Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft
File: wBgy1Ug13BTpEp4LprJRSzlLydM.mft (raw, json)
Hash identifier: gRYKex182qMZCVIlXomrAdSQNWRqnyjvC6FJEdEi0fo=
Subject key identifier: BA:90:B8:E4:71:31:5C:11:77:F9:17:4B:32:61:66:C2:FD:6D:D2:BF
Authority key identifier: C0:18:32:D5:48:35:DC:14:E9:12:9E:0B:A6:B2:51:4B:39:4B:C9:D3
Certificate issuer: /CN=c01832d54835dc14e9129e0ba6b2514b394bc9d3
Certificate serial: 019A4D06403D4C0B0ECEE60A9881F1461B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 04:00:46 +0000
Manifest this update: Tue 04 Nov 2025 04:00:46 +0000
Manifest next update: Wed 05 Nov 2025 04:00:46 +0000
Files and hashes: 1: wBgy1Ug13BTpEp4LprJRSzlLydM.crl (hash: Cb6bxgvI6AQn0zE30nAa1TbxuqhBRTxV2eD1U43OpG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:40:3d:4c:0b:0e:ce:e6:0a:98:81:f1:46:1b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01832d54835dc14e9129e0ba6b2514b394bc9d3
Validity
Not Before: Nov 4 04:00:46 2025 GMT
Not After : Nov 5 04:00:46 2025 GMT
Subject: CN=ba90b8e471315c1177f9174b326166c2fd6dd2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e2:82:7a:ad:2b:4f:27:6c:97:a8:c4:c8:31:
90:74:e5:72:38:db:a0:d7:74:33:a2:b0:23:6e:c7:
04:c5:54:7f:11:7c:a5:fb:d2:17:9d:cb:c1:49:ff:
7a:cd:4b:c3:f2:7d:0d:01:65:25:c5:ad:39:00:81:
2b:86:a3:15:f9:c1:9d:11:7a:53:c8:e2:8c:91:c5:
83:1f:cc:20:53:7c:e1:a8:22:d9:2c:2d:e6:1d:f1:
33:ca:f2:1f:a8:1a:2e:17:0f:00:2e:4b:c9:70:72:
e5:13:52:4b:83:f0:e1:e6:fa:1a:8e:b5:f3:3f:26:
62:ba:04:66:f0:29:d8:e6:1e:cf:34:0b:47:7d:79:
51:b5:e1:ca:0f:a0:90:5a:5d:86:09:30:d8:1a:d7:
24:0d:25:27:86:9c:db:31:dc:15:51:85:49:44:2e:
bf:5a:b6:f3:6c:a3:26:8a:04:b1:2d:38:4b:8d:8f:
60:59:fb:77:83:0a:d2:b0:63:dc:81:fa:81:d8:7d:
ef:73:91:d4:30:35:ad:83:f4:01:49:8b:b7:4f:2e:
80:e6:ee:ae:0f:b9:a4:13:e6:17:db:b0:7d:9e:fd:
2a:b3:3f:d9:4e:b7:5f:de:61:ee:d6:ab:9e:41:4c:
92:16:3b:12:9a:b5:bb:52:02:bb:ed:f9:9b:94:0c:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:90:B8:E4:71:31:5C:11:77:F9:17:4B:32:61:66:C2:FD:6D:D2:BF
X509v3 Authority Key Identifier:
keyid:C0:18:32:D5:48:35:DC:14:E9:12:9E:0B:A6:B2:51:4B:39:4B:C9:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1a:8b:76:0f:1a:47:7f:6c:1b:86:86:e9:d0:15:61:64:59:
61:19:08:5e:af:02:bd:94:63:59:8c:0e:86:2d:39:1e:1a:4d:
86:7d:12:fb:be:ec:19:a3:33:ec:49:c5:d5:27:d9:3f:86:e0:
