmeC-IC3WR5JrPY-ti6aQ.roa (hash: egyP6+hpVOsfhjTSw14Ho98ZzzCiujpdZ4z2/ZYR+NI=)
2: E1huK4lRaNqnfDwjhKC7S27samY.roa (hash: 5eWDICwAkK513LsxaFUCZCYFQIVOjrg6WQ+rcwXWfbg=)
3: V7FxeBgowMJ9uzRZi_USZCw6XMI.roa (hash: tBwxfUXaS851zDbs0JMu4PFLXBxOjlI4hBYncc4yuPg=)
4: w0CU4yNtzRyDURN5Gjgk2ilz35s.crl (hash: 9R3LgTnh9HavYNUXi394w8LC5iGgftsl3x0OE//xqgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:45:3f:b4:ae:ec:2e:5c:09:f6:aa:a2:a4:46:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b
Validity
Not Before: Nov 4 12:00:18 2025 GMT
Not After : Nov 5 12:00:18 2025 GMT
Subject: CN=cd4109adc9ec8a018b0886dafb0d4d0888cefe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:4a:04:2b:2c:7b:04:4f:e5:7e:eb:50:72:
6c:54:07:a9:c4:31:ab:05:28:33:96:b7:b3:a5:86:
b4:57:65:26:d3:c1:01:d6:cf:ce:d9:aa:77:b2:ff:
d1:ed:da:cb:68:1b:e2:31:ea:df:ec:33:70:b9:a8:
bf:41:88:a1:2f:d0:0e:06:75:36:ee:09:f6:f5:a6:
03:4d:eb:b1:76:01:09:0d:36:07:ce:98:25:ce:da:
9d:fd:e0:ab:3b:77:00:9a:cb:d9:ff:c4:41:34:80:
6b:e9:c5:57:7b:d8:65:cf:e7:40:57:cd:f8:1a:04:
48:40:a0:4a:b8:6c:08:9e:55:94:f1:d4:e4:0a:2b:
ed:1a:a0:cc:9f:8e:23:9c:76:35:33:a9:94:34:83:
c6:be:3b:4b:0e:ec:78:00:a4:6b:ad:10:ef:0c:5d:
e1:2c:b2:8c:05:39:b3:d3:3d:e3:2a:77:e1:41:f1:
f4:9b:b2:1f:6d:0d:bc:00:36:b5:40:ff:57:26:db:
d1:d2:ae:20:ca:aa:57:5f:45:ce:dc:de:0f:4c:69:
8c:c4:5b:bd:f2:9c:ee:42:c4:0a:7a:03:6d:e6:d5:
bf:6d:20:86:6f:a4:5e:7e:0c:85:25:2a:3f:9d:c2:
d1:31:b6:48:bf:6e:15:98:b3:5f:e6:f6:88:8d:dc:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:41:09:AD:C9:EC:8A:01:8B:08:86:DA:FB:0D:4D:08:88:CE:FE:9B
X509v3 Authority Key Identifier:
keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b3:a4:77:2d:21:9d:89:cf:1e:4b:59:64:21:3e:65:f9:3d:
9a:31:c8:f7:3c:ee:ff:2c:e3:73:7f:c8:dc:d1:73:b0:78:a1:
c3:79:f4:7d:3c:f5:d7:c1:63:76:bb:50:e4:01:aa:10:68:42:
3d:7e:9d:30:53:92:a5:86:b4:e9:a8:c0:8d:5d:e4:81:67:e0:
2f:c6:f7:a1:cb:d8:9c:c3:fb:37:18:3d:d0:a4:95:33:ee:b5:
3a:02:1d:e0:b5:38:6c:98:75:06:e0:9f:3b:bf:c1:22:c2:f7:
23:b4:ae:5c:d9:4b:d9:d0:29:fc:36:97:8d:8a:6c:77:4c:99:
cf:eb:06:e2:38:40:c5:03:68:06:f1:3a:28:ef:28:5d:40:39:
b4:4f:e1:ea:53:46:ba:f9:34:02:a2:c5:4b:18:82:64:fb:3f:
ee:e2:10:06:6f:8b:37:d7:59:de:37:2d:19:c9:77:e4:0b:46:
da:41:e0:03:57:90:24:74:51:c2:50:cc:ef:ef:04:cd:05:ef:
2e:f9:9d:d3:83:ba:78:73:ef:74:e9:67:0a:3d:f5:4f:b0:35:
be:f0:76:2d:74:f0:7f:cd:81:3e:5f:a7:d9:66:26:1e:ea:c5:
65:37:65:39:df:f8:af:99:a4:38:f1:45:49:42:24:d7:08:a4:
f2:0d:63:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:58:14 2025 by rpki-client