Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
File: woONHzsjG_cuRT3XjEtQrACf9_E.mft (raw, json)
Hash identifier: UAQcRscQslTDm5KKwW/Z/UOJvF2JXzH8OR15D+S3XTA=
Subject key identifier: 79:E7:3C:C3:C5:A1:73:53:25:16:0B:06:52:E3:0F:14:2D:13:06:82
Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
Certificate issuer: /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Certificate serial: 019A5307E9CCBB3BD0D0A8EB2F0273C2B167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 08:00:18 +0000
Manifest this update: Wed 05 Nov 2025 08:00:18 +0000
Manifest next update: Thu 06 Nov 2025 08:00:18 +0000
Files and hashes: 1: fM16NL7UA9ErJ0RNfb8ePLmU6tQ.roa (hash: 2mPsCiT6kK+HE+XcnPI9z3k0mcNw38StY2DELHnEXqY=)
2: woONHzsjG_cuRT3XjEtQrACf9_E.crl (hash: KNitV/ZMVJ8414fbVA/0y38qTpOOLQyU7zugP5ZD3PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:e9:cc:bb:3b:d0:d0:a8:eb:2f:02:73:c2:b1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Validity
Not Before: Nov 5 08:00:18 2025 GMT
Not After : Nov 6 08:00:18 2025 GMT
Subject: CN=79e73cc3c5a1735325160b0652e30f142d130682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:93:04:86:6c:53:48:bc:1e:14:64:f4:c0:
40:1f:f4:1c:75:95:86:1c:25:70:9e:bb:8c:2d:5c:
4f:f8:ed:91:5b:ea:1e:83:14:e3:b7:aa:78:44:b9:
74:62:6c:d9:a2:d8:5a:1f:1f:c5:a6:b2:5a:17:59:
02:69:15:42:8e:2b:16:2c:73:65:f9:f4:ba:a1:0c:
5c:2b:61:4f:4b:67:8c:5e:45:fc:27:99:a9:15:95:
19:21:bd:f4:53:54:43:e4:36:cb:cf:fd:f2:a0:34:
a2:d2:60:1c:94:3b:d2:8d:1b:3d:32:d0:72:e4:c7:
39:cf:d0:b2:30:ae:4b:40:de:79:df:50:d3:02:5a:
f8:f3:99:8d:db:34:67:60:69:a1:4d:cc:db:4c:45:
14:62:ce:36:4d:3c:07:8b:fe:4f:2f:d0:7c:71:ab:
6d:7a:fc:50:d3:5c:6f:b9:bd:4b:4a:40:43:64:f1:
e7:7b:b2:d3:01:37:46:3e:01:e0:3c:a0:c2:d1:eb:
2f:be:d9:ef:26:3a:94:fc:b9:0d:08:46:8d:c0:42:
be:2d:80:7c:77:dc:43:66:e1:fd:23:3b:01:97:ef:
a9:3a:f5:93:57:7e:88:57:6a:fa:60:7f:93:8e:c0:
0e:0f:e3:9f:65:2e:e2:76:d6:5a:54:79:e1:a4:09:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E7:3C:C3:C5:A1:73:53:25:16:0B:06:52:E3:0F:14:2D:13:06:82
X509v3 Authority Key Identifier:
keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2d:56:57:ee:18:75:a1:42:6d:31:13:76:c5:a2:d6:6d:4b:
0c:3e:7c:9b:78:82:60:79:a5:e3:cd:d7:4c:b3:4c:99:02:06:
00:1a:b7:07:2f:71:44:28:d4:e6:2d:b4:83:f5:20:83:1b:92:
18:d4:6a:70:78:85:a2:ba:27:ee:f0:50:58:2d:43:44:56:08:
f2:34:c2:ee:35:5a:24:73:37:a7:21:3d:f3:09:ca:71:13:e1:
65:9d:aa:72:1e:91:bd:de:b2:0f:f3:ad:d2:6c:37:6d:37:87:
fc:2a:2e:33:49:6d:1f:fe:9e:9c:6e:40:36:d4:e6:9c:5e:8c:
d2:4d:ed:26:e7:05:05:cc:91:03:89:be:05:f8:3e:06:f1:24:
fe:b5:5e:1d:2a:54:5c:8a:e7:7f:08:f4:ea:fc:45:39:c2:8d:
a4:ce:1c:20:2c:0e:f1:a9:f1:82:20:d6:59:ec:8e:13:32:77:
7d:7e:8f:a6:b8:d9:1c:79:a2:ed:22:12:b4:cc:4b:95:3e:9f:
5c:25:97:d8:4e:fc:40:ac:6a:db:a5:7e:c1:73:8c:b5:e7:84:
fb:d5:b0:50:be:2b:bd:27:57:f5:78:e2:39:c6:ee:b0:16:63:
63:3a:96:ea:38:11:fb:33:f2:e3:52:0d:1f:8d:7e:ed:e4:03:
92:91:e0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:25:31 2025 by rpki-client