
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: D2eUolzFFyb33lxPCxayVu2+GF3YUOPYhFv1IMmch04=
Subject key identifier: 14:37:47:AA:AB:0F:18:FF:64:12:47:05:C5:49:25:06:F1:F8:AE:20
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 0199FBEBFF32EAF9A3003FAB3CC5CFCEF148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:51 +0000
Manifest this update: Sun 19 Oct 2025 10:02:51 +0000
Manifest next update: Mon 20 Oct 2025 10:02:51 +0000
Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: 59k8Ml8k3yUFScXFOvj7BkWy5lhKzD2UbtBwDD08Npk=)
3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ff:32:ea:f9:a3:00:3f:ab:3c:c5:cf:ce:f1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Oct 19 10:02:51 2025 GMT
Not After : Oct 20 10:02:51 2025 GMT
Subject: CN=143747aaab0f18ff64124705c5492506f1f8ae20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:06:89:90:4f:8d:c8:5e:0a:6c:62:3b:5c:
61:6e:93:b7:0c:d1:cd:25:bf:1e:4c:fa:3d:89:34:
79:6c:b1:32:f1:3d:7b:04:50:25:11:6c:9a:41:f9:
22:15:dd:3c:6a:06:7f:66:06:58:f0:39:ce:88:0d:
0e:76:94:44:30:5a:3a:04:cc:04:34:cb:4a:2c:e5:
58:1f:60:ef:f6:fe:99:5e:e8:87:8f:3f:e2:b3:fa:
6f:5a:9c:35:8f:9d:f0:b1:4c:14:52:97:d6:0a:7c:
f2:4d:c7:cd:65:69:67:0f:cf:60:77:26:2d:8a:04:
32:e0:74:49:99:a9:ac:fc:ea:ef:66:9c:d2:cd:ff:
34:f1:7e:42:84:55:f2:70:cf:a5:97:bc:f9:c1:ec:
6e:24:2c:3b:3c:ac:31:72:d8:77:a2:af:97:f2:ff:
56:96:8f:96:5e:1c:ff:05:fa:67:68:c4:89:3a:fd:
93:72:b2:f2:e0:67:14:49:52:03:93:42:4c:c6:f6:
38:8d:5b:39:0f:29:49:d5:8d:52:7d:09:2b:63:ba:
ab:26:1d:22:81:cf:e5:28:f6:dd:c5:dc:7f:3a:c8:
ab:48:0b:4d:40:74:3e:ec:70:11:38:f3:bf:24:dd:
38:0a:00:70:4b:6b:3c:8d:18:9d:c6:81:02:9e:26:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:37:47:AA:AB:0F:18:FF:64:12:47:05:C5:49:25:06:F1:F8:AE:20
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:48:19:8d:c9:f2:3f:95:cf:ec:6b:7f:88:94:f6:0a:10:4a:
33:3f:7e:bb:c0:5b:fb:c3:6d:c3:5f:84:cf:68:f9:87:3a:39:
76:ca:cb:9a:45:1c:c8:4b:07:9d:3c:9b:f0:d6:bd:bd:ff:6d:
07:bb:83:d4:8f:4e:9a:10:8d:2a:49:08:ce:66:73:6a:b4:10:
b7:38:cf:51:e4:78:ae:c5:c3:22:a6:41:56:c8:06:fc:a7:fa:
2f:9c:c3:4c:86:16:8a:2b:c2:33:f2:ab:31:b4:3c:01:04:78:
2f:e7:f1:81:00:63:99:77:9e:1e:bc:d7:8e:fc:46:35:e3:31:
71:e8:9e:f0:d7:5c:f2:70:85:b2:33:70:68:f8:3b:4e:83:ce:
cc:ae:90:7f:24:2a:76:1b:2f:ea:a1:3e:68:bc:de:37:fb:03:
e9:5c:d9:97:d8:d6:02:c0:48:78:10:25:9d:89:ed:a7:12:a8:
75:f7:20:39:16:dd:e3:47:a4:56:cd:c9:4f:70:b4:91:3d:c9:
5b:cb:0c:59:1b:fa:06:e1:cf:a3:b7:a1:4b:fd:0f:ab:bf:05:
96:ad:70:0b:72:32:33:b9:d6:0b:d1:9f:3f:7e:fc:1b:c8:d1:
fa:84:f1:be:4b:6a:e9:56:ec:e1:48:07:6d:a3:c3:b7:70:e9:
0b:d7:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:47 2025 by rpki-client