Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier: rGUqa8g754SxClTGht3karm3cNusJlwGYoFprNm0Tyk=
Subject key identifier: 96:E4:30:68:9C:A5:E2:ED:22:35:C4:E1:B4:8A:38:F9:54:D0:A9:BD
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 019A71B903B401F7CEEE0DF639C16B764491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: TPJl-AnyNAOqe20bKX-5t3SrM4E.roa (hash: X6UgSBrAhCQSnYi9DhkcF/hdYKpsagcSW2GIdlVKxUg=)
2: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: CIAuV29sN59tIrg5jmaO69p3wWrT2PfzNQxCdPeWVwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:03:b4:01:f7:ce:ee:0d:f6:39:c1:6b:76:44:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=96e430689ca5e2ed2235c4e1b48a38f954d0a9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d4:46:64:21:6e:c5:01:d6:23:54:95:a0:71:
fb:69:15:5d:ff:df:e5:87:a2:32:75:57:ec:ee:73:
c4:1c:e0:05:89:54:b4:9a:1f:66:85:c0:fb:04:45:
78:db:af:a1:6a:45:e1:0b:b8:fd:10:31:f4:b4:c4:
ab:5d:50:0d:f6:e0:fd:d1:6c:6a:91:5e:c2:27:cb:
7e:28:c9:ea:c7:06:77:4e:e7:41:95:d9:85:c0:59:
14:d7:a9:39:1b:38:55:56:83:cf:42:ae:1e:25:df:
14:45:9e:20:ed:fb:1e:fe:11:c0:c1:d7:e1:e1:4e:
9c:30:b4:7b:af:52:d5:b3:bf:74:20:97:6f:4d:ba:
00:3e:76:b6:85:19:c3:b9:b2:93:60:1f:e9:da:71:
b1:27:0b:70:1a:2e:73:4b:8a:f8:6f:e2:45:e5:c1:
28:dc:65:a4:0d:51:cb:e3:e7:b5:4a:b3:21:86:bc:
0e:2e:a4:4d:dd:be:60:d2:b2:fc:75:50:4f:4e:1c:
a4:df:0e:8b:ab:32:16:af:08:6a:67:c9:ac:dd:19:
0d:15:b7:f6:61:18:84:2b:8e:a6:58:36:3e:46:e9:
e2:c0:24:e1:68:12:55:38:11:34:8f:e5:e7:5f:c6:
ea:3b:49:57:aa:87:91:f5:3f:83:8b:cd:71:5e:61:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E4:30:68:9C:A5:E2:ED:22:35:C4:E1:B4:8A:38:F9:54:D0:A9:BD
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8f:9d:67:23:5d:19:5e:ef:a7:a3:5d:ad:5e:8b:70:1b:16:
6d:11:54:d1:37:61:ec:f4:58:fc:c8:33:69:5e:0f:43:6a:ec:
8f:a9:2f:a1:98:16:6f:a3:45:29:0d:de:c7:3a:f4:6e:d5:46:
f1:fd:80:c9:6f:cf:31:6b:54:9b:d3:98:a3:36:ff:7e:da:ae:
a0:e0:ac:a0:54:28:bc:5d:13:79:f7:a6:03:04:74:1f:8a:69:
da:73:16:1c:60:a5:42:f9:64:fd:f0:fb:54:b9:56:9b:fc:75:
9e:6b:48:9a:cf:1d:42:27:5d:50:ff:1d:35:1d:5f:90:8a:a9:
55:01:b8:32:bc:44:85:80:63:b1:94:90:f9:01:53:9e:c7:ed:
15:79:40:de:94:bb:5e:30:d9:19:31:53:6e:ff:6c:4e:03:7a:
71:62:69:7d:cf:75:33:31:5e:27:8a:68:a6:7d:06:e4:72:35:
45:52:77:37:4b:c1:ca:2e:8b:12:e7:bd:0b:85:a6:10:96:8f:
c5:09:b7:61:dd:fe:af:4b:a0:8d:0e:c6:eb:70:66:ff:56:e1:
ab:f6:1c:00:d2:d9:7e:06:22:3d:30:a3:ad:74:32:b6:23:20:
96:20:41:07:c6:29:4b:25:2d:54:84:c9:85:f9:0b:aa:38:ce:
79:80:d7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:07 2025 by rpki-client