Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier: k1yehvBSLVjF1CObqaTvIika/wwlQzc2iBGCJouLtHw=
Subject key identifier: 48:40:BB:E9:B9:D0:38:B4:93:09:BF:A6:3E:CC:F5:32:60:3E:BB:5A
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial: 019A71137111D5828FDF53284AA70569B58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number: 0703
Signing time: Tue 11 Nov 2025 04:01:30 +0000
Manifest this update: Tue 11 Nov 2025 04:01:30 +0000
Manifest next update: Wed 12 Nov 2025 04:01:30 +0000
Files and hashes: 1: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (hash: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=)
2: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: Y62l6qzvVBlE0qMaVJynymvCpRzrnOH5VrBT46JIKvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:71:11:d5:82:8f:df:53:28:4a:a7:05:69:b5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Validity
Not Before: Nov 11 04:01:30 2025 GMT
Not After : Nov 12 04:01:30 2025 GMT
Subject: CN=4840bbe9b9d038b49309bfa63eccf532603ebb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:0e:c8:e4:10:67:e2:4b:1a:c9:81:87:f2:
69:01:55:c6:fa:f6:31:01:94:de:8c:c5:ea:2b:bc:
27:94:09:56:ba:cb:be:7d:01:4e:5f:7e:78:15:bc:
86:49:de:0e:67:b5:ce:1a:70:e6:17:e0:ed:f5:e1:
70:2e:5b:ad:28:b7:95:1d:ee:41:5d:2f:da:4d:92:
f6:5a:04:20:4b:36:01:74:27:89:31:a0:8b:fd:e4:
57:d5:88:05:fa:b0:8f:4f:dd:23:e9:d9:7a:54:3a:
52:f0:1d:ad:dc:e8:7c:9a:e4:36:46:18:aa:32:ba:
80:a1:e6:d6:93:bb:fe:eb:35:ce:20:cb:30:64:c9:
4c:c8:dd:52:8f:f0:ce:2a:98:7c:80:ff:5c:6b:f3:
16:d5:0e:c2:34:b6:5a:cf:51:16:3a:76:1a:f1:84:
3c:4a:66:2a:1e:ec:0e:eb:b9:22:96:60:ba:ba:33:
ee:9f:aa:55:3b:0d:ef:18:29:f2:a0:78:a7:75:3e:
62:a5:69:2f:06:77:e7:22:b1:5b:92:81:7a:b5:20:
cd:82:8e:de:31:f2:c7:42:04:9b:eb:cc:38:34:e4:
b0:b4:a8:e7:aa:97:10:86:0b:9c:28:cc:45:dc:14:
8e:65:96:db:77:44:5d:9b:22:8d:82:fc:95:e2:e1:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:40:BB:E9:B9:D0:38:B4:93:09:BF:A6:3E:CC:F5:32:60:3E:BB:5A
X509v3 Authority Key Identifier:
keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3e:bf:a9:0a:33:51:3e:a4:c5:92:1e:d5:9e:ad:f5:60:14:
67:4d:c3:10:b1:e6:36:37:c7:b3:30:44:c5:83:0b:a4:82:1e:
6d:b7:d6:f4:5c:29:3b:bd:c1:c9:56:1e:75:b4:8c:b4:88:27:
7f:a6:fd:12:c3:bb:2d:b5:b5:4c:cc:12:63:6f:84:65:da:02:
0c:70:c2:23:53:40:c8:0a:a4:e9:72:99:70:dc:62:32:b5:9c:
f1:25:5d:f8:b3:46:3f:18:95:55:f7:79:9e:3f:6d:45:6d:8c:
f9:05:54:f5:e9:54:15:5e:68:e0:ae:38:5e:dd:a4:32:7e:bf:
7f:59:63:97:fe:c1:91:96:44:9a:71:50:cd:2e:51:fd:41:7c:
80:13:82:e2:25:b0:c8:dd:b5:73:de:a8:b4:c9:90:4a:45:9c:
67:0f:b0:d0:9a:12:0e:03:46:fa:4c:61:12:21:df:b8:4d:a7:
b9:68:8a:6e:77:68:e1:ff:62:39:da:14:a5:7f:37:90:31:58:
55:a2:ec:e7:8b:c5:99:f2:9c:f1:7f:b4:53:cd:8d:12:08:d2:
80:21:17:91:1e:c4:31:4f:6d:34:19:e1:e8:ca:80:40:77:3e:
07:3e:f0:9f:d6:93:61:50:a1:3c:99:bb:d0:33:37:c9:3c:d1:
71:b8:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:34 2025 by rpki-client