Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
File: w-twdDgV_kRclYo8URfvJ1PTD34.mft (raw, json)
Hash identifier: 7UsUi/z/FnQE6vYXYGIx+jf26vSj7cijMgCHrEsXEGk=
Subject key identifier: 8C:29:DF:F1:B3:E4:B1:36:CF:D9:F8:C6:76:D7:69:DD:37:BD:F2:69
Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Certificate serial: 019A4D3CD7A4CCDFD3CB6EFCF51CC7FF4DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:24 +0000
Manifest this update: Tue 04 Nov 2025 05:00:24 +0000
Manifest next update: Wed 05 Nov 2025 05:00:24 +0000
Files and hashes: 1: GzCIBu4tHiFH76_Ly9Ei_0SMBpg.roa (hash: ucUps3PWBgmn642QIizMtNVpME3QV9nJ//n0R1ijDxA=)
2: w-twdDgV_kRclYo8URfvJ1PTD34.crl (hash: zuAOGcU8B3WCENKPPopB0ryc7bHM6W94EfGG6GVjo14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d7:a4:cc:df:d3:cb:6e:fc:f5:1c:c7:ff:4d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Validity
Not Before: Nov 4 05:00:24 2025 GMT
Not After : Nov 5 05:00:24 2025 GMT
Subject: CN=8c29dff1b3e4b136cfd9f8c676d769dd37bdf269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:38:14:15:e1:f4:d5:4f:e2:af:11:1b:f5:
4e:53:59:19:40:b6:38:cf:96:1a:bc:b2:1e:70:61:
b4:ad:07:c5:eb:3a:51:d7:53:dd:81:34:2b:cf:6c:
6c:2c:78:81:bf:c3:c0:d1:96:fc:09:df:cb:21:d0:
14:44:2e:c4:76:50:2b:a6:47:7f:7f:d7:02:5d:0d:
95:0d:8d:16:db:bf:29:c7:37:63:44:22:cf:e0:5b:
a6:3a:a5:0a:e5:d4:48:ac:3e:1d:ef:bb:49:02:5e:
bc:18:b6:e2:11:3f:38:a3:14:34:a8:7e:f8:fc:f7:
a6:73:d8:dd:ee:1e:21:10:25:85:23:e6:04:41:e6:
5e:a7:ba:00:e8:7b:18:64:82:fa:f6:da:0d:d6:34:
cd:77:65:be:a3:dd:11:a4:79:93:3e:fb:b8:a2:b7:
1d:2f:4c:94:f0:ff:32:46:f5:b4:0a:15:fd:7c:32:
e2:02:91:1a:b9:52:43:83:2a:e2:c1:79:7e:74:c3:
68:62:c2:2a:ae:07:06:42:37:e6:b4:c2:16:85:5e:
2d:c4:2e:b6:8d:ba:5d:ad:6d:48:ff:e1:28:7a:73:
9b:aa:6b:64:5e:84:80:82:c5:cf:99:43:a6:a8:e4:
cd:70:15:1d:cd:2b:6b:aa:87:80:18:c1:2c:25:86:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:29:DF:F1:B3:E4:B1:36:CF:D9:F8:C6:76:D7:69:DD:37:BD:F2:69
X509v3 Authority Key Identifier:
keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:08:33:5c:27:12:7b:df:4d:17:ed:a0:91:b9:d0:72:08:49:
cd:5d:20:52:56:b6:a4:7d:aa:4d:d2:48:64:f1:f0:1f:b5:d3:
74:2f:7a:d8:ed:53:b8:79:35:6b:7e:00:84:b4:d2:79:d0:7d:
ca:e4:43:70:51:2f:d5:00:93:4c:83:ac:54:d0:be:ec:86:f8:
b5:3a:b8:5e:53:8c:0c:cb:dd:a1:dd:4a:3a:8f:6a:11:34:11:
09:59:62:90:f1:42:47:32:14:c4:90:c8:7a:86:b5:54:ff:1e:
db:70:55:21:77:ae:4a:7b:ef:6b:65:3b:b3:74:97:25:c2:9c:
7e:f1:0b:a1:ac:06:64:83:6c:de:99:c3:d9:46:ff:29:5a:8f:
8e:57:db:9d:66:ab:24:2a:a3:6e:cf:4a:30:8a:df:c5:3b:17:
cb:b9:af:bf:cb:52:dc:6f:c1:44:75:a4:25:9a:ef:6e:bb:f7:
ec:db:36:86:b9:cb:ab:87:65:b7:5f:2a:70:97:fd:0f:d9:12:
ea:2e:14:e6:4e:0b:5f:bb:9b:1f:04:31:b2:ce:46:02:4d:b5:
f6:5a:ba:11:27:30:54:44:e2:de:5e:12:b1:78:6b:46:53:d5:
48:9d:97:22:92:0c:a7:75:7f:9a:99:1c:49:f4:f2:66:4e:b1:
6d:a5:49:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:37 2025 by rpki-client