
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
File: w4KAxTALdIiKx-tL-mQX2aLnsL4.mft (raw, json)
Hash identifier: vly/Q/c7ayyQIaMxl3g9MZSm05sP56IrigOMOiiETJw=
Subject key identifier: 15:62:FB:5F:97:3F:83:C8:F8:25:08:3A:C3:34:E2:E9:20:25:1A:FD
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 019A5307CB3003863737312E1632D18F01E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
Manifest number: 0D6E
Signing time: Wed 05 Nov 2025 08:00:10 +0000
Manifest this update: Wed 05 Nov 2025 08:00:10 +0000
Manifest next update: Thu 06 Nov 2025 08:00:10 +0000
Files and hashes: 1: 0NsblolZdhQf6HryGcB18n8J9N4.roa (hash: u77IJyYZcK7YzbDTrAdipNzKO31d/DqdTktE+euJndQ=)
2: 1-O5PDCUIluNLwvL9ckZlTCiic5k.roa (hash: qhMDH/EIRf4uY8j8ZGgtmM3x6fh4+mOzTAkLJHzFbx0=)
3: 3LvafaHdOiY4sxoLX_gmBxqLmUE.roa (hash: 24ccmV+MNSGljhh423pCK03UEmX0iXEO3FcUYbtEFlg=)
4: 4l2IuTNstzGjNpiJFAwrychEOYw.roa (hash: m0X4eBCPHrx7Zmyz1UFRgVdtWA6FSM4O8cwU3fWGGhY=)
5: 8436f674G4X05xvwP0C936HzFw0.roa (hash: /J2oQYZ85KVDepCFbXpCbYaa0Oj460ejjf1xNXGW4Z8=)
6: 8ddhy9tWwbdT6YuDfe5AyBAl9Co.roa (hash: pZrOoiqX4rIC6PbaxG1zUT8RGSfoW+lq0tcfCxkDkAQ=)
7: EseDT4XrBGBs5m1XMkQxdKL6DRM.roa (hash: DF5lG0tUF3zWwo6hq2iPtURspUXksF6gXOa2o6MwSeg=)
8: IpV-26RSBCyAkVzi7Inj30YgLcM.roa (hash: ivn8CGpeMH35yLdwrBkCj0ryi6QOV70S64s8vxb45yQ=)
9: QkhJmR64J_fio_ZcoWDCOqbBN24.roa (hash: OYz2fnh0LE0HbS2bx5pxQ3mdkMMJfDH5810V+9CjEvw=)
10: SGMklr5AeE8jGTkv_5TNxH2UtBY.roa (hash: 5/gm3b3ZHQxuqtVGihJbcna/seeg7cLgU18tVnIiLhE=)
11: T7t5Bx6X2DN_5tf4efrA7vnqj2k.roa (hash: td8rBwHJnN+UP91bKfMfmPAq5aMPIDcnHWXi4WyoQek=)
12: VQ11w3hpyPj64iBdjBQvh3H40IY.roa (hash: PEPluvvkxQgJfKGG6MItpXtdaPRghraDjvwTXv4cWlU=)
13: VxDCjm6wjynMra5WGkzJGoCPrhs.roa (hash: 6jDW1q/fW7zMLlE0XVbr19PIoHkbmzCNYkeTGYpRMW4=)
14: XuxgvLAd05qq4hqx4c_u4WYR7dY.roa (hash: zkLSNkHMYRl5bJ5dZozHFmcx3BcVtlFo0wC7SXYmwLQ=)
15: iTJFlrSsWbholkyOYEXXgVs3FiY.roa (hash: Jl4uUb/G3mQj8xIpDsHAVqtzDEj+sUXfj7G+zwRxdNk=)
16: jwC74-F5iREL188mldERk81FXug.roa (hash: ddYPoTatj6nI/eSrzriO9qo6/69S19UgdJCWsEfW64k=)
17: nPembSTO0FXvbw8zcrfb1ZNsGHs.roa (hash: eFcHKopiqLAXcwkADSpifmFlMBENxHJyplWhREP1i08=)
18: rop6Si-gvflJGlaMTGjDBpHpYYI.roa (hash: Vieoxx0CWOeDqKFomK10FvV28nAZrZf1I36QMg8NMrc=)
