Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier: gnS1MLcOcwAVYbPw2oy2Hw7ZC6VMpLiBQmaTkHvvQQQ=
Subject key identifier: 1D:36:4A:0C:30:75:4A:56:01:DF:B8:E0:43:F7:B6:46:3D:A4:10:46
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 019A4DE16012220914CC8B788D3AF3535520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:07 +0000
Manifest this update: Tue 04 Nov 2025 08:00:07 +0000
Manifest next update: Wed 05 Nov 2025 08:00:07 +0000
Files and hashes: 1: VvJo0lhVWVTAqGHGg1amh53Ljec.roa (hash: GwM4oNfSgsrgVocC2bDhcn2ZlYGWFP0EuCABmBUvrpo=)
2: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: xqJesqdnpXk66xOEa4wBLplR9sG9S95mls6dZ51irpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:60:12:22:09:14:cc:8b:78:8d:3a:f3:53:55:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: Nov 4 08:00:07 2025 GMT
Not After : Nov 5 08:00:07 2025 GMT
Subject: CN=1d364a0c30754a5601dfb8e043f7b6463da41046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:66:57:0f:8d:8d:c4:9a:9f:0f:b4:73:ae:
70:6c:9d:18:d8:b6:c0:85:fb:e1:22:00:40:e2:68:
89:a8:30:39:7a:b6:bc:56:fe:27:a4:b6:3b:0a:09:
39:21:59:5a:00:ad:11:6f:b5:88:4c:94:4b:3c:77:
2a:7a:a9:d5:f4:60:d8:b9:4e:32:85:c8:66:ce:d9:
e5:11:e9:4e:0d:29:71:26:30:39:67:c5:72:3f:10:
9e:1d:a4:27:ad:f0:ea:64:e8:99:7e:d6:7f:bb:74:
ba:bc:f4:66:9d:5b:74:da:76:ff:43:94:60:8b:32:
87:85:5c:09:1f:b3:52:09:fc:cc:bc:06:8b:b6:cb:
29:bd:02:d3:57:1c:81:8d:db:b0:89:f2:22:fe:1f:
a8:57:04:02:dd:a1:58:b1:e2:e7:3a:fc:9c:e3:ad:
94:db:c2:28:7a:05:6c:1d:71:e2:fa:02:6c:34:cf:
65:32:7e:9c:cb:89:83:0b:df:8b:5e:49:70:de:77:
0f:9b:41:49:06:8f:84:bd:df:65:9d:51:99:20:28:
bc:8f:d3:b9:9d:86:be:0d:8c:74:cc:ab:92:8c:9c:
89:70:68:b2:90:13:10:82:8a:9a:d6:a9:61:72:8c:
f9:cc:c6:b8:70:0d:5c:a0:de:46:79:1d:c7:34:b8:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:36:4A:0C:30:75:4A:56:01:DF:B8:E0:43:F7:B6:46:3D:A4:10:46
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f8:ff:3e:8a:54:db:4e:2f:6e:ec:31:4f:60:eb:01:08:ce:
38:83:f9:b9:93:bb:e8:f8:3b:87:2f:25:76:17:db:cf:b8:02:
1f:9e:30:07:fd:05:53:38:86:fe:0c:55:93:5d:f0:bc:3f:6b:
3a:81:57:29:a7:44:a7:cb:ab:ba:da:1a:9e:5d:72:41:f7:49:
df:ea:cc:ec:56:06:1b:c6:c1:10:45:2a:7d:82:63:be:17:6f:
db:3b:37:6c:82:5a:ed:0e:92:30:9c:e5:be:ea:ae:b5:01:57:
d2:64:bb:bd:3a:f4:db:27:e6:84:92:b9:ad:2e:13:d2:67:24:
de:67:ae:4c:90:a2:aa:34:c4:4b:fa:d1:e6:c0:17:84:25:f6:
ec:dd:e9:6c:61:4a:ff:a6:51:25:78:ca:9b:84:df:1e:61:12:
dc:3c:e1:ab:2d:fb:95:03:8c:6f:7e:be:1f:1b:f2:66:d5:ab:
34:ef:f4:94:1c:96:5f:c8:76:15:ca:6c:48:3e:56:b5:6e:13:
78:96:72:e8:84:ab:22:56:a4:33:bb:ac:76:34:18:84:fe:75:
b8:16:ff:60:3f:e8:ae:03:29:97:78:fe:9a:4c:0c:82:05:d9:
33:76:0a:28:a7:d0:84:11:d6:a4:a1:79:22:af:1c:14:0f:55:
3e:1f:c0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:10 2025 by rpki-client