Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
File: rwsdp573_B75WWLcigHyuNSzUr8.mft (raw, json)
Hash identifier: eTKQMbX+nhkTs+4YHsOKCdCBmJftxK2vxqys6n6zQTg=
Subject key identifier: D0:38:E6:66:F8:CB:CC:1B:A8:5F:63:42:8E:D2:4B:F2:28:A5:4E:83
Authority key identifier: AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF
Certificate issuer: /CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf
Certificate serial: 019A73388C7044B24591CAE498A7108F708C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 14:01:17 +0000
Manifest this update: Tue 11 Nov 2025 14:01:17 +0000
Manifest next update: Wed 12 Nov 2025 14:01:17 +0000
Files and hashes: 1: U5_8oTuDnte69dU3vdG0YoeLHOc.roa (hash: rv7n9SJHDz/xEcEFGYa9oVX9oX3xMxXlPJsPEJruS+w=)
2: rwsdp573_B75WWLcigHyuNSzUr8.crl (hash: TOH7dQHI8xzhaReM3QjvQ18QFQ6oaOzery+C6YJw6lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:8c:70:44:b2:45:91:ca:e4:98:a7:10:8f:70:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf
Validity
Not Before: Nov 11 14:01:17 2025 GMT
Not After : Nov 12 14:01:17 2025 GMT
Subject: CN=d038e666f8cbcc1ba85f63428ed24bf228a54e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:fc:c4:82:14:4d:e8:88:ae:41:37:e3:22:
ef:ee:93:e8:aa:50:ef:34:d1:9a:40:8a:f2:ca:d0:
a9:b9:27:89:ba:08:4e:78:e8:5c:63:d5:71:eb:93:
65:db:11:67:c6:4a:86:e3:87:3f:8d:41:cc:3d:3c:
35:04:9f:cb:f6:7e:22:4c:81:ac:a0:00:d3:a4:07:
4d:4f:2b:01:7c:f0:a0:77:cf:25:ac:a7:35:43:9b:
aa:eb:00:85:6b:1c:e5:40:5d:02:ce:81:7d:55:95:
89:f6:fa:49:11:63:69:68:04:6b:aa:c9:62:19:72:
18:97:77:b1:6e:55:ca:d4:54:cc:5d:28:75:d5:4a:
6a:76:8e:5f:39:ac:bd:a6:89:7d:ea:dc:48:07:a6:
4f:6a:27:da:64:4d:0b:bc:af:e5:0a:41:14:f5:34:
b9:7e:85:9b:6e:c6:14:8a:d9:10:92:a4:6d:99:13:
33:de:7f:03:37:a6:17:53:21:31:15:b2:24:36:8f:
cb:f5:41:09:0b:fb:18:9c:dd:54:cc:15:a5:05:02:
18:ea:ed:f7:07:4f:8e:68:7a:22:dd:ac:14:0d:75:
b6:7e:8c:c8:dd:fb:5a:4c:00:0c:7c:04:52:70:35:
c6:c9:27:8b:c1:0e:5f:3d:9b:47:74:e0:4e:0b:5b:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:E6:66:F8:CB:CC:1B:A8:5F:63:42:8E:D2:4B:F2:28:A5:4E:83
X509v3 Authority Key Identifier:
keyid:AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f1:dd:f2:90:21:5a:18:4b:48:a3:67:24:cd:5a:e2:f9:df:
2e:51:f7:ce:7a:33:e3:61:8d:b1:94:a4:91:45:27:37:7e:ae:
e7:4f:58:44:7c:4e:e6:13:83:68:77:10:fe:8b:33:0d:2c:62:
6e:dc:98:3b:2d:4c:5b:37:dd:f0:a6:3a:56:70:bd:d6:d8:1a:
69:a0:a5:40:d3:2e:69:f1:f1:78:34:6d:89:aa:e6:22:a0:ae:
9d:4e:e1:f5:ff:7b:45:9a:63:3f:be:fa:a3:d7:0a:81:1d:31:
4e:a2:87:c8:f2:30:9a:c2:7b:bf:14:56:1f:6c:75:4c:20:7c:
76:c4:ed:75:6c:4d:c4:10:23:52:9c:39:e0:df:c9:ed:db:f9:
8c:cc:25:a6:b1:d9:04:a0:cf:81:b2:ca:0d:46:32:25:bd:96:
70:da:52:43:1a:ce:ec:48:4b:3e:6f:e7:ec:9c:55:c3:82:54:
3f:f9:3f:94:01:2e:c1:ce:23:98:9d:3c:13:1d:0d:7d:46:e1:
f8:c5:ec:ca:70:d3:c4:ab:fc:2d:96:14:ac:0f:31:cd:b1:e7:
af:2a:db:03:21:ed:7c:de:78:e2:c4:ba:57:51:71:71:86:32:
5e:e6:7b:1d:84:e8:f5:92:25:fc:0c:6b:95:64:93:82:51:43:
12:e7:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:47 2025 by rpki-client