19: w4KAxTALdIiKx-tL-mQX2aLnsL4.crl (hash: vipVmr4BWXN8KnO84z1GdtJN8O2Ps75DN5lCQceAeUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:cb:30:03:86:37:37:31:2e:16:32:d1:8f:01:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Nov 5 08:00:10 2025 GMT
Not After : Nov 6 08:00:10 2025 GMT
Subject: CN=1562fb5f973f83c8f825083ac334e2e920251afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:59:cd:df:e9:d6:e6:1f:2b:4c:3f:e8:5b:
f0:76:1f:ac:be:9a:7a:f0:01:b4:d7:a8:56:46:39:
ae:73:c7:d4:07:2d:76:91:38:3d:97:48:84:fe:41:
6b:ef:83:ab:5f:ed:75:b1:56:97:43:3e:67:ff:ee:
a3:8f:3e:96:d8:66:46:5e:c2:3f:78:b1:98:f9:cb:
98:2e:75:a4:44:d6:ad:6b:b8:e2:6e:b7:3e:40:7b:
31:18:86:07:0f:e2:63:b0:3d:19:5c:87:72:14:a5:
93:a5:b6:68:91:ed:5d:78:34:6a:58:8c:5b:00:56:
98:e4:80:4c:bb:dc:b4:b5:02:89:f8:9b:bf:58:a6:
0a:5e:6e:e4:50:0c:7f:fc:bb:0c:8e:4e:67:65:66:
20:5d:80:e4:d5:e4:ad:e7:81:85:73:b8:01:2a:3c:
22:fb:53:9c:14:75:94:25:8a:84:8a:9e:ee:56:42:
bd:07:e0:ec:ab:32:5e:d7:38:5e:f7:67:a4:82:43:
45:f9:28:e5:e0:1c:6b:cc:ce:e3:b1:50:89:11:d3:
06:61:32:1d:cc:af:66:e5:29:f4:b9:4f:90:62:e6:
42:4c:e7:0b:f7:55:08:c0:e9:14:46:13:0b:7f:0f:
17:46:66:bb:24:58:cd:f8:16:a1:a6:d7:ff:80:d8:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:62:FB:5F:97:3F:83:C8:F8:25:08:3A:C3:34:E2:E9:20:25:1A:FD
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:98:29:27:fb:24:47:5a:9f:89:c9:a0:eb:43:4c:f5:79:8a:
c4:8a:10:26:14:79:79:8d:18:2e:6e:bd:1d:bb:97:b6:48:b2:
b0:6f:5a:82:83:bc:7c:37:d8:77:fa:64:1a:0e:f1:e8:48:51:
74:2b:de:44:b1:cc:95:c9:40:d2:cd:22:2a:de:5e:d3:69:95:
9c:d7:8e:e4:fc:d5:60:12:fe:77:6f:04:6e:3d:08:6d:33:e1:
20:ca:75:c4:37:f3:08:ee:53:95:4d:11:25:e4:b2:43:fb:81:
9c:bb:32:4e:e4:f5:49:df:84:c5:ce:3a:fd:d9:df:3e:0c:57:
8b:32:98:d8:fc:cd:89:d9:c4:c2:3e:2f:81:73:34:7e:62:3c:
bc:5e:f2:61:de:e6:b7:e0:38:5f:21:74:21:2b:ad:96:be:ce:
fd:91:86:c8:18:1b:14:18:16:da:bc:e8:a0:e0:73:b1:c7:47:
d7:85:51:55:37:8a:66:7d:8f:84:73:54:d6:46:9b:70:8e:26:
e7:3d:27:29:bd:c8:57:c4:b0:38:aa:21:cf:91:34:57:c4:8e:
7f:cf:9b:52:84:b5:b2:f1:1f:93:1b:78:70:53:d7:50:5d:3b:
e5:cc:05:73:2a:16:69:c9:65:80:0d:b3:0d:4e:d1:f2:6b:2b:
9c:65:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:53:43 2025 by rpki-client