Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: zAbYtB9CM7+0ohqxuvruBfaGS0kdwGoeVEvUj8qCrVc=
Subject key identifier: A4:F9:BD:96:3F:EE:40:99:C7:32:8B:D8:52:77:0E:0F:59:C9:A7:A7
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 019A4DE1CC3AFA6AAD07A225421CE97922ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 08:00:34 +0000
Manifest this update: Tue 04 Nov 2025 08:00:34 +0000
Manifest next update: Wed 05 Nov 2025 08:00:34 +0000
Files and hashes: 1: Uly4hJm4n0CW_m9VG7FdyUYLXQ0.roa (hash: W7kTTFRMLEf4OA7s2XNv00hUyVmO5iV/FwUiWEf3g0U=)
2: WsuxGAiaGf_A6Y2lC2J6NUEltcs.roa (hash: xwq4xmwvcXSf9rjrw/uyv+kqTXqSwacSqKQKgPJXLGc=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: EJvTO3+7aYfmTpPhYYCGelSnY1DbFQ7PCkmOwN2/MT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:cc:3a:fa:6a:ad:07:a2:25:42:1c:e9:79:22:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Nov 4 08:00:34 2025 GMT
Not After : Nov 5 08:00:34 2025 GMT
Subject: CN=a4f9bd963fee4099c7328bd852770e0f59c9a7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:4d:17:54:2e:81:08:32:c0:16:03:c5:b9:
e9:52:95:f3:ec:c6:83:8f:4c:2c:55:ec:7f:14:4f:
53:8e:df:00:d9:2a:23:83:e0:83:ff:d7:b9:e1:24:
dd:18:17:c0:49:31:4e:23:bf:19:1d:04:6f:a6:f7:
fd:eb:74:d2:c6:24:61:a0:53:89:e9:a5:58:5d:d7:
9d:24:8e:dc:4a:f1:b0:d2:86:6d:e9:62:de:02:4f:
33:08:e9:71:d7:8c:b9:4d:10:3d:04:99:cb:24:f4:
63:90:a8:40:cd:01:2e:f8:3b:f7:13:54:c9:da:ba:
54:28:90:4d:db:af:da:d9:32:26:cb:51:bd:b7:93:
af:53:6b:9b:09:5b:d0:41:c0:f2:4c:81:34:0c:d8:
ab:60:fd:0e:02:63:c6:4e:3f:00:1e:2a:fa:96:4a:
90:3f:e7:5a:e0:37:9b:f1:41:6b:49:f4:ff:c9:33:
0a:d1:2e:4f:6d:fa:f2:b1:b8:39:3b:ea:ca:83:69:
d6:4d:d7:48:ad:38:31:ae:d7:d2:e9:72:a7:2d:54:
3b:28:2e:93:32:28:64:74:41:0a:7f:2b:1c:c5:56:
7f:b3:4d:57:75:12:d0:1d:61:b5:04:56:7c:8c:c1:
0b:70:40:9d:c9:35:43:52:82:97:3d:ea:33:9f:e0:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F9:BD:96:3F:EE:40:99:C7:32:8B:D8:52:77:0E:0F:59:C9:A7:A7
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:61:54:37:8f:b4:fb:13:b0:74:be:d2:8a:91:ed:4d:22:df:
ac:93:c6:05:06:99:7b:89:e8:35:1d:dc:41:de:ca:b2:25:80:
11:f8:72:05:89:87:b8:5b:51:14:c3:86:2e:cf:f9:e7:60:af:
2d:70:1c:07:00:81:c1:ca:92:a9:cc:fc:8f:59:fe:af:01:53:
73:53:32:df:0d:61:f6:06:ed:36:db:dc:4e:7f:6c:3a:04:32:
60:1b:c5:5b:bb:f0:56:8b:88:c3:d9:76:ad:63:d4:40:7a:76:
2e:90:2a:35:16:9e:e6:6b:7d:94:69:e8:2e:3e:9d:bd:da:14:
df:25:fa:ad:e6:c9:06:28:6c:91:8a:41:ea:17:1d:28:bc:f4:
4c:64:6c:d4:3e:7e:3d:fd:e4:fc:ae:af:b3:d0:d6:e5:c4:1a:
29:6a:3a:77:1b:60:bd:be:98:d2:92:98:b1:25:07:b5:dc:a8:
4a:d2:69:38:ff:23:52:0b:14:3d:97:e1:86:26:67:61:0f:e3:
57:c8:ff:ec:3c:e2:53:38:3d:4c:4f:3f:8b:9f:d3:4a:28:fd:
1d:8b:8c:9e:ad:7e:9e:18:95:15:83:99:5e:55:f4:a1:12:34:
d0:d0:2c:f4:72:a3:4b:23:bd:55:d5:76:7c:da:99:63:49:58:
50:69:21:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:16 2025 by rpki-client