Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
File: woONHzsjG_cuRT3XjEtQrACf9_E.mft (raw, json)
Hash identifier: R6iCY/9MHp4zfWxU4b3vktwz7ez+yiW8LL8BkOVzKCA=
Subject key identifier: A2:F9:05:46:0B:FD:40:04:47:63:3D:2B:19:0B:8B:C7:97:B5:7E:36
Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
Certificate issuer: /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Certificate serial: 019A71EEE0D54F7CD2FD4D192FA916E015B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:11 +0000
Manifest this update: Tue 11 Nov 2025 08:01:11 +0000
Manifest next update: Wed 12 Nov 2025 08:01:11 +0000
Files and hashes: 1: fM16NL7UA9ErJ0RNfb8ePLmU6tQ.roa (hash: 2mPsCiT6kK+HE+XcnPI9z3k0mcNw38StY2DELHnEXqY=)
2: woONHzsjG_cuRT3XjEtQrACf9_E.crl (hash: Pj9nLcmwscxH9B9SQxrceVrKBA7KhT1L7ha1pNNSKtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e0:d5:4f:7c:d2:fd:4d:19:2f:a9:16:e0:15:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Validity
Not Before: Nov 11 08:01:11 2025 GMT
Not After : Nov 12 08:01:11 2025 GMT
Subject: CN=a2f905460bfd400447633d2b190b8bc797b57e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:da:70:de:2b:47:b5:35:05:14:0f:cf:e5:
22:59:f9:36:a1:ea:3c:54:0c:6c:c5:cd:98:46:62:
05:2a:7a:7e:45:91:31:80:4e:c0:0b:b3:50:6f:ee:
3c:92:2d:c9:f4:f1:d0:d9:1d:d9:d8:51:a7:37:63:
6e:31:06:21:fb:f4:12:6e:e1:5b:9a:d0:28:78:87:
a0:8d:02:44:aa:15:6e:d5:b3:b1:27:58:91:1b:24:
e9:bc:08:f8:57:16:6d:f7:dd:16:0c:33:cf:08:92:
99:96:3d:e5:92:a6:ea:18:b7:33:53:24:24:d6:03:
e7:77:f1:b9:35:46:9d:a7:a9:1a:b1:fe:9c:21:4a:
5d:15:2d:0a:2f:92:4c:69:e4:7f:22:80:b2:c5:da:
6b:be:eb:42:68:0b:51:6a:1b:ae:45:8c:8c:64:11:
59:60:d3:f7:d2:ce:04:a4:2f:7c:8f:2c:49:1d:12:
d4:0f:35:98:25:73:a4:7a:68:b9:7e:19:5a:de:8f:
74:dc:e2:18:d1:b1:bf:76:6f:26:77:66:cc:e2:62:
ea:4b:a1:83:bb:a2:55:17:a9:f5:52:f4:aa:f7:7d:
5e:f1:a8:ea:36:2d:af:be:36:ae:48:8d:6f:0d:5a:
91:f0:d8:88:d7:8d:db:cd:67:47:66:76:f5:a5:d4:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F9:05:46:0B:FD:40:04:47:63:3D:2B:19:0B:8B:C7:97:B5:7E:36
X509v3 Authority Key Identifier:
keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0c:3c:24:84:5c:8e:8d:87:cb:fb:bd:d2:2a:5b:92:33:e3:
04:90:2b:68:d5:b1:09:00:ea:a5:05:21:b9:ba:89:ff:11:d0:
41:9a:57:97:77:4f:19:a7:82:95:e6:62:93:eb:38:9a:71:ad:
da:a9:a9:36:f9:34:b7:d5:ad:12:b9:90:f4:e3:a7:9b:1e:e0:
2e:88:20:80:5a:6d:80:21:5b:90:a6:4a:dd:65:66:77:cf:58:
aa:a9:c6:73:39:46:bb:6c:4a:90:7c:74:93:a2:f7:d2:64:23:
0c:dc:5c:30:af:60:ac:54:49:c0:80:80:8d:34:d2:b9:ba:9c:
c6:37:f5:d2:2b:e1:98:66:64:b0:c8:c9:02:e9:36:cd:26:51:
81:43:f5:f6:ec:84:ed:44:20:d5:03:89:d6:4c:48:56:38:66:
22:3a:d3:34:e5:5e:8c:6e:5a:72:6d:62:f8:07:91:3c:df:81:
fa:7b:59:bc:55:0f:7b:d0:47:31:ba:e8:09:08:67:01:ee:97:
c9:57:d6:8c:f1:a0:16:f9:64:ae:32:7f:99:7c:a4:46:42:0a:
4d:84:d6:aa:cc:d4:55:79:42:8d:12:3e:84:57:09:9d:be:8b:
89:7c:7f:c5:a3:43:3a:73:0a:d0:70:f2:e7:dd:67:e9:ba:9b:
e2:a9:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:49 2025 by rpki-client