76:d8:86:f6:dc:6d:f6:ad:9d:6c:d9:19:3a:cb:c7:e7:80:c3:
68:e2:2c:9e:d9:1c:2d:a0:2b:12:67:16:e0:1d:dc:c1:81:0b:
01:fe:e5:68:e9:06:4f:b0:96:10:11:55:09:d4:2d:2b:30:94:
c2:73:4b:47:47:1d:de:7d:37:a8:97:cf:2d:13:36:01:1a:ba:
69:58:94:29:0b:a6:33:5a:42:0f:fd:c3:82:ad:55:07:e2:52:
80:6f:da:b4:2f:c8:5b:ef:c5:3e:09:9e:d3:a5:43:93:1f:43:
8a:9f:9b:a5:a9:5b:7c:a6:8d:52:62:e2:d5:b1:d1:e5:1c:29:
ce:89:9b:71:7b:ca:be:4f:e5:33:7c:64:7d:36:e2:67:3c:84:
8f:6c:25:98:36:cf:3e:14:c5:5d:09:49:45:c7:77:7a:6b:40:
fb:6b:3d:41:2a:10:91:7a:d4:c1:a1:76:39:5f:78:ae:97:0a:
88:97:9e:e7:4a:b2:8f:54:9b:b6:b9:86:01:20:7d:e5:a4:4e:
af:51:4e:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBkA9TAsOzuYKmIHxRhtHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTgzMmQ1NDgzNWRjMTRlOTEyOWUwYmE2YjI1MTRiMzk0
YmM5ZDMwHhcNMjUxMTA0MDQwMDQ2WhcNMjUxMTA1MDQwMDQ2WjAzMTEwLwYDVQQD
EyhiYTkwYjhlNDcxMzE1YzExNzdmOTE3NGIzMjYxNjZjMmZkNmRkMmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eKCeq0rTydsl6jEyDGQdOVyONug
13QzorAjbscExVR/EXyl+9IXncvBSf96zUvD8n0NAWUlxa05AIErhqMV+cGdEXpT
yOKMkcWDH8wgU3zhqCLZLC3mHfEzyvIfqBouFw8ALkvJcHLlE1JLg/Dh5voajrXz
PyZiugRm8CnY5h7PNAtHfXlRteHKD6CQWl2GCTDYGtckDSUnhpzbMdwVUYVJRC6/
WrbzbKMmigSxLThLjY9gWft3gwrSsGPcgfqB2H3vc5HUMDWtg/QBSYu3Ty6A5u6u
D7mkE+YX27B9nv0qsz/ZTrdf3mHu1queQUySFjsSmrW7UgK77fmblAxrdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqQuORxMVwRd/kXSzJhZsL9bdK/MB8GA1UdIwQY
MBaAFMAYMtVINdwU6RKeC6ayUUs5S8nTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JneTFVZzEzQlRwRXA0THBySlJTemxMeWRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mNWUyNmItNzg3YS00MDEzLWI2MzUt
ODU4MjgxMDIwOGM2LzEvd0JneTFVZzEzQlRwRXA0THBySlJTemxMeWRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9mNWUyNmItNzg3YS00MDEzLWI2MzUtODU4MjgxMDIwOGM2
LzEvd0JneTFVZzEzQlRwRXA0THBySlJTemxMeWRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRqLdg8a
R39sG4aG6dAVYWRZYRkIXq8CvZRjWYwOhi05HhpNhn0S+77sGaMz7EnF1SfZP4bg
dtiG9txt9q2dbNkZOsvH54DDaOIsntkcLaArEmcW4B3cwYELAf7laOkGT7CWEBFV
CdQtKzCUwnNLR0cd3n03qJfPLRM2ARq6aViUKQumM1pCD/3Dgq1VB+JSgG/atC/I
W+/FPgme06VDkx9Dip+bpalbfKaNUmLi1bHR5RwpzombcXvKvk/lM3xkfTbiZzyE
j2wlmDbPPhTFXQlJRcd3emtA+2s9QSoQkXrUwaF2OV94rpcKiJee50qyj1SbtrmG
ASB95aROr1FO5w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:50 2025 by rpki-client