Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
File: WCroA98isFXHTl_o8R2UQIlWDtI.mft (raw, json)
Hash identifier: jEsZ4+RsvSJ0P7fZRjLDkXyfYHKjxqU+q96t8vub8Ig=
Subject key identifier: CC:E4:93:C0:AA:65:8B:9B:36:0B:92:45:2F:68:15:23:FC:88:4B:C5
Authority key identifier: 58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
Certificate issuer: /CN=582ae803df22b055c74e5fe8f11d944089560ed2
Certificate serial: 019A533EC5490B3256AD1CAD6F8F6592A91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
Manifest number: 019E
Signing time: Wed 05 Nov 2025 09:00:13 +0000
Manifest this update: Wed 05 Nov 2025 09:00:13 +0000
Manifest next update: Thu 06 Nov 2025 09:00:13 +0000
Files and hashes: 1: 5Vle3KGfqnVJEdmvBasCstldoz8.roa (hash: Rl95m9yb5FSNGdnRgF3OQpiAhZ5L8MWgdG8dVfAGWKo=)
2: WCroA98isFXHTl_o8R2UQIlWDtI.crl (hash: Or/A/YQXWjtXeZWVtqQ4PpjEALc3+7/40Cvvo6ACG4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:c5:49:0b:32:56:ad:1c:ad:6f:8f:65:92:a9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582ae803df22b055c74e5fe8f11d944089560ed2
Validity
Not Before: Nov 5 09:00:13 2025 GMT
Not After : Nov 6 09:00:13 2025 GMT
Subject: CN=cce493c0aa658b9b360b92452f681523fc884bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:b9:73:e4:57:86:98:2c:37:9e:c6:53:5f:
ca:63:f1:78:aa:bb:3a:15:4d:cb:44:95:b8:15:07:
fa:69:d5:2e:07:cf:29:38:d4:3a:be:e3:b8:27:41:
00:53:a2:82:39:be:a3:de:15:35:8a:1f:fd:94:67:
04:a6:01:c8:bc:c0:a5:04:86:3e:6c:f2:96:ec:27:
10:95:0f:58:f0:0a:b8:08:31:65:8f:fe:9d:36:cd:
00:4e:38:29:d4:7b:39:d3:57:81:e4:de:29:b5:ae:
b3:71:c2:b7:33:05:a0:9a:5c:45:65:27:e8:95:5e:
f2:77:c9:51:12:6f:d3:80:cd:bb:5d:6f:9f:2c:61:
3d:eb:de:1a:9e:fe:c9:75:21:55:d0:2c:04:1f:49:
66:15:7a:e8:d6:45:6e:dd:ef:6e:7f:49:70:50:80:
04:92:c2:ad:f7:08:27:9a:11:22:af:25:08:3b:8e:
28:73:c2:74:96:78:cf:77:65:e4:9b:27:8b:41:9e:
12:55:96:80:2e:13:de:49:6c:af:0d:ed:09:a0:0d:
6d:e8:5d:5b:9d:70:ea:b8:ed:7c:e3:b0:f5:ef:48:
85:86:77:ae:dd:29:4c:44:12:c7:3d:25:27:17:dd:
77:44:8a:7c:d0:81:12:a9:49:ff:20:01:69:17:bc:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E4:93:C0:AA:65:8B:9B:36:0B:92:45:2F:68:15:23:FC:88:4B:C5
X509v3 Authority Key Identifier:
keyid:58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:05:92:e9:b3:2e:3d:12:0a:d6:78:d5:51:f0:64:d9:10:e2:
14:b5:4f:7d:62:71:de:1e:fe:3f:0b:32:d0:42:05:11:84:ea:
