
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
File: WXRV68sDv_Ki2XWtQIH5QZusrzU.mft (raw, json)
Hash identifier: O4bToxjXDRtY015Fv5bfMHxuBZq8b6XTlnXPdUTilh8=
Subject key identifier: 75:6C:A8:C0:99:3D:A5:36:AA:1F:44:95:0E:1B:F4:4A:F7:E5:AC:B2
Authority key identifier: 59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35
Certificate issuer: /CN=597455ebcb03bff2a2d975ad4081f9419bacaf35
Certificate serial: 019A52D22F0C5C2F8E2F671BE4373A90219F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
Manifest number: 01FA
Signing time: Wed 05 Nov 2025 07:01:37 +0000
Manifest this update: Wed 05 Nov 2025 07:01:37 +0000
Manifest next update: Thu 06 Nov 2025 07:01:37 +0000
Files and hashes: 1: 2mKN6eYxCZSzg1HkhTBmFH-Muzs.roa (hash: vCnqByRm0RvU7dzU3TpA6IT8qwABaBJlH4t+NDPI9V0=)
2: WXRV68sDv_Ki2XWtQIH5QZusrzU.crl (hash: lW7mHiuQUqoI4qezPHj9AJm1QuVnM54IGhfx0oUKuXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:2f:0c:5c:2f:8e:2f:67:1b:e4:37:3a:90:21:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597455ebcb03bff2a2d975ad4081f9419bacaf35
Validity
Not Before: Nov 5 07:01:37 2025 GMT
Not After : Nov 6 07:01:37 2025 GMT
Subject: CN=756ca8c0993da536aa1f44950e1bf44af7e5acb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:2c:c5:44:ae:e3:e4:68:15:0f:f0:d1:e1:
51:dc:d6:c8:80:06:d4:13:fd:8a:18:1c:0a:79:7e:
22:f2:50:ff:47:cb:bd:0e:43:dd:b1:c3:5e:fe:82:
3a:a8:ad:df:de:fb:a9:62:43:c0:be:fa:04:9f:da:
df:0d:6e:35:79:1f:00:ad:8e:1a:98:a7:26:4d:a0:
9a:ab:be:6f:28:d9:87:e7:6a:59:6d:e4:9c:2d:34:
3e:5a:77:1f:ba:47:66:fd:7e:7e:12:c7:a3:3f:fb:
e4:f9:8d:fb:be:64:8f:7d:46:1e:1f:de:8f:e5:52:
d5:31:20:e0:df:15:2a:75:8b:fc:a6:03:bd:0b:59:
3e:b2:69:b5:42:36:13:5d:9b:a5:6f:91:8f:e2:2c:
c7:45:7a:6e:5e:c5:e1:82:96:42:87:c9:f2:56:54:
f7:34:40:80:81:35:fb:21:af:13:04:a5:c3:1c:eb:
60:ec:b0:d8:a4:45:56:6d:bc:ea:c7:1c:83:e9:bd:
9f:93:c5:b9:8b:98:85:c6:80:cd:fd:d5:8e:0d:48:
be:b9:d8:3c:6d:e8:1c:2c:9d:88:99:4c:24:82:46:
56:73:b0:fb:b2:d9:b9:ad:a5:d5:96:fd:1c:8a:a0:
91:5c:0e:2c:1a:76:d9:cd:3d:68:43:3a:37:77:b4:
32:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6C:A8:C0:99:3D:A5:36:AA:1F:44:95:0E:1B:F4:4A:F7:E5:AC:B2
X509v3 Authority Key Identifier:
keyid:59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a7:2a:96:c4:d7:82:3c:88:3e:ca:15:ec:e7:12:b4:bd:17:
