Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File: w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier: ahxNTW+tVh3HD5ejhTdq+MQNrlGn/pFSI5/6IC26UfU=
Subject key identifier: 29:32:7B:B3:94:05:27:ED:B2:55:BA:52:1E:CC:75:71:1A:AE:1D:02
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 0199FB7CF92D8C13A28D276E663C901CF4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number: 1374
Signing time: Sun 19 Oct 2025 08:01:35 +0000
Manifest this update: Sun 19 Oct 2025 08:01:35 +0000
Manifest next update: Mon 20 Oct 2025 08:01:35 +0000
Files and hashes: 1: 1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa (hash: qUFNGxht8SatseV7uTcgdf36n0Wje2HhZXA6lIEPzt8=)
2: jb-zD-QZseypOhoYrz7-lEkthR4.roa (hash: NVATDU2rQowVsA5kxCOsDlRv1YWlJaECqpg6RYlVt8g=)
3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: IrvJz7mGkuflq86Y/zOuA+dArRLbamOgkzH7UAMJ0RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f9:2d:8c:13:a2:8d:27:6e:66:3c:90:1c:f4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: Oct 19 08:01:35 2025 GMT
Not After : Oct 20 08:01:35 2025 GMT
Subject: CN=29327bb3940527edb255ba521ecc75711aae1d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:e7:c3:c5:2b:10:57:be:8b:69:a3:5c:24:
76:de:35:1b:9a:5b:03:bb:d7:02:d2:43:4b:d1:66:
e9:5b:57:44:e4:5e:2f:24:4d:cc:4e:a6:42:b8:d0:
bf:ac:b0:59:76:a1:54:91:ec:f9:8b:5b:1d:0b:69:
ff:79:33:b7:4f:67:a2:91:88:00:61:6e:72:5e:72:
b2:73:d0:36:85:f9:26:dc:29:50:40:fb:42:29:dc:
48:02:75:63:46:b7:b0:21:b7:f1:66:87:1a:c9:53:
50:78:9c:d4:00:a8:04:d9:eb:49:01:d9:2b:9f:5c:
ca:37:dc:9e:65:ac:65:59:8c:78:bf:01:27:ac:e9:
b0:63:67:f9:1a:98:85:d5:6a:e9:14:e0:bf:db:fd:
9b:ba:3f:d3:55:25:6f:31:9e:cf:c6:7c:97:50:8a:
37:d2:b5:75:1e:61:90:f3:02:43:31:16:f6:20:f0:
5d:45:07:8f:92:fe:3c:ad:89:e4:f2:2a:92:d0:51:
fc:57:78:0c:0e:46:6c:b3:5c:5f:ea:a6:0a:ee:71:
5a:ab:e2:39:0e:99:4f:82:1e:89:d6:0c:9a:5d:c1:
bc:e7:47:ff:e5:e4:2e:49:f6:f8:5f:f6:b6:19:d1:
d7:d9:c5:6d:40:cd:85:e9:b9:49:9a:c0:d7:df:2e:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:32:7B:B3:94:05:27:ED:B2:55:BA:52:1E:CC:75:71:1A:AE:1D:02
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:70:d3:65:fc:ad:0b:8b:3f:2d:41:59:7b:ac:b7:d4:0b:5d:
c2:27:61:6c:23:2a:df:37:ae:a4:eb:2c:f3:8c:48:65:ce:dc:
27:a0:07:a2:90:15:3b:fc:16:0f:a3:d1:72:e2:67:a5:ce:f3:
38:0a:27:99:bb:a4:9b:19:76:33:12:5f:bd:58:c5:10:f8:22:
8d:9b:19:e1:cd:5b:a8:6a:ac:1f:06:8b:c8:82:05:99:0b:bd:
f3:ac:d7:ca:b2:c4:47:6f:4f:46:44:6b:56:c7:df:c8:84:a5:
01:d2:ef:d3:d2:4d:d3:e0:57:22:9a:61:5f:89:89:78:2d:bd:
e9:45:7d:9b:ad:c0:91:9d:ef:96:2b:a0:34:88:ec:bb:97:45:
59:20:9f:6f:01:1e:73:87:37:90:8a:63:73:29:7f:9f:fe:4f:
aa:98:22:2a:27:18:78:cd:1b:9c:9b:b5:f8:c3:a8:66:71:42:
92:ef:27:b9:ed:d0:6f:68:74:67:2f:30:59:a5:7e:d9:8e:59:
fd:0d:31:f1:93:cb:2d:f9:5c:60:14:7f:a0:19:04:9c:0f:bd:
60:d7:6f:10:95:f4:4b:31:c9:76:39:e0:f4:ad:97:c1:3d:8f:
6d:10:3e:11:31:e3:40:12:13:e7:51:62:be:eb:44:05:51:97:
81:e7:95:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fPktjBOijSduZjyQHPS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNDA5MDlhZWMzMjBhOGMyZWUxY2FiY2UxMzAyY2JiN2Q0
ZTA0ODYwHhcNMjUxMDE5MDgwMTM1WhcNMjUxMDIwMDgwMTM1WjAzMTEwLwYDVQQD
EygyOTMyN2JiMzk0MDUyN2VkYjI1NWJhNTIxZWNjNzU3MTFhYWUxZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss3nw8UrEFe+i2mjXCR23jUbmlsD
u9cC0kNL0WbpW1dE5F4vJE3MTqZCuNC/rLBZdqFUkez5i1sdC2n/eTO3T2eikYgA
YW5yXnKyc9A2hfkm3ClQQPtCKdxIAnVjRrewIbfxZocayVNQeJzUAKgE2etJAdkr
n1zKN9yeZaxlWYx4vwEnrOmwY2f5GpiF1WrpFOC/2/2buj/TVSVvMZ7PxnyXUIo3
0rV1HmGQ8wJDMRb2IPBdRQePkv48rYnk8iqS0FH8V3gMDkZss1xf6qYK7nFaq+I5
DplPgh6J1gyaXcG850f/5eQuSfb4X/a2GdHX2cVtQM2F6blJmsDX3y6lCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkye7OUBSftslW6Uh7MdXEarh0CMB8GA1UdIwQY
MBaAFMNAkJrsMgqMLuHKvOEwLLt9TgSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MGIyMDUtOGYyMS00NmY1LWEzZjYt
YmNhMGE4ZjJmNzhjLzEvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MGIyMDUtOGYyMS00NmY1LWEzZjYtYmNhMGE4ZjJmNzhj
LzEvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3DTZfyt
C4s/LUFZe6y31AtdwidhbCMq3zeupOss84xIZc7cJ6AHopAVO/wWD6PRcuJnpc7z
OAonmbukmxl2MxJfvVjFEPgijZsZ4c1bqGqsHwaLyIIFmQu986zXyrLER29PRkRr
VsffyISlAdLv09JN0+BXIpphX4mJeC296UV9m63AkZ3vliugNIjsu5dFWSCfbwEe
c4c3kIpjcyl/n/5PqpgiKicYeM0bnJu1+MOoZnFCku8nue3Qb2h0Zy8wWaV+2Y5Z
/Q0x8ZPLLflcYBR/oBkEnA+9YNdvEJX0SzHJdjng9K2XwT2PbRA+ETHjQBIT51Fi
vutEBVGXgeeVAw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:59 2025 by rpki-client