Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File: wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier: ymNRqIy38qkqdcntNpkucslmrnrmGsWcJnvJgYGaleI=
Subject key identifier: 75:03:E3:4D:1C:5F:65:92:EA:24:C4:2F:0F:9D:DD:A7:B6:72:4C:A7
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial: 019A5150993C7EC8FB3FE4C47CF638E6484E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 00:00:27 +0000
Manifest this update: Wed 05 Nov 2025 00:00:27 +0000
Manifest next update: Thu 06 Nov 2025 00:00:27 +0000
Files and hashes: 1: uR-Qt3k3bfM3gqD_iPwjYus1OKg.roa (hash: wvva5AnG6XL5jcw7hAwIwlMKF+/vvms/lQ+w5Fd0MJA=)
2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: i5XB5Y9DVNieU6vFZpkO7Z1sKMiDlUagGmffiGO8htY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:99:3c:7e:c8:fb:3f:e4:c4:7c:f6:38:e6:48:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Validity
Not Before: Nov 5 00:00:27 2025 GMT
Not After : Nov 6 00:00:27 2025 GMT
Subject: CN=7503e34d1c5f6592ea24c42f0f9ddda7b6724ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:78:d1:6c:fd:ef:75:eb:08:d9:d5:e3:22:
89:6f:50:ae:7c:c6:9c:37:41:61:09:ac:1b:0c:a6:
1f:bd:b4:48:fa:d7:32:c7:19:a9:a3:0b:51:af:ec:
ad:98:24:30:c0:9e:ea:19:e0:4e:df:8b:56:cb:02:
ab:ab:df:cf:cd:0c:6a:20:99:6b:79:27:48:aa:f4:
b1:7d:0b:3c:9f:0b:f0:a2:8a:46:19:8a:18:1c:6c:
28:25:47:8b:0d:04:30:f0:fb:19:ab:dd:76:58:8b:
4e:c6:9e:cf:b0:6c:77:51:77:81:7d:1f:e6:eb:45:
1f:24:4f:b2:a7:af:15:d2:fb:61:2e:7b:80:5f:a2:
5c:b9:bc:dc:7e:c6:6f:32:20:a4:06:b9:1b:1b:ec:
27:65:58:01:b8:0c:37:55:1e:2b:a6:2e:df:53:6c:
da:06:0c:f5:77:7a:61:34:7a:c2:f5:1a:60:14:e4:
c3:76:0b:21:f4:69:9c:99:1a:9e:a1:66:34:f9:a3:
dc:9e:c3:e3:d8:4c:b5:36:b3:1c:5c:74:08:c5:17:
12:67:05:3a:7b:99:f5:4f:e2:0c:6d:92:1c:a3:2a:
34:33:72:60:c8:ba:c0:70:f1:0f:01:aa:d9:4a:84:
19:3d:ee:ba:4a:c2:a4:f7:a1:d7:f5:44:6d:9d:d4:
64:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:03:E3:4D:1C:5F:65:92:EA:24:C4:2F:0F:9D:DD:A7:B6:72:4C:A7
X509v3 Authority Key Identifier:
keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3b:a9:7f:f6:28:7e:2c:32:d3:64:52:b4:1d:fe:a5:c9:9e:
ce:76:aa:e1:e6:24:09:6a:9f:84:8e:8a:96:e5:a7:bf:d0:46:
4a:ac:40:12:19:87:5d:b4:8d:e5:0b:23:aa:b9:51:18:b5:a0:
5b:97:2f:50:25:80:1e:d9:46:75:10:4b:0f:fe:5e:36:af:d2:
42:50:04:f9:65:d4:28:ac:e4:1c:5a:a0:d6:f3:11:ea:d9:e5:
41:6e:3c:1d:10:f6:d2:80:6a:33:87:26:57:a4:ab:a2:be:df:
da:d4:a9:a8:ac:df:7e:1c:29:c4:ef:b3:46:fe:a5:1c:10:50:
3c:18:e1:0f:f8:fa:bb:48:61:ba:76:3d:7c:b7:6d:84:31:76:
b9:43:1d:9b:06:4c:6c:3a:59:4a:67:25:37:98:21:55:29:7a:
49:44:47:f1:f3:58:a8:32:29:d0:8b:47:06:07:cb:64:75:e1:
ee:8b:45:eb:ce:a4:bb:77:ac:bb:3c:72:e0:09:d0:ea:3e:53:
4c:ed:b6:d6:c5:50:ca:27:c8:ec:7f:57:89:85:b4:59:05:bc:
1e:f4:fc:2b:c4:5e:f3:c2:4c:f4:8a:0a:57:43:03:87:2e:8f:
82:4e:f4:15:2d:5f:dc:f3:4b:e0:6e:7e:4b:77:d8:a5:42:ba:
27:71:64:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUJk8fsj7P+TEfPY45khOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjVlZjRkYzlkM2VjZGY0ODY2NTVjMmRkMjMxZTljYmJi
MGEwYjcwHhcNMjUxMTA1MDAwMDI3WhcNMjUxMTA2MDAwMDI3WjAzMTEwLwYDVQQD
Eyg3NTAzZTM0ZDFjNWY2NTkyZWEyNGM0MmYwZjlkZGRhN2I2NzI0Y2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnJ40Wz973XrCNnV4yKJb1CufMac
N0FhCawbDKYfvbRI+tcyxxmpowtRr+ytmCQwwJ7qGeBO34tWywKrq9/PzQxqIJlr
eSdIqvSxfQs8nwvwoopGGYoYHGwoJUeLDQQw8PsZq912WItOxp7PsGx3UXeBfR/m
60UfJE+yp68V0vthLnuAX6JcubzcfsZvMiCkBrkbG+wnZVgBuAw3VR4rpi7fU2za
Bgz1d3phNHrC9RpgFOTDdgsh9GmcmRqeoWY0+aPcnsPj2Ey1NrMcXHQIxRcSZwU6
e5n1T+IMbZIcoyo0M3JgyLrAcPEPAarZSoQZPe66SsKk96HX9URtndRksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUD400cX2WS6iTELw+d3ae2ckynMB8GA1UdIwQY
MBaAFMEl703J0+zfSGZVwt0jHpy7sKC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEt
ZTc0NGM1YmVmNTYxLzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEtZTc0NGM1YmVmNTYx
LzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATupf/Yo
fiwy02RStB3+pcmeznaq4eYkCWqfhI6KluWnv9BGSqxAEhmHXbSN5QsjqrlRGLWg
W5cvUCWAHtlGdRBLD/5eNq/SQlAE+WXUKKzkHFqg1vMR6tnlQW48HRD20oBqM4cm
V6Sror7f2tSpqKzffhwpxO+zRv6lHBBQPBjhD/j6u0hhunY9fLdthDF2uUMdmwZM
bDpZSmclN5ghVSl6SURH8fNYqDIp0ItHBgfLZHXh7otF686ku3esuzxy4AnQ6j5T
TO221sVQyifI7H9XiYW0WQW8HvT8K8Re88JM9IoKV0MDhy6Pgk70FS1f3PNL4G5+
S3fYpUK6J3FkOw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:49 2025 by rpki-client