Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: ofCGDJdvj/pgBB4pI1eReYgnzKs6WE/WJl5Czf3jtfQ=
Subject key identifier: A1:70:DC:99:55:4E:8A:97:93:D3:82:11:D4:C8:19:7F:05:87:DD:86
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 019A4DE1B6E23525A5D472F8CA7C2EFFA55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 120C
Signing time: Tue 04 Nov 2025 08:00:29 +0000
Manifest this update: Tue 04 Nov 2025 08:00:29 +0000
Manifest next update: Wed 05 Nov 2025 08:00:29 +0000
Files and hashes: 1: FSst80BStcOZoxcVEEn7HUNlaMg.roa (hash: MkzJ0Sac3ZN5iWdcIOjWwvYuR5zj6qypIoySO/md3YQ=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: WD2H1QyVGRIEsveq5ySIHUDNJI/jmqfpbTYM02Gw/xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b6:e2:35:25:a5:d4:72:f8:ca:7c:2e:ff:a5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Nov 4 08:00:29 2025 GMT
Not After : Nov 5 08:00:29 2025 GMT
Subject: CN=a170dc99554e8a9793d38211d4c8197f0587dd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:93:22:77:f0:ce:c9:79:cb:96:f5:70:d1:
a6:92:a9:7e:bf:1f:44:e0:34:df:f5:a4:89:eb:4f:
57:fe:ad:75:bb:54:b8:68:e0:52:2e:63:21:63:ee:
1e:02:7d:24:83:ce:62:f3:33:df:ea:04:6b:20:fb:
f8:b9:37:53:52:b6:81:50:ba:31:18:5a:73:d6:15:
00:9e:44:3f:98:f5:7a:8a:15:3c:8d:6f:d0:2e:bb:
9d:c9:bd:c9:69:82:2c:78:f7:34:c8:9a:fb:5c:f8:
b2:7d:bd:d4:8b:14:7d:19:f1:4f:87:90:1e:8e:5d:
e8:5c:43:96:9e:81:50:a8:a3:30:a6:48:4f:78:92:
36:d2:ac:fd:f5:f2:76:e6:b7:38:68:e6:5a:35:82:
46:03:c4:ac:21:94:f5:34:84:ff:97:8b:bb:27:53:
9d:a8:28:c1:a5:10:71:28:4f:e7:3b:d3:57:ba:bb:
b1:72:31:fc:50:73:cd:c3:04:b1:6c:1f:d7:d5:2c:
50:57:32:c6:37:b7:c4:3e:49:d2:d7:44:96:ee:15:
a9:d1:c1:ba:0c:9f:6a:e8:41:34:8b:32:15:e9:dc:
0a:f3:fa:ed:ed:5f:1b:ff:ae:f7:9c:a8:9a:d0:c7:
4d:84:48:d6:ba:49:8b:66:64:67:75:78:97:c8:0f:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:70:DC:99:55:4E:8A:97:93:D3:82:11:D4:C8:19:7F:05:87:DD:86
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4b:02:73:ec:2b:55:08:ac:c2:a3:90:0e:1c:7f:73:b5:1c:
0c:55:64:4d:56:80:52:4c:c0:00:df:d9:d7:f2:28:68:40:2c:
61:c6:1c:76:43:60:2c:3e:2f:54:6d:2b:18:df:cf:f7:06:3f:
61:cd:f9:f0:90:90:c0:25:f4:d8:a3:39:77:66:c7:4c:45:c1:
50:b9:6b:82:5d:55:20:bb:ab:3b:46:42:62:b7:a1:59:4c:62:
aa:fb:3c:56:53:f1:1a:82:0e:f0:01:cb:c6:b8:f6:77:d8:1f:
ab:bb:68:ec:d0:cc:fd:34:35:8a:4a:5d:a3:3b:69:09:61:39:
db:3e:e3:ad:0b:fa:ba:72:c3:c5:bb:65:9f:6b:77:51:86:60:
95:89:64:e1:6a:ce:14:8c:17:21:0f:95:46:5e:c1:b4:cf:28:
f2:e2:f3:28:fa:63:55:17:c8:0a:fd:cc:49:96:8f:00:43:9f:
0c:53:80:3e:7b:ae:f5:02:a1:3c:d7:a6:5b:13:d4:53:07:89:
9b:70:78:4a:0e:6e:85:f2:b9:8f:75:93:05:c3:07:0c:3e:70:
2c:ea:c6:18:bc:9e:17:ad:a3:80:22:e2:d5:4c:f2:ac:cd:13:
8a:a7:0e:40:12:54:69:bc:b4:f8:e5:73:e6:e4:d4:d7:26:cb:
35:34:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:52 2025 by rpki-client