Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
File: wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json)
Hash identifier: zLzesCSaTHqV2qhTJrVZgqJn7hkLgMQYcB4CQG9zyQY=
Subject key identifier: 7B:55:64:E2:11:77:A7:F2:33:11:77:97:AA:CD:93:BA:B2:7D:11:D1
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 019A4D075A37BD6682188D1DEEC3C125B0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:01:58 +0000
Manifest this update: Tue 04 Nov 2025 04:01:58 +0000
Manifest next update: Wed 05 Nov 2025 04:01:58 +0000
Files and hashes: 1: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (hash: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=)
2: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (hash: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=)
3: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: pPaUrO1e6WbZz5lNPZRxTBj/tPc62EQ1pkuteh/u3Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:5a:37:bd:66:82:18:8d:1d:ee:c3:c1:25:b0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Nov 4 04:01:58 2025 GMT
Not After : Nov 5 04:01:58 2025 GMT
Subject: CN=7b5564e21177a7f233117797aacd93bab27d11d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:c9:b2:89:6a:22:fc:33:2d:f5:d5:f3:8a:
7c:b8:46:d4:03:1a:2c:e5:13:1f:7c:6a:f5:e8:2c:
ba:80:58:0c:f1:4f:29:82:7a:ad:09:c4:c1:22:0d:
13:3b:fb:29:6f:ab:80:f5:f5:48:e8:70:f0:5e:b2:
6e:7b:32:68:91:ed:ba:2d:32:cc:0d:44:10:75:18:
fb:28:67:52:4b:d3:c9:d0:bf:6c:5b:a5:b5:b3:61:
93:5c:50:f5:1a:4c:54:af:f3:34:2b:1d:b4:2e:aa:
ec:b2:28:2f:cc:08:54:ce:93:ed:fb:7d:25:bc:fa:
e8:80:e5:2e:e7:e1:ac:7f:35:10:9d:20:4e:a7:b4:
eb:b2:85:40:6c:52:8e:4b:57:07:ee:ff:62:7d:49:
6e:e8:42:8c:24:5f:17:70:4f:e3:d3:98:d4:7c:2b:
86:06:ff:ce:26:44:ca:1c:1d:e8:c5:4c:69:dc:c9:
23:65:65:30:70:6c:3d:78:6d:2d:82:73:dc:6c:f0:
76:25:20:56:eb:9e:9d:6f:5f:00:6e:16:fd:52:54:
2b:20:56:4e:c7:09:18:63:47:28:c0:cb:b9:a2:b2:
c5:ee:cb:43:2e:a3:cd:93:92:93:44:cb:e6:dd:16:
7e:2a:dc:ce:59:d9:fb:69:c5:23:39:f0:13:09:c9:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:55:64:E2:11:77:A7:F2:33:11:77:97:AA:CD:93:BA:B2:7D:11:D1
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5b:95:86:f2:42:38:80:5f:e6:8e:a5:af:dc:07:3b:b5:69:
11:d5:21:16:53:91:4f:55:8e:b7:e9:81:18:da:a8:d2:41:fc:
01:12:67:5d:a4:bb:7f:26:6b:3d:5a:bb:12:26:48:67:92:91:
43:9f:05:8b:c1:3a:f8:dd:a9:f7:09:58:fc:0c:1e:46:1d:32:
01:69:a3:08:e6:fb:97:89:dc:fa:5b:e2:a0:7b:4d:36:1c:5d:
94:e9:d4:1e:17:f5:36:a5:65:17:68:d6:93:f0:94:b9:85:be:
c2:cf:0a:1d:1e:29:43:ba:ab:f9:aa:59:8d:e6:b6:cb:86:e6:
28:6f:09:96:8f:fe:70:e7:6b:bf:82:b6:72:5d:c3:7f:4d:0b:
92:65:60:da:83:ed:61:46:8e:0c:de:93:30:1c:93:9c:6b:54:
cf:9e:65:64:d7:d6:17:b6:bf:57:55:8a:40:19:01:02:02:a8:
e1:09:45:be:79:32:a0:bd:f0:98:e9:9a:15:87:35:41:4f:d0:
77:00:a8:bd:9d:4e:6d:f0:13:18:06:3f:dd:21:d4:88:41:f1:
16:d5:49:a0:c2:21:43:80:28:52:20:3e:7b:4a:1b:d5:78:c5:
9f:a1:90:13:b7:c7:03:26:ba:78:26:48:a9:fa:6a:03:9c:8e:
f5:f1:a0:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNB1o3vWaCGI0d7sPBJbCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZDJhODg0NWNkZjY1NzZkZThlYjAxMTE4MDhhYmQ2NWZk
OGJjNDQwHhcNMjUxMTA0MDQwMTU4WhcNMjUxMTA1MDQwMTU4WjAzMTEwLwYDVQQD
Eyg3YjU1NjRlMjExNzdhN2YyMzMxMTc3OTdhYWNkOTNiYWIyN2QxMWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcHJsolqIvwzLfXV84p8uEbUAxos
5RMffGr16Cy6gFgM8U8pgnqtCcTBIg0TO/spb6uA9fVI6HDwXrJuezJoke26LTLM
DUQQdRj7KGdSS9PJ0L9sW6W1s2GTXFD1GkxUr/M0Kx20LqrssigvzAhUzpPt+30l
vProgOUu5+GsfzUQnSBOp7TrsoVAbFKOS1cH7v9ifUlu6EKMJF8XcE/j05jUfCuG
Bv/OJkTKHB3oxUxp3MkjZWUwcGw9eG0tgnPcbPB2JSBW656db18Abhb9UlQrIFZO
xwkYY0cowMu5orLF7stDLqPNk5KTRMvm3RZ+KtzOWdn7acUjOfATCcmhWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtVZOIRd6fyMxF3l6rNk7qyfRHRMB8GA1UdIwQY
MBaAFMDSqIRc32V23o6wERgIq9Zf2LxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd05Lb2hGemZaWGJlanJBUkdBaXIxbF9ZdkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83Njk3NDMtNGJhMS00M2NlLWFmMjMt
NDg0NjA2MmY5YTczLzEvd05Lb2hGemZaWGJlanJBUkdBaXIxbF9ZdkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83Njk3NDMtNGJhMS00M2NlLWFmMjMtNDg0NjA2MmY5YTcz
LzEvd05Lb2hGemZaWGJlanJBUkdBaXIxbF9ZdkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFuVhvJC
OIBf5o6lr9wHO7VpEdUhFlORT1WOt+mBGNqo0kH8ARJnXaS7fyZrPVq7EiZIZ5KR
Q58Fi8E6+N2p9wlY/AweRh0yAWmjCOb7l4nc+lvioHtNNhxdlOnUHhf1NqVlF2jW
k/CUuYW+ws8KHR4pQ7qr+apZjea2y4bmKG8Jlo/+cOdrv4K2cl3Df00LkmVg2oPt
YUaODN6TMByTnGtUz55lZNfWF7a/V1WKQBkBAgKo4QlFvnkyoL3wmOmaFYc1QU/Q
dwCovZ1ObfATGAY/3SHUiEHxFtVJoMIhQ4AoUiA+e0ob1XjFn6GQE7fHAya6eCZI
qfpqA5yO9fGg7A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:53:16 2025 by rpki-client