Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
File: w4Me3AugfH40q6cBw1c9jnKvGP4.mft (raw, json)
Hash identifier: /3eGr8zsxfVMb/wMupCvAopNMHyH0YxkYBKSyjfwok4=
Subject key identifier: DC:34:4B:C9:59:4B:8E:0A:C8:DF:3A:C3:0D:4B:1E:73:93:50:4A:76
Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Certificate serial: 0199FDD96656F89764802A39732F2318235E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:01:47 +0000
Manifest this update: Sun 19 Oct 2025 19:01:47 +0000
Manifest next update: Mon 20 Oct 2025 19:01:47 +0000
Files and hashes: 1: R3ax-Z4NwERn9kiI-gjg5Xya12A.roa (hash: ffTm+IwpNw27nllrwwqn+t+2k278/G5pqNf7iK/QlhI=)
2: w4Me3AugfH40q6cBw1c9jnKvGP4.crl (hash: o3FEshyeJGCZd5jQKuKYESNgFKgIj0CLl5yKkMJQh0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:66:56:f8:97:64:80:2a:39:73:2f:23:18:23:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Validity
Not Before: Oct 19 19:01:47 2025 GMT
Not After : Oct 20 19:01:47 2025 GMT
Subject: CN=dc344bc9594b8e0ac8df3ac30d4b1e7393504a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:46:a3:68:b1:ba:70:d6:90:a8:9e:92:11:
5d:80:95:bd:02:4d:2b:54:ca:26:1c:34:20:f5:1a:
d9:62:22:f3:49:ae:7e:a0:41:24:10:a3:a7:32:2d:
a0:0b:62:a3:a9:20:29:3f:f5:4a:f3:86:d0:a6:ba:
d0:ad:15:dc:b7:40:f7:42:1b:e0:d4:8d:fe:ee:59:
46:d3:c0:5e:c7:f4:a8:4d:c6:fd:3b:0e:f6:3b:43:
5e:9c:1a:ab:39:f7:83:86:9d:cb:e9:f3:c2:87:8c:
57:1d:85:fb:d1:a0:66:4f:73:b2:09:76:ad:ce:1a:
87:55:0f:80:1f:90:a7:f8:6c:8e:11:23:f8:06:71:
78:38:60:6c:87:51:6b:38:16:dc:a7:4c:b3:96:07:
6a:79:a5:55:bd:c5:93:af:b7:0e:72:ea:26:b4:b7:
c8:27:cb:6c:4c:c3:1b:bc:d6:c2:17:97:fa:85:08:
e1:ca:4c:fe:8e:43:88:60:92:6b:e1:75:c7:4a:2d:
79:f1:df:ca:ad:24:4c:75:63:a1:ba:69:a1:97:84:
a8:a6:b5:9f:09:a1:91:c8:91:b0:ea:4b:a4:de:a6:
81:c4:2f:f2:d3:c5:12:4a:00:65:51:79:a2:15:57:
e5:da:d2:09:c7:4b:05:f1:43:c4:a5:f7:9e:ae:52:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:4B:C9:59:4B:8E:0A:C8:DF:3A:C3:0D:4B:1E:73:93:50:4A:76
X509v3 Authority Key Identifier:
keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:73:75:2f:05:7f:32:01:59:57:69:e6:b3:93:fa:8f:f2:23:
12:96:ec:a6:d8:01:05:39:83:a1:66:1c:67:24:71:0b:2e:75:
3d:5f:a2:50:0b:c8:f9:09:14:b9:52:df:98:0b:36:4c:c5:3f:
32:af:7e:db:48:90:d0:bf:ca:5b:71:d1:16:54:59:6d:fe:35:
95:27:68:d2:b8:2a:a4:6a:6c:c0:8f:31:59:c6:09:f0:05:37:
1f:ee:b3:c4:9c:4f:6f:62:7c:59:59:b6:67:3e:5e:57:70:b3:
2e:59:e4:68:61:94:68:ca:3b:ca:5a:e8:05:1b:f2:0c:b7:de:
7e:b8:ac:28:39:9a:07:44:48:0c:40:e1:08:82:7c:68:af:94:
91:de:14:4a:58:47:c3:88:26:6c:37:9e:14:8e:5d:f2:bf:7c:
03:44:36:80:12:69:87:7c:2e:e0:35:a6:8c:7d:3e:51:e8:c8:
44:ec:7e:dc:8b:a3:a9:d7:57:cb:3c:33:2e:82:2e:fb:4e:1a:
76:ea:66:65:4d:03:5d:75:eb:1b:ea:2f:74:83:91:ae:45:67:
b6:cf:da:dd:1a:b4:dd:3a:69:60:af:0b:a8:8f:d4:12:97:f9:
c4:38:24:0e:06:22:03:c7:37:6f:29:d7:d5:fc:84:70:fb:bf:
79:1f:38:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:16 2025 by rpki-client