Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: JfVYKApFCi+r+y+4LL+1wKnJBzJ3/R6cKh1gviEuEB8=
Subject key identifier: 22:20:32:1F:F6:DF:36:B4:DB:17:3C:ED:A2:2C:57:60:F6:54:AB:07
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 0199FAA1652F3C953C56CC66E6B73E9E03C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 113D
Signing time: Sun 19 Oct 2025 04:01:45 +0000
Manifest this update: Sun 19 Oct 2025 04:01:45 +0000
Manifest next update: Mon 20 Oct 2025 04:01:45 +0000
Files and hashes: 1: dv2-CubAEzDgm9-A6q6tebm8sb8.roa (hash: TsKOArcBjp/tutNspO+BZ3fNFViji2g9Yje5CxDDQXE=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: V+OixBDKzmq4tWJahuYD1U9/1fvYeaqA9S1ME50h8o4=)
3: uPmBIiMy_mwoAMwRr2tHb8mN_DQ.roa (hash: HueNCAsjAp0HpCdgeRDBaDeI3suLIq9xXvHT44od5wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:65:2f:3c:95:3c:56:cc:66:e6:b7:3e:9e:03:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Oct 19 04:01:45 2025 GMT
Not After : Oct 20 04:01:45 2025 GMT
Subject: CN=2220321ff6df36b4db173ceda22c5760f654ab07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:16:ac:e1:14:3a:b5:bc:15:60:ec:7d:41:
57:99:83:0f:93:ac:1d:23:25:79:1f:68:35:2f:e6:
3b:4e:e0:0f:57:93:62:f0:db:12:37:a0:f5:04:64:
ab:0a:08:bb:39:a3:cb:d7:ac:bc:e4:38:05:e4:02:
39:2c:63:23:26:2b:7a:8a:b0:85:d1:f3:c4:b0:5a:
74:96:eb:23:3f:ef:2a:f1:e4:a6:f3:e4:e9:e8:e7:
d8:09:19:6c:97:f3:4e:40:c0:46:3f:08:f1:e1:8d:
36:58:2d:96:0f:81:4e:ce:e0:fd:83:c0:50:97:7b:
2c:4a:1e:ce:bf:7f:e4:3d:37:01:f0:56:a6:1d:1d:
72:18:81:47:ba:17:09:a9:40:68:9a:48:98:ff:3b:
5d:05:ff:4c:6a:63:f8:42:70:de:b1:aa:42:2c:11:
9d:b7:1b:31:92:27:83:7a:e0:c0:a7:17:2e:76:00:
66:bd:fc:85:18:9e:f9:77:ba:8a:ee:2b:f2:57:6f:
37:64:e8:79:06:d8:85:71:02:3c:a0:3c:e0:cf:fb:
5e:90:95:c0:c7:cf:a8:42:76:9e:6a:02:4a:18:07:
9b:37:8f:99:18:fe:a0:3e:1a:cd:96:5f:11:e1:41:
94:f1:be:e2:e8:a9:2d:ec:22:d2:36:86:18:1d:40:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:20:32:1F:F6:DF:36:B4:DB:17:3C:ED:A2:2C:57:60:F6:54:AB:07
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b0:c5:18:48:20:36:a4:9f:64:e4:38:be:fb:48:07:17:da:
cb:b1:cf:a4:86:38:a8:80:1b:af:64:b3:ea:b7:19:3e:44:db:
7c:45:af:32:71:56:dc:15:c8:0e:f4:e9:ad:b4:f6:40:38:8d:
26:2c:cf:f8:3c:1e:1d:f5:8b:77:fc:e6:6c:f9:45:c2:4e:d9:
64:78:11:04:36:4d:9d:ca:f9:07:c6:23:1f:77:8c:2b:91:c2:
0d:f5:24:ac:33:4d:3f:d3:a7:8e:a0:40:e2:e8:e9:d8:6a:75:
d6:a1:8e:ed:80:a0:87:8d:b1:45:e8:04:aa:6d:bc:b4:9d:aa:
2f:5c:08:8b:11:11:38:0f:71:e1:2e:40:fe:dd:4a:e8:1c:b3:
37:c8:57:d4:7c:03:a7:11:33:85:ef:17:3d:f7:48:d1:fc:cc:
f4:1b:c6:55:db:cc:e7:dc:37:8c:42:f1:6f:bb:72:76:c0:12:
14:06:95:b1:ea:3f:62:af:b6:11:75:ae:b4:1b:70:33:fa:5b:
96:04:ab:e6:83:57:be:b8:2a:95:14:48:83:c6:32:dc:6b:45:
c3:25:f5:6f:a9:9b:19:fa:6f:31:02:7c:51:d3:f4:de:3e:c8:
a2:cd:40:7b:bf:d9:71:5a:6f:80:fc:f4:c2:4e:8c:53:c9:93:
1b:99:6b:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oWUvPJU8Vsxm5rc+ngPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDM2ODE2YTMxN2RkOTlkMjUzODNhMzJhNjgxODU5YzA0
N2I1ZmYwHhcNMjUxMDE5MDQwMTQ1WhcNMjUxMDIwMDQwMTQ1WjAzMTEwLwYDVQQD
EygyMjIwMzIxZmY2ZGYzNmI0ZGIxNzNjZWRhMjJjNTc2MGY2NTRhYjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRMWrOEUOrW8FWDsfUFXmYMPk6wd
IyV5H2g1L+Y7TuAPV5Ni8NsSN6D1BGSrCgi7OaPL16y85DgF5AI5LGMjJit6irCF
0fPEsFp0lusjP+8q8eSm8+Tp6OfYCRlsl/NOQMBGPwjx4Y02WC2WD4FOzuD9g8BQ
l3ssSh7Ov3/kPTcB8FamHR1yGIFHuhcJqUBomkiY/ztdBf9MamP4QnDesapCLBGd
txsxkieDeuDApxcudgBmvfyFGJ75d7qK7ivyV283ZOh5BtiFcQI8oDzgz/tekJXA
x8+oQnaeagJKGAebN4+ZGP6gPhrNll8R4UGU8b7i6Kkt7CLSNoYYHUDSKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIgMh/23za02xc87aIsV2D2VKsHMB8GA1UdIwQY
MBaAFK8DaBajF92Z0lODoypoGFnAR7X/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MmIxOTktOWUxZi00ZWM3LWIwYWEt
NGE0ZTBmNDI0ZjE3LzEvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MmIxOTktOWUxZi00ZWM3LWIwYWEtNGE0ZTBmNDI0ZjE3
LzEvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrDFGEgg
NqSfZOQ4vvtIBxfay7HPpIY4qIAbr2Sz6rcZPkTbfEWvMnFW3BXIDvTprbT2QDiN
JizP+DweHfWLd/zmbPlFwk7ZZHgRBDZNncr5B8YjH3eMK5HCDfUkrDNNP9OnjqBA
4ujp2Gp11qGO7YCgh42xRegEqm28tJ2qL1wIixEROA9x4S5A/t1K6ByzN8hX1HwD
pxEzhe8XPfdI0fzM9BvGVdvM59w3jELxb7tydsASFAaVseo/Yq+2EXWutBtwM/pb
lgSr5oNXvrgqlRRIg8Yy3GtFwyX1b6mbGfpvMQJ8UdP03j7Ios1Ae7/ZcVpvgPz0
wk6MU8mTG5lrWA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:04 2025 by rpki-client