Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: c+/HBzRFLNeLx7da5+LQ89NrHCVgG+IUHbVSQiC43e4=
Subject key identifier: 40:78:57:B2:F4:9B:E6:10:3D:E3:20:C4:A7:D0:F8:EE:51:FC:5C:47
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 0199FDD9AC12266D972223709FB3A645DEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 13FA
Signing time: Sun 19 Oct 2025 19:02:04 +0000
Manifest this update: Sun 19 Oct 2025 19:02:04 +0000
Manifest next update: Mon 20 Oct 2025 19:02:04 +0000
Files and hashes: 1: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (hash: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=)
2: GoeAUL2QksRS16LiLx9M0SmG6h8.roa (hash: Lp7ZvoPe3FFQc8UoBl571bW941fIgYX0UUaKwSRXqLI=)
3: p9gQbHg8IpMtNLW0NQ42q_UAiDc.roa (hash: t3Lsla/WvydRj60ad7MeBwokpBl+kvF1NmkVZ9213jY=)
4: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: 4XuLwYjQ2Tksbdxl14gMoJJLLk4ZSi/DRGwa/AAqK9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ac:12:26:6d:97:22:23:70:9f:b3:a6:45:de:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Oct 19 19:02:04 2025 GMT
Not After : Oct 20 19:02:04 2025 GMT
Subject: CN=407857b2f49be6103de320c4a7d0f8ee51fc5c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:6e:6a:a8:cf:90:39:07:75:09:4b:34:86:
89:43:93:1c:d1:90:ce:e9:ef:71:a3:d6:94:07:5f:
8f:6a:77:be:0f:67:29:18:73:28:2a:38:8e:85:31:
5a:35:7d:9e:3b:ed:e0:36:d9:c0:3a:16:2a:99:45:
e6:4d:47:7a:27:75:9f:df:c0:a0:51:05:7c:59:34:
07:96:e5:cc:7b:3b:79:d2:4e:ef:ba:26:02:5e:d4:
3d:75:98:e5:1b:d9:af:75:5b:d7:5d:ee:8e:67:99:
f1:97:fb:0c:2d:ee:da:55:c0:fb:a2:5c:55:5d:47:
3f:52:31:e5:72:a9:75:46:6c:8f:f9:23:85:ac:b0:
58:ae:3c:2c:b1:ae:6f:d1:e7:20:65:9c:52:97:6a:
81:c1:10:18:9b:08:67:65:5b:cf:55:b9:11:01:c9:
16:34:9d:8c:39:87:39:37:f1:81:1d:43:17:8f:43:
8d:91:45:d9:e2:54:37:bb:3b:64:4a:25:ad:40:d2:
87:df:84:b7:ea:54:58:cb:1c:c3:bb:a2:07:9a:04:
fd:c4:15:0d:b4:d4:b6:11:e8:b7:45:80:b5:70:f8:
01:75:73:b7:c8:94:36:0d:92:31:19:e8:1f:21:44:
78:a7:44:b5:3b:30:a9:8b:54:12:11:8a:d9:f1:cf:
3f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:78:57:B2:F4:9B:E6:10:3D:E3:20:C4:A7:D0:F8:EE:51:FC:5C:47
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bd:0b:93:a9:01:fe:b9:1d:41:d5:a6:68:2b:ac:0c:8e:00:
7a:58:2d:33:5e:6f:eb:c9:86:b9:db:dc:fd:18:8b:0c:4e:f2:
23:86:e6:16:30:5d:ff:32:28:eb:35:41:ec:ee:7b:1a:41:10:
39:ae:c5:98:80:be:ec:66:c2:c4:2f:70:ec:c0:e1:59:5a:01:
2e:b3:0a:fe:44:68:ce:27:eb:b1:0f:48:ca:e7:cd:03:12:3d:
50:84:ef:b9:d3:59:80:37:c6:7b:32:c2:0b:95:73:ec:1c:d3:
3b:a5:3a:95:72:3a:05:9b:02:fd:88:58:e4:a8:9f:15:c4:b3:
14:94:ab:af:d7:86:37:44:84:da:43:1d:2e:e3:ed:2f:35:b8:
dc:22:79:1a:c1:dc:e5:21:02:20:1d:1e:38:b4:81:d1:fc:83:
1f:14:42:a2:24:8e:8b:74:d0:f7:b8:d0:46:91:e3:d3:d0:c8:
15:a8:69:70:6d:ef:b3:07:37:0e:72:94:31:68:a4:9f:92:86:
db:2b:0d:1e:e5:10:38:3d:b1:57:97:6a:56:5b:92:7f:1d:92:
f8:a1:da:c9:c4:07:80:52:43:9b:a8:9d:8e:de:4c:10:b9:fa:
2e:5b:7e:ed:56:c7:6a:50:78:39:3f:41:be:14:f8:92:63:35:
bb:4c:99:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:56 2025 by rpki-client