Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
File: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft (raw, json)
Hash identifier: AqsW3Ywm/yR6i8LjAHaSF5VnMDLJ971IHplK3N4SeME=
Subject key identifier: CD:A8:40:2D:5F:BA:E2:A7:0B:B5:7F:07:6A:B6:99:9F:C3:4A:58:32
Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
Certificate issuer: /CN=470bc021b657a594ee58d9d36d8d91831d085174
Certificate serial: 019A4FCFE6BCC1783F7E30DF908FD8C4868D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
Manifest number: 0B1A
Signing time: Tue 04 Nov 2025 17:00:16 +0000
Manifest this update: Tue 04 Nov 2025 17:00:16 +0000
Manifest next update: Wed 05 Nov 2025 17:00:16 +0000
Files and hashes: 1: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl (hash: JgJIAu1eWFGAuwsRZRoymYBzVQgz+431HV9DdPOZUJA=)
2: k6bkvh9iuXhGi6Ifo-aZZ61eWcY.roa (hash: yZJ6vuAHa/37ymvkns64WkhZR926EDrpu1i04hE/yKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:e6:bc:c1:78:3f:7e:30:df:90:8f:d8:c4:86:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174
Validity
Not Before: Nov 4 17:00:16 2025 GMT
Not After : Nov 5 17:00:16 2025 GMT
Subject: CN=cda8402d5fbae2a70bb57f076ab6999fc34a5832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:83:ae:95:a1:be:4f:a0:72:20:e3:93:91:
f0:4c:20:ba:a6:4b:5e:b5:8d:0a:44:71:a7:f6:e9:
47:b8:9f:43:85:25:30:3d:0a:11:8e:5b:88:1e:0c:
43:2f:95:0e:79:b3:1a:bc:c3:c4:b5:cb:3c:45:f9:
1e:d3:5b:1a:11:34:8d:bf:f8:ce:8d:0b:c9:bf:d6:
e8:c1:e6:cd:f4:03:73:b4:6a:37:ff:74:6a:ab:80:
f2:f7:bd:f0:9e:95:93:a4:03:92:cb:5c:15:17:ca:
82:c5:0f:f7:be:a5:5f:d6:48:fe:80:c3:b5:16:49:
40:87:60:74:5d:26:d9:d4:88:f8:23:84:6f:48:1f:
c1:cb:92:da:df:e5:06:8e:e6:1c:80:a2:23:e7:65:
7b:91:aa:52:1a:66:14:a2:fa:93:7c:af:9d:38:3a:
b2:85:3c:a7:a8:66:63:8e:dd:3e:fe:79:94:04:ec:
20:81:ad:7d:9d:b2:90:b9:a7:ec:78:bc:12:5f:d5:
a0:b1:4d:49:c2:58:0f:aa:b1:a6:70:0c:9e:4f:43:
a1:1c:cf:2e:b0:d0:ec:ab:d6:ad:99:d3:6b:a6:64:
5d:e1:67:f4:8f:d6:db:95:c2:21:27:93:1e:ac:9e:
ec:6d:a0:a1:e0:0e:93:e9:bd:a6:d0:99:8d:02:b7:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A8:40:2D:5F:BA:E2:A7:0B:B5:7F:07:6A:B6:99:9F:C3:4A:58:32
X509v3 Authority Key Identifier:
keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:90:80:5c:7c:11:44:c9:31:10:72:77:b6:c0:19:a5:29:b1:
d7:0a:4c:c4:22:3f:7f:17:a6:89:2e:81:33:55:9c:47:24:67:
4e:b9:2c:c0:b8:2d:74:fe:2c:3a:0c:1f:20:08:54:da:44:b2:
17:f0:ac:07:ed:0c:25:af:29:21:a0:4b:59:66:98:f1:f8:05:
fd:a4:10:7e:79:89:d5:cc:4e:c5:7c:10:d9:05:4d:17:28:2a:
49:60:23:9b:d3:36:b7:63:d3:76:0f:c5:c9:6a:b7:33:79:c3:
64:fe:e8:87:fe:f3:70:6e:96:e6:b3:f5:2e:0f:a5:93:e6:ab:
dd:fe:e5:6f:c1:ff:f0:20:58:b0:00:f8:bd:60:e3:07:6d:5c:
2a:97:96:15:ec:11:9b:fd:4b:dc:7a:eb:d6:7b:41:51:87:f0:
dd:2b:18:67:a8:95:89:58:9c:8f:ce:8a:fa:64:85:a8:44:f1:
91:fc:04:95:1e:c5:8c:d9:72:cf:9c:b4:5b:ea:87:ef:1c:a5:
89:97:74:38:3e:4b:6f:86:0a:b1:d3:e7:90:9d:65:a4:35:1b:
36:d0:a1:ae:05:8c:30:dc:f7:1f:5b:a0:37:63:d9:72:7b:3e:
03:0a:71:79:ca:c5:10:70:ee:6a:ce:46:f1:ec:5b:00:9c:51:
e6:98:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:38 2025 by rpki-client