Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: 1arPGwtbcGp4W4CgGg4UocfShtLbp+mOd7eGlg1EhqA=
Subject key identifier: 18:6D:FF:57:07:B1:7D:5C:87:57:5D:B7:11:98:04:B3:CA:8A:6D:BA
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 019A4EF58654926BCC53A405C848C0160E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:44 +0000
Manifest this update: Tue 04 Nov 2025 13:01:44 +0000
Manifest next update: Wed 05 Nov 2025 13:01:44 +0000
Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: nvp691BnfOFR8lTlGV92OSEdmHs4OSnC1uh+akD1kM8=)
3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:86:54:92:6b:cc:53:a4:05:c8:48:c0:16:0e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Nov 4 13:01:44 2025 GMT
Not After : Nov 5 13:01:44 2025 GMT
Subject: CN=186dff5707b17d5c87575db7119804b3ca8a6dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:fe:68:74:ff:12:ce:d5:32:17:48:e0:06:
ba:93:74:8d:6f:a4:fd:39:c5:15:9b:96:d7:cb:00:
89:f1:49:cb:94:73:de:b1:6e:02:64:ed:e2:ce:a9:
cd:00:33:5b:15:27:19:8d:39:1f:fa:da:9f:4c:b3:
78:cb:f9:61:db:d8:d8:26:3c:ef:38:f1:37:01:8b:
83:4a:f2:16:72:18:e0:0b:78:ec:a4:61:1d:81:12:
50:e0:97:f4:ae:6c:bf:44:1d:47:dd:fe:5c:28:20:
cd:cc:cc:29:d5:5f:3f:f8:47:3c:1c:63:86:2a:33:
ae:40:74:b9:88:5a:a8:a9:2c:15:40:d4:11:ae:8d:
42:66:08:d9:c2:02:d5:b9:9f:3b:0b:db:44:7b:31:
09:25:31:62:26:79:f2:25:16:5c:c7:10:4d:7d:f8:
da:9c:d7:34:13:31:09:67:3c:99:f1:c1:df:7e:98:
05:c7:1a:9d:ea:67:40:3f:2d:8e:8d:af:9f:27:98:
17:69:13:7c:c9:10:5a:60:60:4c:e5:50:9e:59:6b:
aa:4b:bc:9e:ce:f4:42:41:17:c5:8e:03:f2:42:a7:
02:8b:fa:97:d6:a5:5a:95:af:c3:6e:78:2f:d9:6f:
9f:ac:b9:fa:5f:d8:cd:c8:d6:42:f4:91:7f:81:0a:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6D:FF:57:07:B1:7D:5C:87:57:5D:B7:11:98:04:B3:CA:8A:6D:BA
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c5:14:5d:ff:20:f5:8b:36:90:0e:04:ed:c9:c6:cc:30:5e:
28:f1:c1:54:77:73:38:51:b3:1e:a6:0a:73:67:52:65:dd:69:
ce:9e:b6:f0:50:13:ea:a0:e8:32:e9:fb:9f:dc:39:ee:57:0b:
0d:eb:45:9a:d9:b8:00:d3:b1:83:98:3b:23:8f:f1:54:ca:31:
42:83:d8:4d:4f:dd:8c:fb:c1:8e:b1:fc:c6:62:29:98:2f:f4:
8e:ad:64:7d:0e:3f:2e:55:e2:ef:8e:25:ec:0e:58:65:19:ab:
cf:04:99:81:f8:83:fa:12:bb:16:41:e9:9a:f6:58:91:f5:fe:
5e:77:c9:1a:5f:30:b5:0d:5a:d2:91:af:af:96:16:bc:34:0f:
c5:a3:34:c2:19:53:c6:54:35:b2:39:ed:66:b1:b5:ba:9e:25:
4a:82:16:f9:4e:cb:23:25:0d:ce:72:f4:53:6e:9d:d6:9e:db:
6e:44:b8:84:8a:2c:4c:8b:16:f6:53:ef:16:13:b1:5a:33:ae:
b3:cc:c8:e8:33:66:2f:d5:8a:ff:1e:81:a7:d3:9e:90:88:49:
10:d9:10:9e:37:4e:fc:43:4e:11:27:a9:c2:cc:30:f6:0d:1d:
08:6c:c4:de:8f:c6:43:8f:d1:b6:50:20:f6:a4:f3:98:43:7c:
d4:a7:7f:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9YZUkmvMU6QFyEjAFg5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYmQyNmZlMjI5NWU0NjJiZTI2Nzg1MzNlZmE1MzFlMjNi
N2YxMDIwHhcNMjUxMTA0MTMwMTQ0WhcNMjUxMTA1MTMwMTQ0WjAzMTEwLwYDVQQD
EygxODZkZmY1NzA3YjE3ZDVjODc1NzVkYjcxMTk4MDRiM2NhOGE2ZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhr+aHT/Es7VMhdI4Aa6k3SNb6T9
OcUVm5bXywCJ8UnLlHPesW4CZO3izqnNADNbFScZjTkf+tqfTLN4y/lh29jYJjzv
OPE3AYuDSvIWchjgC3jspGEdgRJQ4Jf0rmy/RB1H3f5cKCDNzMwp1V8/+Ec8HGOG
KjOuQHS5iFqoqSwVQNQRro1CZgjZwgLVuZ87C9tEezEJJTFiJnnyJRZcxxBNffja
nNc0EzEJZzyZ8cHffpgFxxqd6mdAPy2Oja+fJ5gXaRN8yRBaYGBM5VCeWWuqS7ye
zvRCQRfFjgPyQqcCi/qX1qVala/Dbngv2W+frLn6X9jNyNZC9JF/gQr7dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBht/1cHsX1ch1ddtxGYBLPKim26MB8GA1UdIwQY
MBaAFMO9Jv4ileRiviZ4Uz76Ux4jt/ECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgt
OGJkOTc2OTEwZGJmLzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgtOGJkOTc2OTEwZGJm
LzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8UUXf8g
9Ys2kA4E7cnGzDBeKPHBVHdzOFGzHqYKc2dSZd1pzp628FAT6qDoMun7n9w57lcL
DetFmtm4ANOxg5g7I4/xVMoxQoPYTU/djPvBjrH8xmIpmC/0jq1kfQ4/LlXi744l
7A5YZRmrzwSZgfiD+hK7FkHpmvZYkfX+XnfJGl8wtQ1a0pGvr5YWvDQPxaM0whlT
xlQ1sjntZrG1up4lSoIW+U7LIyUNznL0U26d1p7bbkS4hIosTIsW9lPvFhOxWjOu
s8zI6DNmL9WK/x6Bp9OekIhJENkQnjdO/ENOESepwsww9g0dCGzE3o/GQ4/RtlAg
9qTzmEN81Kd/6g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:24 2025 by rpki-client