Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
File: w7iL5VE_Guckk1Ivpml-_zNpKuA.mft (raw, json)
Hash identifier: Zb1urENS4ewOVjbzKf8h6FpiVL2kQkh1ZjChVWcgNpk=
Subject key identifier: BA:CD:A6:82:4A:4A:D4:F9:AC:29:FC:2E:C9:32:98:88:B6:02:5D:B4
Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
Certificate issuer: /CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Certificate serial: 019A4F994D070E9689E3372AEE988588DEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
Manifest number: 09AF
Signing time: Tue 04 Nov 2025 16:00:38 +0000
Manifest this update: Tue 04 Nov 2025 16:00:38 +0000
Manifest next update: Wed 05 Nov 2025 16:00:38 +0000
Files and hashes: 1: NrQlovA-ENvWm52W_XszKtgFuEM.roa (hash: CEb3/pIl0j5Q+iEy5jGadkT0Uot6DJeWgORkKHAYYJw=)
2: w7iL5VE_Guckk1Ivpml-_zNpKuA.crl (hash: ozjf9srLOmOkdb62b944BMaV5Gitl44t6E2w7hoLeQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4d:07:0e:96:89:e3:37:2a:ee:98:85:88:de:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Validity
Not Before: Nov 4 16:00:38 2025 GMT
Not After : Nov 5 16:00:38 2025 GMT
Subject: CN=bacda6824a4ad4f9ac29fc2ec9329888b6025db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:71:1a:6b:9b:94:99:20:ba:67:fa:9d:22:
37:5a:7c:78:65:47:b2:9d:bc:0a:46:7b:7c:cf:55:
f4:01:83:96:24:9f:b3:9b:5f:b4:fd:20:3b:e1:cf:
6c:c3:b5:56:f3:9c:7b:c7:9d:a2:66:f7:6a:ad:5c:
f2:ee:f5:a2:ab:ba:52:22:cf:37:bd:e4:ea:91:a1:
32:e4:52:59:b7:11:b6:15:db:43:67:df:9a:07:71:
aa:4f:d8:9f:76:0e:42:1b:c3:a0:96:a6:f9:7b:5b:
ab:d7:6d:6a:b9:ab:3d:0e:ee:37:ae:c8:1b:f0:f7:
22:cd:65:f2:4e:a5:31:1f:63:d9:2d:db:3f:76:af:
88:59:cc:7f:dd:17:d7:14:40:ac:72:a9:3e:1a:71:
14:f7:a5:8b:c3:62:5c:2f:ad:bb:b5:58:d9:25:87:
23:d7:a3:43:e0:4d:d8:02:24:ae:6c:7a:45:d4:4a:
57:a6:59:a7:1f:b3:f0:f0:0d:82:4c:42:4c:83:1a:
e7:ea:d0:3a:4c:4f:31:d0:b8:86:4a:93:0c:77:7d:
e5:e1:56:3b:6a:67:ad:ed:ac:ed:63:a2:86:1c:d5:
23:1e:a8:76:1e:b4:ba:85:01:2f:b8:08:14:79:7c:
05:5c:40:88:4d:8f:9a:24:00:f8:9e:9b:ad:f4:8f:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CD:A6:82:4A:4A:D4:F9:AC:29:FC:2E:C9:32:98:88:B6:02:5D:B4
X509v3 Authority Key Identifier:
keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a7:a4:b2:bd:76:89:65:47:49:7e:2d:b7:87:84:ed:00:e2:
59:ae:8b:a2:88:bd:13:58:7b:6d:07:5b:2e:1d:4e:69:55:0e:
83:f7:9b:7d:12:63:09:36:5e:de:92:21:80:af:59:e3:fb:70:
70:84:c4:02:aa:8d:e0:03:d9:8b:33:02:8d:29:96:f8:03:60:
b0:02:a9:5b:0f:82:09:ae:f8:7a:5c:11:1a:a1:13:80:58:60:
c6:58:4e:08:1b:29:b2:a1:b5:5f:9a:40:14:ee:33:51:3c:c6:
4b:92:af:45:ec:55:e2:d4:66:90:2e:f8:2c:ce:ac:34:9b:92:
4d:bf:45:09:c4:78:df:8f:98:8e:14:fc:f7:8c:56:1a:e3:ae:
d3:59:1f:34:db:67:e6:40:39:35:dd:4c:af:f6:42:fa:89:9f:
d4:fc:34:8c:47:b1:43:9d:e7:1a:05:5a:f1:db:33:8b:52:19:
a0:2a:a0:c7:ac:a4:6f:86:77:da:e1:53:a3:73:57:cc:65:90:
bb:7f:45:10:38:1e:c7:a3:68:42:72:a0:70:77:b7:cb:db:07:
a1:df:d8:e2:c8:1f:c0:53:43:33:03:de:d6:b9:bf:e3:33:53:
6d:a3:a1:02:e8:33:0a:24:a8:4a:fd:26:a6:cd:b0:28:25:44:
eb:2e:55:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:28 2025 by rpki-client