Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier: SC8kb1g64IV4rMw6TWuz7xYADzjtgAybZIk8HrQjvH0=
Subject key identifier: 12:2A:0D:8D:1A:6E:DB:65:5B:82:85:EF:B2:EC:D4:A4:C5:33:70:8F
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial: 019A4C613858915CBBCFAD688B9376A462CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 01:00:31 +0000
Manifest this update: Tue 04 Nov 2025 01:00:31 +0000
Manifest next update: Wed 05 Nov 2025 01:00:31 +0000
Files and hashes: 1: VI7MbqfUntVnN_kMd5I5Qw5bl-4.roa (hash: yObUZYg1Kq2iUCPpFKIeS8ZVs5ZMohWqBvzb45a6JFM=)
2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: nCvKsTlWMtD9p1TtZ+LNsQQKhHyvFZQF28JsKt+W8v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:38:58:91:5c:bb:cf:ad:68:8b:93:76:a4:62:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Validity
Not Before: Nov 4 01:00:31 2025 GMT
Not After : Nov 5 01:00:31 2025 GMT
Subject: CN=122a0d8d1a6edb655b8285efb2ecd4a4c533708f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:f4:bd:e9:dd:b5:60:79:8d:f1:bb:75:33:
e0:ed:f3:e7:9f:c3:cb:7d:31:f4:8e:fd:58:6a:b8:
69:5b:0d:13:fc:04:55:29:6a:03:78:19:32:f5:b4:
6d:6f:87:ae:15:08:ae:d1:25:a7:ec:8c:5d:ef:5c:
7d:85:7f:85:1b:9c:9a:c5:52:b7:cd:5f:ef:c9:d4:
43:e2:e7:06:1a:30:68:37:b8:26:30:61:f1:98:79:
b1:2e:ce:66:65:eb:bb:8b:4a:4f:87:f3:18:73:46:
17:9b:2c:c2:d6:99:15:9d:81:5b:a6:96:28:55:c8:
f5:25:35:5c:f0:17:1b:17:1a:8a:d2:cf:5b:8b:27:
eb:95:64:f0:81:22:96:1e:b6:34:ad:41:a3:18:7e:
8f:02:c1:25:1d:43:1c:1a:b0:28:bf:4f:ca:d0:80:
6e:43:dd:51:15:c8:04:66:d5:ae:3f:15:52:34:d0:
95:67:c6:d2:ab:bb:a6:31:18:77:5e:94:5e:a2:8e:
ba:db:a3:2b:b7:f1:4d:64:a2:d1:28:4f:83:50:68:
a0:16:fe:f7:d0:bb:2c:cc:d5:f2:68:f0:cc:6a:4c:
1d:5e:c7:d6:56:35:59:fe:c9:8d:bf:b0:f6:e3:ba:
8c:04:22:b6:09:41:ee:d7:26:e7:63:6b:2d:99:51:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:0D:8D:1A:6E:DB:65:5B:82:85:EF:B2:EC:D4:A4:C5:33:70:8F
X509v3 Authority Key Identifier:
keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dc:b8:90:42:ee:ef:e1:8a:3b:16:98:fa:04:49:8c:30:ff:
a3:86:87:ce:20:0d:69:59:6f:f1:45:ed:5c:b0:91:f5:06:c2:
e0:cd:ed:40:b0:cf:89:6e:6c:66:6f:80:af:8a:da:57:e6:c1:
59:3f:2b:16:9c:8b:45:24:f9:cf:63:92:4d:90:e4:36:c8:9c:
37:2e:2f:04:bb:ba:f4:38:f5:f6:dd:c2:f8:2e:d0:6b:3b:9a:
ed:6d:06:52:af:fe:f2:5f:b1:83:f1:aa:7e:a5:9c:d3:5c:ae:
13:c6:c4:0d:62:d4:cc:8b:95:7f:3e:f8:0f:88:47:16:fc:00:
c9:67:68:7b:bb:aa:3c:09:49:95:5b:3e:8b:5a:d8:2b:83:c1:
33:2e:79:0e:0f:e6:f1:b7:1a:d3:ab:0c:a3:7b:32:7e:2b:bf:
45:f5:fd:1a:3c:cc:7a:25:21:27:e0:a1:96:1b:92:0a:96:07:
8b:35:94:ac:ab:45:c5:b7:35:d8:3e:6d:c6:ca:39:d0:6c:db:
90:a2:3f:ae:3f:72:d1:10:79:03:a8:df:7d:72:09:c3:c5:1a:
8e:38:fd:93:44:95:32:78:2a:70:06:51:e6:4a:53:b2:1c:db:
ad:59:e6:79:ce:94:84:94:b6:2c:c4:d3:c6:49:a0:d8:c0:07:
d0:c9:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:13 2025 by rpki-client