Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
File: w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json)
Hash identifier: cxBxtDBVALBH0wHiSVh+tSCe0EeuZXVwMKO30vTp2h0=
Subject key identifier: 5B:F6:58:C5:36:24:EB:6A:0A:63:83:AD:57:BF:F0:24:5A:ED:F6:A6
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Certificate issuer: /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial: 019A4D3D0259CC586AF4B01C3F66EAE82BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
Manifest number: 0BBA
Signing time: Tue 04 Nov 2025 05:00:35 +0000
Manifest this update: Tue 04 Nov 2025 05:00:35 +0000
Manifest next update: Wed 05 Nov 2025 05:00:35 +0000
Files and hashes: 1: MSS8bajhBaU5VhOzrfA52HmDj84.roa (hash: YEJDRIIvwqwjWO6NfGeQmsZ7v3rXxoUkegHU1CblIHc=)
2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: WmGGeSBRniMDzev+cz2ZUZJD8hrVOMi4TOU/WetdGds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:02:59:cc:58:6a:f4:b0:1c:3f:66:ea:e8:2b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Validity
Not Before: Nov 4 05:00:35 2025 GMT
Not After : Nov 5 05:00:35 2025 GMT
Subject: CN=5bf658c53624eb6a0a6383ad57bff0245aedf6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:57:ed:37:95:de:16:75:54:8a:3b:a9:8a:
b1:77:c1:aa:4c:02:d4:29:b0:f3:d9:e0:5c:fe:24:
00:a3:19:45:41:e5:0e:10:51:66:e3:e4:2b:ca:9e:
29:bd:16:0d:e3:4e:6a:10:15:fc:64:5a:75:1e:ca:
f7:57:7f:8d:a4:6c:ce:f7:94:58:89:b8:c6:8a:96:
fa:e3:b2:96:50:f2:c6:2e:73:c5:02:62:e2:73:08:
64:74:ae:28:7e:8b:0d:0f:df:8e:f2:14:c6:d2:91:
b2:df:c1:06:ac:d2:4c:8f:ea:50:8a:f0:e2:f6:ca:
aa:0c:6a:e4:f4:e5:c7:9a:65:b4:bf:9f:67:70:0e:
87:da:83:c9:70:b8:3b:39:cc:71:38:12:31:29:f2:
66:07:0b:82:ae:84:da:9b:a5:35:69:68:cf:c7:8d:
37:1f:c1:39:b1:95:7b:12:4a:f8:1d:4c:e7:f9:d7:
a4:e8:20:e3:71:3d:3d:df:96:be:4b:fa:5a:53:e8:
32:fd:5a:24:1d:3e:a7:59:63:19:57:58:e3:cc:6e:
4b:af:41:e3:0a:2c:40:b0:06:e5:d1:d1:6b:1e:f6:
03:d0:3a:70:a8:89:5d:57:e8:29:4d:17:2a:7c:6b:
6e:78:6f:46:5c:82:12:c2:c9:fc:c2:a6:8c:57:af:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F6:58:C5:36:24:EB:6A:0A:63:83:AD:57:BF:F0:24:5A:ED:F6:A6
X509v3 Authority Key Identifier:
keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fe:85:c3:3f:ef:d9:76:38:7a:24:e3:c3:9b:ec:41:e8:96:
93:b6:57:42:48:35:54:aa:19:b5:39:4a:aa:a8:d1:75:65:4e:
7c:51:2e:48:ba:af:e5:ae:31:cb:30:7d:fb:d0:3c:46:22:e4:
65:2c:c8:2f:8e:22:f9:1d:8b:0b:cf:2a:57:77:a2:75:27:b7:
f2:39:3f:2b:db:09:84:ef:e5:5f:4a:f4:64:a5:f6:53:6e:fe:
03:ea:be:df:cf:0f:71:30:e9:ed:98:5b:18:66:6c:02:27:d2:
93:2e:ac:cd:21:39:1a:8a:8f:21:fe:13:80:39:df:3c:cf:7f:
76:3d:e7:5e:3f:e8:04:bf:13:f0:01:97:86:ea:29:42:d5:0c:
60:cd:91:fb:2f:35:4d:9f:5b:34:69:27:71:b8:88:d5:4d:ff:
08:40:06:ce:9c:93:e6:34:11:20:3e:cb:4b:0e:ad:17:f5:4a:
ee:9c:31:40:0e:86:82:eb:d6:0d:2a:49:9d:d4:79:b3:b9:ed:
10:63:b8:8e:3c:02:81:5c:a1:84:c1:a4:08:40:17:27:88:da:
e1:b4:00:44:e2:40:78:f1:4f:a8:f1:08:1e:86:80:31:5b:91:
ec:d0:f4:05:31:0f:9a:08:b2:fb:3a:1f:02:a7:13:7b:2e:6e:
03:eb:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:34 2025 by rpki-client