Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
File: rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json)
Hash identifier: r7wfUC7KojCaRu4dYiYwTPok1/8n+LRmtvB8US/L2vc=
Subject key identifier: 19:6A:D2:9D:1C:C9:B8:66:39:24:2A:9A:74:3D:BE:4A:8D:A6:5A:ED
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial: 0199FBEBCD8AD1F9B244EB850A62BB3E53AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
Manifest number: 0EDD
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: KVHIamZJVn2A53v0da8_IQ5hmAc.roa (hash: MHiTghXPbp0Yn7XA7tDf2bHlQcgsEoD122bH+wIZHLg=)
2: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: sZUnMXRiNtva0snRYJx8+as++HZYA36l+7oGuS91PSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cd:8a:d1:f9:b2:44:eb:85:0a:62:bb:3e:53:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=196ad29d1cc9b86639242a9a743dbe4a8da65aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:8a:81:92:8e:54:71:4d:e4:70:e9:05:93:
9a:63:90:1a:b9:3d:de:62:f7:9a:d2:a7:88:6b:ef:
0d:5d:32:3c:1b:a2:87:7f:7a:5e:32:61:fe:13:be:
5b:2c:eb:4d:7f:fc:6b:ea:bf:67:6b:7d:97:c4:0e:
33:2c:6a:3e:4b:71:46:18:37:68:bb:7f:0d:a3:d4:
26:3a:d7:74:fa:f6:78:7d:b8:a0:aa:f4:a5:3d:76:
65:ee:37:7a:63:59:99:79:96:4d:e7:07:16:8d:a7:
e5:df:ab:f1:c0:3e:6d:80:41:f1:7a:f8:6d:8b:1b:
2a:fa:cb:39:53:06:ad:f0:9f:90:6e:01:6f:02:75:
ff:9a:8a:c7:c4:37:36:bc:25:2e:a5:2b:51:e3:00:
10:13:c2:71:38:05:0c:00:31:ef:37:f0:ca:6b:34:
b6:a5:b3:0d:fa:7d:5c:47:13:14:6f:69:55:0f:9a:
80:e7:da:9c:6d:3d:b5:07:d4:72:90:3a:fe:20:e0:
99:db:6a:27:3e:6c:a1:bf:d5:61:2d:b2:ed:67:5d:
76:1a:4f:f0:f3:0c:0d:a2:70:16:cb:41:14:cf:54:
fd:28:ea:f2:76:7c:20:c9:56:40:1f:18:69:13:2c:
e8:2f:ca:f4:20:75:ff:50:dc:c7:75:14:d8:74:8a:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6A:D2:9D:1C:C9:B8:66:39:24:2A:9A:74:3D:BE:4A:8D:A6:5A:ED
X509v3 Authority Key Identifier:
keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1a:72:05:72:c9:5f:9c:d4:be:eb:0e:ed:88:17:e6:0b:ec:
6b:3d:43:13:6d:da:58:7e:be:74:0c:c4:9e:a1:af:f1:26:30:
1e:74:61:6d:99:0f:3c:0f:7d:35:be:29:ac:74:15:71:da:a8:
01:57:84:50:74:18:85:b9:81:4d:62:d0:d7:e7:fa:af:3e:93:
e0:37:4e:44:60:85:2d:7d:f6:61:3d:89:7a:40:3d:17:41:b0:
28:9e:ee:05:c7:76:d5:fc:6a:ec:60:f9:57:4c:ac:4a:00:a1:
01:be:00:44:b8:e8:13:4a:62:79:55:df:bd:e1:65:60:56:66:
d8:6c:dd:c9:e1:3b:a7:0e:43:e7:41:98:ba:11:31:5f:17:d6:
ca:e0:3a:4f:72:48:55:5c:e5:31:99:7f:62:a2:83:e2:3c:d6:
2a:5d:3a:76:04:26:2e:d3:ab:d5:dc:25:1e:64:44:ab:80:14:
f8:4e:29:3c:68:28:11:de:1b:42:2c:7d:d6:69:bd:a3:ae:27:
eb:d7:58:e4:cb:6d:8d:0d:58:78:7e:58:2a:28:54:aa:88:52:
24:9d:74:37:87:b8:a8:4d:69:ad:a1:3c:c5:5a:e8:84:24:38:
6d:85:35:4e:81:03:71:b1:d0:c8:e5:20:2f:19:77:91:22:bd:
1b:92:98:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:36 2025 by rpki-client