Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier: S7rnrvcw35FkW68fcfcw9/qEOEdk+poz81DyoNDhiYg=
Subject key identifier: 1A:35:A7:AB:F9:0E:51:32:D2:D3:59:5B:39:7F:5A:94:FA:D5:B5:7C
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 019A01B58750E73E7A3CF5CE32954AFAEBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 13:01:05 +0000
Manifest this update: Mon 20 Oct 2025 13:01:05 +0000
Manifest next update: Tue 21 Oct 2025 13:01:05 +0000
Files and hashes: 1: C8on01Bgko2Wx9jKjMpn7FCShCI.roa (hash: NvYVpYNTacJm9Dvti1H+p4nGJK6g8JeQhPdSMYmd5BQ=)
2: lBLUc28nwdLkSsrePQSmyxKstGI.roa (hash: vrIWIUHlJDuCxB1hzJyqC5GbG7oElAvbtOgjYcaloKs=)
3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: HY6vOSouDhmfS9E2lRBWN8f/2qpVyi+wFU3RiCA6wEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:87:50:e7:3e:7a:3c:f5:ce:32:95:4a:fa:eb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Oct 20 13:01:05 2025 GMT
Not After : Oct 21 13:01:05 2025 GMT
Subject: CN=1a35a7abf90e5132d2d3595b397f5a94fad5b57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:60:19:db:ae:4f:22:ee:bc:cf:5d:6e:57:
d4:92:e0:78:7a:de:76:8c:f4:9d:25:3e:a9:11:d4:
ee:ba:5a:05:8a:fd:3e:21:e1:28:72:18:69:d4:e5:
15:17:92:32:7a:f4:28:39:bb:98:2a:ba:68:25:f1:
80:c5:24:61:15:ee:24:d3:0b:0c:64:41:ff:07:7e:
3d:01:8a:cc:59:9d:24:3b:d8:c8:90:a9:bd:80:d3:
5d:05:02:fd:8d:07:ae:78:66:3a:73:2c:4e:8f:f4:
93:50:f4:2b:59:c8:92:91:8b:60:2c:53:32:70:91:
d7:ba:3f:1f:12:a9:9e:16:b6:57:d6:4d:06:75:a8:
88:bb:ba:15:ab:08:53:0f:26:5e:c0:c1:98:f5:53:
4d:21:4b:dc:3a:d0:8f:c7:ce:8d:f8:d1:d7:7b:a5:
16:ef:e6:5d:c3:33:a4:ec:fa:77:ec:95:57:c7:9d:
49:a6:55:e5:af:da:c8:55:d2:63:b5:c9:b8:36:c5:
d0:08:e5:95:93:8f:76:01:cb:9d:9a:8d:ce:c3:f1:
cd:aa:5c:67:77:26:d2:21:ce:f5:03:08:f4:db:f2:
f3:f6:3d:28:dd:92:a9:19:38:75:f9:76:0d:92:2c:
a8:2e:e4:2c:f3:b2:91:98:b1:c6:52:58:c7:60:b8:
ed:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:35:A7:AB:F9:0E:51:32:D2:D3:59:5B:39:7F:5A:94:FA:D5:B5:7C
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ad:e5:88:0e:d7:96:90:a7:d4:21:1b:f7:b5:f6:23:4c:ff:
6b:66:6e:e4:bd:86:74:f7:0c:86:2c:b0:3f:98:63:e9:b1:9c:
d9:d6:a0:72:66:ba:ef:58:00:b5:08:15:70:52:76:f2:b6:87:
e2:fd:39:a3:93:72:e5:7a:73:30:92:e1:62:93:05:08:ac:cd:
e0:0f:63:39:eb:a5:6d:9c:9e:e5:63:7c:56:75:d2:32:3b:46:
c4:aa:13:34:52:2b:d3:51:3c:bb:dc:03:fe:24:8b:ae:cf:47:
68:02:be:1e:56:d3:30:cd:56:f6:5c:8f:11:98:f7:c4:fe:99:
eb:b0:d3:55:65:47:26:2e:51:96:fd:95:99:ea:1f:c9:23:19:
80:26:ff:e5:c3:63:31:ea:50:ca:ba:d7:e4:82:29:f5:02:38:
80:95:b0:db:d8:09:4d:1f:b6:fb:fe:c2:c3:ef:d0:d7:37:44:
88:93:f2:6d:11:94:39:86:64:63:73:02:b6:25:b4:45:06:f5:
51:a8:1b:32:b9:2d:61:76:ed:ce:4a:5f:31:38:a3:94:a9:0e:
e7:c8:42:1f:1a:17:12:20:22:59:e7:65:64:9c:95:07:90:4b:
6b:1d:61:36:7c:4c:b9:b2:59:16:b3:0b:5c:70:ca:ae:83:7a:
89:d5:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:31:02 2025 by rpki-client