Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
File: WVt4mYk7niSL5hVd9EX2MK5daHI.mft (raw, json)
Hash identifier: NJ371JwaxoykQY6XalxVGXFchYR4jD20BBUQOkniJMw=
Subject key identifier: 3A:D3:A3:FE:90:10:31:28:02:ED:43:C5:71:A7:2F:BF:69:76:F4:4C
Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
Certificate issuer: /CN=595b7899893b9e248be6155df445f630ae5d6872
Certificate serial: 019A4DE205A9E71B244D061D337EF458A5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 08:00:49 +0000
Manifest this update: Tue 04 Nov 2025 08:00:49 +0000
Manifest next update: Wed 05 Nov 2025 08:00:49 +0000
Files and hashes: 1: 5-_m5sx2pOrKBnn6vsQwme9LIWs.roa (hash: h/D8Ki0B/ZgXWanH4BZ9jNHNZb1ZLuVPvKx+u3l030A=)
2: WVt4mYk7niSL5hVd9EX2MK5daHI.crl (hash: XvfHP9HRmWCIVcB8ZnAGyw4JRmCGIUMxYTLa8Cgm23E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:05:a9:e7:1b:24:4d:06:1d:33:7e:f4:58:a5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872
Validity
Not Before: Nov 4 08:00:49 2025 GMT
Not After : Nov 5 08:00:49 2025 GMT
Subject: CN=3ad3a3fe9010312802ed43c571a72fbf6976f44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:40:02:c3:55:32:05:fc:ba:69:19:22:66:
05:70:e3:27:f5:8a:d9:df:51:e7:d0:98:52:44:52:
26:62:e1:36:3b:82:ad:57:1a:ee:e3:81:e6:cc:cf:
55:d1:3f:98:83:3a:63:4b:9c:4f:fa:cb:68:e1:e7:
9f:a2:34:68:11:b2:2c:ed:b6:b6:d7:d0:76:32:11:
c1:72:a6:68:38:1e:96:05:82:51:9f:32:c8:f4:6d:
e2:df:4a:4c:03:fb:c0:fc:2f:27:82:70:1f:c5:15:
07:b8:ec:cd:21:22:d8:0c:53:b9:2d:af:1c:a8:8a:
5c:01:e4:a2:7c:f1:05:b4:6a:27:73:b4:b7:c1:aa:
4c:2f:3d:3d:96:e5:b3:97:0d:45:c2:08:17:75:c3:
c4:b1:dd:f9:4f:44:48:8d:99:6d:c1:a8:73:fc:90:
c7:56:28:46:e1:02:1c:5f:26:25:1d:5f:1b:a1:6b:
1b:65:1c:e0:ad:73:7b:fa:58:1e:5a:22:4c:55:c3:
24:15:3d:f6:2a:53:b6:85:3d:25:55:37:17:c8:8f:
d7:01:db:ee:74:e9:ee:89:0b:b8:dc:5c:7c:7a:69:
76:13:b1:78:66:31:fe:14:6a:d7:dd:3c:5c:d5:4a:
db:e2:b7:05:2e:1e:d5:64:2e:cf:2f:b9:71:a2:0c:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D3:A3:FE:90:10:31:28:02:ED:43:C5:71:A7:2F:BF:69:76:F4:4C
X509v3 Authority Key Identifier:
keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:28:ba:a6:48:c2:b8:26:3b:a1:b1:81:e2:6e:e8:db:ef:17:
37:8e:7e:f8:5e:da:49:90:f2:bf:1c:a3:99:99:9e:55:c6:21:
23:c9:e6:e0:08:d5:ac:cf:a5:21:f6:f3:8e:ee:b2:91:e5:58:
