Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
File: rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json)
Hash identifier: 28HIkn9kycozzbwRpoaXQjtU0nJmC1zg7+jU8bSTVOk=
Subject key identifier: 8E:B6:15:AC:9C:6C:5C:CD:DB:0A:3C:CE:54:24:24:10:71:B6:AB:C6
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial: 019A4EF48D6CC357412B7212E7A4C6312F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
Manifest number: 0F08
Signing time: Tue 04 Nov 2025 13:00:41 +0000
Manifest this update: Tue 04 Nov 2025 13:00:41 +0000
Manifest next update: Wed 05 Nov 2025 13:00:41 +0000
Files and hashes: 1: KVHIamZJVn2A53v0da8_IQ5hmAc.roa (hash: MHiTghXPbp0Yn7XA7tDf2bHlQcgsEoD122bH+wIZHLg=)
2: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: gQajEpnVGlT2ROM/sNPvVXp2dV+k/TC6XHom/Rd5NGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:8d:6c:c3:57:41:2b:72:12:e7:a4:c6:31:2f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Validity
Not Before: Nov 4 13:00:41 2025 GMT
Not After : Nov 5 13:00:41 2025 GMT
Subject: CN=8eb615ac9c6c5ccddb0a3cce5424241071b6abc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:f8:ba:fb:d0:10:f1:14:d4:31:11:ba:a0:
39:40:64:d4:03:14:75:e5:8a:00:a2:7f:47:89:e4:
00:71:50:66:78:d7:cb:4c:16:49:64:24:01:92:d7:
67:2d:56:ce:39:1a:37:15:74:04:ab:98:49:33:96:
f1:a6:56:1f:68:b4:b5:9b:f6:c4:a9:62:16:36:b6:
be:94:35:d7:65:e1:4e:d5:d4:a2:81:b4:4c:77:35:
6f:51:88:e3:64:35:fb:64:bc:ab:b5:15:98:93:5b:
3c:00:f9:cc:75:ad:f9:e6:5b:ac:7c:b5:d2:f1:d2:
44:8d:96:2d:02:83:d3:a9:c6:8b:80:c9:4e:f6:b1:
f8:cb:bf:2d:40:16:d3:f7:8a:2f:b7:c1:41:4c:86:
af:42:46:56:5a:81:6c:d9:30:98:76:98:9c:83:64:
88:54:e3:d0:30:fa:57:2d:9a:18:ad:ad:0d:b5:59:
9a:79:7f:2e:25:f9:b1:18:b1:9d:a8:bd:0f:bc:bd:
b9:de:1c:bb:a9:2d:b8:83:4c:dc:65:8a:cc:5a:3c:
22:4f:ef:86:c3:92:eb:f0:6e:41:9e:c3:79:37:55:
02:84:17:6d:32:db:8b:85:8b:d1:9b:b1:57:d0:9c:
44:89:44:28:3f:15:74:45:d1:1b:30:c4:c7:e1:56:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B6:15:AC:9C:6C:5C:CD:DB:0A:3C:CE:54:24:24:10:71:B6:AB:C6
X509v3 Authority Key Identifier:
keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d4:d6:08:fd:f0:6a:06:95:f3:32:4c:81:b2:6c:9f:9d:da:
db:c4:35:43:96:93:df:04:2c:8d:86:f4:94:86:72:51:73:80:
88:23:c1:0c:13:a4:b7:e9:db:0f:29:df:ff:18:90:83:c3:a0:
a0:6a:c9:1d:3c:e4:57:df:4c:63:78:ae:ee:ed:24:89:61:94:
b4:c8:40:85:fb:0d:7b:ff:b6:55:51:da:46:4d:05:ae:03:23:
47:cb:f2:a4:13:1a:2c:d7:e2:5a:65:fa:e8:8e:43:51:bd:5c:
ac:3b:98:98:26:2e:e9:c2:d9:23:27:b4:91:09:b5:9c:af:84:
53:d6:33:bb:0e:03:e3:17:90:b4:6c:ce:0d:07:8c:4a:b8:77:
44:4a:96:b0:72:21:ae:c8:8d:bb:b2:0e:3f:2e:47:e9:32:1e:
25:0d:d9:ca:f1:41:7c:a3:b9:fb:6f:d3:a5:cc:73:00:bf:d5:
30:37:94:3e:c8:37:58:6b:d9:95:8e:6d:80:27:0d:4b:72:f4:
1c:3a:ba:5f:c7:01:33:9c:3c:16:a2:e9:be:14:4e:ce:db:c0:
cc:1a:35:48:3c:ab:d7:8e:76:13:a5:10:3b:ea:8d:39:60:a6:
44:e2:b2:d4:d3:05:26:43:e2:f2:e7:71:28:1f:26:d1:90:2a:
07:c9:43:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:58 2025 by rpki-client