Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
File: w_8EiaBkHM8dwes7Z08_YRFjuu4.mft (raw, json)
Hash identifier: hfkoI17qr0kT6r0n90RIxVV/BRSRzNApeji/gIT6D7k=
Subject key identifier: 37:2C:C4:7F:34:C8:24:D7:20:20:8D:94:7F:BF:97:44:D5:52:9C:9F
Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE
Certificate issuer: /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
Certificate serial: 019A5006EF871D4876DAEAC0B71FCEF2A3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
Manifest number: 1653
Signing time: Tue 04 Nov 2025 18:00:23 +0000
Manifest this update: Tue 04 Nov 2025 18:00:23 +0000
Manifest next update: Wed 05 Nov 2025 18:00:23 +0000
Files and hashes: 1: O3ljM5CB_2JtUI0Sdnkha5M5ERQ.roa (hash: NhJbXC81FRmcMSonVcZC+2A3GfW4bVjcRFKj0QoIURY=)
2: w_8EiaBkHM8dwes7Z08_YRFjuu4.crl (hash: aFDUS23/5C1XOG5kD3FRG6wTUQcEjQiE6ZL2Yax5zaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:ef:87:1d:48:76:da:ea:c0:b7:1f:ce:f2:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
Validity
Not Before: Nov 4 18:00:23 2025 GMT
Not After : Nov 5 18:00:23 2025 GMT
Subject: CN=372cc47f34c824d720208d947fbf9744d5529c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:f5:89:30:de:62:86:64:74:6e:66:47:7a:
6d:6c:83:df:3a:e3:8c:13:4e:e4:1a:e6:ac:aa:63:
76:c2:ea:73:1e:53:4d:4b:f9:27:2c:16:c8:9b:7d:
87:75:1a:11:9b:d1:49:5a:b7:e0:19:df:fb:4d:b4:
4e:d7:5b:39:57:3a:a5:97:62:6b:8f:d2:fb:a7:45:
cd:e4:82:99:45:d3:b4:18:0c:44:7d:45:aa:ac:c3:
ad:dd:b2:f9:b7:54:84:0b:3d:6e:7e:14:ac:b3:97:
b9:d5:97:de:2f:8b:01:c4:c8:ba:3c:97:f9:cb:4c:
10:b8:c6:e5:a8:82:c3:73:aa:86:b0:92:f2:f6:62:
dd:bd:21:df:23:3c:84:a4:eb:6a:51:97:59:f0:4e:
f3:d8:0c:31:cd:fb:e1:48:c7:52:c8:45:a0:1b:24:
4d:73:90:2f:91:a3:57:ad:e6:06:ea:76:35:f1:55:
75:56:60:4d:de:be:2e:1c:68:6d:a9:57:92:e1:36:
59:f0:5e:98:08:8a:6c:c5:c4:3d:5b:2b:8c:19:50:
4d:61:93:40:89:54:81:bb:12:06:86:e0:f0:2a:8f:
77:00:70:43:90:41:06:25:31:7d:5e:d7:b1:ca:ec:
5f:be:87:f8:0c:d5:7e:80:3a:9d:c4:64:91:5d:2d:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2C:C4:7F:34:C8:24:D7:20:20:8D:94:7F:BF:97:44:D5:52:9C:9F
X509v3 Authority Key Identifier:
keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cc:c9:41:f2:32:cc:3a:b6:48:f8:11:68:dd:f4:f8:e8:57:
dc:d4:d2:70:b8:ff:91:8a:75:77:d3:ca:04:93:69:46:d2:80:
b3:5c:6e:9c:cf:2d:44:c4:f8:6f:8c:9e:c7:99:b9:22:4e:6d:
7c:dd:3e:14:17:dc:76:2c:2a:5c:01:88:7c:ed:eb:70:6a:79:
c3:9a:0f:16:08:51:4b:14:39:59:58:e6:41:0e:e3:62:9d:b9:
cb:f7:12:73:af:54:3d:15:91:b8:4c:41:10:43:54:6e:ef:7d:
6a:66:ad:3e:16:92:15:a5:a8:4d:7e:16:bd:be:91:1d:27:de:
bb:3c:87:eb:71:5d:06:30:6b:36:bd:e0:d2:5e:01:b7:ad:37:
79:93:cb:6c:76:97:18:9c:1f:53:6a:94:74:ee:2e:56:4a:19:
79:d7:30:3e:45:de:8d:b5:d3:41:fc:da:7b:3c:a5:93:7d:2d:
65:01:01:40:27:a9:27:22:6b:e3:60:18:9a:59:92:28:69:da:
26:7f:e5:34:6b:3c:11:c4:3c:32:0b:ed:10:7e:5a:ea:23:3e:
ce:e2:bf:63:48:a9:2e:b2:4f:b5:0e:0e:26:47:78:87:95:8d:
37:f0:f6:53:2f:40:c0:eb:e9:e6:3a:6e:c5:6f:e8:10:a6:c1:
ce:91:b8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:34 2025 by rpki-client