Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
File: w-cV2UkPUh42oFb5mb-1bg8h_IY.mft (raw, json)
Hash identifier: Ei8roKju3ZPzoW19qFTstUYQ2mJEFmtQlLPQGB1huQA=
Subject key identifier: 27:F6:BD:D6:64:C9:0C:21:C3:ED:13:8A:31:A8:93:B8:3B:6E:25:5E
Authority key identifier: C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86
Certificate issuer: /CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
Certificate serial: 019A72932AD2A973061E41D684E806F10A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:38 +0000
Manifest this update: Tue 11 Nov 2025 11:00:38 +0000
Manifest next update: Wed 12 Nov 2025 11:00:38 +0000
Files and hashes: 1: 93cxze7c4JAF56bmAgg1bcYIt74.roa (hash: iEbAMOM9WFYV3hM+y+EZ0P2K3mOE4Q2PoJ4nGQhO9MQ=)
2: w-cV2UkPUh42oFb5mb-1bg8h_IY.crl (hash: Rzt421Cg9NBqkii3SD9S6cMSqhtpfe54hLweluf9rng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2a:d2:a9:73:06:1e:41:d6:84:e8:06:f1:0a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
Validity
Not Before: Nov 11 11:00:38 2025 GMT
Not After : Nov 12 11:00:38 2025 GMT
Subject: CN=27f6bdd664c90c21c3ed138a31a893b83b6e255e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:72:cf:a5:68:57:88:db:18:f6:f3:0c:0e:
0d:9f:a2:a6:70:e0:e8:a6:32:4c:74:2c:f4:2d:5f:
e8:0a:69:f4:ce:cb:72:a2:04:8e:3c:bb:ac:1d:a0:
db:e9:89:ec:1e:b1:62:4a:70:4a:c5:9f:ff:8b:c2:
9e:31:06:75:a7:5f:20:8f:3f:66:32:7c:13:78:73:
83:23:13:0e:33:54:d1:a1:63:55:47:14:31:5b:6c:
ed:cf:da:b4:78:b9:5c:4d:40:55:60:bc:61:b4:c9:
8c:b8:ab:65:03:51:74:59:86:19:71:27:d1:e0:3a:
1a:00:47:5c:fe:5c:3d:88:2b:89:10:e9:c4:76:6c:
dd:6d:a8:aa:35:15:e5:47:83:27:aa:fc:6f:ed:1f:
0b:76:1e:00:16:01:59:7b:57:42:19:80:1a:57:53:
d5:6e:d5:28:49:5e:c7:56:60:51:c6:1e:d8:df:46:
4d:97:84:c1:f0:81:76:c6:4d:57:ca:00:6b:61:99:
ec:aa:5a:57:74:5a:29:e4:b8:24:d7:b3:9f:09:88:
32:31:03:f7:6c:3e:11:09:bd:ab:b5:be:1d:d0:67:
ed:57:59:92:b8:4a:95:79:75:cb:14:ee:04:11:24:
96:12:f8:b4:24:b9:b3:6d:e4:2e:8b:5d:11:82:20:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F6:BD:D6:64:C9:0C:21:C3:ED:13:8A:31:A8:93:B8:3B:6E:25:5E
X509v3 Authority Key Identifier:
keyid:C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:17:f5:3b:24:23:41:a3:b4:02:d3:a3:31:0f:01:5a:22:54:
50:f4:0d:74:40:8e:68:ff:93:8c:c8:01:72:77:e5:59:4e:45:
e0:53:5a:97:25:a8:ae:a2:38:0b:a2:44:4e:71:1d:11:b7:f7:
13:be:15:42:11:b8:63:32:bb:8c:18:0d:ad:67:9e:cc:20:f9:
e6:b0:00:54:e4:1a:98:1d:28:83:af:69:2e:bf:29:68:ed:d9:
16:a8:70:e1:33:88:02:ad:96:00:90:6b:94:52:0d:67:a5:65:
c3:94:ba:4d:dc:89:d1:a1:9c:65:1a:0c:5f:5d:b7:e4:8e:dc:
4c:3a:9a:b5:28:cd:ed:40:92:f8:ea:51:88:e8:ee:a7:f1:3a:
be:a8:d6:66:85:ee:22:c5:1b:b7:9c:a4:5e:91:a1:40:9c:30:
6b:74:07:c4:ea:b7:1f:66:b8:99:57:cc:ea:1c:d8:19:f4:45:
69:9c:95:d1:a8:58:21:45:3c:4b:dc:2a:4e:2f:be:7f:a7:63:
4b:4c:57:42:7c:71:5f:10:6f:6a:fa:c1:37:ac:7a:51:f9:ac:
e2:a1:34:fd:27:32:ec:2e:23:36:1a:05:67:fc:25:9f:57:f0:
26:fd:93:28:0d:c1:10:78:a8:4b:92:a3:ef:22:8e:2f:6c:73:
15:8f:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:04 2025 by rpki-client