Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
File: SAw7k_8qNPv6WuglVvZwNAy11ck.mft (raw, json)
Hash identifier: /1rHujASEic62B8pWuz4sgIRBVK0PDL8V2fdpDKnkVg=
Subject key identifier: 6F:5A:FF:03:BB:2E:6F:87:5C:88:09:E0:F6:87:A6:2E:7E:63:04:52
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 019A5375E1523291379CC9301954A302C3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 10:00:25 +0000
Manifest this update: Wed 05 Nov 2025 10:00:25 +0000
Manifest next update: Thu 06 Nov 2025 10:00:25 +0000
Files and hashes: 1: M6pYVSPeRii26Fe6-xA2oF6TOhY.roa (hash: ALWsaRUrnNv1Osi/17oum/JvXg9TackTfLVpB/IG6ok=)
2: SAw7k_8qNPv6WuglVvZwNAy11ck.crl (hash: b+DR1T8XSVWKnjHXSjRu3zthDo0UMl+QY0+cnkaBC9g=)
3: o_-CPWekkGbizNj3OifTY4NJDPc.roa (hash: uwNEErvUsdFhNjQ3+JpAmIUn/dDzO0Gs7xJ0LsO1aD4=)
4: xR8JRniMXIcnxz5B1H7wwKMwL8E.roa (hash: U8VTiajHorcJU61emonuHN7kXOWFA3+lZIhrr1YC8IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:e1:52:32:91:37:9c:c9:30:19:54:a3:02:c3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Nov 5 10:00:25 2025 GMT
Not After : Nov 6 10:00:25 2025 GMT
Subject: CN=6f5aff03bb2e6f875c8809e0f687a62e7e630452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:dc:13:42:99:d0:5a:d9:bd:7a:27:3c:db:
7d:c4:91:cc:00:fe:d8:40:d9:a9:cc:23:2b:68:cc:
09:fb:8f:9f:12:2b:c2:6a:ab:ea:b3:28:4b:30:dd:
23:0e:97:48:87:e2:c9:aa:d9:50:c4:cc:cc:49:c6:
04:c4:6d:39:a9:62:26:c0:2b:e0:ad:ec:fd:65:d9:
81:4c:76:01:10:a4:fc:b9:03:fb:60:fc:09:5c:ef:
f2:03:b7:e6:a7:93:2e:9e:40:38:e0:f7:b0:89:a6:
ad:85:c4:28:00:46:7f:01:77:60:95:89:93:9c:bc:
ae:97:64:2c:6b:6d:16:16:8e:d3:56:53:e7:5f:19:
73:5c:e0:b9:3b:08:06:bf:7a:8b:a5:45:3d:60:46:
b3:4b:8d:13:a4:2e:06:b9:08:a3:db:22:47:66:3e:
a7:51:3f:bf:1f:ed:94:7b:ed:75:39:af:f0:73:ce:
75:86:34:8f:22:c3:16:6d:83:38:57:d3:9c:0a:b4:
11:9f:f4:20:74:27:ef:00:72:f7:d0:e6:84:07:df:
99:9d:db:2e:bd:24:94:d0:cf:9a:ef:67:79:43:65:
52:ad:d2:7e:96:9b:11:8b:60:bc:c2:ce:09:f4:5b:
ab:6d:36:83:12:9a:d8:b1:34:56:2c:f1:c2:8e:90:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5A:FF:03:BB:2E:6F:87:5C:88:09:E0:F6:87:A6:2E:7E:63:04:52
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9a:62:83:af:af:a9:00:75:d6:e3:a3:3c:2a:97:7e:df:87:
cf:00:1d:9e:de:69:0b:7c:8c:a9:d4:ea:8a:ff:95:85:d0:39:
dd:86:6a:9c:7c:b9:f5:d7:41:a3:38:a6:ce:48:e2:12:e0:51:
04:ab:fb:fd:7d:58:6f:60:29:7f:cb:40:aa:48:c6:76:da:78:
6a:98:5a:b8:b2:61:ac:08:0d:47:be:35:89:f8:8e:51:6c:5f:
8a:0d:2e:e9:5a:08:42:e5:d8:6a:7e:1f:83:b7:3a:e1:96:74:
ae:cf:7f:64:7a:20:41:80:74:bc:ef:b3:7c:1d:91:9e:93:1e:
d4:d4:ba:87:dd:0c:f7:fb:54:1b:15:ec:61:43:4b:c7:70:3c:
5a:9e:d4:78:91:cc:f5:6e:0d:47:e1:63:17:4f:0c:62:02:57:
6f:ec:64:80:10:0c:b6:cc:ed:da:0a:65:a4:2a:9d:6c:62:a4:
e7:9e:13:c5:ac:3f:61:5e:70:97:aa:37:e7:05:29:49:c0:03:
42:00:b6:e9:37:b0:be:0d:13:7f:98:46:2c:02:1f:8f:04:45:
50:0a:58:a9:af:47:3c:ac:11:04:d9:68:ba:59:44:9c:de:93:
ec:07:28:8a:55:78:89:c1:75:48:5e:41:ff:0b:24:5e:7f:39:
d1:6e:92:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:39:58 2025 by rpki-client