Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier: Y4T2psX4knNxQqadDt/hF5PUX2SFLji7YO3/94w2qp0=
Subject key identifier: FE:86:5E:5F:EA:E3:EB:0F:E9:B3:45:FF:8A:F0:50:F4:66:AE:DF:41
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 019A50E36A5B4C53B202286AB681E1268BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:12 +0000
Manifest this update: Tue 04 Nov 2025 22:01:12 +0000
Manifest next update: Wed 05 Nov 2025 22:01:12 +0000
Files and hashes: 1: TPJl-AnyNAOqe20bKX-5t3SrM4E.roa (hash: X6UgSBrAhCQSnYi9DhkcF/hdYKpsagcSW2GIdlVKxUg=)
2: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: P/NSAXRkLyxt2KHblTlCtna8xpSAJDsVwyuWprozQIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:6a:5b:4c:53:b2:02:28:6a:b6:81:e1:26:8b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Nov 4 22:01:12 2025 GMT
Not After : Nov 5 22:01:12 2025 GMT
Subject: CN=fe865e5feae3eb0fe9b345ff8af050f466aedf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:da:eb:63:ff:fb:e5:b4:34:5d:37:02:d1:ef:
54:a6:d4:ea:5a:f3:30:6e:bb:5e:10:32:bf:21:21:
cc:17:79:74:1b:bf:54:2f:f7:48:f2:7f:5d:66:bd:
4f:9f:06:59:02:8d:3c:5f:f5:1e:3b:13:13:b0:58:
d1:c4:3a:97:c6:dd:d5:95:c4:79:96:c3:c6:5c:40:
9a:83:28:9f:65:30:71:3e:af:c7:90:22:14:da:83:
13:1e:7d:6f:bb:24:a2:a5:17:e8:34:23:28:8d:4c:
c2:41:34:25:d1:55:1f:79:7d:61:90:38:a8:e5:aa:
33:17:07:98:26:78:b8:4e:db:44:6e:3a:4a:8d:84:
68:7c:84:e1:dd:b0:27:a6:07:df:5c:1f:49:27:32:
84:42:74:b9:f6:13:d4:7a:8c:9f:00:8f:e3:26:ab:
c7:2f:18:7a:1f:51:96:91:36:79:d3:c6:e7:20:c8:
17:4e:f2:1a:ec:0a:1f:e6:a6:88:ae:2c:73:20:5c:
a2:ba:20:36:62:68:3f:c6:2d:6e:b0:ac:5c:10:a4:
8b:7b:6a:d6:b5:a6:3d:a7:cf:3c:9a:45:dd:75:ef:
55:bf:27:44:ca:17:2b:34:79:9e:d5:4e:9c:b3:bd:
dc:38:ef:da:9e:b9:b6:a8:7a:ae:e2:fd:96:6c:59:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:86:5E:5F:EA:E3:EB:0F:E9:B3:45:FF:8A:F0:50:F4:66:AE:DF:41
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0a:1a:70:d2:6f:89:c3:f7:9d:b2:a4:ab:8c:aa:2e:9e:53:
da:a2:d4:ee:16:8a:25:c7:3d:b1:15:bc:08:50:eb:1d:3f:14:
03:cb:31:69:6c:b5:81:fd:15:ff:96:d2:0a:56:37:31:f4:31:
49:98:46:35:0d:b9:27:8b:31:1f:f3:68:e3:08:77:06:1e:2c:
e7:58:cf:60:92:27:7c:b4:ab:76:6a:ef:b8:ed:b0:4f:ee:a5:
4b:f9:91:60:f8:1e:7c:2b:c3:50:b1:c0:14:55:19:88:83:7c:
da:6d:eb:5a:e0:66:3b:49:11:16:20:9b:18:0c:81:c3:13:66:
28:1a:12:8e:85:68:fd:7f:b6:c0:69:92:ec:25:a3:c3:b5:d3:
b0:04:a9:fe:f0:d5:d4:83:89:8b:b9:75:76:17:1d:16:25:c7:
6a:1a:0c:e0:38:bc:e6:89:da:14:10:a2:92:d4:18:02:d6:cd:
a8:32:9e:68:1d:15:c1:dc:ac:cf:5d:0b:59:e6:9e:83:1b:f5:
22:11:bc:76:b4:e5:f0:90:89:c2:80:f1:72:36:92:51:ae:53:
8e:6a:b5:8c:4f:55:f6:6f:f3:f1:a4:3e:ab:00:31:12:3c:52:
97:18:74:76:fe:e3:77:16:7c:07:0b:d8:61:24:0f:5d:35:c3:
0f:a2:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:43 2025 by rpki-client