Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
File: wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json)
Hash identifier: VXLG4OXQn3/rLVKuoy4XCJrKNItUOX3apIfQ325kifo=
Subject key identifier: F3:4E:D1:A3:6B:B8:2A:5F:0D:58:AB:C4:DD:E1:5D:54:B9:B4:BD:B4
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial: 019A4DAAB774DAE83E44FF263DC76032B2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
Manifest number: 1718
Signing time: Tue 04 Nov 2025 07:00:24 +0000
Manifest this update: Tue 04 Nov 2025 07:00:24 +0000
Manifest next update: Wed 05 Nov 2025 07:00:24 +0000
Files and hashes: 1: 4nK8mBu8KH58Djeo3td_0Crw3KY.roa (hash: zQgvuYZT7k7Pe+7tNXcpWarsNSwzQ+DP9gqFroEYWW0=)
2: LkEe0RaAHIQyFAgqLFfu7IF-fJc.roa (hash: NiYCGksYq+dLcXAYzq8f7QTlHaWi1LxHnyypP6wHNrE=)
3: lxDEqFj6zW07SLHQjqVmomdaapE.roa (hash: lF5Ce2oOR8ADABZHpXBmLxZpyS2ZCE5Qt5VxQq3I6OY=)
4: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: qeWAf98D3OrKXpaMAmkDq9pUp1MLqLJAY6qH2YTBBPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b7:74:da:e8:3e:44:ff:26:3d:c7:60:32:b2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Validity
Not Before: Nov 4 07:00:24 2025 GMT
Not After : Nov 5 07:00:24 2025 GMT
Subject: CN=f34ed1a36bb82a5f0d58abc4dde15d54b9b4bdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:33:19:7b:95:ad:32:c2:00:cd:b5:4f:c3:
25:b9:98:3e:c6:ad:f9:c3:25:22:de:b9:1b:45:fa:
e5:5a:ab:47:c2:3d:77:3e:29:5c:b1:a1:a1:45:8b:
09:ce:a0:f9:83:bb:cc:e3:9c:29:0a:5c:0a:bd:2a:
9e:74:48:bf:cd:2a:ee:b1:76:4a:e2:d0:70:f7:7a:
30:97:58:81:25:55:6c:91:13:40:4a:c2:a1:59:69:
5e:ea:76:4e:99:ec:f7:d8:6c:ee:70:c1:46:66:84:
27:30:ad:21:92:e1:c2:42:0c:02:86:29:1e:fb:ab:
a6:66:c6:56:03:09:ed:22:df:47:09:05:ab:10:7c:
e5:71:9a:44:ff:c7:73:54:2d:8b:ff:82:0e:98:e9:
7c:96:81:c3:19:33:f8:60:96:e5:46:d7:f2:bc:a7:
64:aa:2d:18:08:b5:62:37:b1:b3:0f:b7:a1:f2:b0:
25:a5:17:77:9f:0c:a6:71:6c:49:78:23:1c:e7:96:
1f:51:7a:ee:77:84:10:43:8c:69:ae:e3:e0:77:ac:
a8:e1:4a:25:d1:5b:c3:24:31:b9:7a:69:4c:72:7d:
43:67:09:73:e0:c8:61:c6:65:77:cc:e5:ce:16:05:
2c:ad:1b:4d:a7:6d:b4:cb:14:5a:7d:d2:77:6f:d6:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4E:D1:A3:6B:B8:2A:5F:0D:58:AB:C4:DD:E1:5D:54:B9:B4:BD:B4
X509v3 Authority Key Identifier:
keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0f:00:71:f9:44:5d:6b:76:29:d6:ad:77:03:0b:19:0a:a6:
66:f8:85:61:7b:22:81:b1:fd:4a:ec:69:6f:be:87:9b:e7:cc:
9a:a1:b9:49:d6:29:5b:de:17:cd:1a:33:10:39:71:82:b1:44:
08:60:ab:dd:bf:c8:42:a3:f2:6c:d1:a7:ea:90:12:3b:8a:2c:
58:04:f5:4b:77:a1:6b:be:a9:8b:bc:55:ea:e6:fc:bd:45:51:
f9:a4:a6:82:71:44:91:22:ee:40:94:d0:91:d7:2a:ba:85:84:
7c:2f:be:70:d6:da:8a:23:a5:a0:3a:16:ad:da:40:2d:fb:59:
18:38:75:f7:53:c4:ff:7c:66:40:31:d3:8f:69:b7:36:b8:4f:
6a:24:75:38:a1:57:e2:1e:1c:fa:03:37:85:6a:ac:e5:02:99:
e2:bb:21:ef:f5:dd:bf:ee:06:84:0e:9a:7e:3d:ff:79:4d:af:
50:7b:82:80:fd:aa:49:b8:33:93:b0:49:4e:29:f7:be:7d:fd:
7a:a2:4c:33:3d:74:be:38:d4:76:f2:fb:7a:6c:0b:e2:99:50:
44:3b:64:d7:c5:95:41:fd:fa:45:ac:e3:59:db:f6:28:b5:ad:
d1:ce:b9:b7:ad:e9:ca:59:b2:de:73:13:46:12:58:8f:99:d7:
4a:5e:d3:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqrd02ug+RP8mPcdgMrL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzM1ODY4MmRmM2RmOGJkYzcwMjQ1MDdmOTJlY2ZjNWFl
MDk3YmIwHhcNMjUxMTA0MDcwMDI0WhcNMjUxMTA1MDcwMDI0WjAzMTEwLwYDVQQD
EyhmMzRlZDFhMzZiYjgyYTVmMGQ1OGFiYzRkZGUxNWQ1NGI5YjRiZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwszGXuVrTLCAM21T8MluZg+xq35
wyUi3rkbRfrlWqtHwj13PilcsaGhRYsJzqD5g7vM45wpClwKvSqedEi/zSrusXZK
4tBw93owl1iBJVVskRNASsKhWWle6nZOmez32GzucMFGZoQnMK0hkuHCQgwChike
+6umZsZWAwntIt9HCQWrEHzlcZpE/8dzVC2L/4IOmOl8loHDGTP4YJblRtfyvKdk
qi0YCLViN7GzD7eh8rAlpRd3nwymcWxJeCMc55YfUXrud4QQQ4xpruPgd6yo4Uol
0VvDJDG5emlMcn1DZwlz4MhhxmV3zOXOFgUsrRtNp220yxRafdJ3b9Y0QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNO0aNruCpfDVirxN3hXVS5tL20MB8GA1UdIwQY
MBaAFMJzWGgt89+L3HAkUH+S7Pxa4Je7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDct
ZTg4NDY1YzQ2MTg2LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDctZTg4NDY1YzQ2MTg2
LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAg8AcflE
XWt2KdatdwMLGQqmZviFYXsigbH9Suxpb76Hm+fMmqG5SdYpW94XzRozEDlxgrFE
CGCr3b/IQqPybNGn6pASO4osWAT1S3eha76pi7xV6ub8vUVR+aSmgnFEkSLuQJTQ
kdcquoWEfC++cNbaiiOloDoWrdpALftZGDh191PE/3xmQDHTj2m3NrhPaiR1OKFX
4h4c+gM3hWqs5QKZ4rsh7/Xdv+4GhA6afj3/eU2vUHuCgP2qSbgzk7BJTin3vn39
eqJMMz10vjjUdvL7emwL4plQRDtk18WVQf36RazjWdv2KLWt0c65t63pylmy3nMT
RhJYj5nXSl7T8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:49 2025 by rpki-client