Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier: WHwHP2Y4Xx1zOgjt0HXYIMO0js5apSkOPNmPJjKrq70=
Subject key identifier: 01:7E:7C:37:75:B2:8F:1D:AA:94:A8:CE:18:F0:4A:77:3F:6C:80:D1
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial: 019A4FCFDF5E92A8B7D43DA67469527E48A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number: 16BC
Signing time: Tue 04 Nov 2025 17:00:14 +0000
Manifest this update: Tue 04 Nov 2025 17:00:14 +0000
Manifest next update: Wed 05 Nov 2025 17:00:14 +0000
Files and hashes: 1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: XZ69wTCsS+gqzN2KVSUfD773t5PV6NRAXVDZX3S1zIk=)
2: kMkaJavkPA06Y44CWRSY630HVLw.roa (hash: T85LjnoIHLJZIbJyI8O+ldJqpb1UlV1mAtOahfZHzpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:df:5e:92:a8:b7:d4:3d:a6:74:69:52:7e:48:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
Validity
Not Before: Nov 4 17:00:14 2025 GMT
Not After : Nov 5 17:00:14 2025 GMT
Subject: CN=017e7c3775b28f1daa94a8ce18f04a773f6c80d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:2d:e1:bd:1d:11:7b:dd:18:cf:f7:e7:74:
1a:d7:ef:9e:27:5c:ad:1b:b3:c6:04:0f:57:ba:18:
20:35:d3:d7:1e:98:a3:e6:1b:f4:a0:95:9a:7b:3a:
66:be:a1:34:45:78:bf:70:a0:78:a0:6b:81:b6:d4:
b2:e9:a8:9f:ec:32:03:9b:27:7d:22:c2:03:34:2d:
15:76:a9:d5:1b:20:8b:c2:79:c8:af:04:9f:a7:01:
ed:7c:c5:34:9f:a3:14:d8:45:dd:e0:fa:c0:e8:2c:
82:e0:b2:ec:0d:f9:d1:fd:df:3c:93:b5:31:89:e8:
20:2a:2c:a8:e7:67:9b:1d:2f:b3:16:ee:1a:ce:4b:
05:cc:c4:69:06:96:03:c4:d3:13:17:53:57:17:59:
8b:7f:74:3a:69:3c:f7:26:7d:3b:7b:aa:10:4f:a2:
02:5a:9e:85:d0:04:89:84:14:06:f4:28:d1:47:3b:
a7:9d:90:6a:c3:c9:31:b6:ed:57:0e:4b:d3:35:c8:
32:88:db:fe:98:b9:ec:f9:72:0b:7a:cf:77:f5:71:
8e:9f:34:93:f6:5c:6c:c3:c8:b2:c4:93:35:ca:3b:
55:74:78:ce:55:3a:89:68:98:23:4f:14:20:a7:2c:
41:15:7e:9b:ac:db:4c:f9:7c:48:64:bf:30:90:af:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7E:7C:37:75:B2:8F:1D:AA:94:A8:CE:18:F0:4A:77:3F:6C:80:D1
X509v3 Authority Key Identifier:
keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7e:ae:64:04:09:ff:bc:60:ad:6b:b6:9d:42:2d:97:8a:03:
5e:22:00:5a:fd:f2:76:74:4a:ea:fc:57:99:08:01:f3:9a:57:
ba:b3:89:bf:59:43:cc:5f:ff:55:df:d4:bc:77:4d:a5:5e:23:
a3:77:01:62:b4:8a:c2:ec:35:7c:d4:8f:c1:f3:b1:e9:e0:23:
d2:41:ef:12:12:6a:40:e3:73:19:99:1b:9a:ca:a4:0e:44:c5:
ba:cd:9b:41:ee:03:47:4c:38:2d:90:45:b0:6d:76:cd:f3:eb:
13:c3:b2:0b:55:fd:af:3b:ac:6d:c3:3c:83:f8:36:af:de:d6:
a0:b2:2a:f4:d1:57:aa:2b:08:09:62:5f:9b:ef:a1:f5:ef:52:
b2:a6:3c:04:08:f8:db:4d:9e:79:67:e8:5a:32:dd:26:56:26:
9b:d8:7d:b3:b5:63:ae:72:0e:64:14:d1:d9:b9:82:32:61:43:
b6:13:12:12:d1:b6:33:7b:b6:fe:96:5a:b4:b1:16:c1:12:ae:
c3:b8:90:c3:94:45:66:5c:0f:24:78:89:01:fc:e1:dc:d6:db:
79:05:cc:1d:e9:3f:d2:da:bb:59:98:e3:07:af:48:d1:13:c3:
dc:8a:3a:c9:cc:4d:0f:65:fb:a3:13:4a:be:64:1a:5a:af:32:
dc:4b:d7:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz99ekqi31D2mdGlSfkilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NWQ5NjhmNWJlMWNlNjcxZTIwZDU4MzFjMTcwMDAxZjM3
MmQzZGQwHhcNMjUxMTA0MTcwMDE0WhcNMjUxMTA1MTcwMDE0WjAzMTEwLwYDVQQD
EygwMTdlN2MzNzc1YjI4ZjFkYWE5NGE4Y2UxOGYwNGE3NzNmNmM4MGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCMt4b0dEXvdGM/353Qa1++eJ1yt
G7PGBA9XuhggNdPXHpij5hv0oJWaezpmvqE0RXi/cKB4oGuBttSy6aif7DIDmyd9
IsIDNC0VdqnVGyCLwnnIrwSfpwHtfMU0n6MU2EXd4PrA6CyC4LLsDfnR/d88k7Ux
ieggKiyo52ebHS+zFu4azksFzMRpBpYDxNMTF1NXF1mLf3Q6aTz3Jn07e6oQT6IC
Wp6F0ASJhBQG9CjRRzunnZBqw8kxtu1XDkvTNcgyiNv+mLns+XILes939XGOnzST
9lxsw8iyxJM1yjtVdHjOVTqJaJgjTxQgpyxBFX6brNtM+XxIZL8wkK+ESQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAF+fDd1so8dqpSozhjwSnc/bIDRMB8GA1UdIwQY
MBaAFFhdlo9b4c5nHiDVgxwXAAHzctPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUt
OWVkMzVkNWIzNzM1LzEvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUtOWVkMzVkNWIzNzM1
LzEvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB36uZAQJ
/7xgrWu2nUItl4oDXiIAWv3ydnRK6vxXmQgB85pXurOJv1lDzF//Vd/UvHdNpV4j
o3cBYrSKwuw1fNSPwfOx6eAj0kHvEhJqQONzGZkbmsqkDkTFus2bQe4DR0w4LZBF
sG12zfPrE8OyC1X9rzusbcM8g/g2r97WoLIq9NFXqisICWJfm++h9e9SsqY8BAj4
202eeWfoWjLdJlYmm9h9s7VjrnIOZBTR2bmCMmFDthMSEtG2M3u2/pZatLEWwRKu
w7iQw5RFZlwPJHiJAfzh3NbbeQXMHek/0tq7WZjjB69I0RPD3Io6ycxND2X7oxNK
vmQaWq8y3EvXag==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:57 2025 by rpki-client