Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
File: w4Me3AugfH40q6cBw1c9jnKvGP4.mft (raw, json)
Hash identifier: m9FizV91kmu482VCyuHuTi1omYb0zIHt1DFi9VQC0nM=
Subject key identifier: 9E:2B:72:4D:B4:78:74:7A:FE:CA:5E:43:89:28:B8:0B:FC:1A:D2:31
Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Certificate serial: 019A71B7EBE7422DAE1343C5558748697B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: R3ax-Z4NwERn9kiI-gjg5Xya12A.roa (hash: ffTm+IwpNw27nllrwwqn+t+2k278/G5pqNf7iK/QlhI=)
2: w4Me3AugfH40q6cBw1c9jnKvGP4.crl (hash: px0bpjI3B6PmR5u5JOGJ++oax7GGrHTdH0eC3JXsjqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:eb:e7:42:2d:ae:13:43:c5:55:87:48:69:7b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=9e2b724db478747afeca5e438928b80bfc1ad231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:a2:1b:7f:5b:9c:b9:e9:cd:cc:ee:95:d2:
c9:a2:d2:5a:67:62:be:1a:54:34:aa:8b:0c:9c:06:
32:49:d6:dd:61:ba:54:ed:03:fa:b0:0c:a9:f7:e4:
ac:bb:a9:2a:bf:7b:39:4e:65:9c:ee:7f:07:d2:ae:
d1:72:40:3b:19:aa:2d:7c:83:12:8f:23:93:92:1a:
52:55:d5:bf:32:f1:92:a7:78:ff:30:22:66:be:54:
52:a9:f8:75:21:48:e7:80:18:ac:75:1d:cc:a2:6b:
7a:18:c2:4d:09:45:e3:85:0f:7c:53:b5:4d:05:fd:
cf:d2:c7:f4:6e:33:c5:b9:fb:2c:40:69:b6:19:31:
79:49:e7:60:f6:7d:2a:6a:9e:33:df:fa:9a:0c:9a:
4e:0f:3b:f4:2e:3f:6e:3f:05:ce:96:a7:7f:d3:ab:
fe:b7:af:5a:63:6d:a1:42:71:bc:ac:39:65:38:ce:
7d:20:d7:c2:b4:92:55:cf:3f:b9:19:bd:52:1a:f2:
2d:55:5e:53:2b:9f:4e:0e:8a:0f:cb:d8:f3:11:ec:
05:14:55:5c:51:63:9c:b3:b5:4c:93:44:07:b1:c4:
28:eb:3e:a8:d5:b8:ad:62:52:5b:93:43:40:3a:d3:
55:70:ec:b3:10:60:97:44:b5:b6:d1:28:bd:c8:70:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2B:72:4D:B4:78:74:7A:FE:CA:5E:43:89:28:B8:0B:FC:1A:D2:31
X509v3 Authority Key Identifier:
keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:38:a5:80:f2:c3:13:f1:63:8d:28:41:f9:74:9a:95:20:f1:
57:f2:18:b0:61:80:9f:91:38:80:26:f7:99:4b:13:7e:25:53:
49:0a:48:e4:4f:50:f7:5c:ea:ce:b4:a4:b4:56:33:7e:97:4a:
8e:d7:a2:a9:33:22:95:83:d1:9f:33:3c:bf:da:82:8f:dc:3d:
29:51:c8:44:d0:fc:38:4f:7c:29:93:31:90:89:87:dc:3d:72:
5a:9b:e4:9a:26:b5:80:30:8b:fc:52:d4:43:d4:7e:2b:ba:91:
6d:c2:16:8d:0d:d0:1f:48:3f:48:3f:3f:8c:4d:f0:cd:74:32:
f1:4b:bd:53:d7:79:b3:c9:fb:76:d3:13:44:e5:35:d9:7f:03:
d7:8d:10:fe:bb:4b:02:50:b6:ab:3a:88:c5:13:7e:2d:3a:56:
9a:8b:00:19:85:5c:4d:e5:d7:79:35:31:f8:3b:04:db:22:90:
37:76:9f:a7:5f:4e:75:f5:b6:d1:f8:59:75:36:98:78:99:16:
93:9b:66:68:93:a3:d8:cd:31:f2:a4:45:ba:bd:3d:75:ca:fc:
e1:8e:67:78:09:a8:a5:ed:d6:7f:5d:4f:a5:b9:b9:86:af:21:
bc:bf:a6:b0:d7:39:ed:a4:ba:75:ff:95:e7:a1:9e:3a:73:61:
89:5f:76:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:02 2025 by rpki-client