Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
File: w4w6HAXImev-FdI2GQmmNZfGgHg.mft (raw, json)
Hash identifier: ekp8Rce292fQppJKkbA57s6Iywf8SYOOVR+v2mrzppo=
Subject key identifier: DF:78:A1:52:AF:63:CC:F3:29:95:19:6B:08:0D:BF:65:A5:68:72:4C
Authority key identifier: C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
Certificate issuer: /CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Certificate serial: 019A7293E99ABC2DCBEA51EA3B599BCF9705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:27 +0000
Manifest this update: Tue 11 Nov 2025 11:01:27 +0000
Manifest next update: Wed 12 Nov 2025 11:01:27 +0000
Files and hashes: 1: 3fbk5KZ8ThDjTTk1HUs_F8dpBIQ.roa (hash: QSUPjZJR7N2hLAV4a9vMxf89Cyng2AUNsEsGu9jShnE=)
2: q75v5EqZWH70d3-zw1Mz9lAhrNA.roa (hash: 42QWIn0E5NYeaE/XqOKgGlGrf3JcLpIWupxVplExU4g=)
3: w4w6HAXImev-FdI2GQmmNZfGgHg.crl (hash: 0O3FUf8V7d5nL/6vdFnAA0JIozwlaQHh/lLrbQRd8Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e9:9a:bc:2d:cb:ea:51:ea:3b:59:9b:cf:97:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Validity
Not Before: Nov 11 11:01:27 2025 GMT
Not After : Nov 12 11:01:27 2025 GMT
Subject: CN=df78a152af63ccf32995196b080dbf65a568724c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:c2:c3:ff:fa:c0:d2:a8:45:b4:63:d8:c5:
16:74:b6:ba:f5:55:fc:1f:25:ad:21:ef:e0:53:8f:
f6:ef:93:6c:93:09:a1:b3:2a:33:6d:d4:6a:a9:37:
4a:64:54:13:b1:b6:ed:19:51:94:39:6e:5a:97:72:
bc:e7:b6:e1:d6:60:0b:17:d6:f4:30:49:27:11:9c:
c0:82:bb:ae:d8:e2:67:43:cb:46:35:5a:0e:a4:4a:
0d:3a:a7:a8:d8:70:d9:38:d1:3c:d2:ac:8e:9b:28:
36:e6:14:12:1c:b7:43:a1:fd:55:ae:0d:8a:a8:5f:
68:eb:01:2d:12:4b:f9:86:12:d9:d0:31:a1:f0:01:
b3:b2:fb:6a:d3:ac:37:c6:e8:fd:f0:7b:9c:be:db:
fa:e0:c9:43:66:02:21:4d:0d:12:e2:0f:6e:08:59:
05:b4:84:2d:09:b0:dd:13:0d:2b:59:31:d5:d7:e3:
19:db:c1:a6:72:3c:d3:57:a4:b5:81:94:73:5f:44:
b1:5c:0a:54:46:8b:d9:81:a7:75:d5:5c:11:c5:f5:
92:12:db:dc:9b:56:d8:b3:bb:ef:c2:f0:60:5c:3b:
1b:a9:36:89:3b:73:66:95:1d:f7:fc:5e:af:8a:0c:
e8:4f:d3:6c:ee:5b:7a:26:f9:0f:b4:a5:f2:21:28:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:78:A1:52:AF:63:CC:F3:29:95:19:6B:08:0D:BF:65:A5:68:72:4C
X509v3 Authority Key Identifier:
keyid:C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b3:df:36:74:ba:47:c1:b9:cb:c7:cc:b8:0b:f3:5a:3f:89:
2d:12:7f:63:24:d4:59:00:96:59:79:ea:31:26:2a:41:66:fe:
fe:6c:1a:35:a8:39:61:4a:5a:f8:0a:3a:aa:de:f5:a6:f1:79:
7b:61:ed:6c:84:83:5c:c9:b1:cc:14:de:b4:06:d6:b3:86:fc:
05:2a:fe:f2:95:fe:db:43:e0:85:a8:7a:db:b0:b3:c3:dc:00:
cc:a6:f6:99:ff:f9:d5:58:9a:5e:03:fb:d1:af:7f:ee:79:c8:
fb:af:9f:bb:77:99:0b:33:85:64:d6:9c:23:18:f2:bc:e9:1d:
1a:cb:7a:a4:1d:65:f5:6b:f4:91:cd:fc:ba:e4:ea:29:88:cd:
6f:51:22:d7:e6:39:bf:31:4c:03:c5:15:38:cc:a2:87:b1:6e:
a7:75:38:ea:bc:46:a1:18:1e:a1:8a:2d:16:78:ea:c9:99:25:
0c:40:91:c9:dd:ea:a5:cb:c3:63:ed:31:d0:00:0b:4d:67:9d:
38:cc:28:52:db:ba:31:04:17:99:02:a7:a0:6a:d7:06:c5:b6:
4b:28:0f:99:4b:29:64:3d:ad:ec:94:b9:d6:e1:ad:c1:ef:9e:
4c:44:76:7d:d3:58:1b:c3:25:a6:2b:8c:06:fd:2a:fc:2a:86:
76:ec:3e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:25 2025 by rpki-client