Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: 6AioYJAqXYMWPouc6ryZt20eAXlb0e3KAXXTBw9L0wM=
Subject key identifier: 69:19:CA:B3:B8:F6:C7:41:6A:6D:9C:71:A9:30:6B:38:5E:F9:3F:16
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 019A4C618C9422F86F276BB26044748F5F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 01:00:52 +0000
Manifest this update: Tue 04 Nov 2025 01:00:52 +0000
Manifest next update: Wed 05 Nov 2025 01:00:52 +0000
Files and hashes: 1: Gp59J-5Sjta1tmO1BUNSwj87vUI.roa (hash: OgOIKzaveJZdrN8U7gkn47rkfBwhkft0gqHgmzmYmdc=)
2: oX3nNgieJ2JInSOqTkqnW4BSKKU.roa (hash: E/puRqDQplddqvaDsExSE6S/JUmdbOP6wn7iah2FAFE=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: 6lvgo9Dlmgr8tdYUVpSNqqCRDWu9/qYbdgvtVNdteBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:8c:94:22:f8:6f:27:6b:b2:60:44:74:8f:5f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Nov 4 01:00:52 2025 GMT
Not After : Nov 5 01:00:52 2025 GMT
Subject: CN=6919cab3b8f6c7416a6d9c71a9306b385ef93f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d0:aa:91:8d:46:53:40:41:5f:08:52:0b:9f:
99:79:83:5a:82:44:38:78:56:20:c2:14:ce:15:de:
bc:dc:78:42:f8:c6:d0:48:2c:ef:2d:21:e9:6f:32:
2a:79:5e:67:cc:a3:b7:3c:35:52:21:db:3b:c3:4a:
e5:bd:61:48:2d:76:8c:8d:d4:e7:12:04:16:7e:10:
78:bd:cc:7e:15:8d:ad:81:dd:4c:d1:21:b5:a8:75:
c4:64:de:de:10:bc:66:cc:39:4d:1e:fc:92:f3:72:
8a:3c:49:f3:26:b3:45:0b:43:9d:b0:4f:14:21:bf:
65:a3:c9:22:aa:b1:b7:9d:14:18:93:8e:70:14:cf:
95:39:c7:b5:41:1e:41:ef:29:bc:90:87:7c:98:06:
ff:00:ad:5e:06:db:a5:03:06:c1:9b:3b:f9:72:6c:
76:79:90:3d:83:c3:3e:43:36:6a:5c:b8:76:45:5d:
69:c8:a0:4a:8a:ac:70:58:a5:00:5b:08:0a:82:6a:
1a:b9:18:7a:63:10:02:4d:93:76:36:3c:3a:5a:ef:
94:41:da:b7:95:04:ca:6f:2e:a3:cd:82:c3:a6:36:
21:59:cd:b9:d2:b9:0a:58:57:ec:b9:b3:f8:37:ab:
13:05:c9:85:bc:cb:9e:45:a4:f4:09:ce:26:01:02:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:19:CA:B3:B8:F6:C7:41:6A:6D:9C:71:A9:30:6B:38:5E:F9:3F:16
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f0:ce:d4:40:e3:75:93:6e:0c:e6:6d:79:5d:d0:30:84:0b:
bc:e2:c2:e3:bf:28:04:a1:63:07:60:ab:5d:91:97:65:7f:5b:
d1:fe:57:e8:9c:53:6c:16:41:84:38:cb:5e:9f:fa:6f:34:5e:
7d:e0:d3:b5:80:9b:bc:4b:ea:22:4f:5b:de:c8:2e:48:65:74:
8c:1e:c9:9f:c8:8f:85:3b:df:06:0a:be:3f:90:74:0e:b1:f8:
ba:08:70:60:6c:5b:81:89:36:35:6b:7a:cd:7f:47:16:64:a7:
5e:43:07:41:0f:e0:67:2c:01:a1:c6:73:6b:7a:d8:63:4d:a4:
6c:7e:99:0b:b7:39:73:d7:9a:49:91:15:9f:50:b2:a2:31:b3:
c0:45:0b:53:ef:41:79:6a:c8:f6:45:06:ad:e8:da:fe:d9:5b:
15:27:62:89:70:0b:36:45:c0:e5:21:97:33:6d:17:1e:8d:90:
c0:f8:41:ae:8c:fb:52:4e:06:75:e1:ec:12:6f:fd:e7:a0:b6:
54:d5:0d:6a:9a:f9:3d:c3:51:bf:72:b3:5d:6f:65:fe:74:a9:
4c:5c:b9:53:48:16:a4:fe:4d:ee:b9:e3:63:ba:04:63:e2:26:
d3:a2:fc:c0:f4:36:93:48:87:78:66:b6:3b:7c:6e:73:7c:ce:
42:2f:2b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:42 2025 by rpki-client