Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File: WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier: rcc5m5cYF/EJUwWj0Kct/zzyk4bUNyQvV2OstoPxL5A=
Subject key identifier: 46:B5:AC:CC:FB:4C:78:59:ED:00:77:86:EB:00:C0:3B:11:C6:C0:16
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 019A4EF42DF58C6547CEBB7733647DE1F125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:16 +0000
Manifest this update: Tue 04 Nov 2025 13:00:16 +0000
Manifest next update: Wed 05 Nov 2025 13:00:16 +0000
Files and hashes: 1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: /O/qg1NjzqRxV8390NABVyCHPbUzEVgwj5DKBF/GhuQ=)
2: v9e6BQrrpkX4J49zO0X4mqGyYf8.roa (hash: BAka5v89zPoK2V8W4Aeck9ZsQ+ba33dD3QTkdH9ixgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2d:f5:8c:65:47:ce:bb:77:33:64:7d:e1:f1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Nov 4 13:00:16 2025 GMT
Not After : Nov 5 13:00:16 2025 GMT
Subject: CN=46b5acccfb4c7859ed007786eb00c03b11c6c016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:7d:a9:de:80:4c:75:65:ea:25:45:9c:2f:
c9:3d:1d:3d:34:e2:52:9e:b3:29:b6:92:4f:52:a6:
78:25:1b:11:d3:62:fd:76:d2:0a:54:9b:63:44:99:
d6:00:81:c1:dd:54:62:4a:c9:1e:1e:e1:b5:a8:da:
56:7e:aa:2a:79:fc:e2:71:2b:7c:a7:06:e6:65:73:
11:78:a3:fa:d7:c3:ed:78:6b:ab:18:be:9e:1f:69:
d8:bb:c1:98:aa:35:34:91:4f:1e:49:28:a7:ee:b2:
01:06:73:10:cf:26:91:ba:2e:66:27:04:f0:9a:75:
33:4f:51:3f:e4:5b:40:65:22:41:1c:0a:d5:d7:41:
5a:9e:dd:8f:5d:4f:ea:1c:4a:22:c7:c7:9b:d7:2f:
b4:79:31:e5:38:e4:59:f3:3a:f2:2d:98:a2:d8:ff:
c0:17:ae:d1:2b:f9:a8:84:79:cb:a4:8e:b6:17:66:
a2:77:11:99:47:ef:76:be:83:f5:10:1e:dc:46:65:
42:9b:15:1b:69:fe:32:4f:a6:78:2d:bc:c9:33:5d:
72:c0:50:94:74:82:72:c6:b2:e6:9a:6a:6a:13:3e:
4e:b6:a8:5d:09:6d:49:74:97:2d:13:47:eb:b8:ef:
1e:23:6b:de:1b:3e:7e:72:49:62:00:06:41:9a:1a:
0a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B5:AC:CC:FB:4C:78:59:ED:00:77:86:EB:00:C0:3B:11:C6:C0:16
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:59:5b:df:78:cf:b9:6e:42:1d:e5:2d:31:f9:69:46:3a:47:
80:98:44:be:5b:df:96:3b:e2:d1:03:62:1a:09:25:c0:7d:2d:
48:c6:ad:de:eb:75:51:4b:23:94:8c:09:4b:45:4d:c1:74:97:
53:cf:eb:2c:e4:a6:c0:a1:e4:a1:75:c3:a9:6d:e5:46:a9:60:
80:62:9b:66:ff:8e:d7:5c:4a:16:f6:a6:ab:e3:11:15:d6:39:
1a:dc:a6:e8:a6:67:71:93:1d:b1:0b:0d:cd:ed:3d:bd:a6:43:
f5:ba:77:32:31:1f:fc:78:d3:29:5a:6d:94:b1:f1:41:c5:03:
2c:4a:28:59:62:79:fa:84:0f:fa:f1:40:7e:ce:41:af:31:24:
19:cc:03:3b:fd:7b:2a:b2:73:41:79:c7:43:f0:c3:9f:7d:94:
df:e4:41:68:89:b0:9e:e6:ca:2b:9e:0a:cb:41:af:2b:33:7c:
99:81:10:79:ad:38:32:61:86:e2:07:a1:1d:8e:2e:a7:38:2b:
25:4f:d2:af:40:e2:a7:c9:a3:a4:85:62:95:f7:0f:b3:ce:2d:
29:63:09:4f:72:56:21:a1:75:08:2a:ac:14:1e:a3:b4:13:7f:
f4:c1:4e:e9:54:ca:dd:0b:bb:ce:ff:fb:05:ba:25:a3:e1:e5:
d5:cc:06:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9C31jGVHzrt3M2R94fElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhY2IzMDg5NDYxZTFmNWY4OTg0Yjc3NDJjODliYjY4ZjFi
ODhjMTIwHhcNMjUxMTA0MTMwMDE2WhcNMjUxMTA1MTMwMDE2WjAzMTEwLwYDVQQD
Eyg0NmI1YWNjY2ZiNGM3ODU5ZWQwMDc3ODZlYjAwYzAzYjExYzZjMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FR9qd6ATHVl6iVFnC/JPR09NOJS
nrMptpJPUqZ4JRsR02L9dtIKVJtjRJnWAIHB3VRiSskeHuG1qNpWfqoqefzicSt8
pwbmZXMReKP618PteGurGL6eH2nYu8GYqjU0kU8eSSin7rIBBnMQzyaRui5mJwTw
mnUzT1E/5FtAZSJBHArV10Fant2PXU/qHEoix8eb1y+0eTHlOORZ8zryLZii2P/A
F67RK/mohHnLpI62F2aidxGZR+92voP1EB7cRmVCmxUbaf4yT6Z4LbzJM11ywFCU
dIJyxrLmmmpqEz5OtqhdCW1JdJctE0fruO8eI2veGz5+ckliAAZBmhoKZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa1rMz7THhZ7QB3husAwDsRxsAWMB8GA1UdIwQY
MBaAFFrLMIlGHh9fiYS3dCyJu2jxuIwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAt
YWM1MzZiMmFiNGY4LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAtYWM1MzZiMmFiNGY4
LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVlb33jP
uW5CHeUtMflpRjpHgJhEvlvfljvi0QNiGgklwH0tSMat3ut1UUsjlIwJS0VNwXSX
U8/rLOSmwKHkoXXDqW3lRqlggGKbZv+O11xKFvamq+MRFdY5Gtym6KZncZMdsQsN
ze09vaZD9bp3MjEf/HjTKVptlLHxQcUDLEooWWJ5+oQP+vFAfs5BrzEkGcwDO/17
KrJzQXnHQ/DDn32U3+RBaImwnubKK54Ky0GvKzN8mYEQea04MmGG4gehHY4upzgr
JU/Sr0Dip8mjpIVilfcPs84tKWMJT3JWIaF1CCqsFB6jtBN/9MFO6VTK3Qu7zv/7
Bbolo+Hl1cwG6w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:02 2025 by rpki-client