Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: izRyBDsnl4MY0sqNz9VIktC7S0/OYpLm6kpG47GVWSo=
Subject key identifier: DD:1A:6E:95:0E:85:99:6A:12:3F:DF:6E:06:28:19:80:87:98:3E:0A
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 019A22F791EE6976C2C2F9FC5759EA5D95C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 14A1
Signing time: Mon 27 Oct 2025 00:00:41 +0000
Manifest this update: Mon 27 Oct 2025 00:00:41 +0000
Manifest next update: Tue 28 Oct 2025 00:00:41 +0000
Files and hashes: 1: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (hash: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=)
2: S11P7YKPNs_v7YdolA0FgB6j23E.roa (hash: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: 0N/6bqXNDofulaYUA/ADbU1LMskDdzfhIv3aWf2EokE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:91:ee:69:76:c2:c2:f9:fc:57:59:ea:5d:95:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Oct 27 00:00:41 2025 GMT
Not After : Oct 28 00:00:41 2025 GMT
Subject: CN=dd1a6e950e85996a123fdf6e0628198087983e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:51:e8:b1:c6:1d:e0:07:e5:0f:90:ca:33:
5a:e7:e8:a8:6d:62:92:fe:11:2e:e1:33:7a:b4:bf:
1d:3d:0d:6f:a7:f4:e5:40:17:79:06:0d:9a:66:15:
16:e0:ef:db:a8:28:9e:d1:c4:e3:58:e9:71:cb:bb:
87:8d:3c:e5:d0:77:3d:e5:50:eb:ed:5c:0b:88:85:
25:29:b0:b6:c0:7d:b4:ff:a9:0c:0d:1d:b8:54:b1:
dd:bb:ed:82:9a:d8:e6:f8:8d:39:41:b1:69:24:c1:
4a:3d:f8:7e:67:47:4e:36:5e:9b:35:be:b3:d6:d7:
87:ee:28:46:77:b7:f4:63:19:83:d4:c2:a2:1b:d7:
21:f8:c0:4e:91:33:52:f6:fe:2c:fd:a5:ff:11:3b:
81:4e:4a:44:e8:cd:5d:e5:45:ac:33:26:f8:10:31:
55:60:d3:22:33:97:9e:b0:1d:a5:24:db:8a:95:4d:
d9:a3:9e:b8:40:b8:da:ed:1f:70:1b:f5:df:4f:93:
56:0c:2c:17:e5:bf:6f:83:f3:1f:71:3c:5e:d7:1b:
07:58:25:ef:3a:83:7b:a9:89:15:1c:f2:9b:d9:81:
88:d0:35:8c:19:5a:49:36:e0:1a:6e:4f:8d:fa:c2:
15:95:d9:d6:ac:88:0a:9b:8a:40:bf:c0:13:48:cf:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1A:6E:95:0E:85:99:6A:12:3F:DF:6E:06:28:19:80:87:98:3E:0A
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:54:5b:5b:0c:e7:21:ad:60:6d:de:63:41:da:2a:58:e0:47:
f4:6b:0e:75:9c:a0:88:44:fb:2b:6a:ce:4a:4e:91:39:8f:67:
07:6f:87:b7:57:eb:c4:95:04:95:90:fa:ba:7f:c7:95:ec:2c:
cd:f8:5b:ac:90:9c:f8:9b:58:9d:61:7b:ee:bb:77:05:09:fe:
94:0d:b5:5a:fa:57:ac:b4:0c:e6:d0:65:b6:42:11:68:56:c0:
e5:3a:2e:e0:54:e6:29:da:90:56:1e:7f:39:50:3a:38:66:f1:
49:fb:07:8a:74:e1:f6:34:0b:eb:82:7e:12:26:c0:ce:4c:96:
91:08:34:79:d2:e9:c4:fd:b3:11:a4:c5:07:7e:dc:65:26:b8:
1c:cc:92:b0:58:53:72:4b:de:38:57:61:7a:6e:b5:b8:79:28:
5e:00:de:be:90:c9:b3:d2:ee:b7:4c:25:55:85:bd:f5:44:91:
bf:de:a8:e8:cf:49:a2:de:74:9c:fe:d7:02:4b:68:5c:11:f1:
58:40:7a:c7:b1:e9:18:b8:fb:04:25:eb:e1:5b:d4:c2:b2:b2:
6d:5e:30:d1:d2:ef:e5:3e:fd:1b:b0:98:0a:fd:9b:ce:f2:d4:
d4:18:c3:16:fd:08:56:90:3e:a1:9d:18:d2:c8:d4:f9:1f:1e:
ec:db:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:03 2025 by rpki-client