Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: EzOojby/+3tYjxSyaYOVIXYv8iWibxGNuPMDILGVswc=
Subject key identifier: AD:BF:7D:18:C5:51:B4:9F:89:A3:37:99:03:FB:A7:CF:B9:70:18:74
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 019A57899CD50F14666995CF085480AEE5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 1211
Signing time: Thu 06 Nov 2025 05:00:27 +0000
Manifest this update: Thu 06 Nov 2025 05:00:27 +0000
Manifest next update: Fri 07 Nov 2025 05:00:27 +0000
Files and hashes: 1: FSst80BStcOZoxcVEEn7HUNlaMg.roa (hash: MkzJ0Sac3ZN5iWdcIOjWwvYuR5zj6qypIoySO/md3YQ=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: XXIC7iMkCRcZQprK3VDMSlRWrnNo3LgM+iXUPtvMb24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:89:9c:d5:0f:14:66:69:95:cf:08:54:80:ae:e5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Nov 6 05:00:27 2025 GMT
Not After : Nov 7 05:00:27 2025 GMT
Subject: CN=adbf7d18c551b49f89a3379903fba7cfb9701874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:c7:cd:fa:26:76:4f:fc:90:0b:98:ee:3c:
69:f9:1f:67:1d:b4:34:77:03:74:85:e9:aa:30:c3:
d9:78:9e:7b:dc:89:4d:51:81:ef:9b:30:37:8d:69:
1c:c9:7a:bc:6d:46:72:a6:56:3f:78:89:70:4f:d8:
08:50:6b:b4:cc:80:65:91:ea:70:47:5b:50:93:a5:
6b:7d:e7:87:90:ba:bd:6c:ba:b5:61:b5:a2:b1:50:
aa:e5:dd:a7:e9:82:ce:f6:d8:cb:bd:7e:25:c6:40:
90:0e:24:83:33:4c:6a:82:e1:a8:ad:91:70:2b:24:
6d:1b:25:88:18:bd:c9:01:c3:da:24:16:0c:db:2a:
2a:db:cb:40:7b:c2:ae:ae:8d:15:9f:67:f3:c6:60:
9d:60:67:d7:f1:75:98:21:4f:85:0c:9e:6f:e3:89:
5d:9d:57:f4:1a:b2:ba:72:48:02:e2:9a:e6:63:e7:
d1:2c:2c:3d:b3:24:f8:fc:8b:42:26:b2:9e:07:ff:
a5:4f:27:78:dd:88:07:2e:c6:7e:98:0d:3e:b8:c9:
3a:10:6c:76:83:a0:d0:79:f9:a5:e1:c8:bb:03:c1:
b2:70:2f:8b:c9:d6:00:20:7d:45:45:e9:60:c3:6d:
38:af:9c:17:60:bf:09:e3:1a:f4:bf:91:9e:88:5c:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BF:7D:18:C5:51:B4:9F:89:A3:37:99:03:FB:A7:CF:B9:70:18:74
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ec:2b:3a:ad:9e:d4:51:ad:98:81:4e:0a:42:e9:e7:b3:0c:
9a:e6:20:97:d7:02:8e:eb:b5:15:05:f2:8c:c8:30:07:37:0f:
6b:7d:0f:7a:5a:4b:ec:24:fd:6f:3a:50:eb:01:35:98:98:5e:
76:48:c4:a1:75:56:be:55:4a:4e:52:48:c0:06:31:fb:e2:e2:
08:c1:a3:8d:61:47:17:55:0b:ca:bc:0d:68:cc:ea:d0:e1:ca:
29:d2:a2:3d:9f:27:d0:fe:96:fc:8c:08:52:df:75:6d:be:57:
e4:39:d1:dd:43:3d:e7:10:20:f6:70:d7:3f:3a:4a:8a:bc:7c:
7b:1b:3b:1b:37:b0:48:d3:bd:0c:94:d5:8f:d0:4e:82:94:0a:
ab:9f:c6:97:b6:d9:79:43:b6:ec:5d:30:c7:9d:5f:c5:29:69:
2f:bf:20:f7:2e:4c:12:25:d2:7a:fe:30:1e:36:1e:9a:8a:58:
33:5b:9c:d8:bf:16:ae:85:b3:ea:f1:e4:a2:48:cb:c4:d1:ba:
57:5b:dc:9a:98:04:c1:ec:0a:c2:f6:a5:ee:f3:ad:ca:95:cf:
ab:0c:9a:c3:35:3f:06:6d:35:56:7b:eb:2f:52:d8:ff:f7:30:
da:86:5e:86:38:f4:bd:89:f9:96:86:e0:09:d7:f6:05:90:c9:
24:6e:10:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 09:38:50 2025 by rpki-client