Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
File: w8zhZV8_ceTv_qTec6GuyCKCnWE.mft (raw, json)
Hash identifier: Qb1VmrpmHmGR418Bx0870J3pL1OziSJLakDIT8/Yhtg=
Subject key identifier: DF:77:7B:78:C9:89:F6:2C:A4:27:15:81:BE:A3:5F:56:79:A5:3F:98
Authority key identifier: C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61
Certificate issuer: /CN=c3cce1655f3f71e4effea4de73a1aec822829d61
Certificate serial: 019A571BDE1BBBEA96B7F4380DB0C373F00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
Manifest number: 02B9
Signing time: Thu 06 Nov 2025 03:00:35 +0000
Manifest this update: Thu 06 Nov 2025 03:00:35 +0000
Manifest next update: Fri 07 Nov 2025 03:00:35 +0000
Files and hashes: 1: qel6ufOI0K0P6RzF02UdBRZmZOs.roa (hash: 0w6Fd2wQlTNYoLFBh1jxH0G1R4nWQ+6pOgjLnjgYDIc=)
2: w8zhZV8_ceTv_qTec6GuyCKCnWE.crl (hash: NX1f9Uc5U6qgFp5h7w+B5DT6wKgk4dP3HeWmjOifrxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1b:de:1b:bb:ea:96:b7:f4:38:0d:b0:c3:73:f0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3cce1655f3f71e4effea4de73a1aec822829d61
Validity
Not Before: Nov 6 03:00:35 2025 GMT
Not After : Nov 7 03:00:35 2025 GMT
Subject: CN=df777b78c989f62ca4271581bea35f5679a53f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f3:0f:cf:43:da:35:a1:2a:5f:40:3a:53:b9:
83:e3:f3:47:39:60:08:f5:f5:d2:fe:00:d8:c1:56:
82:ba:4a:03:67:15:c2:24:89:9f:87:ca:9c:6f:a4:
4c:37:89:36:d8:67:38:b9:4d:bf:ac:8e:a8:2a:21:
14:62:ea:ec:9a:f4:a3:89:c1:4d:bf:db:0f:97:71:
d3:e6:39:28:6f:8a:e9:95:08:6a:9d:a8:71:64:95:
97:3b:26:e1:f5:9e:52:ae:0b:91:09:2e:9f:f0:93:
92:5f:4e:3f:c1:62:32:df:6a:94:32:33:87:97:ad:
12:cd:66:82:3b:e0:e7:c6:14:f7:66:f7:d0:5a:e2:
ff:b8:6a:71:71:27:b0:5f:8e:d2:82:30:af:12:93:
76:8f:45:e3:33:44:ed:22:9c:b6:b9:7d:9b:95:03:
72:22:7b:c1:73:48:7e:97:cb:7d:cc:5b:45:ba:e1:
d0:bb:f1:c8:79:09:63:42:4f:8e:d5:2c:90:dc:37:
4d:be:06:83:ea:85:3b:b3:58:c8:04:06:e9:40:5d:
1c:d0:60:0c:e7:c1:ab:8f:dc:4b:99:e7:9b:a6:00:
d3:f1:17:e2:41:2c:5a:f8:01:45:42:92:2d:56:b4:
3f:1e:9e:f4:41:24:d6:65:74:d8:ed:d1:f2:34:b8:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:77:7B:78:C9:89:F6:2C:A4:27:15:81:BE:A3:5F:56:79:A5:3F:98
X509v3 Authority Key Identifier:
keyid:C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:15:a3:ba:e2:89:f8:fe:68:3a:c5:0a:be:c6:bf:b1:55:f8:
68:cc:e6:28:d3:74:29:f5:f6:57:6f:73:74:57:cd:bf:43:52:
f3:6b:1a:a0:74:45:23:a1:e9:62:3f:66:ea:73:bc:26:a7:c5:
19:9a:a4:5f:92:0e:cf:8e:b9:37:f4:1e:8c:be:99:c0:d8:8c:
96:2d:0c:0f:7e:30:44:b6:9b:ba:fb:4e:68:37:b5:da:5d:c4:
82:1e:1f:f2:35:fd:08:d1:36:ae:24:b4:16:b4:e9:3d:2f:c3:
85:ee:81:80:c7:c2:79:e5:fe:fd:4d:c2:c2:e8:78:91:49:d4:
c6:4b:2f:8b:98:6b:3b:7d:26:9e:e5:0a:80:a5:ab:8b:c7:60:
e0:4f:d3:62:17:ea:18:6d:9c:70:8a:ed:fe:35:d8:82:ab:49:
da:e9:58:a1:4c:b1:51:17:48:e1:bf:e4:06:21:da:d7:2d:7c:
21:17:2f:d4:27:58:a0:9b:59:67:2f:5e:57:b7:73:22:0e:e3:
cb:32:49:67:09:31:42:ae:05:fd:93:a3:a3:89:17:5c:7c:6e:
2d:00:51:5a:2f:50:63:19:41:b5:56:81:06:08:89:65:14:97:
2d:64:97:2b:5b:07:33:02:3c:67:da:81:37:15:95:b3:c7:66:
25:0c:ff:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 11:00:20 2025 by rpki-client