16:83:34:9b:9d:20:a7:f8:94:44:97:b9:05:15:0f:8f:8d:09:
2a:77:f6:58:26:81:da:60:6f:2c:d9:23:f8:d5:64:a0:47:6e:
73:d7:a0:9c:95:db:c4:09:d5:1f:39:eb:fe:bb:2f:94:fd:c7:
c0:81:37:a5:5a:3f:cb:f7:f4:bf:2f:3f:2e:31:58:4a:6b:dd:
91:f3:e0:9b:60:9c:fa:61:39:b0:9f:c4:47:46:cc:5f:d7:59:
cc:8b:fb:fc:a7:ae:6a:04:2b:f0:14:34:61:9d:ae:3c:d1:14:
be:d7:0f:ee:27:43:bb:53:8b:4b:40:52:14:63:0a:72:b6:46:
42:91:ff:7b:63:8b:fa:9c:4d:ad:84:85:21:cc:00:71:69:3a:
1b:1c:3d:bc:b4:09:a0:74:97:29:0a:77:48:70:8f:b2:af:08:
33:e0:41:c1:78:d6:3e:51:04:38:cc:ee:a4:b9:f7:a0:39:c9:
88:62:ca:df:7a:64:d0:f3:a6:d8:35:87:5d:c5:10:f7:ef:ee:
f0:35:28:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4gWp5xskTQYdM370WKXvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NWI3ODk5ODkzYjllMjQ4YmU2MTU1ZGY0NDVmNjMwYWU1
ZDY4NzIwHhcNMjUxMTA0MDgwMDQ5WhcNMjUxMTA1MDgwMDQ5WjAzMTEwLwYDVQQD
EygzYWQzYTNmZTkwMTAzMTI4MDJlZDQzYzU3MWE3MmZiZjY5NzZmNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DtAAsNVMgX8umkZImYFcOMn9YrZ
31Hn0JhSRFImYuE2O4KtVxru44HmzM9V0T+YgzpjS5xP+sto4eefojRoEbIs7ba2
19B2MhHBcqZoOB6WBYJRnzLI9G3i30pMA/vA/C8ngnAfxRUHuOzNISLYDFO5La8c
qIpcAeSifPEFtGonc7S3wapMLz09luWzlw1FwggXdcPEsd35T0RIjZltwahz/JDH
VihG4QIcXyYlHV8boWsbZRzgrXN7+lgeWiJMVcMkFT32KlO2hT0lVTcXyI/XAdvu
dOnuiQu43Fx8eml2E7F4ZjH+FGrX3Txc1Urb4rcFLh7VZC7PL7lxogwrbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrTo/6QEDEoAu1DxXGnL79pdvRMMB8GA1UdIwQY
MBaAFFlbeJmJO54ki+YVXfRF9jCuXWhyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1Z0NG1ZazduaVNMNWhWZDlFWDJNSzVkYUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OWI3YTEtYjNjOC00NWE2LWI5OTEt
N2M3OGViNWIyZDk0LzEvV1Z0NG1ZazduaVNMNWhWZDlFWDJNSzVkYUhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83OWI3YTEtYjNjOC00NWE2LWI5OTEtN2M3OGViNWIyZDk0
LzEvV1Z0NG1ZazduaVNMNWhWZDlFWDJNSzVkYUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSi6pkjC
uCY7obGB4m7o2+8XN45++F7aSZDyvxyjmZmeVcYhI8nm4AjVrM+lIfbzju6ykeVY
FoM0m50gp/iURJe5BRUPj40JKnf2WCaB2mBvLNkj+NVkoEduc9egnJXbxAnVHznr
/rsvlP3HwIE3pVo/y/f0vy8/LjFYSmvdkfPgm2Cc+mE5sJ/ER0bMX9dZzIv7/Keu
agQr8BQ0YZ2uPNEUvtcP7idDu1OLS0BSFGMKcrZGQpH/e2OL+pxNrYSFIcwAcWk6
Gxw9vLQJoHSXKQp3SHCPsq8IM+BBwXjWPlEEOMzupLn3oDnJiGLK33pk0POm2DWH
XcUQ9+/u8DUolQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:51 2025 by rpki-client