Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
File: w-twdDgV_kRclYo8URfvJ1PTD34.mft (raw, json)
Hash identifier: 4VvTqPvjgMCZWhw12YxmxlPR+0U0vm8a5nNkCWZ0zkY=
Subject key identifier: AB:3A:22:6E:20:98:BC:C8:80:89:A1:FB:93:7D:06:D3:73:13:A3:02
Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Certificate serial: 0199FC21B8D9BB4FC9235E13336E22848BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: GzCIBu4tHiFH76_Ly9Ei_0SMBpg.roa (hash: ucUps3PWBgmn642QIizMtNVpME3QV9nJ//n0R1ijDxA=)
2: w-twdDgV_kRclYo8URfvJ1PTD34.crl (hash: /WIxbw7jWzj6HCOB+3MGr1JeOAjhMuuwTrpFpsAhFVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b8:d9:bb:4f:c9:23:5e:13:33:6e:22:84:8b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=ab3a226e2098bcc88089a1fb937d06d37313a302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:06:bc:8d:1a:bc:53:c0:34:e2:a1:58:51:
2b:8f:d0:6d:fa:8b:94:71:85:bd:24:68:43:90:3d:
3c:75:ec:b9:5f:5a:49:2c:b7:87:35:13:c7:e3:ad:
b1:13:07:06:75:83:54:b0:c0:8b:42:54:62:20:ac:
be:e9:12:09:ba:bd:4a:01:64:d8:f5:d2:18:ce:31:
ce:9f:0d:f6:6d:24:14:bc:90:37:a9:30:e7:56:bc:
1c:b9:d7:2c:6b:65:24:aa:c0:90:96:48:54:ab:62:
fc:42:a4:16:29:ea:c0:89:98:06:a8:01:d5:da:25:
83:3e:70:51:68:55:16:b0:12:5f:8c:e1:24:78:70:
0a:19:44:48:1f:e0:6e:a7:0a:96:81:92:a2:71:7b:
6b:e4:1c:7d:89:ed:d7:e9:79:d2:3b:5f:4c:f0:ea:
90:98:00:4d:46:36:08:5d:59:ac:89:81:a5:8a:cf:
99:5d:88:2f:84:88:8c:aa:8d:05:ba:1a:c7:06:1c:
c5:cc:93:23:93:40:90:8e:89:aa:75:4e:ea:a8:11:
84:e7:20:51:ee:c0:5d:07:b3:7f:8a:07:86:de:31:
c8:77:28:ef:18:7f:d6:aa:6d:98:a0:65:d1:9a:e4:
db:70:fd:23:1e:22:88:99:f0:d3:d1:dd:63:b5:80:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3A:22:6E:20:98:BC:C8:80:89:A1:FB:93:7D:06:D3:73:13:A3:02
X509v3 Authority Key Identifier:
keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f6:4d:33:fe:50:9e:84:8d:88:70:d1:dd:a9:31:de:ea:d6:
64:36:77:04:f5:d6:58:7d:0d:c7:4b:38:af:90:05:82:67:2b:
ae:86:68:bd:f2:5b:40:3b:b4:57:df:67:2a:44:f0:a4:53:e0:
33:22:11:2b:f3:7e:11:94:77:1c:d5:7c:9e:11:97:d6:ff:51:
26:7e:2e:a7:76:49:14:49:8f:90:2e:f7:42:02:82:63:29:a0:
35:73:32:0b:79:62:13:f4:24:85:75:c1:8b:38:6d:e3:3b:97:
0c:51:29:46:45:84:83:dd:a2:94:3b:b3:75:d2:a0:5f:b5:1e:
81:d0:59:65:a1:a5:a1:77:b5:de:2d:79:c2:0a:e9:23:5d:e7:
4c:55:d5:da:df:d5:c3:04:09:7f:22:40:13:54:7c:9f:0a:de:
d5:32:03:41:46:87:d3:2d:ef:e1:99:c0:a9:4a:da:be:95:e0:
ce:56:bd:9c:5a:88:20:1d:a8:ed:e2:27:44:9f:8b:78:fe:4f:
26:7f:47:18:d0:57:fc:88:11:8a:b0:90:e5:c9:e9:4f:40:45:
d5:b8:a7:31:2d:01:6b:67:aa:07:cb:53:88:a4:b6:a9:8f:d6:
15:a5:be:a1:e9:43:35:e7:48:ba:4d:7c:60:7d:47:7f:56:a6:
fa:60:05:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:08 2025 by rpki-client