Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: gQ+wb9I/9dnbHjHsYrZ19F/UGawP/ABX8VZh1K4OgXE=
Subject key identifier: 8B:5E:52:21:BB:1B:8D:2A:53:49:69:4B:0D:99:36:B5:D4:81:37:1B
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 019A71B83BAC68DA10EAFDD8B9C47B83FA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 1436
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (hash: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=)
2: GoeAUL2QksRS16LiLx9M0SmG6h8.roa (hash: Lp7ZvoPe3FFQc8UoBl571bW941fIgYX0UUaKwSRXqLI=)
3: p9gQbHg8IpMtNLW0NQ42q_UAiDc.roa (hash: t3Lsla/WvydRj60ad7MeBwokpBl+kvF1NmkVZ9213jY=)
4: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: wme02m1aoshZs4SYcZ5A2I2Uhth0nO94jglQFfn1IW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3b:ac:68:da:10:ea:fd:d8:b9:c4:7b:83:fa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=8b5e5221bb1b8d2a5349694b0d9936b5d481371b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:50:03:31:5d:42:7b:1a:a3:de:58:7f:92:b4:
b0:49:f4:4e:f6:66:64:85:4b:2a:99:9b:e0:f8:bf:
14:56:55:8d:28:91:c6:c0:02:9b:0f:db:5e:5b:9a:
3f:f0:41:e1:69:10:57:47:8c:a2:d7:66:58:0d:02:
a8:50:d0:dd:39:b2:66:b9:48:f4:32:3a:ce:e0:a8:
cf:03:80:ea:a8:d6:d5:56:a3:98:94:88:c2:3e:c1:
65:af:d6:a2:4e:90:5f:ec:23:4a:fa:52:97:26:c7:
d6:4e:fb:c0:44:37:c8:57:b8:09:22:79:62:38:4d:
89:f9:2e:b0:73:52:a2:46:79:16:31:0e:01:59:26:
b7:35:f3:7c:9a:38:fe:09:51:1d:8a:b3:d5:f8:79:
35:8b:61:63:26:cd:d1:33:db:1e:89:49:5d:b4:53:
d1:26:50:27:ce:f1:66:07:56:c1:42:a0:04:8f:42:
e4:41:44:2e:26:b5:83:5b:79:72:d8:54:e3:08:3e:
d0:01:5f:2f:84:05:44:b9:c8:e4:83:16:0d:ce:fa:
b3:c0:c5:9a:52:22:e1:e9:98:5d:66:4c:df:7b:57:
1f:43:93:3c:7a:bd:61:17:ea:2f:df:0d:9f:a5:0f:
a2:cc:d3:8e:cc:ff:a0:15:50:0f:37:44:d8:9e:f4:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5E:52:21:BB:1B:8D:2A:53:49:69:4B:0D:99:36:B5:D4:81:37:1B
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:01:0a:d0:09:cd:1f:a6:be:5f:33:56:ba:9f:35:d1:cb:a9:
a9:3b:86:c8:35:ec:7d:d8:7a:a2:d9:eb:ed:a6:00:0c:c0:38:
df:8f:cf:31:af:0b:8e:49:1a:7d:ab:8c:ba:f3:69:6b:26:e0:
7d:8e:26:c9:03:11:36:e6:59:b5:cd:09:1b:7e:9a:be:c5:e6:
b7:94:4f:f3:c4:93:b2:8d:5b:e0:dc:ae:2d:78:ce:0a:45:a8:
c7:1c:ea:ab:d2:78:40:94:ff:32:0e:9a:20:cf:92:d7:ad:02:
48:62:9c:31:49:9e:76:60:94:c9:73:31:e2:1a:0a:e1:8f:02:
05:a3:60:10:48:96:bf:e0:7e:c9:3a:9a:aa:1f:93:27:f7:eb:
7a:af:c7:01:db:d0:3c:15:ca:88:62:fb:88:de:9a:62:f3:d3:
ad:8d:cd:72:4b:f4:57:48:66:43:e7:5f:b5:60:b5:e0:0a:fa:
d5:a8:5d:28:05:db:26:50:dc:12:b1:e6:75:b7:6e:c5:33:db:
be:f7:ea:9b:6e:a2:5b:8c:ee:46:e6:ae:e4:7f:e2:c0:fe:7b:
e9:f4:46:3e:28:f3:28:55:a8:99:25:89:40:57:d3:e6:c4:0f:
8a:a2:eb:9c:0e:58:03:74:c3:a6:8c:52:39:04:ae:a0:db:22:
1a:29:1b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:30 2025 by rpki-client