Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
File: w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft (raw, json)
Hash identifier: p8ncuk6Le3Kse1WoJUg5Hg+3UWTAPLSr2A1BBZ6QqDY=
Subject key identifier: 37:58:48:FA:2C:DE:3B:E7:B4:8F:0A:60:3A:19:29:99:1C:E0:1B:5D
Authority key identifier: C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
Certificate issuer: /CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Certificate serial: 019A4DAA8D8264F7AEEEEE88F1D98DC5995E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
Manifest number: 0CE9
Signing time: Tue 04 Nov 2025 07:00:13 +0000
Manifest this update: Tue 04 Nov 2025 07:00:13 +0000
Manifest next update: Wed 05 Nov 2025 07:00:13 +0000
Files and hashes: 1: fZsTaHsMiRTOQx_qTx-PLjSdXVE.roa (hash: 7tvMPnX4kI566+vmNqApn9A48bhDZNJ8LvI46Pf6Yd0=)
2: w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl (hash: cPzzsCV2X+Hv2rCM7aW9P4zVECS3GBqDR8dbOD+8kKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:8d:82:64:f7:ae:ee:ee:88:f1:d9:8d:c5:99:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Validity
Not Before: Nov 4 07:00:13 2025 GMT
Not After : Nov 5 07:00:13 2025 GMT
Subject: CN=375848fa2cde3be7b48f0a603a1929991ce01b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:40:ed:04:c3:cd:02:c0:92:2a:2e:14:4b:
63:b9:c3:0d:00:e4:ee:da:0c:8b:45:06:fb:ae:ed:
f3:0b:58:7e:13:d5:82:d4:32:ab:eb:4a:c8:2b:98:
f2:2e:d5:8f:27:6f:29:1e:36:02:11:3a:9c:46:d3:
da:8d:ff:31:e1:5a:66:f3:fa:35:2f:66:7a:3e:71:
f7:55:e5:a2:4b:f0:72:32:c2:93:e5:48:73:80:51:
a4:23:ca:a8:d5:ff:33:ac:49:2a:d0:f3:98:68:0b:
8d:1c:f9:4e:73:e1:1c:3d:1b:75:dc:7d:ba:d1:5e:
54:57:56:9e:23:4e:c3:8c:a8:c2:ab:71:a4:c4:d6:
cc:8f:33:16:aa:7e:67:6f:2b:49:21:c6:d6:05:cd:
3b:cc:ae:13:3f:f1:b5:a2:40:85:6a:21:5c:63:bf:
c8:27:2c:e7:2c:79:91:7e:76:82:6a:37:3e:1e:a9:
6b:35:d7:a5:90:b4:64:5e:f6:c8:3f:b5:3a:cb:1f:
f4:e6:dc:85:f7:a4:40:9e:1e:22:1c:6a:05:0c:e1:
03:05:3b:ed:3d:64:7d:34:3b:c3:2a:96:79:4a:9b:
98:29:24:46:63:45:b3:c4:d7:d9:1c:f2:75:ca:f0:
36:68:86:56:8e:fa:bb:b2:21:59:c5:38:58:f1:44:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:58:48:FA:2C:DE:3B:E7:B4:8F:0A:60:3A:19:29:99:1C:E0:1B:5D
X509v3 Authority Key Identifier:
keyid:C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ec:6a:10:e5:61:e8:9f:84:72:a2:75:b1:6a:b0:f0:4b:d5:
ef:40:d6:c3:7e:78:6c:66:be:8f:67:8a:a7:d1:80:cb:db:76:
c2:2d:c4:33:dc:1e:01:b5:7c:37:a1:11:43:9f:8d:14:a2:2b:
3e:72:de:a2:d6:2e:c9:27:21:04:c8:01:f9:d0:c5:24:37:73:
61:0b:d8:72:fb:5a:0a:c1:c1:be:71:d8:15:23:64:75:21:6a:
18:86:72:fb:f7:f7:d2:8b:99:57:94:17:9a:d6:2f:8a:b2:43:
4e:fe:85:7b:6f:de:c3:f2:f8:1e:e2:a6:fe:3b:2b:be:27:55:
1d:d0:ab:62:77:f9:c8:a4:6e:5f:30:c1:f3:b3:dd:0b:c8:93:
fd:88:a3:be:48:d9:c3:f6:49:df:b4:64:b1:0c:7a:e6:9f:1a:
d1:47:0c:42:13:01:fa:e6:e4:32:2e:f7:cf:4b:8b:eb:c2:b6:
d1:bf:3b:ab:22:e8:ff:9d:61:3f:9f:da:f9:e6:c5:df:10:6b:
2d:86:db:4c:13:d1:ca:de:db:1a:77:4f:65:2b:05:47:21:ac:
66:6b:ce:1d:07:00:08:d0:a5:b3:fe:c0:c9:58:86:e9:cd:35:
52:5a:d8:ee:32:30:95:33:8d:af:ec:00:bf:4c:b2:b9:27:3a:
81:c0:86:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqo2CZPeu7u6I8dmNxZleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjM5NjJhZWU0ZThhZTRjNmNjZDg5NzllNTM5ODAyZWEw
ZTRjZTcwHhcNMjUxMTA0MDcwMDEzWhcNMjUxMTA1MDcwMDEzWjAzMTEwLwYDVQQD
EygzNzU4NDhmYTJjZGUzYmU3YjQ4ZjBhNjAzYTE5Mjk5OTFjZTAxYjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/dA7QTDzQLAkiouFEtjucMNAOTu
2gyLRQb7ru3zC1h+E9WC1DKr60rIK5jyLtWPJ28pHjYCETqcRtPajf8x4Vpm8/o1
L2Z6PnH3VeWiS/ByMsKT5UhzgFGkI8qo1f8zrEkq0POYaAuNHPlOc+EcPRt13H26
0V5UV1aeI07DjKjCq3GkxNbMjzMWqn5nbytJIcbWBc07zK4TP/G1okCFaiFcY7/I
JyznLHmRfnaCajc+HqlrNdelkLRkXvbIP7U6yx/05tyF96RAnh4iHGoFDOEDBTvt
PWR9NDvDKpZ5SpuYKSRGY0WzxNfZHPJ1yvA2aIZWjvq7siFZxThY8USxswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdYSPos3jvntI8KYDoZKZkc4BtdMB8GA1UdIwQY
MBaAFMOzliruTorkxszYl55TmALqDkznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNjQ1YTctNTMyYy00ZmExLWJjZGQt
ZWE1ZGFkOGI0NzY1LzEvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yNjQ1YTctNTMyYy00ZmExLWJjZGQtZWE1ZGFkOGI0NzY1
LzEvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluxqEOVh
6J+EcqJ1sWqw8EvV70DWw354bGa+j2eKp9GAy9t2wi3EM9weAbV8N6ERQ5+NFKIr
PnLeotYuySchBMgB+dDFJDdzYQvYcvtaCsHBvnHYFSNkdSFqGIZy+/f30ouZV5QX
mtYvirJDTv6Fe2/ew/L4HuKm/jsrvidVHdCrYnf5yKRuXzDB87PdC8iT/YijvkjZ
w/ZJ37RksQx65p8a0UcMQhMB+ubkMi73z0uL68K20b87qyLo/51hP5/a+ebF3xBr
LYbbTBPRyt7bGndPZSsFRyGsZmvOHQcACNCls/7AyViG6c01UlrY7jIwlTONr+wA
v0yyuSc6gcCG7A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:54 2025 by rpki-client