Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier: XFDX4mOYTWVvcoFxa3QmT5IaGAKM2pRu+lpqmHukHKY=
Subject key identifier: F5:6B:08:55:25:89:D9:98:F5:28:00:A2:7D:68:6D:D9:6D:57:6A:F5
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 019A2109691A88CA2A0269F61F9076470520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number: 1688
Signing time: Sun 26 Oct 2025 15:00:56 +0000
Manifest this update: Sun 26 Oct 2025 15:00:56 +0000
Manifest next update: Mon 27 Oct 2025 15:00:56 +0000
Files and hashes: 1: bI5hqVT8m0qS2JmySaAVyieiKDc.roa (hash: Ur47592mLsTtDVQWZDc8e3eMtHnqyDHoxs3kpjL/ez4=)
2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: neDfzoQPEO1KSXeOPtWFf/oD5NAr0Q49Vzw+VDNo6I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:69:1a:88:ca:2a:02:69:f6:1f:90:76:47:05:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: Oct 26 15:00:56 2025 GMT
Not After : Oct 27 15:00:56 2025 GMT
Subject: CN=f56b08552589d998f52800a27d686dd96d576af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:65:97:d6:7c:4b:c8:f0:0f:a0:a6:9e:28:
0c:52:29:01:3f:db:06:b1:f8:04:30:ce:aa:d3:ae:
4a:96:01:56:73:a8:e8:6c:f3:a1:aa:bd:71:8f:0b:
17:77:4d:a7:4e:17:7b:19:b0:8d:56:cb:e8:0f:41:
13:fd:e7:f4:df:2d:f9:88:1b:3c:19:25:01:4a:a9:
8e:71:b0:d0:37:5e:ec:a9:6a:55:78:74:b4:e5:33:
b0:4a:0b:32:07:0c:dc:0f:d0:82:86:2e:55:f2:a3:
ba:d0:f6:26:24:31:d7:9a:9b:ee:9a:9a:c9:e6:bf:
eb:92:41:c6:b1:61:0f:e2:4c:48:7f:f1:28:7c:f3:
3f:bb:b9:90:fd:81:49:99:91:4e:18:cf:76:8f:65:
81:6a:d3:0e:26:9e:c3:5f:41:2b:fb:d8:ea:a8:d0:
d2:74:8a:06:e8:25:5b:3f:f5:ab:41:8d:a6:08:2c:
ca:60:31:12:94:48:77:ff:ce:7f:f7:f5:a1:70:de:
a1:6d:59:99:ec:83:e7:80:32:c6:33:24:8b:74:85:
08:08:f3:b3:92:cb:b9:4d:30:f2:9d:40:ea:88:bd:
60:37:b7:77:bb:45:16:eb:9b:fb:9c:c5:57:cf:32:
e6:52:83:77:0d:61:21:85:09:a1:7b:35:f1:a9:bc:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6B:08:55:25:89:D9:98:F5:28:00:A2:7D:68:6D:D9:6D:57:6A:F5
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ec:d9:4a:6e:e5:dc:e9:bd:99:b2:7f:a8:3a:39:0c:ad:a2:
4c:7e:c5:b1:5f:d1:bf:53:54:f4:8d:f6:0f:8a:fc:9f:ff:0f:
83:03:f2:1b:c8:a7:23:d6:e1:d3:b7:6e:f8:bb:61:75:79:16:
59:f8:a3:31:46:b1:17:21:5b:1a:86:76:7b:b1:3a:db:fe:7f:
3b:53:59:c8:1c:cf:7e:20:0a:36:96:cd:d0:d2:c7:e5:9a:f8:
40:de:d7:6f:71:16:59:a6:70:cd:3d:3a:6e:69:f5:1a:3b:03:
d3:e4:1f:c0:82:2b:af:d8:4a:1c:e0:de:51:26:4d:ba:9b:5c:
14:5e:da:b2:b1:24:83:9b:ae:af:b9:99:9e:74:4c:10:9f:8d:
90:00:a6:37:99:61:c4:31:79:c2:d8:5a:f9:0f:73:e5:86:56:
29:05:0e:1b:d9:b3:9d:29:48:7e:b4:fc:9a:61:74:fe:4e:2a:
5d:96:23:ff:41:4f:cc:92:5f:89:b0:59:ad:3d:2a:87:cf:e3:
bb:7c:7a:e9:b8:63:56:24:b6:b2:52:42:85:40:71:2d:6a:03:
e9:a9:b1:05:5a:a8:cf:b6:14:a0:92:f4:6b:3c:9b:aa:3b:6e:
de:b0:4a:dd:2b:5b:3e:96:a3:9c:69:5e:e4:ff:cd:d2:40:ce:
9b:77:ed:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:36:48 2025 by rpki-client