ab:e2:12:5f:38:ac:aa:94:2b:01:8d:67:3d:bf:a2:2f:01:e2:
a8:42:9d:84:0f:a6:d2:40:c7:e4:a3:a3:f0:8a:a7:eb:bd:47:
b7:48:b8:c9:d2:fd:ba:94:35:5e:fd:a9:a4:15:93:ca:ce:78:
0b:38:8a:2d:1b:66:6b:53:a1:4a:54:f4:0e:16:54:a3:2e:5a:
d8:0f:70:93:2a:c7:05:ec:5e:77:ad:48:f6:57:31:23:37:12:
76:d1:c0:af:f4:b8:88:c0:22:35:ce:d1:0a:31:ad:23:c2:f3:
83:67:ec:37:67:18:cf:a4:23:87:64:fb:27:a3:d4:dd:51:85:
5e:7c:e6:c7:b0:5f:cf:ff:70:02:aa:50:e6:f2:be:9a:e5:db:
7c:46:aa:19:e1:cd:23:cc:75:d9:f9:51:dd:91:61:fa:d3:53:
b1:d7:ce:ce:01:9a:f1:b6:5f:f7:62:c0:ff:ed:d7:9d:14:66:
6d:82:1b:df:99:6d:7e:ca:dc:62:61:3b:d6:54:fd:68:9a:9b:
12:a1:bd:a6:94:52:33:70:27:8b:62:56:eb:33:5c:e4:8e:a2:
b5:d3:87:7f:0f:db:54:ff:8e:16:a6:1b:02:4b:f5:60:f3:46:
88:8b:a0:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0i8MXC+OL2cb5Dc6kCGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzQ1NWViY2IwM2JmZjJhMmQ5NzVhZDQwODFmOTQxOWJh
Y2FmMzUwHhcNMjUxMTA1MDcwMTM3WhcNMjUxMTA2MDcwMTM3WjAzMTEwLwYDVQQD
Eyg3NTZjYThjMDk5M2RhNTM2YWExZjQ0OTUwZTFiZjQ0YWY3ZTVhY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23gsxUSu4+RoFQ/w0eFR3NbIgAbU
E/2KGBwKeX4i8lD/R8u9DkPdscNe/oI6qK3f3vupYkPAvvoEn9rfDW41eR8ArY4a
mKcmTaCaq75vKNmH52pZbeScLTQ+Wncfukdm/X5+EsejP/vk+Y37vmSPfUYeH96P
5VLVMSDg3xUqdYv8pgO9C1k+smm1QjYTXZulb5GP4izHRXpuXsXhgpZCh8nyVlT3
NECAgTX7Ia8TBKXDHOtg7LDYpEVWbbzqxxyD6b2fk8W5i5iFxoDN/dWODUi+udg8
begcLJ2ImUwkgkZWc7D7stm5raXVlv0ciqCRXA4sGnbZzT1oQzo3d7QyRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVsqMCZPaU2qh9ElQ4b9Er35ayyMB8GA1UdIwQY
MBaAFFl0VevLA7/yotl1rUCB+UGbrK81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NzY2ZmEtNGRjNy00N2IyLWE2NGYt
ZWYzNGRkNGRlNTcyLzEvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NzY2ZmEtNGRjNy00N2IyLWE2NGYtZWYzNGRkNGRlNTcy
LzEvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOacqlsTX
gjyIPsoV7OcStL0Xq+ISXzisqpQrAY1nPb+iLwHiqEKdhA+m0kDH5KOj8Iqn671H
t0i4ydL9upQ1Xv2ppBWTys54CziKLRtma1OhSlT0DhZUoy5a2A9wkyrHBexed61I
9lcxIzcSdtHAr/S4iMAiNc7RCjGtI8Lzg2fsN2cYz6Qjh2T7J6PU3VGFXnzmx7Bf
z/9wAqpQ5vK+muXbfEaqGeHNI8x12flR3ZFh+tNTsdfOzgGa8bZf92LA/+3XnRRm
bYIb35ltfsrcYmE71lT9aJqbEqG9ppRSM3Ani2JW6zNc5I6itdOHfw/bVP+OFqYb
Akv1YPNGiIugRQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:23:11 2025 by rpki-client