47:b5:5a:fe:34:15:99:ae:52:f9:d4:a7:5f:3e:8c:81:04:bb:
ab:1a:e8:6a:a4:6d:b8:0f:65:8f:ca:47:1b:bd:09:9f:41:2d:
29:9c:17:0f:e8:47:f3:91:10:62:d1:dd:7c:2f:1b:c3:53:79:
34:e7:a1:96:a9:60:c5:bb:30:03:a7:d4:7b:a0:21:b3:53:ac:
89:cb:01:86:5f:17:2f:1b:e3:7a:ea:0d:25:35:c0:c0:6c:ca:
dd:50:7e:40:49:07:b4:53:ad:2a:31:9d:e5:88:52:e7:64:56:
d5:e7:27:80:82:87:63:49:32:88:4b:53:9f:11:05:20:3f:b0:
09:e2:d4:90:98:16:f9:5a:80:ff:02:40:bd:81:5c:5e:7f:07:
5d:4f:d6:01:12:87:93:b6:69:97:de:e7:c1:5b:c1:4a:87:74:
9a:f4:aa:bf:32:f6:40:e6:2e:49:3c:55:73:af:fb:ee:7d:8a:
0a:9c:34:28:1c:fd:a3:5d:77:7e:64:73:ca:ca:8f:11:b0:3e:
96:33:17:f0:a8:67:25:70:1e:65:bc:eb:da:78:92:c5:40:d2:
f1:f0:5f:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPsVJCzJWrRytb49lkqkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmFlODAzZGYyMmIwNTVjNzRlNWZlOGYxMWQ5NDQwODk1
NjBlZDIwHhcNMjUxMTA1MDkwMDEzWhcNMjUxMTA2MDkwMDEzWjAzMTEwLwYDVQQD
EyhjY2U0OTNjMGFhNjU4YjliMzYwYjkyNDUyZjY4MTUyM2ZjODg0YmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkG5c+RXhpgsN57GU1/KY/F4qrs6
FU3LRJW4FQf6adUuB88pONQ6vuO4J0EAU6KCOb6j3hU1ih/9lGcEpgHIvMClBIY+
bPKW7CcQlQ9Y8Aq4CDFlj/6dNs0ATjgp1Hs501eB5N4pta6zccK3MwWgmlxFZSfo
lV7yd8lREm/TgM27XW+fLGE9694anv7JdSFV0CwEH0lmFXro1kVu3e9uf0lwUIAE
ksKt9wgnmhEiryUIO44oc8J0lnjPd2XkmyeLQZ4SVZaALhPeSWyvDe0JoA1t6F1b
nXDquO1847D170iFhneu3SlMRBLHPSUnF913RIp80IESqUn/IAFpF7xxgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzkk8CqZYubNguSRS9oFSP8iEvFMB8GA1UdIwQY
MBaAFFgq6APfIrBVx05f6PEdlECJVg7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0Nyb0E5OGlzRlhIVGxfbzhSMlVRSWxXRHRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lZjA0NmQtZjk1OS00Nzk4LTk2Yjgt
Y2ZlMTY0N2VhODY1LzEvV0Nyb0E5OGlzRlhIVGxfbzhSMlVRSWxXRHRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lZjA0NmQtZjk1OS00Nzk4LTk2YjgtY2ZlMTY0N2VhODY1
LzEvV0Nyb0E5OGlzRlhIVGxfbzhSMlVRSWxXRHRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQWS6bMu
PRIK1njVUfBk2RDiFLVPfWJx3h7+Pwsy0EIFEYTqR7Va/jQVma5S+dSnXz6MgQS7
qxroaqRtuA9lj8pHG70Jn0EtKZwXD+hH85EQYtHdfC8bw1N5NOehlqlgxbswA6fU
e6Ahs1OsicsBhl8XLxvjeuoNJTXAwGzK3VB+QEkHtFOtKjGd5YhS52RW1ecngIKH
Y0kyiEtTnxEFID+wCeLUkJgW+VqA/wJAvYFcXn8HXU/WARKHk7Zpl97nwVvBSod0
mvSqvzL2QOYuSTxVc6/77n2KCpw0KBz9o113fmRzysqPEbA+ljMX8KhnJXAeZbzr
2niSxUDS8fBfCQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:24:25 2025 by rpki-client