Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File: RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier: cUlac4Ey12wVX4briDpQjw+HBHgdV1U2V1jDtBKRIDY=
Subject key identifier: A7:00:20:19:0F:7F:94:F2:51:3B:D4:8C:40:99:F2:C8:03:D3:75:C1
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 0199FF902E26EFBB3F6BAF8964B2AF2F1CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 03:01:03 +0000
Manifest this update: Mon 20 Oct 2025 03:01:03 +0000
Manifest next update: Tue 21 Oct 2025 03:01:03 +0000
Files and hashes: 1: HJuvWWI1qAqft10oKlJtZleuo2g.roa (hash: u8HfwrfCCFHcB5jvs7dyE9ffRxdRXb4g1HqA18Sf8YE=)
2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: 1Tdc5TJXNvQmCIW+wrjc9oU3mhKaK018J9IYxlu/qQQ=)
3: wtjN78Y_d1b6O6UDtSU2B1I3v9Y.roa (hash: ReqT7jsHEoa7AvfRGw7Yv2wPcS9GQjwhHtVeUywingA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:90:2e:26:ef:bb:3f:6b:af:89:64:b2:af:2f:1c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Oct 20 03:01:03 2025 GMT
Not After : Oct 21 03:01:03 2025 GMT
Subject: CN=a70020190f7f94f2513bd48c4099f2c803d375c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:10:67:67:98:65:13:81:4d:d2:d7:4a:39:38:
b6:57:f5:b2:a8:a1:0c:77:4f:04:48:52:e7:cc:d0:
3f:81:77:22:3b:9b:ed:2e:83:bc:d6:41:6b:07:ef:
a4:5c:09:17:95:36:56:35:39:59:dc:b3:67:a4:94:
17:b7:c7:8f:e1:a6:df:df:d5:d9:88:9b:f7:c5:d3:
86:e4:23:1c:6c:10:4a:ee:d6:2a:b6:d5:a5:ab:f8:
1f:38:10:c4:59:70:49:24:f2:87:11:fb:a9:95:89:
f4:ce:2a:c8:81:91:f3:48:cf:6d:9d:1e:70:aa:39:
a9:06:d3:c6:73:0e:94:ec:60:dc:fb:e2:ba:2e:25:
a6:88:3d:e6:2b:aa:aa:5c:56:f6:8a:a2:f7:54:5e:
bd:e7:4a:1e:52:b8:1e:56:8a:80:85:08:77:d8:8c:
a1:7d:74:6f:6e:c3:57:40:21:7d:03:48:fd:8f:c0:
0e:de:dc:b2:cd:1c:50:86:83:7c:3f:df:32:86:2b:
d8:4e:83:7f:1d:61:1a:d5:dd:0f:a1:b2:1e:22:d8:
9a:a5:e0:16:38:04:5d:b8:76:86:42:57:78:3e:d6:
f6:00:c8:01:36:59:5b:e3:e0:31:fe:4f:4d:78:87:
d6:eb:4b:28:0d:3f:db:a5:08:b4:9c:cb:d8:10:05:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:20:19:0F:7F:94:F2:51:3B:D4:8C:40:99:F2:C8:03:D3:75:C1
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c1:74:dc:09:88:09:5b:b9:18:28:2e:46:e6:4a:b0:ce:f8:
e7:dd:36:de:42:82:4a:0c:65:90:77:ed:35:86:ae:b8:95:19:
5a:f7:30:94:bf:eb:91:b4:0a:9f:6f:5b:74:0b:f7:ec:15:fa:
2d:56:40:cd:46:81:b1:44:92:16:c2:d8:84:1e:86:cb:e7:05:
9d:bf:05:c3:77:42:2a:6e:6e:f9:e4:a0:01:91:e5:a7:78:b0:
f5:65:57:d8:e1:43:f8:33:98:76:e7:4c:58:6b:26:bd:aa:bb:
7a:e6:54:c7:48:3d:8c:09:ed:45:d4:fc:25:3c:42:5c:ee:70:
e2:b6:da:87:2b:9f:f0:4f:e4:6b:74:c6:98:8e:66:1d:87:7c:
78:95:21:45:b3:bd:bf:34:3f:6a:89:a6:4a:bf:1d:32:7c:d9:
3c:9e:08:e8:4a:cb:05:ad:1f:9d:fe:42:9d:67:fc:15:82:e3:
4a:9a:7d:a1:f3:26:e8:9c:d2:e5:7c:bb:9e:8a:c8:06:30:c0:
71:4f:34:60:ff:af:4a:23:fb:74:7e:62:e8:c1:26:b7:eb:5b:
de:ef:79:fc:e9:a6:4a:b2:4f:93:5b:e3:66:69:78:7e:7e:3d:
59:47:a5:a7:fb:ce:7e:8e:e8:65:19:f2:70:c2:7c:b5:2d:5b:
68:a8:c7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:29 2025 by rpki-client