Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
File: RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft (raw, json)
Hash identifier: V8All2A3nQouWbOF5XuOXhsCauFKBT6uzxKxU7oPObA=
Subject key identifier: B2:A6:0E:E9:B4:CF:40:EC:A7:EF:49:AA:2B:45:D8:7C:77:34:CE:1F
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Certificate issuer: /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial: 019A4DAA86D95E8532B2B39E687681D07896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 07:00:12 +0000
Manifest this update: Tue 04 Nov 2025 07:00:12 +0000
Manifest next update: Wed 05 Nov 2025 07:00:12 +0000
Files and hashes: 1: I6ww8fe_j9f3G8rmW-wt_mZZY2s.roa (hash: Sd8zlV1mabR3WLhdUp899p9IeCSzwEZhzmqxHzFQi+0=)
2: PR7h8oep4HkWGcRzvS4-gRfixMM.roa (hash: Ff4Pkc/6nXpndO4Ei0ieXIWUczca12lTRXydMV3acQQ=)
3: RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl (hash: VJ5DE02f2qR8Iio5SPAwWjvgekyxgCgqR+FHjLed9AI=)
4: a4P5Nmq1ldQpFUTXqCcYVJT2FBw.roa (hash: uK/XWq2f7Vj84yIu4J13Mqd4rpKs4ZvyhbUMCrHpfh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:86:d9:5e:85:32:b2:b3:9e:68:76:81:d0:78:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Validity
Not Before: Nov 4 07:00:12 2025 GMT
Not After : Nov 5 07:00:12 2025 GMT
Subject: CN=b2a60ee9b4cf40eca7ef49aa2b45d87c7734ce1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:3d:5b:77:ab:a1:df:39:3c:a3:11:c0:0f:
dc:fa:c8:36:66:a2:9f:0a:30:5f:e1:7f:9f:4a:63:
db:85:fc:e6:44:d9:d4:68:3e:48:6c:6d:27:1f:77:
7f:4b:d7:b3:ed:c0:6e:b7:46:62:e1:b4:9a:25:1a:
2b:bc:64:18:3b:c0:32:80:38:b1:ce:d3:d9:26:82:
b9:ad:d5:0f:a3:be:84:90:28:a5:96:53:3e:13:67:
27:5c:45:34:93:4f:0c:36:a4:60:99:1f:47:bd:db:
59:8f:80:f8:c8:5f:af:64:17:58:15:eb:45:63:12:
71:53:b6:f0:d1:f1:c7:41:f9:dd:d6:ea:7f:97:36:
5c:97:b5:c3:e5:24:0e:48:4c:a3:a1:f9:10:f2:f3:
d9:92:f6:fe:1a:6f:09:a7:ca:01:f1:4e:6e:dc:37:
57:f4:9f:a4:81:77:e8:03:42:04:77:e6:80:7a:1f:
42:29:04:1d:43:1d:3a:d9:ce:d5:01:5a:45:2f:97:
65:3a:f6:3f:de:05:98:ab:f4:a7:af:22:d9:e1:02:
24:3c:5c:51:ca:52:4f:04:42:c8:99:55:8f:85:d3:
34:53:5d:18:a1:15:29:94:5d:36:b6:0c:c0:bf:fe:
4f:95:d2:62:80:2c:81:7d:c7:85:ff:5f:85:b9:8c:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A6:0E:E9:B4:CF:40:EC:A7:EF:49:AA:2B:45:D8:7C:77:34:CE:1F
X509v3 Authority Key Identifier:
keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d3:d4:e5:3f:5d:db:29:26:7e:c0:e4:24:46:16:96:b5:fb:
