Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
File: wWfFkcwblqHKT5EP4QHvkE2h4hg.mft (raw, json)
Hash identifier: 22ypDdtfHLq1gumM3KRRjG+TEj9xRlBVJStbPOVntK8=
Subject key identifier: CE:43:CB:05:00:44:F4:AD:64:BF:E4:FB:CE:BF:E0:96:CC:BB:04:02
Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
Certificate issuer: /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Certificate serial: 019A4DAA6DD9396C899E3B10FD52344A4313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 07:00:06 +0000
Manifest this update: Tue 04 Nov 2025 07:00:06 +0000
Manifest next update: Wed 05 Nov 2025 07:00:06 +0000
Files and hashes: 1: WpUhoumLDTywn-hlHQU-VDabUzs.roa (hash: 9FT2QaZNDoK6y/oGgYEly9qHrYE52q7Wpp2ENNu/WYM=)
2: wWfFkcwblqHKT5EP4QHvkE2h4hg.crl (hash: G/y3KKaZnL/xIF2flPBs/cE1JM1GA5+cxowpAJm+swQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:6d:d9:39:6c:89:9e:3b:10:fd:52:34:4a:43:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Validity
Not Before: Nov 4 07:00:06 2025 GMT
Not After : Nov 5 07:00:06 2025 GMT
Subject: CN=ce43cb050044f4ad64bfe4fbcebfe096ccbb0402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:72:c3:6e:e5:d6:35:ba:61:2b:2e:26:6b:9e:
8d:80:21:ed:1f:97:c1:e3:64:e8:ef:69:7c:d9:eb:
1b:42:1b:e3:6d:ce:ec:e6:5e:93:61:33:92:f2:3a:
97:c4:23:3d:96:61:45:71:06:86:b7:c9:60:b3:e1:
1f:99:96:3e:ae:21:ca:23:31:89:d4:29:4e:f8:ad:
bb:68:08:b8:16:25:eb:5d:93:94:a5:fc:3e:ad:08:
23:e1:60:3f:c4:02:cc:70:13:d5:b7:8b:ee:cc:c4:
77:47:07:9c:8e:40:98:c7:b5:bb:78:d4:cf:69:8f:
b0:71:d3:8a:4d:78:36:e0:dd:d3:e1:2b:2e:69:29:
ef:5b:a2:8c:b0:c8:5a:41:51:5c:71:83:b9:32:18:
06:33:1c:5b:76:f8:d7:63:59:c1:be:0a:74:a7:77:
17:74:36:c7:13:e0:1a:89:d0:00:b3:f4:fe:c5:27:
41:26:76:46:4b:3a:0c:1b:2c:50:f5:2f:5a:fd:e4:
23:7b:36:f4:a3:45:27:b3:dc:b9:de:b7:3c:73:e1:
35:90:cf:6a:46:fc:32:73:65:0b:be:06:9a:c5:d1:
23:a5:34:e0:84:7f:3c:39:5a:23:a4:c9:f3:0e:0e:
ab:42:4b:35:5e:1b:e4:56:c2:66:be:1a:70:b3:2d:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:43:CB:05:00:44:F4:AD:64:BF:E4:FB:CE:BF:E0:96:CC:BB:04:02
X509v3 Authority Key Identifier:
keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:48:a6:23:84:98:0d:d8:2f:4f:8a:74:b2:d4:c7:0b:e6:25:
5e:ea:a5:e3:fa:c5:44:54:a8:bd:92:74:02:2a:4a:6c:5c:53:
28:e5:83:36:e5:05:5a:a7:82:31:18:f6:a8:f4:30:0a:a9:fa:
d5:6a:33:06:8f:83:e2:14:60:ae:44:fe:1e:ae:1c:c9:6b:55:
72:3a:f2:fd:01:de:d8:99:b4:82:d2:b6:f7:29:c1:e3:a5:82:
2f:21:45:8f:4b:e7:fd:86:13:62:41:f1:bf:00:fc:42:a9:74:
c3:b5:21:56:c9:75:3a:1d:f7:3b:dc:43:79:b8:6e:83:93:62:
cd:76:81:b9:f4:ec:b3:30:b7:b8:67:59:51:fa:47:e3:94:95:
b0:b1:e1:b5:4c:02:fb:e0:da:4b:e7:fe:4f:45:29:81:7f:a9:
85:e4:1c:2b:0f:8d:42:47:17:15:35:2d:68:fc:97:49:ce:93:
af:76:ac:e4:44:5d:6d:30:08:b7:bc:53:e3:01:0b:97:b6:42:
bc:fb:bd:80:1c:67:76:63:a7:2e:37:c2:17:f9:d8:f3:a3:6a:
13:ae:66:b0:f3:76:f9:db:36:88:2e:ce:96:46:16:74:bf:8a:
e6:33:42:32:16:b7:9a:be:1c:5b:82:1e:e6:00:09:55:13:8e:
86:78:cd:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqm3ZOWyJnjsQ/VI0SkMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNjdjNTkxY2MxYjk2YTFjYTRmOTEwZmUxMDFlZjkwNGRh
MWUyMTgwHhcNMjUxMTA0MDcwMDA2WhcNMjUxMTA1MDcwMDA2WjAzMTEwLwYDVQQD
EyhjZTQzY2IwNTAwNDRmNGFkNjRiZmU0ZmJjZWJmZTA5NmNjYmIwNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnLDbuXWNbphKy4ma56NgCHtH5fB
42To72l82esbQhvjbc7s5l6TYTOS8jqXxCM9lmFFcQaGt8lgs+EfmZY+riHKIzGJ
1ClO+K27aAi4FiXrXZOUpfw+rQgj4WA/xALMcBPVt4vuzMR3RwecjkCYx7W7eNTP
aY+wcdOKTXg24N3T4SsuaSnvW6KMsMhaQVFccYO5MhgGMxxbdvjXY1nBvgp0p3cX
dDbHE+AaidAAs/T+xSdBJnZGSzoMGyxQ9S9a/eQjezb0o0Uns9y53rc8c+E1kM9q
Rvwyc2ULvgaaxdEjpTTghH88OVojpMnzDg6rQks1XhvkVsJmvhpwsy1IvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5DywUARPStZL/k+86/4JbMuwQCMB8GA1UdIwQY
MBaAFMFnxZHMG5ahyk+RD+EB75BNoeIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NDUzZGItYmU4Zi00MGNiLWJkMDkt
OWNhMzBmMTkxOTM0LzEvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81NDUzZGItYmU4Zi00MGNiLWJkMDktOWNhMzBmMTkxOTM0
LzEvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUimI4SY
DdgvT4p0stTHC+YlXuql4/rFRFSovZJ0AipKbFxTKOWDNuUFWqeCMRj2qPQwCqn6
1WozBo+D4hRgrkT+Hq4cyWtVcjry/QHe2Jm0gtK29ynB46WCLyFFj0vn/YYTYkHx
vwD8Qql0w7UhVsl1Oh33O9xDebhug5NizXaBufTsszC3uGdZUfpH45SVsLHhtUwC
++DaS+f+T0UpgX+pheQcKw+NQkcXFTUtaPyXSc6Tr3as5ERdbTAIt7xT4wELl7ZC
vPu9gBxndmOnLjfCF/nY86NqE65msPN2+ds2iC7OlkYWdL+K5jNCMha3mr4cW4Ie
5gAJVROOhnjNog==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:03 2025 by rpki-client