Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier: POIu/+iMHp7I6aib24/Kvag9D2sH/XVfm6YcIbRXmMw=
Subject key identifier: 93:01:70:44:C6:3E:22:C5:3B:20:1B:C1:6D:F6:A7:9C:F5:EE:BA:6A
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 019A4D05CA0D3453C59F91AC733B5CB5CE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:00:16 +0000
Manifest this update: Tue 04 Nov 2025 04:00:16 +0000
Manifest next update: Wed 05 Nov 2025 04:00:16 +0000
Files and hashes: 1: C8on01Bgko2Wx9jKjMpn7FCShCI.roa (hash: NvYVpYNTacJm9Dvti1H+p4nGJK6g8JeQhPdSMYmd5BQ=)
2: lBLUc28nwdLkSsrePQSmyxKstGI.roa (hash: vrIWIUHlJDuCxB1hzJyqC5GbG7oElAvbtOgjYcaloKs=)
3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: DmWIgukQzlqvKPgNXWO2d7Rqy+JIoO2r/23HKRQPpjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:ca:0d:34:53:c5:9f:91:ac:73:3b:5c:b5:ce:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Nov 4 04:00:16 2025 GMT
Not After : Nov 5 04:00:16 2025 GMT
Subject: CN=93017044c63e22c53b201bc16df6a79cf5eeba6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:01:fd:fb:b7:1d:b2:f7:fb:14:f0:87:b3:
9e:12:d2:94:b9:5c:30:a0:00:2d:7c:30:dc:6c:62:
20:82:42:6b:e5:e9:3d:1c:f6:d3:21:c3:7b:d3:ee:
28:08:e0:25:8d:42:b5:3b:c9:80:51:a3:bf:d2:1c:
5a:fa:2e:cb:2d:33:36:3d:86:23:df:43:a9:80:d9:
c8:c4:0a:64:09:87:2f:54:63:41:ab:d8:92:93:33:
24:ee:0f:5f:22:06:e1:e7:66:68:ff:c5:8d:37:cb:
9f:42:c0:f8:34:75:82:f0:5f:ee:d0:b0:66:6c:dc:
14:bd:6c:33:fd:84:32:1a:90:a8:98:b7:64:f6:7f:
30:51:7a:ae:4b:27:29:d3:02:fc:f3:97:1c:59:96:
d5:1b:c4:25:18:48:30:04:ae:65:38:57:21:64:ac:
16:3c:58:a7:ff:f8:6e:c3:ba:a7:58:e7:ba:44:f8:
19:59:54:ba:ad:b3:25:b3:d6:20:e5:1a:2a:d9:84:
7b:c1:3d:f8:fb:25:83:15:66:a9:b7:d5:29:88:b9:
ba:4e:5d:3d:eb:66:9e:40:c7:c1:99:37:c7:5b:69:
7c:ec:ea:7c:9f:72:ff:cf:43:88:6f:96:01:6f:1f:
fe:5d:4e:df:32:ef:ac:ff:7c:9b:ad:54:49:74:86:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:01:70:44:C6:3E:22:C5:3B:20:1B:C1:6D:F6:A7:9C:F5:EE:BA:6A
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a4:0c:bc:d0:72:b6:01:cc:9c:5f:97:12:a0:19:6f:6b:f8:
fc:68:3e:d3:85:ed:02:77:a5:d5:22:12:93:8b:98:95:ca:d0:
a0:18:1b:43:d3:e4:7b:c9:61:b1:74:b6:46:fc:51:7e:db:fc:
22:19:60:d3:c3:57:bb:9f:6b:72:7b:b7:30:83:26:06:67:11:
1d:18:ed:ec:e5:2c:0d:e7:2e:2c:f6:72:77:b4:79:92:40:d2:
69:2c:76:6d:cc:00:90:1b:f1:01:de:ad:4a:71:35:98:52:1e:
d8:52:f2:23:eb:1d:30:40:de:43:1a:a6:0e:2a:f5:60:07:87:
99:00:cd:a1:79:d6:2c:8d:7b:95:ee:b8:2b:a6:e4:7b:1b:80:
8a:83:80:a8:43:dc:ae:49:fb:a1:4c:1d:73:19:5f:0d:43:7c:
66:d0:37:85:b8:3f:ae:7d:9c:d4:fd:8d:54:73:5b:2e:3f:35:
73:62:bd:8b:ec:f5:63:03:1e:fa:31:64:97:e1:55:27:a8:cf:
6e:b4:42:f4:6c:7f:b4:b5:b1:1d:4a:da:05:15:0b:b7:de:d2:
f1:26:8e:66:e7:d6:57:ff:6e:e1:ac:b0:0a:45:34:ef:1a:49:
0a:a3:83:a1:13:7f:50:aa:d5:e0:51:0a:17:fa:d9:37:6b:25:
4d:dd:79:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:25 2025 by rpki-client