Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
File: cw4Zvy8v23MCMtosRVGjEro-LuI.mft (raw, json)
Hash identifier: YrMsPcVD/OkC6/2YbJ5Hi+zSjYkJogiAQ2mRR1YQ8Cs=
Subject key identifier: 3E:B8:5B:9D:4D:43:5A:BA:E7:95:EA:FD:E8:4B:3E:45:5B:08:82:70
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Certificate issuer: /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial: 019A4EF4E310BE070CB02204DFC84EB5EB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 13:01:03 +0000
Manifest this update: Tue 04 Nov 2025 13:01:03 +0000
Manifest next update: Wed 05 Nov 2025 13:01:03 +0000
Files and hashes: 1: 1z8pyfwC2t4dhlRaN8IL2Vz2Hao.roa (hash: okZD4KMt3vd7NMiadPiaHzBYrfOLxrrZpbs/oGs3PRE=)
2: 4PCFTZ1aepYvP13_Ep7q7mZBv_s.roa (hash: nxXggf/AC/RJxQoUxCNgb0lu+FwJmy4tkPULZ/J1w0w=)
3: cw4Zvy8v23MCMtosRVGjEro-LuI.crl (hash: 1AL9D3h7oRUymerR8HPnVPdN8Tw1DDY+IodD8i9QqJU=)
4: sZiDjovlZR7TPPXq724QB4yd_Ds.roa (hash: g0NC0qA2yq5MjWHr5RjOBshN8A2Yl9uqhpeNRfy6QdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e3:10:be:07:0c:b0:22:04:df:c8:4e:b5:eb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Validity
Not Before: Nov 4 13:01:03 2025 GMT
Not After : Nov 5 13:01:03 2025 GMT
Subject: CN=3eb85b9d4d435abae795eafde84b3e455b088270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:2c:25:b4:26:5b:08:b2:36:bd:07:9b:af:
b1:ba:47:ab:3f:bc:50:a2:58:39:dc:da:81:59:2a:
ab:a3:53:79:a2:ab:b4:13:be:a3:3c:6c:6c:c0:28:
9f:68:ca:f9:dd:88:0c:b1:bb:e0:5d:ab:18:f2:66:
54:20:e2:81:5c:ab:c6:50:9c:6f:c6:98:32:76:c2:
4e:e3:43:1d:b4:62:21:f9:ab:b3:e3:3c:82:e8:f9:
ef:5a:60:27:3d:65:84:cb:70:c1:db:08:7c:22:f7:
d4:a1:34:18:0a:6c:cd:e9:c3:a2:84:d7:85:ef:ff:
5a:15:44:cd:56:96:7d:86:3f:a4:2f:5b:be:c4:cb:
2c:45:1d:b9:95:db:bd:68:98:4d:de:b0:6f:3a:2c:
a6:ee:be:dd:e1:30:24:26:27:00:fa:4d:b7:2c:8b:
5b:1a:38:50:43:e8:16:da:0f:c2:ab:ea:de:ea:e6:
37:7d:9a:ee:14:6a:0f:fe:33:0b:23:a8:f3:9a:8f:
ee:fe:34:24:cd:76:c5:02:78:80:cd:c8:ab:cf:76:
d9:ca:4a:1a:5b:d5:b2:9e:36:1c:ab:74:6a:4a:f3:
39:f0:0a:95:ed:a3:30:ea:13:47:ab:2c:8a:42:3e:
8d:af:f1:74:94:42:dd:a7:91:e9:50:f2:fd:af:54:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B8:5B:9D:4D:43:5A:BA:E7:95:EA:FD:E8:4B:3E:45:5B:08:82:70
X509v3 Authority Key Identifier:
keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:80:06:bd:3e:cf:08:6c:00:87:7f:ae:72:41:66:8a:b9:
1b:f4:19:78:8a:5f:77:ec:6a:7c:42:7f:e0:47:8b:81:e6:b2:
9c:11:91:49:5f:c3:a9:c9:81:e1:82:21:c4:ca:70:8f:7b:63:
90:bd:ac:d0:63:e9:7c:7e:cb:26:32:17:76:d7:38:21:1f:e2:
6c:2a:4f:6c:3f:eb:8e:48:2b:e1:ea:46:90:ad:a1:6a:71:93:
2c:20:1e:11:0a:65:25:06:56:2d:f8:71:6c:68:9a:b1:7e:27:
2b:8e:c8:1a:31:ce:22:8b:13:09:ab:11:0e:25:bb:08:99:70:
6b:da:64:48:32:eb:e4:76:19:62:b3:2e:6f:4a:81:a4:3b:38:
66:a3:e3:00:50:1b:c6:f1:53:fc:63:9a:35:5e:66:16:df:51:
0a:b8:aa:fa:9b:22:38:59:c3:3f:57:41:ef:7f:03:2c:5c:06:
16:b8:20:28:e4:57:d6:03:eb:20:66:d5:c0:6c:62:f3:33:0b:
e8:b7:51:c6:95:1f:f8:0f:1d:02:ca:03:94:c7:3b:0b:d1:57:
a1:f2:19:a8:17:96:41:29:ff:e9:07:b7:ed:0f:a0:97:4e:00:
75:bf:3c:3d:a5:6d:79:ec:6d:15:c6:be:6b:fe:5e:83:04:ec:
0a:db:bd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:19 2025 by rpki-client