Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
File: w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft (raw, json)
Hash identifier: TzrmCJA+6EoYsEydS12M7TNh5/1ha+NBQRaHCRs4Cgo=
Subject key identifier: 23:A0:52:34:F7:D9:63:60:05:C3:73:62:17:87:D5:12:FB:BE:11:75
Authority key identifier: C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35
Certificate issuer: /CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
Certificate serial: 019A4E4F33E4D4F7C535A13D6021B98C3667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
Manifest number: 0C78
Signing time: Tue 04 Nov 2025 10:00:04 +0000
Manifest this update: Tue 04 Nov 2025 10:00:04 +0000
Manifest next update: Wed 05 Nov 2025 10:00:04 +0000
Files and hashes: 1: ZZxnLfkQZZe868Ymmh1h6vi9FK4.roa (hash: FUPgIKTRbD3IVqEoytl9TWolLWbbwFaaKQfjRWOMZxY=)
2: w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl (hash: 5FMeqaMwLzmu8soqiEBjTm+OaFBfnSmQkI+JAVQ+rR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:33:e4:d4:f7:c5:35:a1:3d:60:21:b9:8c:36:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
Validity
Not Before: Nov 4 10:00:04 2025 GMT
Not After : Nov 5 10:00:04 2025 GMT
Subject: CN=23a05234f7d9636005c373621787d512fbbe1175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:17:39:3a:f8:46:e6:ec:bb:f8:30:e0:52:75:
ff:f8:94:8f:19:a7:7f:fe:0b:66:6d:48:46:19:b0:
27:5b:57:d9:bc:53:dc:ed:0b:bd:d9:7c:7d:65:16:
b3:ab:b0:56:1c:1d:6c:ef:c2:1c:dd:7d:83:f7:e7:
98:78:b9:27:d6:90:a8:95:8a:4d:fb:96:b1:8a:22:
d3:3e:fb:b0:90:de:11:7f:e5:d8:64:2f:df:27:d6:
59:93:b9:d2:14:8e:fd:a7:6c:6b:48:12:f6:5f:3e:
3d:f4:91:75:a4:1b:b9:13:1e:9e:45:14:63:46:86:
35:10:a7:c3:a4:38:99:31:83:3c:f2:29:6c:de:b9:
02:1b:fe:4f:68:5a:43:6b:97:f5:ad:c6:5f:96:32:
85:4d:27:04:50:e0:de:32:25:eb:1d:f6:e2:26:ae:
69:d4:af:db:42:f9:d9:89:06:67:10:3c:f5:d9:bd:
55:7b:9b:7a:76:05:3f:03:ec:2f:07:2d:2e:b8:7c:
f9:35:c7:98:26:6c:b5:8e:4c:0d:ca:35:4a:48:c5:
5e:c9:24:4d:1f:69:c3:8e:05:ae:3b:70:e9:b1:30:
a8:64:70:5f:4b:af:77:90:7b:12:77:75:7f:8b:d0:
a5:90:8d:de:62:e9:a1:f2:a5:17:34:ce:af:85:0e:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A0:52:34:F7:D9:63:60:05:C3:73:62:17:87:D5:12:FB:BE:11:75
X509v3 Authority Key Identifier:
keyid:C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1a:8d:c6:17:3a:3e:04:25:aa:9b:6b:64:1f:9e:23:b4:b1:
50:e9:e2:a3:77:96:e0:3d:9b:5f:8e:d5:14:f1:d2:df:62:25:
da:4a:11:66:29:15:2c:2c:0a:d0:f1:7d:9d:ed:38:f2:68:af:
4b:b8:13:f7:c9:27:5b:11:00:a9:58:76:f5:59:af:e6:a9:23:
71:3b:67:60:82:f2:f9:46:5a:55:5a:c6:96:d3:3b:10:53:df:
9b:49:2b:32:75:67:f0:41:58:4f:21:68:b2:ba:15:43:aa:7c:
43:90:aa:48:d9:84:18:7f:66:bc:33:77:0e:7e:c7:87:48:bb:
19:3e:4d:b7:dc:af:c1:57:a5:be:a2:64:d5:af:f2:9b:db:45:
7a:f1:61:68:89:4f:d8:75:e5:87:c6:4d:1b:3b:d7:ca:44:30:
77:cc:ad:4a:9c:09:8c:f8:bc:31:74:f1:b3:a6:de:ea:58:ee:
be:26:7e:ec:6e:02:28:af:4c:58:fb:0c:9c:df:4c:8c:d7:4a:
67:b7:ac:73:de:70:ec:09:23:2d:87:ac:d9:2a:cd:58:67:cd:
21:d8:28:28:23:81:cf:bf:6e:cf:e9:eb:c7:86:d8:52:d3:da:
16:26:e4:8c:d9:77:ab:8d:39:99:3b:51:c2:59:11:98:bf:10:
fd:f3:0b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:22 2025 by rpki-client