Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File: wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier: 2O9bylyoNPD76+DLjy4povrf7UZDs60N34rJa4/n4/w=
Subject key identifier: C5:EA:43:C0:87:72:41:97:C6:EB:15:85:50:A9:C8:5A:E7:17:33:A7
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer: /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial: 019A4E4FB4084B5370D64CE260AF29364CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number: 0B77
Signing time: Tue 04 Nov 2025 10:00:37 +0000
Manifest this update: Tue 04 Nov 2025 10:00:37 +0000
Manifest next update: Wed 05 Nov 2025 10:00:37 +0000
Files and hashes: 1: _vDgQuqvDJFp6MMZOZL5IEmORHs.roa (hash: 7Xz5OI/32CttzkIydxRg2GdNWdK569D5srRiLf2kPkg=)
2: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: ErqVT8s+aHp9lyGk4UlZ/tlIC46JcnvGIdOr1dMgI7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b4:08:4b:53:70:d6:4c:e2:60:af:29:36:4c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
Validity
Not Before: Nov 4 10:00:37 2025 GMT
Not After : Nov 5 10:00:37 2025 GMT
Subject: CN=c5ea43c087724197c6eb158550a9c85ae71733a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:19:51:c8:47:74:c1:21:28:90:d1:87:a5:
f9:98:17:36:99:22:9d:ae:33:71:07:a7:d8:52:a0:
1a:7a:16:70:d1:4c:9b:12:78:d0:41:be:79:53:35:
de:10:6d:e7:24:80:cd:62:ee:53:52:3a:5d:f9:85:
98:db:11:3d:4d:59:a8:38:cb:a3:c4:94:15:8d:f1:
13:e6:ec:f0:39:24:a8:d9:bc:cc:6e:2f:7b:b4:0b:
f0:43:b7:b6:35:ca:ee:69:29:8a:a4:4e:7c:42:ea:
1a:e9:24:57:e1:4b:ea:27:df:e7:3b:6f:87:b0:d7:
a9:ad:2d:7f:ea:8b:7e:00:20:8b:b7:4d:ef:c9:d0:
8a:eb:cf:f2:b4:29:6f:e5:72:f0:ca:dc:e2:dd:48:
c0:10:02:b6:93:74:1a:66:aa:bd:8e:4e:0f:e9:00:
e2:6f:d1:b5:d7:c3:f8:26:bd:0d:85:37:0a:ba:1b:
a6:2e:86:b0:bf:3b:23:fd:17:8c:18:42:b0:ac:47:
78:ad:95:b3:a4:fd:f0:0a:b8:fe:db:be:d6:f3:ac:
56:50:61:50:3c:60:ab:64:d1:63:b1:cc:a6:30:ac:
62:b8:38:41:98:37:d5:d0:4f:91:ab:68:7f:54:02:
fa:1c:f4:c1:00:5f:df:f4:f3:f3:76:05:3b:24:5b:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EA:43:C0:87:72:41:97:C6:EB:15:85:50:A9:C8:5A:E7:17:33:A7
X509v3 Authority Key Identifier:
keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a4:25:d7:14:d5:79:40:d9:e1:1e:a2:0b:04:73:73:fa:ea:
2a:0b:e7:65:b8:34:71:65:40:28:76:c2:21:62:b4:d6:9a:91:
07:3d:30:64:29:87:a5:33:87:d7:f4:75:05:1d:83:62:4e:de:
68:78:e2:54:37:34:de:29:a3:12:cf:c4:ed:20:d0:b8:72:d3:
ec:57:d6:4e:fb:f4:33:77:6b:33:d5:25:cb:77:97:51:59:a8:
11:1e:34:89:83:a4:93:c5:27:92:55:67:bd:e0:28:82:a4:0d:
55:55:ad:65:92:07:17:a8:24:78:f7:b7:97:08:a8:0a:bf:d4:
14:93:6d:1b:e8:c0:ab:90:4a:4b:0c:38:82:23:85:8f:5c:68:
dc:33:ef:c4:27:21:59:20:8c:be:5f:df:6b:8e:a7:cb:7f:82:
5a:14:9e:26:24:b6:77:03:79:09:e2:b9:69:df:f7:88:05:05:
fe:50:73:61:d3:da:ac:ef:5d:88:ba:c2:19:e8:27:c1:5a:2b:
0f:33:87:f6:ad:ce:16:e7:68:89:ee:02:d4:8c:69:fc:6c:3f:
73:8b:d9:fd:9f:4f:e4:59:e6:43:bf:86:86:08:b2:b8:a3:64:
58:43:54:71:e5:44:b5:91:32:c0:01:8c:df:27:37:b1:36:86:
8d:49:f1:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT7QIS1Nw1kziYK8pNkzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOWMxMDA3NzQ2OTgxZmNjNDA4ODM5OTY1YjE2NzFjMDM3
ZDEyMWIwHhcNMjUxMTA0MTAwMDM3WhcNMjUxMTA1MTAwMDM3WjAzMTEwLwYDVQQD
EyhjNWVhNDNjMDg3NzI0MTk3YzZlYjE1ODU1MGE5Yzg1YWU3MTczM2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAUZUchHdMEhKJDRh6X5mBc2mSKd
rjNxB6fYUqAaehZw0UybEnjQQb55UzXeEG3nJIDNYu5TUjpd+YWY2xE9TVmoOMuj
xJQVjfET5uzwOSSo2bzMbi97tAvwQ7e2NcruaSmKpE58Quoa6SRX4UvqJ9/nO2+H
sNeprS1/6ot+ACCLt03vydCK68/ytClv5XLwytzi3UjAEAK2k3QaZqq9jk4P6QDi
b9G118P4Jr0NhTcKuhumLoawvzsj/ReMGEKwrEd4rZWzpP3wCrj+277W86xWUGFQ
PGCrZNFjscymMKxiuDhBmDfV0E+Rq2h/VAL6HPTBAF/f9PPzdgU7JFtw8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXqQ8CHckGXxusVhVCpyFrnFzOnMB8GA1UdIwQY
MBaAFMKcEAd0aYH8xAiDmWWxZxwDfRIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84YWIyNmMtYmExNy00Mjg4LTg3NDkt
OGZjOTMwZDg3MDJhLzEvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84YWIyNmMtYmExNy00Mjg4LTg3NDktOGZjOTMwZDg3MDJh
LzEvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6Ql1xTV
eUDZ4R6iCwRzc/rqKgvnZbg0cWVAKHbCIWK01pqRBz0wZCmHpTOH1/R1BR2DYk7e
aHjiVDc03imjEs/E7SDQuHLT7FfWTvv0M3drM9Uly3eXUVmoER40iYOkk8UnklVn
veAogqQNVVWtZZIHF6gkePe3lwioCr/UFJNtG+jAq5BKSww4giOFj1xo3DPvxCch
WSCMvl/fa46ny3+CWhSeJiS2dwN5CeK5ad/3iAUF/lBzYdParO9diLrCGegnwVor
DzOH9q3OFudoie4C1Ixp/Gw/c4vZ/Z9P5FnmQ7+GhgiyuKNkWENUceVEtZEywAGM
3yc3sTaGjUnxsw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:36 2025 by rpki-client