Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
File: 1-w8AoW8RYMy3oFQNkqyohm6YeI.mft (raw, json)
Hash identifier: CRzuSl6QLkOpBOcEotdfNtkjZaAN2w23wKlnosKKEdw=
Subject key identifier: 60:55:87:43:8D:EB:25:88:5E:34:56:98:A7:A2:B2:EF:E8:FA:5D:BD
Authority key identifier: D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
Certificate issuer: /CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Certificate serial: 019A71EE606E92C07BB7BBAF3C0A9A36A4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
Manifest number: BE
Signing time: Tue 11 Nov 2025 08:00:38 +0000
Manifest this update: Tue 11 Nov 2025 08:00:38 +0000
Manifest next update: Wed 12 Nov 2025 08:00:38 +0000
Files and hashes: 1: 1-w8AoW8RYMy3oFQNkqyohm6YeI.crl (hash: 64ihmqvGSsdJrE728yoAXIZ27PGjcaNHIB4234OgM0I=)
2: I-zs-8rljmDPlErQ03m2L3NV_DU.roa (hash: UzoSi4X1KX7g6G8RqFjoqfYd2UGDWS9dFOixZ89hyRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:60:6e:92:c0:7b:b7:bb:af:3c:0a:9a:36:a4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Validity
Not Before: Nov 11 08:00:38 2025 GMT
Not After : Nov 12 08:00:38 2025 GMT
Subject: CN=605587438deb25885e345698a7a2b2efe8fa5dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:b5:13:32:d6:7c:0e:f1:39:2c:42:f9:8b:
36:4c:0d:58:d0:1d:28:e2:49:5f:cf:67:5e:e0:f9:
62:ab:20:2f:59:a0:65:d6:63:8a:38:d3:12:2e:13:
bc:e7:67:81:51:a2:fb:14:be:ee:8f:2f:00:b2:e5:
26:d0:7c:b2:86:7b:a7:5a:c4:d0:27:00:05:bf:cc:
55:ed:39:c7:60:15:6f:1b:81:31:c5:65:cb:00:e2:
f0:ab:ce:38:2d:9c:07:17:52:08:80:85:6e:19:25:
b6:d0:28:95:6f:84:21:13:44:03:3b:4e:e9:d8:89:
1a:21:ba:43:e1:19:25:71:52:28:11:0e:56:87:f9:
e3:0b:6d:c3:94:45:9a:9f:fd:e8:66:50:2b:6e:f9:
fd:a7:46:71:df:72:0c:50:84:85:1d:c2:2b:b0:1a:
56:54:0d:83:e0:85:ce:df:c8:f0:7b:f2:9f:04:1e:
f3:b5:92:a6:c9:f9:63:11:5d:a8:d8:2c:fa:dd:12:
a2:22:66:0f:50:f3:05:33:78:72:ca:4c:f8:c3:7f:
2c:48:4c:35:b3:14:6b:7e:14:23:d1:eb:85:1f:7a:
c6:41:11:1a:af:70:71:a7:16:54:e1:68:ff:12:59:
01:3b:5d:2e:14:5a:99:62:ed:33:aa:29:2a:11:ec:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:55:87:43:8D:EB:25:88:5E:34:56:98:A7:A2:B2:EF:E8:FA:5D:BD
X509v3 Authority Key Identifier:
keyid:D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:97:48:4f:32:9f:3e:95:3c:6f:ce:aa:4f:81:6f:d0:a9:3a:
6c:8c:5e:a9:0c:33:5a:e9:41:ac:44:b1:fb:03:6e:f5:ff:fa:
3c:6e:ee:4c:e6:c1:af:a7:d0:95:e9:f8:52:e6:b3:18:a3:4c:
80:06:01:e6:6b:25:50:0f:c2:9b:4b:4a:5d:93:92:27:4d:90:
fc:86:3c:69:24:37:2b:23:24:f0:80:65:cc:f7:60:b6:94:24:
e2:79:cf:d0:25:37:eb:5e:83:79:19:5f:8f:c9:29:39:56:7c:
e8:80:09:e1:da:07:2b:1b:b7:15:d8:82:04:de:e5:05:4c:92:
d4:a9:e3:02:df:cb:06:20:ee:bf:be:79:a3:8c:e3:90:7b:4b:
70:91:a0:70:dc:8d:bd:80:8e:68:bb:0e:60:9d:88:9f:cd:cf:
50:c7:3e:57:98:af:c4:41:c6:70:2c:c4:45:85:92:33:e2:aa:
5b:a9:d1:0c:2c:c2:dc:98:d4:fa:ca:e5:95:21:d5:95:30:b9:
8b:9c:8e:dd:93:c5:54:7f:10:45:c7:f0:e0:81:ee:c1:da:d0:
86:c0:7e:7e:e4:60:42:da:7b:7b:c0:bc:85:76:f9:ba:f5:b6:
66:c2:5a:3c:4c:34:30:0d:eb:8a:64:43:6b:29:d0:d0:0e:8d:
b0:e8:20:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:21 2025 by rpki-client