Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier: kz95d7teJw8ha1mR/VNdlKIBasXGoXRh5w6/icqfi24=
Subject key identifier: 4C:01:60:D5:D1:13:48:C1:14:4E:28:01:7D:29:A9:02:63:51:C3:9E
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial: 019A4EF54F84301F4DE325E883FB7AD28AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number: 0DB1
Signing time: Tue 04 Nov 2025 13:01:30 +0000
Manifest this update: Tue 04 Nov 2025 13:01:30 +0000
Manifest next update: Wed 05 Nov 2025 13:01:30 +0000
Files and hashes: 1: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: oASJdiEMInmnouRNhm2Gr6a6IZqrfJFkzmIbY+uHoA0=)
2: pBfkqeCcf8kyWik2qeWgXpT9J0w.roa (hash: x6edmQyN+AuRQRVkdUM3z3US8XBwQrqEnFPt4p+BBqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:4f:84:30:1f:4d:e3:25:e8:83:fb:7a:d2:8a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
Validity
Not Before: Nov 4 13:01:30 2025 GMT
Not After : Nov 5 13:01:30 2025 GMT
Subject: CN=4c0160d5d11348c1144e28017d29a9026351c39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:f2:1d:10:55:1e:b6:0a:7a:1c:62:17:d4:
e8:e9:8f:02:24:be:a6:d9:23:f3:89:5e:82:30:9e:
40:a4:59:51:9e:b2:6c:8e:fb:96:f9:84:67:7b:48:
16:ed:dd:38:66:c5:d5:41:26:6a:f7:bf:0e:e2:5b:
3f:7d:10:61:ad:86:9e:3c:7c:22:b3:ac:7b:95:00:
d1:fa:d4:74:95:82:0c:11:02:64:98:1b:d8:35:44:
36:63:94:65:ff:0c:da:d5:0a:73:76:4d:c7:42:ac:
62:a1:1f:50:15:37:dd:f2:08:54:ae:7a:5d:b9:94:
e8:c2:6c:89:b4:80:30:b2:57:61:d0:4b:0f:f7:19:
01:1f:56:30:85:ec:06:68:9c:78:bf:a0:31:60:19:
79:ff:1f:e3:47:e2:34:80:31:45:9c:7e:fa:b4:40:
89:af:4e:e6:05:40:22:0c:53:82:36:0a:ff:cf:90:
1d:d4:d7:6d:b3:ee:50:d0:74:6c:c4:72:59:7e:41:
b4:12:0a:21:58:c8:c1:34:de:12:3e:ef:b3:32:16:
55:f3:26:03:03:61:45:12:7b:66:31:9e:4f:3c:f8:
fb:42:98:a9:a1:57:9a:89:ba:ea:99:af:6d:c6:25:
4a:f0:be:89:16:85:37:2d:bc:55:fd:f1:27:5a:78:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:01:60:D5:D1:13:48:C1:14:4E:28:01:7D:29:A9:02:63:51:C3:9E
X509v3 Authority Key Identifier:
keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d1:c9:08:85:52:db:b3:f9:9c:13:53:73:ac:12:21:91:40:
cf:c7:bf:b9:7c:ef:01:92:20:3f:71:7b:64:f2:3e:20:38:91:
d0:1b:af:07:64:eb:ca:07:74:69:1a:f6:7f:60:b9:fc:e8:ff:
c7:57:24:9f:60:93:3e:fe:2d:03:47:92:a3:7e:8a:7f:e6:b0:
a4:ed:99:f2:1b:c1:1a:b7:61:dd:4e:1b:6f:a9:e9:fa:cd:22:
7e:e4:4a:f1:d7:53:f8:34:e5:01:8d:e4:86:c2:4e:07:0f:4b:
7d:30:c5:ee:69:71:33:66:ef:da:30:37:44:a2:35:10:2b:49:
53:22:1c:ae:45:5e:15:e9:22:ca:72:b0:fb:bd:7e:94:1b:17:
21:4e:3b:47:0a:db:91:22:dd:4a:cd:2b:f1:6d:3a:e0:04:bc:
f0:ca:e5:3f:46:c9:7f:52:46:c1:d4:5e:52:6c:36:58:80:a1:
74:02:c8:6c:ab:c5:8f:bf:10:8b:b3:3e:df:95:79:b0:21:2d:
7b:08:ff:0a:73:b6:3a:05:53:47:1c:95:a6:9b:de:ee:f4:a0:
fc:4d:57:f6:c8:d8:98:b8:c3:e1:d7:35:d8:e5:bf:2e:f0:29:
5c:80:8c:75:a0:18:17:e2:9f:37:c9:0c:e6:32:bd:ce:a6:56:
f4:eb:c3:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9U+EMB9N4yXog/t60or3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5Nzg1YTIxZTJkMDdjNjhmZjMxNzU1OGM2OWVmMTE4Y2M3
NTgwNWEwHhcNMjUxMTA0MTMwMTMwWhcNMjUxMTA1MTMwMTMwWjAzMTEwLwYDVQQD
Eyg0YzAxNjBkNWQxMTM0OGMxMTQ0ZTI4MDE3ZDI5YTkwMjYzNTFjMzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqLyHRBVHrYKehxiF9To6Y8CJL6m
2SPziV6CMJ5ApFlRnrJsjvuW+YRne0gW7d04ZsXVQSZq978O4ls/fRBhrYaePHwi
s6x7lQDR+tR0lYIMEQJkmBvYNUQ2Y5Rl/wza1Qpzdk3HQqxioR9QFTfd8ghUrnpd
uZTowmyJtIAwsldh0EsP9xkBH1YwhewGaJx4v6AxYBl5/x/jR+I0gDFFnH76tECJ
r07mBUAiDFOCNgr/z5Ad1Ndts+5Q0HRsxHJZfkG0EgohWMjBNN4SPu+zMhZV8yYD
A2FFEntmMZ5PPPj7QpipoVeaibrqma9txiVK8L6JFoU3LbxV/fEnWniLpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwBYNXRE0jBFE4oAX0pqQJjUcOeMB8GA1UdIwQY
MBaAFFl4WiHi0Hxo/zF1WMae8RjMdYBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTct
NzVmNGZjYTg2YWU0LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTctNzVmNGZjYTg2YWU0
LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdHJCIVS
27P5nBNTc6wSIZFAz8e/uXzvAZIgP3F7ZPI+IDiR0BuvB2Trygd0aRr2f2C5/Oj/
x1ckn2CTPv4tA0eSo36Kf+awpO2Z8hvBGrdh3U4bb6np+s0ifuRK8ddT+DTlAY3k
hsJOBw9LfTDF7mlxM2bv2jA3RKI1ECtJUyIcrkVeFekiynKw+71+lBsXIU47Rwrb
kSLdSs0r8W064AS88MrlP0bJf1JGwdReUmw2WIChdALIbKvFj78Qi7M+35V5sCEt
ewj/CnO2OgVTRxyVppve7vSg/E1X9sjYmLjD4dc12OW/LvApXICMdaAYF+KfN8kM
5jK9zqZW9OvDqQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:33 2025 by rpki-client