Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier: 0pRcGNolv2zd5n121DsSGvgErs17lDGNOohnRsTJwCY=
Subject key identifier: C5:EB:BB:4E:A6:F0:FB:63:25:67:E4:76:46:CF:6A:8D:98:6F:5E:84
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 019A54BFE79F662AFB492C97C9E9AE27E51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number: 0256
Signing time: Wed 05 Nov 2025 16:00:54 +0000
Manifest this update: Wed 05 Nov 2025 16:00:54 +0000
Manifest next update: Thu 06 Nov 2025 16:00:54 +0000
Files and hashes: 1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=)
2: 4lqvUj_aarjM1QCov1WKcZ47cD4.roa (hash: CUeCuFIy+7/m+7Rp9JxCjE4itMo0nF9rOUfz1A83JwI=)
3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: rhy7MR1+Q6jqv3PMy7/V0uhsxVHlqjCE8/XTyfPO5H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:e7:9f:66:2a:fb:49:2c:97:c9:e9:ae:27:e5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: Nov 5 16:00:54 2025 GMT
Not After : Nov 6 16:00:54 2025 GMT
Subject: CN=c5ebbb4ea6f0fb632567e47646cf6a8d986f5e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:ca:b8:ee:72:69:47:ee:94:da:a9:ef:99:
de:0c:b3:47:34:b4:c5:e4:64:98:d2:54:19:ff:36:
8d:dc:03:3d:9d:31:16:67:88:4c:10:16:e3:ea:c5:
85:fe:2e:36:11:c2:32:9f:38:4e:2d:6e:fe:12:3b:
19:d5:9e:59:4c:72:b6:07:91:72:53:6e:94:97:72:
4d:03:6b:64:ea:85:b9:a3:4a:ac:bb:64:1e:4d:2c:
66:0a:37:43:dc:1c:2b:1d:6e:e4:27:64:39:02:6a:
22:6c:30:95:9c:e5:e3:74:84:76:91:32:9b:5b:c4:
f0:6b:0d:cd:6d:54:0c:d1:28:a3:9a:ee:1b:13:d6:
7a:91:bb:99:86:83:1a:2a:23:6f:e8:35:63:c0:67:
ce:af:6c:e9:a2:9a:d0:b8:cb:c1:5c:81:a3:ca:bf:
de:af:ba:a7:d2:f6:51:6f:9b:2e:a7:f7:fc:35:72:
c6:05:16:8b:32:71:f8:39:82:3d:d4:a3:7d:db:16:
03:aa:2c:1c:3d:4b:18:1c:1d:d3:7a:95:76:df:c9:
f7:08:87:aa:f2:de:aa:a0:d2:56:d2:da:11:72:f0:
5f:31:a3:20:72:47:a8:8b:ff:8d:3a:1f:eb:02:9d:
70:8c:3b:4d:08:99:71:40:c5:75:8c:0a:2a:e9:b6:
14:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EB:BB:4E:A6:F0:FB:63:25:67:E4:76:46:CF:6A:8D:98:6F:5E:84
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:51:32:bc:91:dc:3b:2f:9b:3c:eb:5a:69:be:7d:19:75:3a:
ac:21:6a:5b:57:cf:5f:c4:44:5b:f0:8f:a6:82:31:7d:f3:8d:
3d:03:e3:aa:13:fe:b5:64:51:49:54:d8:f4:75:cc:f4:80:a3:
25:9c:5f:aa:de:1a:83:e3:57:18:b8:14:66:31:5f:a2:c9:69:
f3:3e:24:12:89:00:14:fa:99:2e:db:ca:9f:7f:51:48:2b:f5:
47:3b:e3:00:f8:c3:80:9f:fd:f7:51:70:ee:46:6a:99:ca:3d:
8a:1d:d1:e0:4d:98:b4:3b:eb:92:12:c3:e7:ab:91:49:ad:09:
10:c3:d6:a7:27:da:e1:e6:50:4d:c3:b7:a4:b5:3f:0b:fe:a8:
59:e6:3f:dd:0f:e3:4b:67:f3:e3:27:d2:f3:d2:46:eb:9d:ca:
8f:9c:5a:d1:2d:a3:97:34:90:bf:8c:1d:01:60:17:32:5c:b8:
e0:88:7f:c1:5b:db:70:00:1c:07:5d:51:78:33:65:88:1f:40:
18:b8:8c:59:9b:de:0a:73:76:08:ea:8b:6f:3a:6e:2a:50:85:
72:36:46:c7:0d:e5:e7:a8:e1:0a:d7:52:5f:2f:89:81:a3:6a:
59:ed:3a:b2:4a:94:e6:f0:80:1f:48:2f:3f:f5:5b:82:86:17:
54:4f:41:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:15:37 2025 by rpki-client