Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
File: rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json)
Hash identifier: KY34T61yeJEJLaChJ/GxzcY+vjLAcN+H3kpusSuJ7hg=
Subject key identifier: 8C:6D:98:79:65:48:C2:2E:D7:53:69:40:28:E3:9D:87:E0:01:06:08
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial: 019A71B8A4E03C1613A3AE928094F3A61F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
Manifest number: 0F1A
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: KVHIamZJVn2A53v0da8_IQ5hmAc.roa (hash: MHiTghXPbp0Yn7XA7tDf2bHlQcgsEoD122bH+wIZHLg=)
2: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: 4o7nkpLMlad+f/aYbzrZ2gfc66Wi4l+mea7Vyk+Wjc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a4:e0:3c:16:13:a3:ae:92:80:94:f3:a6:1f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=8c6d98796548c22ed753694028e39d87e0010608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:18:66:ca:fe:10:aa:1a:09:22:05:22:7a:
d5:be:eb:8c:d7:ea:4e:9f:31:ca:69:71:ac:3e:18:
71:da:67:6d:88:85:97:61:12:63:4b:c9:40:b6:4a:
d2:26:6f:8a:d8:17:1d:88:de:58:48:ff:31:f5:8f:
44:aa:2c:fc:18:00:9f:9f:1f:d5:31:3b:82:bc:d9:
17:18:47:31:c0:6b:91:54:a9:b9:7c:f9:b7:98:66:
ad:37:20:8e:39:cd:9e:2d:bc:ae:73:df:34:9b:5a:
50:58:f3:4d:80:21:3a:14:f4:4c:cf:8a:24:f3:f9:
35:85:44:fa:d6:1e:98:2d:24:27:8f:8d:2b:98:72:
2d:d0:58:b3:5e:9c:8a:cd:6b:70:9a:d7:e0:00:27:
64:e7:76:61:b6:21:ff:6a:9b:00:d8:9d:1e:8c:06:
6f:6c:00:8c:88:1f:53:b9:ca:06:f7:f0:4c:4d:6c:
99:4d:c0:67:4b:ea:8f:0f:b5:94:8f:74:77:78:af:
2f:e2:3f:82:f3:70:2f:e4:6c:52:ad:c4:52:04:3c:
27:85:81:d5:b2:0c:10:75:41:2e:24:a1:82:ea:cc:
f8:8d:26:d9:e4:69:ca:48:9c:ce:10:46:7c:49:99:
61:6a:0a:54:a7:cf:67:b6:8d:88:4a:f2:5b:41:4c:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6D:98:79:65:48:C2:2E:D7:53:69:40:28:E3:9D:87:E0:01:06:08
X509v3 Authority Key Identifier:
keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c3:b1:51:b6:0a:99:4c:77:bb:82:fd:07:a7:ca:90:44:74:
3f:7f:75:e5:01:28:58:3a:cc:5b:05:e9:0e:b1:38:dd:8c:c2:
91:d3:38:bc:3a:3e:dd:72:25:19:3b:79:b1:a6:51:2e:ad:ad:
23:d2:8a:bc:0d:95:44:d7:b9:1f:c6:22:6c:48:39:96:c0:23:
ab:01:d9:95:25:45:c0:61:32:a5:9c:43:1d:d1:2f:02:bf:43:
57:62:fc:67:ab:05:8a:d4:99:33:fe:73:38:84:59:c4:36:7c:
62:4c:c3:03:d3:e6:50:30:d1:d0:d3:3c:f0:79:11:73:a1:03:
22:73:ef:64:32:66:3d:9b:45:3e:c9:0b:bd:90:a8:48:0f:bb:
9e:b3:ed:19:8e:7a:79:7a:a0:fa:87:b6:a9:06:c6:f4:7b:a3:
11:4b:55:fb:ab:84:57:77:d5:3c:a2:14:a4:dd:ca:bf:f2:fe:
50:b2:a8:ca:da:84:43:ea:ec:4d:0d:ba:b1:02:c1:9f:3c:a9:
e8:cf:72:d0:fd:1c:9b:7b:37:88:7b:0a:ad:47:97:3d:5c:00:
7f:8c:bf:11:0f:43:8e:3c:c6:77:8d:82:07:c7:16:a0:2b:52:
d9:c1:74:92:71:55:0b:1e:cf:ea:04:72:60:49:17:9f:83:e1:
53:e9:5d:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuKTgPBYTo66SgJTzph+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDJmYjU2YjQ1OWM3YTIxYTc5YjY4YjRlMTE4YWI4NzZm
Yzk2YTUwHhcNMjUxMTExMDcwMTU3WhcNMjUxMTEyMDcwMTU3WjAzMTEwLwYDVQQD
Eyg4YzZkOTg3OTY1NDhjMjJlZDc1MzY5NDAyOGUzOWQ4N2UwMDEwNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz54YZsr+EKoaCSIFInrVvuuM1+pO
nzHKaXGsPhhx2mdtiIWXYRJjS8lAtkrSJm+K2BcdiN5YSP8x9Y9Eqiz8GACfnx/V
MTuCvNkXGEcxwGuRVKm5fPm3mGatNyCOOc2eLbyuc980m1pQWPNNgCE6FPRMz4ok
8/k1hUT61h6YLSQnj40rmHIt0FizXpyKzWtwmtfgACdk53ZhtiH/apsA2J0ejAZv
bACMiB9TucoG9/BMTWyZTcBnS+qPD7WUj3R3eK8v4j+C83Av5GxSrcRSBDwnhYHV
sgwQdUEuJKGC6sz4jSbZ5GnKSJzOEEZ8SZlhagpUp89nto2ISvJbQUzESQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxtmHllSMIu11NpQCjjnYfgAQYIMB8GA1UdIwQY
MBaAFK8C+1a0WceiGnm2i04Rirh2/JalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zM2ZiOTAtMTg5Yi00ZTMxLWI5MmEt
MGMxOGQ4NTk3MzI4LzEvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zM2ZiOTAtMTg5Yi00ZTMxLWI5MmEtMGMxOGQ4NTk3MzI4
LzEvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8OxUbYK
mUx3u4L9B6fKkER0P3915QEoWDrMWwXpDrE43YzCkdM4vDo+3XIlGTt5saZRLq2t
I9KKvA2VRNe5H8YibEg5lsAjqwHZlSVFwGEypZxDHdEvAr9DV2L8Z6sFitSZM/5z
OIRZxDZ8YkzDA9PmUDDR0NM88HkRc6EDInPvZDJmPZtFPskLvZCoSA+7nrPtGY56
eXqg+oe2qQbG9HujEUtV+6uEV3fVPKIUpN3Kv/L+ULKoytqEQ+rsTQ26sQLBnzyp
6M9y0P0cm3s3iHsKrUeXPVwAf4y/EQ9DjjzGd42CB8cWoCtS2cF0knFVCx7P6gRy
YEkXn4PhU+ldIQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:25 2025 by rpki-client