Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: b06FyuODMfm/t9MzoTUS/HD2sT8jAlFJNDat1C9jIeY=
Subject key identifier: 82:07:52:AF:5F:22:42:EE:E0:56:4E:00:37:E5:83:83:E2:B4:B1:F7
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 019A52D236AA98A0984B51264E0A314753ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 1426
Signing time: Wed 05 Nov 2025 07:01:39 +0000
Manifest this update: Wed 05 Nov 2025 07:01:39 +0000
Manifest next update: Thu 06 Nov 2025 07:01:39 +0000
Files and hashes: 1: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (hash: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=)
2: GoeAUL2QksRS16LiLx9M0SmG6h8.roa (hash: Lp7ZvoPe3FFQc8UoBl571bW941fIgYX0UUaKwSRXqLI=)
3: p9gQbHg8IpMtNLW0NQ42q_UAiDc.roa (hash: t3Lsla/WvydRj60ad7MeBwokpBl+kvF1NmkVZ9213jY=)
4: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: fKgHKwQD9BOXt6g9RjM/imHP2HeSoIuej+jCyr5SmlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:36:aa:98:a0:98:4b:51:26:4e:0a:31:47:53:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Nov 5 07:01:39 2025 GMT
Not After : Nov 6 07:01:39 2025 GMT
Subject: CN=820752af5f2242eee0564e0037e58383e2b4b1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:29:11:af:1f:d6:62:1f:fc:19:b8:df:26:
7b:e5:0a:34:cc:8f:c7:41:94:e5:7e:52:54:3d:d9:
80:48:7e:66:38:cd:98:04:85:4c:f6:77:d8:d2:b5:
d0:7b:60:c7:d8:8d:40:72:e2:e2:ed:d1:db:c1:1f:
e5:fd:1f:f3:cd:bb:28:ed:7d:e4:d5:3d:bb:f1:ef:
25:e8:6d:08:71:e1:17:fe:c9:f5:f2:8f:3c:41:e5:
58:07:fa:8d:5d:5c:a4:3d:73:cd:7d:97:be:ec:8f:
a1:c2:3a:47:2f:b1:d5:99:0f:7c:ed:e0:78:ba:1a:
25:4a:d0:b9:e1:d7:d9:dd:77:06:2b:28:36:31:91:
3c:ee:17:a0:f5:b7:4e:4d:50:8a:ad:bb:8e:aa:b1:
d9:6e:53:e9:a8:0d:bb:48:a0:aa:cc:36:a8:38:6b:
77:39:82:cc:b4:52:3e:55:02:05:50:64:3b:d0:af:
70:c0:56:dd:80:55:0b:c6:aa:26:f3:64:f6:33:b1:
a9:47:4b:58:ea:ae:64:00:5d:21:cf:78:2e:52:25:
5f:96:61:25:cc:0b:ac:d3:09:0e:19:61:1b:62:65:
9e:e4:de:6d:87:bc:6b:a3:a4:2c:aa:ad:85:56:3a:
1e:d5:15:f9:5c:c7:9c:5d:55:24:e4:37:a8:eb:d5:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:07:52:AF:5F:22:42:EE:E0:56:4E:00:37:E5:83:83:E2:B4:B1:F7
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:67:79:da:f9:95:3b:23:d9:c9:84:be:82:d9:39:69:53:5f:
91:fb:92:80:ea:fd:c0:59:4c:16:7a:92:6f:c6:fa:29:75:cd:
10:ea:62:57:3f:ce:2c:bb:ed:bd:5c:91:f8:b2:4d:49:e8:e5:
32:ee:8f:d1:ec:a8:20:10:36:10:7b:78:bb:2e:6f:4d:6d:2f:
10:38:11:aa:da:e6:6b:5d:e3:5f:e3:4f:d8:4f:7f:fc:4e:25:
a9:d8:8e:81:e7:80:3b:85:17:5e:73:e2:e9:4c:c9:db:1f:b5:
dd:8e:be:8c:61:2c:51:65:f8:89:be:61:3f:86:ad:cd:9f:f8:
25:e8:bf:bc:23:b5:d4:a1:55:15:2c:3f:6e:d2:0b:6a:ba:2b:
9e:7b:03:33:fe:78:cd:8b:4f:3c:fd:d8:b2:23:f1:90:84:d2:
f6:d0:2e:d7:22:99:34:bc:5c:88:14:2e:48:14:f8:0f:f3:b9:
ee:61:34:ef:df:d6:c6:d4:a8:36:6f:43:7f:40:6c:5a:ba:43:
c8:9c:21:9a:30:4a:f5:1b:cb:d2:50:bf:ee:80:5e:ce:01:11:
90:11:cf:d1:2e:e3:d2:d0:5c:36:ce:ba:45:db:13:c2:29:db:
8c:7f:07:34:30:d7:44:f4:10:f9:47:b5:f1:0d:bc:02:8e:a6:
cb:72:8e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:58:58 2025 by rpki-client