Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
File: warwQ_4gnANFNiIF-Mx81hlRwn4.mft (raw, json)
Hash identifier: gHavVQwShRScF8JpjQmpwd0hsjODbOiFfOee2QTXWFg=
Subject key identifier: B1:50:29:8A:28:DE:9B:88:E8:AC:3A:1C:2A:B4:6A:30:34:93:81:95
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial: 0199FBEC4497B8BE21A174963B10728B40DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
Manifest number: 0F59
Signing time: Sun 19 Oct 2025 10:03:09 +0000
Manifest this update: Sun 19 Oct 2025 10:03:09 +0000
Manifest next update: Mon 20 Oct 2025 10:03:09 +0000
Files and hashes: 1: oLyY8vvBAfeOhRsj9eexvuktQm4.roa (hash: scoM8Sq6POvOb7psz/VnzYZYQjNB2n1Y53tdfQTGFcc=)
2: warwQ_4gnANFNiIF-Mx81hlRwn4.crl (hash: 7NdY8fttZT5A8X2zZo5/X7gMAobX5RgBM6ItkvtKCVg=)
3: yuwuNuzvATZfP3JuA06dTGzQ9o8.roa (hash: iaJVdCZsnNb9Cyubf2e2B713adANaUt93mNYt5mCPK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:44:97:b8:be:21:a1:74:96:3b:10:72:8b:40:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Validity
Not Before: Oct 19 10:03:09 2025 GMT
Not After : Oct 20 10:03:09 2025 GMT
Subject: CN=b150298a28de9b88e8ac3a1c2ab46a3034938195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:80:f3:66:8e:f0:da:0d:45:bf:bf:32:ff:
21:1b:b3:03:cd:1e:a0:17:18:66:e2:10:2d:54:d8:
aa:c0:80:13:0f:d4:ae:d8:e3:cb:3e:28:06:5d:7c:
51:f2:96:4d:3a:42:78:bd:3c:65:32:fb:25:6b:0e:
dd:c0:9a:87:e2:d0:89:46:d5:cc:ff:8b:74:3f:02:
04:74:ef:81:8e:85:f0:cc:37:de:8b:15:4d:6c:e5:
8b:a4:27:47:55:f6:a9:cf:9f:b9:bb:44:32:c8:9a:
55:ac:7f:cd:b4:46:f4:f8:9f:e6:ed:94:4b:a2:47:
4a:50:7f:bc:dd:fb:73:43:73:f8:dc:a4:8f:59:73:
55:81:f1:d1:e9:cc:e8:76:28:a6:e9:79:18:d3:26:
b1:5f:c3:e7:6d:1c:80:c0:68:ae:44:e0:a0:76:f3:
50:a8:11:20:de:0a:47:3d:5a:83:9b:c2:1e:ea:51:
a8:c0:f2:83:38:8c:d0:d5:e6:3f:6d:49:8d:c4:9e:
4a:3f:73:bf:19:66:21:06:6f:04:78:85:52:9c:16:
3e:12:0f:a9:dc:79:f8:a3:31:b7:a9:12:21:24:e2:
b2:7e:71:47:db:4a:c5:d2:2c:e4:a1:5f:a9:d8:52:
68:40:55:59:e0:f8:9e:27:f3:34:d0:83:a9:4c:1a:
58:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:50:29:8A:28:DE:9B:88:E8:AC:3A:1C:2A:B4:6A:30:34:93:81:95
X509v3 Authority Key Identifier:
keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:08:ed:d4:9c:0f:f8:97:56:64:a8:9d:4e:ee:28:df:5d:38:
d4:75:2b:f7:8a:0a:f0:5e:40:78:e8:9b:ef:00:4b:de:a2:c5:
62:cf:f6:7c:0d:2c:a8:b7:37:0c:4c:9d:f8:94:88:2d:cc:9d:
c6:7b:ef:43:ae:7f:d6:1a:61:0d:fd:06:d9:d9:ce:01:91:32:
4a:89:c7:cd:2a:15:f0:69:1b:a6:36:fd:44:c9:24:b6:bd:8f:
ea:78:35:4c:40:94:15:28:81:7f:44:47:70:e9:b9:54:44:a7:
16:b6:0d:1a:c4:69:ee:8e:1f:9e:4c:c2:88:ee:6d:5c:12:de:
cf:89:44:11:f7:a3:ad:5c:dc:d2:97:01:80:ad:29:1b:92:fd:
c1:df:97:10:98:ee:70:3d:91:89:07:2b:b9:74:0a:52:07:7b:
3b:25:fc:98:b5:3d:bb:a7:54:09:2e:91:33:08:ff:85:01:26:
9f:6f:0d:36:d1:d3:7d:01:2e:f2:4b:92:b6:5d:21:5a:ef:5f:
37:74:9c:c8:4c:f4:a4:f7:aa:5e:1b:30:fe:61:f4:5f:0e:8d:
f2:8d:2b:80:61:32:ef:cb:a6:1b:26:0a:ed:ed:4f:1c:72:db:
26:87:da:83:15:40:a0:39:a2:3d:c0:f6:f5:3b:07:12:3d:b3:
59:a0:29:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:48 2025 by rpki-client