Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: Cttg9nZ5JQqlLqPVRD7gsOIMsv1pEzlzoYBL/SIzMYI=
Subject key identifier: 04:5C:43:F3:E0:FE:AC:DD:17:46:3B:E6:BC:0F:97:E2:38:E4:B2:D7
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 019A2DE8950236334DEF597CA3271BEE28DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 05C4
Signing time: Wed 29 Oct 2025 03:00:08 +0000
Manifest this update: Wed 29 Oct 2025 03:00:08 +0000
Manifest next update: Thu 30 Oct 2025 03:00:08 +0000
Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: i0MFJxC6u8b03LgIBsCUDNrl2Zc7TEBq4+AFvblLg+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 03:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:e8:95:02:36:33:4d:ef:59:7c:a3:27:1b:ee:28:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Oct 29 03:00:08 2025 GMT
Not After : Oct 30 03:00:08 2025 GMT
Subject: CN=045c43f3e0feacdd17463be6bc0f97e238e4b2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:79:c5:cd:b7:64:0b:d9:25:0f:43:1c:dc:b2:
a3:78:2c:8a:c2:27:19:f9:bf:dd:ff:48:12:00:42:
6e:c8:a3:b0:7a:11:8a:9e:06:ed:cf:65:83:f4:4b:
8c:8c:15:3f:ef:59:3b:08:80:33:8a:dd:72:3c:0a:
c7:e0:f1:85:b3:d2:a7:ec:d9:68:35:f3:67:f1:75:
0e:b9:4f:18:81:72:5c:f0:41:17:05:8e:a9:81:10:
fb:02:82:40:fc:5a:ff:1d:7e:48:fe:e4:29:e7:84:
04:72:56:fd:a0:c0:fb:41:1f:be:10:18:dc:80:02:
31:1a:b9:8a:bb:f3:1b:dc:6b:05:a5:ce:c0:e4:fb:
c6:83:aa:9f:a5:9c:b9:fb:cc:24:ad:8c:de:47:ab:
f9:78:19:93:f4:03:bb:5b:46:dc:4c:9e:b3:9b:63:
85:3a:8f:f9:e3:18:9d:1b:13:17:0f:77:a2:a7:d4:
78:6b:bb:c2:62:4f:f4:30:47:3f:08:e5:35:5a:b6:
6e:85:84:bb:61:03:0e:5a:c7:d3:ec:e4:29:5e:e6:
4d:07:f1:7c:f4:46:bd:ca:86:a3:7b:2a:cb:f6:c5:
b2:f2:66:91:6e:20:a1:3a:05:ac:8b:9c:9d:c3:f8:
91:f8:92:03:dd:20:90:66:bd:5d:58:97:4a:76:71:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5C:43:F3:E0:FE:AC:DD:17:46:3B:E6:BC:0F:97:E2:38:E4:B2:D7
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c4:b6:a6:19:4b:af:27:f9:c1:70:85:22:4e:4c:5c:a9:85:
ba:1a:b1:dd:7c:f8:2c:a4:a1:f5:46:51:84:13:68:52:8b:17:
eb:d1:c5:b1:e7:10:b6:f9:10:95:17:c5:07:c3:35:72:5e:79:
d9:37:79:aa:ce:ba:5d:ef:65:2f:48:b2:7c:59:4d:20:6d:44:
48:9d:12:11:5c:c2:ea:65:5b:5d:bb:19:54:51:64:66:2c:76:
f1:e5:38:a3:48:93:ca:9c:00:ca:06:26:48:30:7a:5b:c1:ab:
04:a5:08:e9:87:e7:12:fa:39:18:79:7a:4a:e9:d9:a1:6e:58:
7a:be:88:0a:87:1c:f1:f4:ab:98:b4:33:0d:ee:fd:2b:18:bf:
3f:c8:f5:97:4f:e9:50:de:6b:46:8d:67:5e:d8:73:cf:95:e1:
d5:4e:90:8f:49:45:85:82:98:87:98:41:82:63:66:ca:86:a8:
09:86:b6:a8:ea:ce:58:41:27:b0:ab:a6:01:2d:1b:b8:ce:c3:
d6:e3:6d:41:15:24:01:49:bd:f4:5e:dd:02:f1:f8:7a:e5:96:
b7:5b:fd:a4:f2:d4:54:e2:52:b3:60:c7:1d:24:79:b0:c0:d1:
cd:ed:11:68:cf:be:ef:63:30:66:36:25:58:11:37:46:87:16:
a1:50:9c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:26:09 2025 by rpki-client