Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
File: w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json)
Hash identifier: j1IHePUWuW1Gs6JjB3y0gN9CK87s0gnmCUsOBNuY1LA=
Subject key identifier: FB:38:93:7D:A5:44:74:11:AC:AD:D1:AC:60:6B:EC:EB:69:CF:94:BB
Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
Certificate issuer: /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Certificate serial: 019A4DE1D9828978133126C2335B562B92A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
Manifest number: 100D
Signing time: Tue 04 Nov 2025 08:00:38 +0000
Manifest this update: Tue 04 Nov 2025 08:00:38 +0000
Manifest next update: Wed 05 Nov 2025 08:00:38 +0000
Files and hashes: 1: 2u_bcZkkSvx-ZcsdCRFCGyh5HjM.roa (hash: 7lJhGCJBImviva4lcJI32wc+2zEbO+nn7NwKLsiaeHg=)
2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: sQ22C8nHPryjf9wgG39eSY3d442wpcatxENvclpPY6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d9:82:89:78:13:31:26:c2:33:5b:56:2b:92:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Validity
Not Before: Nov 4 08:00:38 2025 GMT
Not After : Nov 5 08:00:38 2025 GMT
Subject: CN=fb38937da5447411acadd1ac606beceb69cf94bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:c1:2c:b9:1e:51:67:22:30:55:8c:42:b7:
e1:b3:a7:5e:ab:23:65:ff:e1:74:a9:45:05:00:5a:
fd:02:74:49:c7:66:33:d1:16:3a:c1:47:d4:a8:a9:
b1:cb:6d:31:4d:35:25:c9:59:01:5b:83:e0:7d:e9:
60:6e:89:16:45:e2:01:e4:63:4a:66:de:1b:27:03:
d3:76:f8:2f:e1:2f:73:92:c5:49:9e:d5:6d:c9:e0:
88:d6:04:e4:25:94:33:ff:06:1d:c7:0f:b8:57:f8:
9e:68:17:3d:3e:d7:46:72:6e:08:13:87:33:fb:fa:
72:4c:f1:70:42:c6:d0:c8:12:15:57:8f:da:e7:8f:
a9:a0:7c:79:5e:02:9f:9b:eb:33:2c:09:f7:38:37:
8a:6f:89:6a:cc:ba:0d:16:d2:78:2e:04:ee:72:fe:
24:81:dd:88:7e:a1:aa:a4:b8:1a:e0:c1:b4:74:f8:
d4:b3:00:91:10:eb:be:e2:99:42:98:73:56:e9:9b:
1a:83:6f:70:65:c5:af:cb:db:16:63:39:78:b2:a4:
66:87:54:e8:03:99:d2:91:d1:d2:4f:09:e2:3f:d1:
55:ae:27:0b:93:c8:8c:75:29:51:46:d1:b5:5a:01:
96:a4:4b:14:68:5b:63:fe:ae:83:8c:42:f5:20:7b:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:38:93:7D:A5:44:74:11:AC:AD:D1:AC:60:6B:EC:EB:69:CF:94:BB
X509v3 Authority Key Identifier:
keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7c:b9:a6:e6:3d:cd:18:68:4c:92:10:8c:59:cc:fb:e9:33:
dd:81:5f:7b:d0:f7:01:12:bd:cd:76:9f:cf:13:86:f9:34:1b:
ea:da:f5:6e:4d:76:19:d9:88:b1:48:df:e0:ea:52:27:33:42:
b3:fc:ae:3d:96:aa:71:71:6f:bb:6e:92:fd:29:0a:21:e1:f9:
ba:38:98:62:31:93:f9:e3:45:82:55:76:b1:f1:13:a6:c9:cf:
c6:d1:67:ca:9a:49:c5:25:21:d4:60:5e:2e:31:31:8f:1b:19:
1f:66:57:9b:b2:77:b3:b2:12:5d:9d:2d:19:a9:93:be:76:9f:
c7:94:e5:ba:30:7a:10:b0:56:b2:01:62:8f:af:ae:cb:f3:49:
d4:5b:c7:2a:aa:cb:ec:6b:72:e7:78:2f:4f:8d:53:cc:57:16:
35:f0:2c:b0:b9:d5:20:b4:ff:6b:df:c7:ea:46:aa:2c:f8:52:
d1:70:95:3d:de:e5:26:b9:92:36:da:a6:20:dd:0b:aa:55:87:
63:ba:ba:d4:5b:88:84:32:34:c9:50:80:2c:1f:7b:bd:ef:48:
d7:ef:f0:d5:f0:0f:d6:b2:bf:ad:50:ff:56:07:0d:b5:a6:f6:
97:f9:19:ce:6b:f1:33:55:28:c0:a4:b6:02:fa:2a:2c:9b:65:
2b:07:d6:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4dmCiXgTMSbCM1tWK5KgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWFkZWViYzI4ZDdlMjdmZDllYjllZmIyMzU1MWRhZTIw
YjFkMGYwHhcNMjUxMTA0MDgwMDM4WhcNMjUxMTA1MDgwMDM4WjAzMTEwLwYDVQQD
EyhmYjM4OTM3ZGE1NDQ3NDExYWNhZGQxYWM2MDZiZWNlYjY5Y2Y5NGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIDBLLkeUWciMFWMQrfhs6deqyNl
/+F0qUUFAFr9AnRJx2Yz0RY6wUfUqKmxy20xTTUlyVkBW4PgfelgbokWReIB5GNK
Zt4bJwPTdvgv4S9zksVJntVtyeCI1gTkJZQz/wYdxw+4V/ieaBc9PtdGcm4IE4cz
+/pyTPFwQsbQyBIVV4/a54+poHx5XgKfm+szLAn3ODeKb4lqzLoNFtJ4LgTucv4k
gd2IfqGqpLga4MG0dPjUswCREOu+4plCmHNW6Zsag29wZcWvy9sWYzl4sqRmh1To
A5nSkdHSTwniP9FVricLk8iMdSlRRtG1WgGWpEsUaFtj/q6DjEL1IHsPqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPs4k32lRHQRrK3RrGBr7Otpz5S7MB8GA1UdIwQY
MBaAFMNa3uvCjX4n/Z6577I1UdriCx0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYt
YjU1ZDdkN2YyYzQ4LzEvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYtYjU1ZDdkN2YyYzQ4
LzEvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHy5puY9
zRhoTJIQjFnM++kz3YFfe9D3ARK9zXafzxOG+TQb6tr1bk12GdmIsUjf4OpSJzNC
s/yuPZaqcXFvu26S/SkKIeH5ujiYYjGT+eNFglV2sfETpsnPxtFnyppJxSUh1GBe
LjExjxsZH2ZXm7J3s7ISXZ0tGamTvnafx5TlujB6ELBWsgFij6+uy/NJ1FvHKqrL
7Gty53gvT41TzFcWNfAssLnVILT/a9/H6kaqLPhS0XCVPd7lJrmSNtqmIN0LqlWH
Y7q61FuIhDI0yVCALB97ve9I1+/w1fAP1rK/rVD/VgcNtab2l/kZzmvxM1UowKS2
AvoqLJtlKwfW4g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:41 2025 by rpki-client