0a:b4:e9:f9:af:79:83:30:1e:da:29:54:25:58:72:d9:5c:84:
ce:8f:31:6b:c8:e7:4a:09:9c:09:ea:f2:5b:d5:05:fa:72:14:
79:2b:04:23:ef:d2:0f:60:76:73:29:5f:3f:2e:31:4b:90:94:
1e:50:17:d3:0b:06:57:53:6b:e1:83:18:49:58:35:c1:00:4e:
92:10:06:4d:b5:38:69:2b:fe:bf:d3:3d:2b:7c:e7:31:82:9e:
5a:9a:a6:41:0c:60:43:4c:d2:31:1a:db:35:cb:54:59:d2:99:
e8:7a:d3:d4:48:48:da:ff:27:4f:4b:db:14:d9:3c:e7:91:33:
86:fd:a2:a2:92:e1:ae:78:00:49:88:d3:47:7e:31:2e:66:09:
92:a8:08:3f:fe:47:5a:52:66:0a:70:36:d8:40:3f:46:46:d3:
1f:1c:b2:c8:e9:e6:05:84:21:62:9c:f8:b6:82:77:f3:22:b0:
c2:f8:b2:d9:3c:f0:12:c8:eb:80:28:d7:7c:18:22:6f:bc:11:
b0:59:fa:c7:30:3c:96:d9:2e:b4:07:93:94:42:ec:9f:53:2a:
2f:f4:a2:61:3d:b5:69:4c:fc:0b:47:f6:e3:20:00:fd:89:2a:
3c:be:87:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqobZXoUysrOeaHaB0HiWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MDVkM2M2YTViMDUxMjY4MmNkZmRmMzYzYjE5YTljNTY3
ZjFmNmMwHhcNMjUxMTA0MDcwMDEyWhcNMjUxMTA1MDcwMDEyWjAzMTEwLwYDVQQD
EyhiMmE2MGVlOWI0Y2Y0MGVjYTdlZjQ5YWEyYjQ1ZDg3Yzc3MzRjZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp809W3erod85PKMRwA/c+sg2ZqKf
CjBf4X+fSmPbhfzmRNnUaD5IbG0nH3d/S9ez7cBut0Zi4bSaJRorvGQYO8AygDix
ztPZJoK5rdUPo76EkCilllM+E2cnXEU0k08MNqRgmR9HvdtZj4D4yF+vZBdYFetF
YxJxU7bw0fHHQfnd1up/lzZcl7XD5SQOSEyjofkQ8vPZkvb+Gm8Jp8oB8U5u3DdX
9J+kgXfoA0IEd+aAeh9CKQQdQx062c7VAVpFL5dlOvY/3gWYq/SnryLZ4QIkPFxR
ylJPBELImVWPhdM0U10YoRUplF02tgzAv/5PldJigCyBfceF/1+FuYyB4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKmDum0z0Dsp+9JqitF2Hx3NM4fMB8GA1UdIwQY
MBaAFEcF08alsFEmgs3982OxmpxWfx9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUndYVHhxV3dVU2FDemYzelk3R2FuRlpfSDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81NmFlZTktOTk2Yy00MzhmLWJiMDAt
MGRmYTZiMjJlZmYyLzEvUndYVHhxV3dVU2FDemYzelk3R2FuRlpfSDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81NmFlZTktOTk2Yy00MzhmLWJiMDAtMGRmYTZiMjJlZmYy
LzEvUndYVHhxV3dVU2FDemYzelk3R2FuRlpfSDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtPU5T9d
2ykmfsDkJEYWlrX7CrTp+a95gzAe2ilUJVhy2VyEzo8xa8jnSgmcCeryW9UF+nIU
eSsEI+/SD2B2cylfPy4xS5CUHlAX0wsGV1Nr4YMYSVg1wQBOkhAGTbU4aSv+v9M9
K3znMYKeWpqmQQxgQ0zSMRrbNctUWdKZ6HrT1EhI2v8nT0vbFNk855Ezhv2iopLh
rngASYjTR34xLmYJkqgIP/5HWlJmCnA22EA/RkbTHxyyyOnmBYQhYpz4toJ38yKw
wviy2TzwEsjrgCjXfBgib7wRsFn6xzA8ltkutAeTlELsn1MqL/SiYT21aUz8C0f2
4yAA/YkqPL6HIg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:58 2025 by rpki-client