Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: AmfmPAJdZImZwnynZ3ibofpVR/1OMfXutgNlaWNp7Wk=
Subject key identifier: DF:D0:21:C1:AE:01:8E:52:9C:C3:E4:83:C4:D3:61:02:08:3B:D5:A5
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 019A0CA6A3DB4A8BDBC1A04DD3C293410645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 16F5
Signing time: Wed 22 Oct 2025 16:00:38 +0000
Manifest this update: Wed 22 Oct 2025 16:00:38 +0000
Manifest next update: Thu 23 Oct 2025 16:00:38 +0000
Files and hashes: 1: Gp59J-5Sjta1tmO1BUNSwj87vUI.roa (hash: OgOIKzaveJZdrN8U7gkn47rkfBwhkft0gqHgmzmYmdc=)
2: oX3nNgieJ2JInSOqTkqnW4BSKKU.roa (hash: E/puRqDQplddqvaDsExSE6S/JUmdbOP6wn7iah2FAFE=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: xbDBNpl79nBM0pdXxTuuPaJFODvJj6YDwsuOjDzqsI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:a6:a3:db:4a:8b:db:c1:a0:4d:d3:c2:93:41:06:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Oct 22 16:00:38 2025 GMT
Not After : Oct 23 16:00:38 2025 GMT
Subject: CN=dfd021c1ae018e529cc3e483c4d36102083bd5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:c9:28:6c:1c:71:c8:15:47:91:29:e6:b8:
e3:c1:28:26:76:ec:d0:04:99:cf:8b:01:67:41:45:
ad:6b:61:52:97:16:d8:4d:fc:da:de:09:d9:2a:18:
38:ca:f4:06:d8:a1:a6:ae:42:77:13:a1:e6:a7:60:
c6:f4:4a:b7:46:18:21:56:19:ce:f3:2f:37:c3:56:
2b:9a:77:6d:0f:da:df:47:ce:ee:85:a7:c4:7b:9f:
23:1a:35:a3:ae:a4:39:b8:8a:14:28:c4:95:da:2f:
9c:a5:cb:3d:ce:e6:9c:af:af:8f:fd:1d:6d:7a:b2:
34:c4:c3:18:d2:51:e8:45:96:ca:9e:a1:34:f4:6d:
80:c9:40:7d:00:45:58:29:d0:fb:db:68:82:f0:c8:
da:1d:aa:5e:ff:4e:5d:ce:7f:40:d5:6d:c7:72:f2:
54:a5:f6:50:2f:a3:f7:9f:82:d8:90:b0:a9:07:3b:
26:3c:0a:34:e7:3b:81:8f:2a:72:df:ad:9b:a7:2a:
7a:3c:b3:62:92:0f:71:23:69:0a:bc:3e:14:99:bf:
43:85:4d:e5:e6:94:7f:31:77:0c:4f:5c:97:7a:78:
03:40:5d:df:c7:33:ec:63:7b:26:78:53:a4:61:bd:
43:08:7a:3e:39:bb:62:35:95:8c:60:97:4d:e0:cd:
44:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D0:21:C1:AE:01:8E:52:9C:C3:E4:83:C4:D3:61:02:08:3B:D5:A5
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:06:8c:42:11:71:11:31:97:97:e9:fa:2b:3c:ad:33:6b:8e:
66:4d:0f:20:b9:df:14:c4:11:fb:b3:89:99:45:d8:b6:dd:44:
4d:8c:14:ee:ba:a4:59:ab:1e:a5:10:da:af:59:80:c5:ae:74:
63:23:37:2e:6c:35:15:e8:0d:65:3a:d1:fd:19:4b:ef:32:d9:
e6:48:49:73:d2:58:75:ed:47:30:b8:ed:18:5d:3c:af:36:f1:
57:52:5f:47:45:02:13:29:aa:87:2d:8d:73:95:85:c4:84:a5:
7b:03:5d:26:30:25:5f:3a:f4:56:62:9e:4b:36:a4:ac:a0:78:
4d:a9:9b:93:2c:95:e1:e1:e5:eb:42:d4:3a:e2:29:45:03:68:
cc:3a:47:d8:75:92:64:3d:ea:25:7f:d5:6e:4a:ad:b3:00:4c:
1f:16:f6:3d:29:a4:1e:65:42:68:ea:44:77:91:c7:aa:c8:4d:
b3:a5:ce:3b:87:0d:eb:e8:50:fa:54:10:bb:c6:90:3c:b3:7d:
b6:8d:40:98:66:5f:0d:4c:4f:b3:12:72:56:62:3f:2e:47:8f:
2c:c3:3a:da:50:82:41:af:30:e5:65:98:87:2d:a9:65:f7:dd:
81:1f:2e:17:2a:3b:47:9d:6a:30:e8:b6:0d:ab:38:72:2b:85:
8a:9e:5d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:40:01 2025 by rpki-client