Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier: wQlf1MhHBtSFkdP9xf0ZQLpbMN5DELZ0Gzv4rrx2x6g=
Subject key identifier: 05:52:11:64:17:4A:69:8B:A1:1D:A4:48:A7:0E:D1:20:E1:4C:40:7C
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 019A28544F0FFE6637D7DB8DA77957F879CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number: 023F
Signing time: Tue 28 Oct 2025 01:00:04 +0000
Manifest this update: Tue 28 Oct 2025 01:00:04 +0000
Manifest next update: Wed 29 Oct 2025 01:00:04 +0000
Files and hashes: 1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=)
2: 4lqvUj_aarjM1QCov1WKcZ47cD4.roa (hash: CUeCuFIy+7/m+7Rp9JxCjE4itMo0nF9rOUfz1A83JwI=)
3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: MuPUzXHeuVkAKLMo2vL0nYc9LLBJJCo8YzAof6tta5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:4f:0f:fe:66:37:d7:db:8d:a7:79:57:f8:79:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: Oct 28 01:00:04 2025 GMT
Not After : Oct 29 01:00:04 2025 GMT
Subject: CN=05521164174a698ba11da448a70ed120e14c407c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:e2:1f:f6:5a:69:58:a8:d7:7f:d7:5b:73:
6a:9a:62:4c:03:89:e2:25:34:64:4c:b6:86:10:8f:
0e:e4:89:c0:44:37:24:65:63:b8:b4:34:5a:22:cc:
5d:87:18:f6:d0:fc:f3:4d:17:81:81:3f:67:39:8b:
e9:6c:f7:ab:58:3d:02:93:2f:e5:f9:2e:60:9f:a3:
09:79:62:06:4e:4a:94:02:30:54:06:05:d4:24:2d:
a6:ba:02:41:26:39:0c:60:d5:5e:8b:21:2d:c4:fb:
bf:3c:d6:3a:22:e1:49:f1:d9:96:d8:ff:5c:c7:88:
30:23:95:6d:7b:70:62:3e:a1:d6:0a:a3:a2:82:80:
0b:2a:31:22:6d:c8:65:cb:19:c0:7d:77:0c:07:ea:
d9:5b:c7:b6:52:76:b3:0b:72:fd:d3:f9:da:b8:6f:
fc:0a:78:b9:ca:24:7e:59:57:9a:47:10:eb:e9:7f:
f6:ae:23:3a:80:4f:a7:9d:48:81:9d:5f:b5:8a:f3:
08:a9:1d:2b:4c:87:63:5f:57:3a:da:5f:c9:6b:8e:
fd:78:0e:12:0b:0d:79:df:9a:ea:46:ba:59:1a:3a:
d5:17:79:2f:c8:09:9e:c4:ca:a5:a6:ea:a9:e2:9b:
40:4a:f8:04:b7:2c:35:1a:ac:16:94:53:3a:5f:9d:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:11:64:17:4A:69:8B:A1:1D:A4:48:A7:0E:D1:20:E1:4C:40:7C
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ae:6e:a1:45:b3:4a:d9:e2:74:64:17:1d:3b:f6:fd:5e:9c:
eb:94:5f:4c:d4:28:e6:cc:be:f6:7b:f4:aa:9e:c3:02:1b:7c:
09:b9:10:45:fe:3b:9f:b8:4b:53:22:bb:f0:11:af:22:60:a2:
e7:9d:03:7f:f2:c5:f8:68:66:dd:6a:05:0d:ac:9e:01:7f:b2:
52:25:04:9d:25:8d:22:2b:0e:f1:65:78:8f:95:81:9c:b3:19:
e6:73:cf:08:ed:f9:a6:85:41:e8:42:dd:27:c0:51:9d:e9:e4:
b0:4a:21:2a:ff:df:8c:1c:92:18:77:24:b1:69:59:0c:23:c5:
41:f3:20:14:b1:db:70:12:59:54:8b:49:73:84:67:45:59:20:
ae:38:39:e7:c6:29:f8:74:11:b7:f6:c8:5e:ee:33:c7:b8:f5:
9a:27:ff:7d:d2:49:9d:9a:e0:7e:1e:82:ed:53:55:c0:22:27:
fd:3e:ff:dd:0b:48:10:88:9f:9e:4d:16:9b:b8:f9:d1:31:72:
ee:25:f4:18:c9:b8:5c:65:10:78:e6:33:b0:a0:2e:6b:13:a7:
97:15:01:88:ff:eb:2e:4d:7f:15:71:a7:13:ad:30:ad:c0:3c:
04:82:56:47:7b:f1:e3:b9:2c:dd:a2:7d:bb:62:5e:3e:e3:d6:
48:1e:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:50:49 2025 by rpki-client