Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: 5WOC9RQWSlmgcctQU0V2ulSwSjcflNOTGI8izAvHz+s=
Subject key identifier: 45:46:9C:D0:25:9D:6F:20:56:82:2A:09:A6:B9:47:D1:0C:B2:E6:31
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 019A51F598757905D40EB1E727ECAA0C6447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 05EA
Signing time: Wed 05 Nov 2025 03:00:41 +0000
Manifest this update: Wed 05 Nov 2025 03:00:41 +0000
Manifest next update: Thu 06 Nov 2025 03:00:41 +0000
Files and hashes: 1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=)
2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: T5X8Txm8vcT/kco2oIvv0Y0ScjHrJ3g5XRtLCHOQCK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:98:75:79:05:d4:0e:b1:e7:27:ec:aa:0c:64:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Nov 5 03:00:41 2025 GMT
Not After : Nov 6 03:00:41 2025 GMT
Subject: CN=45469cd0259d6f2056822a09a6b947d10cb2e631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:92:b3:4f:9d:c2:8e:de:98:6e:f2:95:c0:
a7:18:50:d1:de:67:17:76:c8:73:b7:38:d6:d9:a3:
5c:fa:79:19:5d:20:69:13:bb:b6:97:35:21:be:d8:
39:db:6d:a5:60:a3:f7:f9:d2:ac:bf:06:29:9d:32:
ab:cc:6d:04:8d:15:c7:26:4a:1a:c5:2a:83:59:9d:
44:6a:93:3e:df:42:5b:ef:c7:d6:dd:b0:0c:de:41:
5b:10:d6:89:a8:63:8c:52:91:c5:5c:00:26:1e:98:
11:78:2b:fb:5d:0b:fd:ff:15:09:b9:fc:45:8a:5a:
2b:11:ff:26:55:93:34:1b:fb:b8:6a:64:cc:f9:0b:
83:b5:b2:c3:cb:cc:55:7f:d5:29:1c:62:d5:61:8a:
15:21:0d:17:f1:07:1b:d2:a0:5f:f9:01:0f:0e:56:
26:1b:ea:de:f0:e2:69:1e:bf:59:3b:b5:0d:54:dd:
86:88:69:42:1d:1f:49:f9:71:dd:9f:91:09:d4:e2:
cb:fd:92:3a:b3:e5:ca:63:23:ae:bb:c9:8e:e9:3a:
5d:81:ee:14:42:b5:2a:60:cf:5d:04:f3:92:3b:90:
ee:e7:28:41:48:d6:35:12:c9:0f:79:43:43:53:a1:
b9:4b:ba:99:0b:02:10:da:9f:65:4d:c3:26:b9:ca:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:46:9C:D0:25:9D:6F:20:56:82:2A:09:A6:B9:47:D1:0C:B2:E6:31
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:01:62:aa:46:79:af:cb:9a:e9:71:7b:83:ac:ed:3e:64:6f:
17:51:14:ca:0d:9c:0a:dd:08:d9:e4:d0:ac:11:9d:08:ad:ab:
4b:27:35:aa:88:9f:4c:55:3d:cd:a8:9a:37:c9:70:ea:d4:c9:
53:6e:9e:9e:e5:f5:c3:fb:2c:79:14:ba:30:b0:e9:13:4c:1b:
e2:69:c5:5a:d9:51:2e:64:03:92:bd:99:20:34:e0:da:f8:c7:
f9:ac:62:73:e4:53:9d:cf:32:39:ee:c5:b1:9f:47:6b:e9:f5:
54:64:f5:5e:e4:7e:a8:a0:ec:7c:a2:4e:d7:00:1d:96:45:a5:
33:bb:33:85:7f:0a:a2:45:dd:66:15:5f:bf:37:1e:8c:e6:7e:
f8:a5:75:c9:b9:fc:fa:2e:3a:08:8f:a9:75:7a:44:67:3a:9e:
90:08:29:97:87:0a:a1:96:51:58:e9:ae:40:8b:f3:02:71:2a:
0d:d1:70:60:33:7a:4e:8b:ab:8d:df:09:4f:fb:f9:83:8b:80:
77:e2:bd:8e:b5:e1:41:4b:f7:5c:91:18:ee:43:f1:8e:9d:08:
5d:f5:80:eb:2d:60:29:5c:66:8d:ab:c1:6c:e8:c9:16:30:44:
45:6a:b0:94:d4:f1:8b:71:f3:52:65:fb:7d:5c:f3:8e:31:47:
8a:a2:65:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:23:46 2025 by rpki-client