Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File: RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier: lsTHlcU+nCv447wkzoAuZS64dLt05RCWl0iAaG4FGn4=
Subject key identifier: D0:88:80:65:A3:84:3A:D8:09:32:F3:2D:94:3E:B8:6C:8B:2D:9B:3B
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 019A4EBD4D6D7CE2483DF3FAB3D3CE26CF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 12:00:20 +0000
Manifest this update: Tue 04 Nov 2025 12:00:20 +0000
Manifest next update: Wed 05 Nov 2025 12:00:20 +0000
Files and hashes: 1: HJuvWWI1qAqft10oKlJtZleuo2g.roa (hash: u8HfwrfCCFHcB5jvs7dyE9ffRxdRXb4g1HqA18Sf8YE=)
2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: j41Bbf4xsd5yMfOHJZ0DB79WVsi4dd+NyrsDbPG5E1o=)
3: wtjN78Y_d1b6O6UDtSU2B1I3v9Y.roa (hash: ReqT7jsHEoa7AvfRGw7Yv2wPcS9GQjwhHtVeUywingA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:4d:6d:7c:e2:48:3d:f3:fa:b3:d3:ce:26:cf:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Nov 4 12:00:20 2025 GMT
Not After : Nov 5 12:00:20 2025 GMT
Subject: CN=d0888065a3843ad80932f32d943eb86c8b2d9b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:40:31:d0:e3:18:7e:cf:f8:5b:2f:e6:58:
32:44:26:57:14:e9:cf:13:70:f7:7b:89:c4:dc:b3:
65:f6:99:cd:89:5f:90:71:1b:43:59:36:a6:b5:6b:
fa:0e:a8:3d:b5:b6:a5:3e:a1:ce:04:3e:61:8e:9f:
c4:a9:31:2a:f3:e0:ca:83:70:a7:4c:7d:12:b6:5a:
a7:ee:b7:d4:f6:7a:9a:5c:30:64:d2:d5:95:6f:18:
c3:1a:3a:70:5a:e6:08:60:21:3d:ed:3b:20:07:be:
b2:1d:0b:3e:17:87:4f:db:44:23:16:e0:d1:57:f3:
1d:9e:a7:3d:a7:4f:b0:98:62:16:76:b7:ff:b3:19:
e8:44:78:ac:17:f5:cc:6d:9c:42:27:f5:e4:13:70:
88:f6:bf:2a:5a:ff:55:a5:c5:33:de:12:b1:14:2e:
34:ab:4b:98:fc:76:14:94:ec:a4:8b:c8:00:7e:9f:
98:17:1b:4c:e0:bc:97:0e:f7:dd:1d:d2:20:35:ae:
02:c8:f0:c8:4b:e7:91:fb:8b:36:60:f7:c8:e4:16:
a8:9b:49:1b:25:1d:05:c3:ca:9f:d2:c2:ae:34:94:
75:86:ae:45:77:37:77:41:8f:6e:24:f6:25:44:9f:
0c:58:4e:12:ed:38:0d:94:f0:3e:b3:76:74:c3:48:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:88:80:65:A3:84:3A:D8:09:32:F3:2D:94:3E:B8:6C:8B:2D:9B:3B
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b5:f0:c7:30:70:dd:7e:fd:e2:0c:83:34:3d:0b:b5:52:a3:
89:de:c9:8f:26:78:a4:25:94:6e:b4:89:fc:f8:73:86:69:39:
e7:a3:db:a0:83:5f:9b:fc:a2:2f:34:64:f8:99:1e:ad:93:a9:
98:f9:7d:b3:b1:d7:f6:0c:84:a7:37:7c:4d:d9:a2:b8:31:4e:
dd:2a:f0:66:cb:dc:2c:24:c2:49:2c:54:fe:d3:89:77:57:09:
57:02:47:4c:2f:35:46:ac:ba:f0:b6:9f:0f:7e:de:28:cd:ba:
da:c4:0e:2a:52:7d:74:19:78:2c:c2:61:bb:4f:4b:15:e3:ed:
97:42:a2:84:8c:e0:d7:f4:ae:b0:51:26:b5:0f:ef:58:16:85:
9e:68:db:c5:26:ae:18:98:9d:0c:ed:01:96:1c:f3:bf:74:8f:
ae:3d:11:5b:c4:c5:c2:53:b9:e3:bf:33:92:eb:c3:73:ce:4b:
2d:a5:e1:55:60:ad:da:28:2e:31:cd:04:79:ea:f1:23:ec:f5:
8d:75:10:5e:c7:b5:db:33:a1:df:7f:ce:77:b5:9c:39:a5:0e:
2f:c0:3f:17:31:37:fb:c3:4c:a0:0a:fd:64:a9:95:be:13:06:
64:49:e6:14:7a:ec:0b:63:c2:95:65:5a:58:55:79:9f:40:02:
ec:48:2e:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvU1tfOJIPfP6s9POJs9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NmVjYjNiZTEwNjVlMWU3MTU4OTUwOGJlYzZkNzRiNWE3
YjFlZDcwHhcNMjUxMTA0MTIwMDIwWhcNMjUxMTA1MTIwMDIwWjAzMTEwLwYDVQQD
EyhkMDg4ODA2NWEzODQzYWQ4MDkzMmYzMmQ5NDNlYjg2YzhiMmQ5YjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDlAMdDjGH7P+Fsv5lgyRCZXFOnP
E3D3e4nE3LNl9pnNiV+QcRtDWTamtWv6Dqg9tbalPqHOBD5hjp/EqTEq8+DKg3Cn
TH0Stlqn7rfU9nqaXDBk0tWVbxjDGjpwWuYIYCE97TsgB76yHQs+F4dP20QjFuDR
V/Mdnqc9p0+wmGIWdrf/sxnoRHisF/XMbZxCJ/XkE3CI9r8qWv9VpcUz3hKxFC40
q0uY/HYUlOyki8gAfp+YFxtM4LyXDvfdHdIgNa4CyPDIS+eR+4s2YPfI5Baom0kb
JR0Fw8qf0sKuNJR1hq5Fdzd3QY9uJPYlRJ8MWE4S7TgNlPA+s3Z0w0jhqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCIgGWjhDrYCTLzLZQ+uGyLLZs7MB8GA1UdIwQY
MBaAFEVuyzvhBl4ecViVCL7G10taex7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNjcxNWEtMzJmYy00ZTlmLWE1Nzct
NWFjNzRkYmExN2I4LzEvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNjcxNWEtMzJmYy00ZTlmLWE1NzctNWFjNzRkYmExN2I4
LzEvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbXwxzBw
3X794gyDND0LtVKjid7JjyZ4pCWUbrSJ/Phzhmk556PboINfm/yiLzRk+JkerZOp
mPl9s7HX9gyEpzd8TdmiuDFO3SrwZsvcLCTCSSxU/tOJd1cJVwJHTC81Rqy68Laf
D37eKM262sQOKlJ9dBl4LMJhu09LFePtl0KihIzg1/SusFEmtQ/vWBaFnmjbxSau
GJidDO0Blhzzv3SPrj0RW8TFwlO5478zkuvDc85LLaXhVWCt2iguMc0EeerxI+z1
jXUQXse12zOh33/Od7WcOaUOL8A/FzE3+8NMoAr9ZKmVvhMGZEnmFHrsC2PClWVa
WFV5n0AC7EguBg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:25 2025 by rpki-client