Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File: w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier: 64RcNF58w5njrgVJBL/XOvCeXW5c1NAKEZwT5rNNFw8=
Subject key identifier: 12:A6:F7:03:ED:32:B5:31:37:B8:80:6F:68:4F:EF:BF:2D:1E:0A:14
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 019A4D07CE730442B3351817043FBCCAACE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 04:02:28 +0000
Manifest this update: Tue 04 Nov 2025 04:02:28 +0000
Manifest next update: Wed 05 Nov 2025 04:02:28 +0000
Files and hashes: 1: a_tI6HP1FzzUH0r0poa89IN3meo.roa (hash: W0Z3kY29z8HP1pU9kcp4FsO8DLdrIX+XsxzLiYSWp8o=)
2: n66sSu3oH6YqRjQYMkqXYnUVvGI.roa (hash: oBf8U9TtdYD0BgLgRABjFu+My106UWYSpVHQ13ZhmvY=)
3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: c26mlAHxHiGy3qIQIn6CnpVyRWvaMko3gmtEsDdXNVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:ce:73:04:42:b3:35:18:17:04:3f:bc:ca:ac:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Nov 4 04:02:28 2025 GMT
Not After : Nov 5 04:02:28 2025 GMT
Subject: CN=12a6f703ed32b53137b8806f684fefbf2d1e0a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:14:3e:06:7c:b5:b5:20:df:56:d1:9f:4c:
70:3b:cd:be:84:ed:7d:30:f1:52:9d:33:29:6f:8f:
f6:9b:9f:f6:36:23:f1:06:1a:27:43:55:03:c6:5d:
e8:dc:6a:8f:75:b9:77:f5:88:57:02:f8:2b:2c:60:
2e:10:1b:68:86:45:5d:d4:49:ea:a6:a2:ad:cb:75:
c9:50:a2:d3:17:89:bb:44:a3:9e:71:df:91:f5:be:
48:ec:c8:97:20:75:a7:19:e4:a7:ab:42:26:d5:69:
55:08:dc:c2:0f:3f:25:b4:7d:eb:26:f0:54:f4:d4:
91:89:da:54:2b:d2:39:36:b4:d5:66:9d:62:24:06:
3f:ce:30:4c:3e:cc:3f:f5:fc:bd:c8:f4:09:7f:d9:
e6:f7:e6:b4:ed:ca:ec:f2:38:fb:1c:12:17:08:0b:
db:89:a5:bc:7a:18:09:10:80:ac:51:00:fa:a6:5f:
65:7b:d5:f2:06:ce:99:48:f7:ae:82:a8:1d:45:6f:
fe:99:a3:9c:eb:41:78:55:65:1f:4d:86:ec:39:2e:
e0:77:93:da:b2:49:d5:9e:54:3c:45:e9:69:34:22:
7d:79:be:34:de:ab:a2:9c:25:02:05:51:ea:1e:48:
93:97:f7:54:ed:a1:36:bb:52:18:0e:c0:c8:2e:3b:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:F7:03:ED:32:B5:31:37:B8:80:6F:68:4F:EF:BF:2D:1E:0A:14
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:e8:2d:0f:d0:f0:d3:1e:4f:d7:4d:2d:77:47:88:ec:73:
7c:91:ee:85:90:83:db:35:a1:94:d4:3f:d9:e2:c7:94:32:a3:
66:0c:2a:94:09:89:a3:12:95:6e:e1:c8:8c:56:6a:62:5a:bd:
2e:dc:ec:35:7a:36:9e:1a:24:e7:94:de:24:63:ec:4a:ac:df:
65:25:76:c9:fa:3b:5f:6a:8d:98:af:f3:3f:38:49:23:81:de:
f3:2f:43:cf:41:21:e7:d5:48:68:b7:91:67:c0:f9:fc:e5:24:
67:0e:a2:8f:7a:7d:57:d4:45:5d:87:fe:00:31:3e:0f:cb:07:
1f:7e:85:3b:58:92:1d:75:d6:50:e0:fc:8b:f7:e9:79:8e:34:
02:92:d1:62:a6:00:6f:f4:fc:de:1e:b9:d2:eb:93:b6:25:4e:
24:40:2e:10:ec:86:db:55:38:41:52:8e:e7:19:42:c3:af:c5:
90:49:b4:31:24:13:27:38:8f:1b:96:ac:8e:5a:51:61:08:59:
84:5b:17:82:4d:97:44:a7:18:98:46:98:77:74:37:48:5c:06:
c1:d3:2e:9a:a7:07:b2:c7:66:5c:b7:2e:92:ed:22:3b:29:84:
82:6f:f8:0c:50:1a:1a:fd:5c:5a:b8:67:4f:a2:eb:23:5f:da:
6f:a7:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:39 2025 by rpki-client