Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
File: warwQ_4gnANFNiIF-Mx81hlRwn4.mft (raw, json)
Hash identifier: SJhTokXEZUa3g4yWJk9g0XteW/aTaB/n3xPHSGRqHLk=
Subject key identifier: C1:9C:25:C5:83:F6:D5:F2:22:2B:E3:17:15:FA:09:DA:B9:17:B9:D9
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial: 019A4D0705131A3CEB4657DC9D17E2C4F639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
Manifest number: 0F83
Signing time: Tue 04 Nov 2025 04:01:36 +0000
Manifest this update: Tue 04 Nov 2025 04:01:36 +0000
Manifest next update: Wed 05 Nov 2025 04:01:36 +0000
Files and hashes: 1: oLyY8vvBAfeOhRsj9eexvuktQm4.roa (hash: scoM8Sq6POvOb7psz/VnzYZYQjNB2n1Y53tdfQTGFcc=)
2: warwQ_4gnANFNiIF-Mx81hlRwn4.crl (hash: Sr3dKIb8rdeN0KcTYm6qcdvs/1Fxa63dxz+ALchRKF8=)
3: yuwuNuzvATZfP3JuA06dTGzQ9o8.roa (hash: iaJVdCZsnNb9Cyubf2e2B713adANaUt93mNYt5mCPK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:05:13:1a:3c:eb:46:57:dc:9d:17:e2:c4:f6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Validity
Not Before: Nov 4 04:01:36 2025 GMT
Not After : Nov 5 04:01:36 2025 GMT
Subject: CN=c19c25c583f6d5f2222be31715fa09dab917b9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:77:78:a5:d0:2c:6c:17:d2:3e:f5:13:27:e1:
dc:a5:16:84:ce:79:07:5a:7a:8b:e1:a5:72:d4:88:
ad:6e:c3:47:64:20:6b:86:c0:fc:78:fd:13:2f:22:
5e:a8:77:c4:32:9e:6b:88:bf:df:0d:f3:53:8c:dc:
0e:b7:36:1a:ca:c6:99:f7:5c:94:83:10:31:7d:ae:
3b:91:85:87:31:aa:92:14:8f:49:c9:45:78:87:9f:
9e:72:00:ee:93:b1:8b:fc:3e:e5:3a:09:6e:ec:aa:
db:64:83:8a:61:8b:09:6d:47:82:69:cd:10:06:d9:
59:15:89:32:01:e5:9d:4d:ae:60:0f:07:ca:c6:50:
53:f7:fa:24:85:7f:d9:a5:24:56:b7:3e:15:21:76:
bf:4a:b7:b4:eb:94:f5:a6:30:c2:59:f0:31:e8:31:
b3:59:9d:d4:71:a6:25:90:1c:a5:f6:52:60:3d:1a:
b6:a9:ba:f3:b2:7b:49:3d:24:21:bf:ef:c7:7e:63:
c7:07:fe:24:fb:f5:be:20:0a:f0:40:64:f2:10:8e:
29:18:84:f5:c7:c6:a1:56:1d:e1:9c:80:4d:e3:aa:
3a:9a:1a:df:8f:68:3a:12:ba:54:7a:63:ff:00:ef:
bd:e8:9e:2b:1b:3c:ad:cf:43:72:ee:f3:51:07:31:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9C:25:C5:83:F6:D5:F2:22:2B:E3:17:15:FA:09:DA:B9:17:B9:D9
X509v3 Authority Key Identifier:
keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4c:2a:d0:ec:a6:07:0e:50:11:9d:c9:b6:9e:46:c9:79:f1:
ef:0e:e3:89:0d:b8:ff:5e:50:7f:ba:82:99:e7:b0:d7:aa:ae:
ae:3c:13:5a:99:6a:67:50:17:60:e9:b5:8f:d6:b9:86:2c:c5:
a5:ba:59:fd:63:31:6f:cf:88:b4:86:d7:df:86:b4:73:ae:c2:
46:22:6b:e1:cf:3a:a9:22:40:3e:ca:5a:bc:68:0f:e7:d8:55:
eb:4c:96:b7:90:bb:28:a1:ce:58:a0:0a:9c:1f:1d:b5:dd:44:
82:3b:97:54:a8:9f:d1:87:01:e4:2a:5c:3b:81:20:3d:be:da:
11:55:cc:72:41:88:3f:d6:49:18:1b:42:62:64:d5:43:1f:95:
ca:26:08:5d:1c:7f:59:4a:65:1d:bb:33:e3:aa:9d:7a:7f:3b:
c5:86:48:3e:12:7e:ee:6c:c3:97:8f:87:5f:67:16:16:ff:ca:
10:c6:9f:e5:29:d4:ef:29:da:1a:b5:e7:e5:eb:d8:e5:88:15:
03:f0:f7:2c:5a:71:83:fb:9c:80:ec:0b:c3:94:bf:42:22:ea:
2f:76:ad:d7:d1:d6:43:ef:21:0e:45:d5:c5:a3:a9:32:a8:98:
a8:9a:a4:d6:10:5f:04:a8:59:4d:c9:ec:26:d0:be:ce:cb:9c:
68:25:a3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:48 2025 by rpki-client