Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
File: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft (raw, json)
Hash identifier: YoHjmJA27cB7p0q7K9S8bdj+K2ZuEJZCmUf7yhltDlM=
Subject key identifier: 55:12:4C:03:79:36:CE:C5:41:3E:80:25:94:C6:B6:CA:CB:F0:ED:22
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Certificate issuer: /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial: 019A70A56550E27DAFA908EDB85C2D43BAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
Manifest number: 0583
Signing time: Tue 11 Nov 2025 02:01:18 +0000
Manifest this update: Tue 11 Nov 2025 02:01:18 +0000
Manifest next update: Wed 12 Nov 2025 02:01:18 +0000
Files and hashes: 1: BMhhovXMuBpKJMmG-rBz-nuJzd4.roa (hash: sNEztFGkvH7v3y29OhQmoouHMsRsRH9HNC026mey6ck=)
2: MK26JBdAOQHbbLIoXza8gOwP2L0.roa (hash: bfaAHwdU8g3+OMyQR1jrgL3b4O52QKIOBn86eAMWqtg=)
3: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl (hash: AlnftOvie2RY3ic16GsdJaf8Cp8Q3p8yer10QjRld6s=)
4: XhbfPxl0mTvKXWs6aYEV15Sf1Zw.roa (hash: Y9+T7Mn/gKGvDXGyHmLcv1HeCAXW8+WFBTkhydKojcU=)
5: ktaokuPl5jOXxjmENV6Nzr3jvRE.roa (hash: QCRewanHdBrJ4jBO5+8cVb/CCKaBft0aBHc179F+ba4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:65:50:e2:7d:af:a9:08:ed:b8:5c:2d:43:ba:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
Validity
Not Before: Nov 11 02:01:18 2025 GMT
Not After : Nov 12 02:01:18 2025 GMT
Subject: CN=55124c037936cec5413e802594c6b6cacbf0ed22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:23:60:70:c7:4c:61:32:b6:94:cc:42:89:
90:3c:8d:25:6a:dd:97:48:c4:b8:2b:b3:d0:eb:44:
c5:2f:df:60:69:3f:4c:6c:a1:3e:d2:e7:2b:d4:c3:
5a:b0:c5:b0:6c:29:52:56:8d:0a:b7:0a:f7:68:c8:
bf:f9:28:a9:c8:a9:2d:40:10:cd:82:ab:94:2a:84:
66:c1:c9:0d:ed:f7:d7:b9:7e:7a:8b:73:80:73:b3:
d6:f6:b2:35:51:13:4e:4c:c6:fd:2a:dc:35:ed:70:
60:2e:ce:fa:1a:7a:3c:19:9d:e4:2b:25:d2:ab:23:
fb:8e:ef:97:34:01:c6:8f:82:f3:82:eb:5b:6e:17:
16:1b:f0:c8:a4:a5:94:49:e0:4a:71:63:6a:8f:c9:
f0:bd:5a:d8:db:d0:c7:3d:d6:ad:88:4a:7a:d5:08:
f5:ec:de:74:6d:d8:86:59:73:e4:ce:8f:e4:c2:7c:
5d:9e:07:34:ad:2c:c1:0b:15:1b:bb:d8:2f:fd:f5:
97:19:2b:2d:df:6c:0a:1d:16:bb:a7:1c:df:43:37:
9b:f6:4c:d9:2d:60:ef:31:12:04:e8:61:fc:00:0b:
05:ff:ac:b4:56:d7:92:9b:f8:3a:40:ba:85:85:10:
84:9a:3a:d0:51:6d:83:8c:36:3e:a8:10:f4:25:96:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:12:4C:03:79:36:CE:C5:41:3E:80:25:94:C6:B6:CA:CB:F0:ED:22
X509v3 Authority Key Identifier:
keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:87:5c:82:67:4c:ae:c8:5f:9e:c1:28:99:61:7d:2d:71:d9:
d1:ab:84:cc:18:33:9f:ea:7b:5a:6d:32:f1:a2:3d:56:05:fa:
33:9d:5c:d5:2c:37:35:dd:77:1e:d6:ad:55:90:a2:d1:b7:e4:
00:0d:29:3b:d0:e6:b1:b2:a3:36:45:53:1c:e2:cf:87:4d:3d:
d9:50:9a:fa:e5:39:fb:52:c1:86:f5:19:af:4a:90:78:7f:07:
ef:c7:34:51:c0:0d:06:4f:5a:66:eb:47:6c:0d:be:82:aa:b6:
30:40:d2:f1:3d:da:f2:be:ba:24:35:6e:e6:11:ec:1a:57:49:
ce:df:00:55:52:b3:9a:61:09:57:b0:e3:48:85:fc:cc:69:fb:
4c:65:cc:9a:35:2a:e5:56:47:fe:16:44:54:8e:6d:4e:0d:f8:
c2:0e:f8:02:1d:78:28:6b:26:0a:20:8e:fa:7f:49:60:b7:04:
39:9f:52:05:80:72:12:c4:da:d4:53:9b:55:ca:e1:f1:62:30:
30:b7:4d:43:91:65:a9:d1:10:77:49:da:83:95:dc:fe:25:2d:
e4:53:72:e0:2a:f5:7b:7c:52:ad:27:2e:5a:d0:9b:4a:c8:10:
46:0f:86:da:02:d0:6b:77:b4:a7:22:82:7e:31:c0:5c:ae:4d:
c6:02:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:14 2025 by rpki-client