Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
File: w4Me3AugfH40q6cBw1c9jnKvGP4.mft (raw, json)
Hash identifier: Psut7VAB2liqk2cb3KmnqIYboPz/rmz1gOBZEOS/dXs=
Subject key identifier: 3C:63:68:63:1F:0F:20:A6:41:83:80:6D:FC:4B:AE:2F:7C:0E:3A:6A
Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Certificate serial: 019A4D066C9F0BC06B0B97A95E859C9554E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 04:00:57 +0000
Manifest this update: Tue 04 Nov 2025 04:00:57 +0000
Manifest next update: Wed 05 Nov 2025 04:00:57 +0000
Files and hashes: 1: R3ax-Z4NwERn9kiI-gjg5Xya12A.roa (hash: ffTm+IwpNw27nllrwwqn+t+2k278/G5pqNf7iK/QlhI=)
2: w4Me3AugfH40q6cBw1c9jnKvGP4.crl (hash: LTqyk+phAmSydj+HVm0QO9BV2tSmuKEMVfU46vflyEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:6c:9f:0b:c0:6b:0b:97:a9:5e:85:9c:95:54:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Validity
Not Before: Nov 4 04:00:57 2025 GMT
Not After : Nov 5 04:00:57 2025 GMT
Subject: CN=3c6368631f0f20a64183806dfc4bae2f7c0e3a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:9a:32:27:82:07:6a:05:ec:e6:73:59:05:
7c:1d:15:39:1a:20:31:d8:4d:97:f5:95:22:78:06:
72:13:a5:66:00:2f:a9:37:7d:23:73:04:62:54:4d:
37:fa:4e:20:9b:24:c6:ab:48:30:c0:20:e0:92:e5:
83:d4:94:ea:04:f9:63:8a:6e:2d:31:38:0c:91:c4:
95:60:1e:4d:d2:06:bb:e7:2d:a2:c6:7a:11:ff:e7:
2d:63:95:4f:2c:79:86:c9:f4:55:29:37:17:6f:9d:
9b:15:e5:c8:d8:d1:a0:70:ff:1b:50:4d:25:89:91:
d8:d7:13:df:77:90:33:68:31:ce:bf:14:d5:71:46:
af:8a:ee:cc:d1:03:f2:e8:e2:33:c9:0c:b9:a8:76:
df:a6:57:cd:72:bb:95:29:2d:a4:46:56:d7:9e:2e:
39:0a:12:89:b4:74:60:f7:a1:20:bd:d3:7e:34:6b:
4c:6b:b6:7a:7d:d5:dd:d1:fc:32:0c:9f:74:0b:4a:
d4:3f:c3:00:33:b7:d4:f4:de:12:16:f0:45:01:9f:
83:fe:c7:b9:43:5e:15:c3:9a:ed:92:10:5c:c0:58:
a9:6a:3a:41:13:f5:c9:50:45:c5:8b:12:e5:c3:79:
35:32:89:23:ed:d0:ea:a0:29:74:b9:ad:4b:1a:5b:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:63:68:63:1F:0F:20:A6:41:83:80:6D:FC:4B:AE:2F:7C:0E:3A:6A
X509v3 Authority Key Identifier:
keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0c:c3:89:c5:0b:ff:f3:b4:3a:f7:71:53:60:b5:cf:2c:c0:
c4:36:ac:0d:5c:37:02:17:80:2b:44:b5:da:e2:98:04:8c:cf:
25:64:87:eb:af:0c:30:3b:96:ec:2a:3c:ff:c8:91:f0:31:e3:
4d:11:08:67:e6:c6:03:15:ce:1c:20:f2:81:2c:ef:97:86:09:
e3:34:94:1d:af:b7:5b:da:23:52:79:93:d8:40:94:c6:08:b2:
a5:ef:6f:a4:db:fd:0d:61:4b:3f:6a:7e:aa:02:30:ab:be:02:
e9:09:40:22:88:d8:a3:e6:da:06:e5:94:34:21:72:28:09:ca:
cc:5c:f7:e4:b8:f9:6b:a8:d5:56:2e:4d:94:2e:c6:81:20:6c:
db:32:8a:61:d4:a1:1f:b5:d2:e2:d8:ff:f5:36:14:bd:a2:97:
f7:5e:ae:c8:f4:3d:51:dc:bb:7f:18:13:bd:5a:ff:a7:1c:3c:
dc:60:e1:5a:cc:50:11:ab:e1:03:d6:d2:24:98:ec:4d:a5:89:
d6:2a:2b:90:1e:1d:73:d9:b9:a5:97:d2:a3:64:90:ce:1b:01:
ab:9a:b7:8e:b6:d0:77:f7:fb:61:e9:e3:57:c7:34:93:f9:d8:
28:1d:2a:3d:cf:20:bb:47:89:d8:2d:f5:85:44:1d:a1:f8:0e:
6d:7c:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:51 2025 by rpki-client