Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File: fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier: Y2AuGfEy9zoXHK2BoLojFwzh8WJufu7CtEXrEWVz3zo=
Subject key identifier: 77:C4:B4:D3:47:BB:7C:81:24:D2:5D:91:3D:D4:47:13:83:F4:43:19
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer: /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial: 019A4F99755C007D11404F31FDFEAE129245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:48 +0000
Manifest this update: Tue 04 Nov 2025 16:00:48 +0000
Manifest next update: Wed 05 Nov 2025 16:00:48 +0000
Files and hashes: 1: QHrCJn-3TWWMCJDQELy3q8dJt_4.roa (hash: DTg0RQCOqWT4OxprKyTz2OGsk5mW9uMRzOSYKDRAWp0=)
2: dvNIb3T0U0mU22w-yMo6gNRu98k.roa (hash: KB6r0yPVxOXp/PVpdxcqc3971j0F/zVlsLjdreh6UUk=)
3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: 6NDlE6VelU3lFkVKJ1mt63bh0Ovdr4wfsus6PWgU5/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:75:5c:00:7d:11:40:4f:31:fd:fe:ae:12:92:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Validity
Not Before: Nov 4 16:00:48 2025 GMT
Not After : Nov 5 16:00:48 2025 GMT
Subject: CN=77c4b4d347bb7c8124d25d913dd4471383f44319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:05:21:27:70:12:2b:bd:52:af:21:3d:e8:
9a:01:22:59:0c:c5:19:19:fe:ff:c7:cf:92:d6:3c:
db:5a:a7:db:c1:16:ff:15:7a:a0:51:ba:db:00:44:
bb:33:26:6f:7f:ab:7d:b4:f6:3f:78:4c:02:39:13:
da:f5:29:80:cc:b0:78:96:d6:72:68:3f:06:8d:e9:
e6:ba:39:f9:47:6d:7e:d4:04:2a:99:4e:f6:4f:c4:
50:27:02:c2:fd:f5:eb:ff:87:d5:6d:e6:7b:ab:91:
ff:09:50:9c:2d:e1:7d:fe:84:93:c2:44:25:9a:44:
59:bd:05:52:ba:15:06:d2:40:06:63:a9:8b:0a:86:
f1:3b:6d:67:e2:64:9a:1a:64:2f:36:03:5e:be:89:
56:00:d0:c8:9c:b0:79:57:56:66:0f:56:bd:94:22:
f3:a4:07:5b:0f:a0:fb:e4:eb:9a:4f:09:df:87:c0:
73:e4:56:89:df:49:7d:95:b0:e4:83:63:d4:59:b0:
98:0c:47:26:4e:5d:4b:dd:b0:b3:d7:d6:df:e4:0f:
30:e3:1a:6a:fc:7c:33:7c:ed:18:b4:56:96:90:6d:
de:4a:7b:99:39:d6:e1:5c:10:96:db:96:25:44:e2:
d1:99:7e:b5:e7:9e:30:67:46:04:cd:3a:06:40:65:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C4:B4:D3:47:BB:7C:81:24:D2:5D:91:3D:D4:47:13:83:F4:43:19
X509v3 Authority Key Identifier:
keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:08:36:7a:68:28:89:15:91:44:6c:39:81:bd:1a:31:ab:a4:
33:e0:ff:9a:62:62:53:18:27:e1:3f:56:e4:cf:bd:9b:cc:60:
7f:b1:5e:f9:1a:82:0d:c3:4d:e0:91:6b:24:81:e3:70:fc:93:
d4:77:1a:9e:1f:c2:2c:dc:1f:ec:35:09:02:e7:bd:b1:2f:1b:
ae:fb:3d:a1:56:9f:da:74:99:94:02:25:65:ef:46:85:80:59:
0f:f1:0b:da:6b:51:de:07:35:bc:71:57:d2:82:b1:70:4c:3e:
0a:fe:3a:73:25:fa:1f:e0:94:a8:67:99:ad:a1:ca:6b:bd:d3:
b3:47:b4:b6:47:cd:71:65:a2:e4:75:02:16:2d:39:f6:d0:68:
8b:c7:b0:77:52:c6:63:8e:b3:a3:dc:c0:1d:0d:40:fa:f0:bf:
8d:18:bb:8b:dd:bd:83:d0:5b:90:4d:1c:82:58:42:c3:fd:a8:
9c:bf:54:48:63:74:97:48:c5:7a:be:4e:19:4a:99:06:50:ad:
b1:77:44:4f:76:65:de:03:78:d8:d8:52:7d:93:29:6f:33:72:
4f:7f:05:4b:e5:6b:dd:b6:b7:18:4b:9d:0f:1d:e5:28:0c:48:
0d:11:75:4a:47:32:8e:ff:59:c1:b7:16:69:3e:c6:40:80:ca:
9a:b9:5d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:15:31 2025 by rpki-client