Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
File: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft (raw, json)
Hash identifier: MFrgFR70Df7WBGyHoy2xGzqNo3QBnZHIH1POFEEGseo=
Subject key identifier: AF:9D:85:C0:CD:9C:DC:CA:34:AE:C1:07:85:C8:69:83:0F:51:6E:13
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Certificate issuer: /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial: 019A4FD086AF1EF107E748B4A48BD4C8695B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
Manifest number: 0572
Signing time: Tue 04 Nov 2025 17:00:57 +0000
Manifest this update: Tue 04 Nov 2025 17:00:57 +0000
Manifest next update: Wed 05 Nov 2025 17:00:57 +0000
Files and hashes: 1: BMhhovXMuBpKJMmG-rBz-nuJzd4.roa (hash: sNEztFGkvH7v3y29OhQmoouHMsRsRH9HNC026mey6ck=)
2: MK26JBdAOQHbbLIoXza8gOwP2L0.roa (hash: bfaAHwdU8g3+OMyQR1jrgL3b4O52QKIOBn86eAMWqtg=)
3: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl (hash: Hp+KPOY0emmMCP0gsAii3U40pBd2mfYXgcxOE86JV/A=)
4: XhbfPxl0mTvKXWs6aYEV15Sf1Zw.roa (hash: Y9+T7Mn/gKGvDXGyHmLcv1HeCAXW8+WFBTkhydKojcU=)
5: ktaokuPl5jOXxjmENV6Nzr3jvRE.roa (hash: QCRewanHdBrJ4jBO5+8cVb/CCKaBft0aBHc179F+ba4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:86:af:1e:f1:07:e7:48:b4:a4:8b:d4:c8:69:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
Validity
Not Before: Nov 4 17:00:57 2025 GMT
Not After : Nov 5 17:00:57 2025 GMT
Subject: CN=af9d85c0cd9cdcca34aec10785c869830f516e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:e4:ac:59:36:ff:d9:86:e9:43:51:b7:de:
48:a3:3a:5e:92:57:14:04:b1:cc:d5:7f:0e:dc:c5:
5f:ef:cd:68:78:44:2e:b8:93:16:40:6b:09:c1:f3:
88:5a:a0:a2:e0:1b:e1:27:f5:14:2b:16:ce:e4:3f:
50:0a:26:b5:28:28:4d:c4:f3:6f:89:a7:f7:28:5b:
05:e3:9f:35:0a:30:2d:22:6b:f4:07:e4:8a:a1:8b:
06:14:18:31:41:94:9d:e1:20:b8:83:11:f0:27:ee:
ba:8f:86:90:e0:67:f5:42:8a:e3:86:a1:48:f8:0a:
9a:b6:24:08:0b:a5:7e:dd:e6:7f:67:40:77:18:d4:
7f:ba:41:a3:dc:2d:cf:38:6a:16:f1:65:16:d1:79:
19:e7:8c:73:ab:20:3c:b0:ec:15:95:e4:80:ec:27:
15:5b:b2:bc:64:3c:d0:f0:e4:5f:2d:df:83:9c:59:
25:3b:2b:79:7e:7c:a4:83:65:2e:38:3e:a5:cc:cc:
43:f9:e4:64:7f:68:9b:62:a7:86:f4:f8:e7:a8:59:
e0:5f:3d:7a:e5:61:20:62:d8:b2:f8:f4:26:f8:5f:
4d:95:27:c0:21:80:b0:2b:09:b1:b7:2f:49:ab:c9:
70:9d:74:bc:59:86:65:5e:be:5c:ec:1d:a2:84:9e:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:85:C0:CD:9C:DC:CA:34:AE:C1:07:85:C8:69:83:0F:51:6E:13
X509v3 Authority Key Identifier:
keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:31:0c:a4:41:51:38:06:a6:ea:11:45:87:f9:38:69:a3:da:
8c:46:8a:33:cc:50:38:25:c7:cb:cc:a1:a4:a2:9a:7c:cb:1f:
fd:b7:ad:e0:89:d2:8a:fa:bc:71:32:67:52:db:35:1a:dc:08:
eb:08:89:c3:71:dd:bc:46:ce:bb:1f:49:ca:01:f8:59:e8:65:
5d:12:fc:c4:d0:43:bd:18:3c:85:32:83:a3:a0:92:4a:2a:6e:
57:57:0d:30:b7:58:6f:62:04:5b:bb:8b:cb:a5:6e:6a:c7:04:
ff:fc:f2:45:bd:a7:ba:7e:cb:32:e5:e6:5d:0c:3c:57:0d:f5:
a4:8a:2f:3e:a5:c4:f0:39:2b:89:d7:01:c2:05:f3:a2:f6:e4:
95:3b:98:d7:99:42:3b:58:5d:69:8c:63:70:16:c0:e7:64:de:
3d:8d:03:2a:b6:a5:d4:ee:bb:8a:3a:bb:ca:ae:e3:28:bd:26:
98:e3:76:e6:bc:68:99:77:d1:83:4d:cd:a5:09:60:44:28:df:
ac:12:27:0b:b4:5e:38:51:21:86:e6:97:15:f9:f7:e7:5c:84:
8e:80:f5:45:e4:f0:70:41:20:16:ed:27:cb:6b:ce:f8:c6:3c:
4d:3c:1e:8f:58:44:6b:23:1c:ca:f8:3a:05:c6:f1:46:d2:8a:
f3:44:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:32:00 2025 by rpki-client