Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
File: w0CU4yNtzRyDURN5Gjgk2ilz35s.mft (raw, json)
Hash identifier: 09tLIu2xmTHkiFABokemeioZYLNjWpkQjNRFq1tmHN0=
Subject key identifier: 8F:59:D0:51:B0:19:B9:B6:FF:D3:C1:B2:03:2C:91:45:9E:7D:DE:EC
Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
Certificate issuer: /CN=c34094e3236dcd1c835113791a3824da2973df9b
Certificate serial: 019A5299D6E555982E79784626FDCD80ADA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
Manifest number: A9
Signing time: Wed 05 Nov 2025 06:00:04 +0000
Manifest this update: Wed 05 Nov 2025 06:00:04 +0000
Manifest next update: Thu 06 Nov 2025 06:00:04 +0000
Files and hashes: 1: 4RPSqbfmeC-IC3WR5JrPY-ti6aQ.roa (hash: egyP6+hpVOsfhjTSw14Ho98ZzzCiujpdZ4z2/ZYR+NI=)
2: E1huK4lRaNqnfDwjhKC7S27samY.roa (hash: 5eWDICwAkK513LsxaFUCZCYFQIVOjrg6WQ+rcwXWfbg=)
3: V7FxeBgowMJ9uzRZi_USZCw6XMI.roa (hash: tBwxfUXaS851zDbs0JMu4PFLXBxOjlI4hBYncc4yuPg=)
4: w0CU4yNtzRyDURN5Gjgk2ilz35s.crl (hash: v00l6x0/NKn/jwV/K5ty5speetaJyNipdDnoLXi6eks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:d6:e5:55:98:2e:79:78:46:26:fd:cd:80:ad:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b
Validity
Not Before: Nov 5 06:00:04 2025 GMT
Not After : Nov 6 06:00:04 2025 GMT
Subject: CN=8f59d051b019b9b6ffd3c1b2032c91459e7ddeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:64:06:8c:c1:26:3e:71:4d:4e:cd:87:30:
92:ea:f8:cb:c5:c7:da:cc:c5:57:66:bf:dc:42:77:
e2:0f:0a:40:3a:bf:10:79:4b:98:23:b6:b2:c5:de:
db:4f:11:b6:aa:9f:4a:d0:79:2a:c6:98:fc:b6:23:
ea:85:cd:dd:16:f0:49:6d:7d:0c:c6:8f:11:f3:73:
bc:ee:e3:54:b7:38:c2:3c:8d:08:f6:d5:86:12:3d:
2d:c7:a3:fe:86:90:91:d1:86:34:47:37:03:4c:bd:
b7:d2:90:1c:a0:b0:72:00:17:99:84:41:4d:22:78:
7d:4f:02:61:d2:55:8a:0c:e9:dd:60:80:94:44:3c:
d6:ac:54:87:9b:1b:de:f3:f2:b3:6a:8b:39:7c:b2:
5d:52:ea:03:03:8f:19:0a:55:27:fa:4c:ed:35:2d:
f2:60:6b:f6:55:d4:f3:83:a1:db:b4:5b:89:3d:d9:
cc:a3:52:cb:d9:08:a8:60:98:39:f9:65:80:a4:96:
fb:fb:4e:55:00:71:7b:08:ac:ec:90:be:9d:07:82:
b2:fb:f8:1b:a8:31:96:b8:51:2b:81:55:8f:75:46:
4b:89:1a:da:15:ef:7a:93:85:c9:68:af:b0:57:e1:
87:d7:53:22:e8:ca:be:7d:10:08:a8:ee:b5:77:a8:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:59:D0:51:B0:19:B9:B6:FF:D3:C1:B2:03:2C:91:45:9E:7D:DE:EC
X509v3 Authority Key Identifier:
keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7b:44:0a:1b:d7:be:2e:27:3e:1d:3f:be:b5:90:1d:8f:fe:
48:20:82:26:52:c3:b0:41:a9:43:b7:73:2e:20:c0:df:c0:fc:
ce:45:82:47:90:fe:0d:da:88:4d:48:95:5d:33:03:f1:49:fd:
4e:1f:2c:95:36:2d:7b:55:c2:64:e9:07:ec:59:73:34:c3:61:
20:b4:8e:80:cf:17:0f:24:49:a1:18:12:8d:87:2a:e3:4f:26:
11:47:59:ae:71:82:e8:bc:fc:b2:2b:a5:60:a6:13:e3:ee:9e:
b5:8f:19:35:61:dd:3e:38:da:f1:e5:3c:f1:b3:ef:b7:c4:a9:
11:a4:28:52:fe:82:01:44:ff:ab:c6:fb:02:ea:ed:c1:39:02:
75:a5:c4:e1:fe:04:27:23:ba:9d:53:50:95:a9:ab:19:e3:4e:
66:39:f8:cb:0f:95:e1:48:29:4d:b1:1a:00:76:31:2b:6d:ad:
6a:93:65:35:f0:c6:45:3e:fe:54:dd:60:8c:cc:06:62:e0:2a:
0d:0f:1d:f2:c7:8b:b5:4b:c3:4d:d0:c5:2d:32:57:77:d1:dd:
64:c8:cc:a5:6c:a8:de:c1:62:06:e9:cb:64:17:37:be:fc:c6:
53:3f:5e:f0:8e:fb:fb:51:bd:78:b9:ad:bc:bc:45:48:4d:07:
33:05:62:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSmdblVZgueXhGJv3NgK2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNDA5NGUzMjM2ZGNkMWM4MzUxMTM3OTFhMzgyNGRhMjk3
M2RmOWIwHhcNMjUxMTA1MDYwMDA0WhcNMjUxMTA2MDYwMDA0WjAzMTEwLwYDVQQD
Eyg4ZjU5ZDA1MWIwMTliOWI2ZmZkM2MxYjIwMzJjOTE0NTllN2RkZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyypkBozBJj5xTU7NhzCS6vjLxcfa
zMVXZr/cQnfiDwpAOr8QeUuYI7ayxd7bTxG2qp9K0Hkqxpj8tiPqhc3dFvBJbX0M
xo8R83O87uNUtzjCPI0I9tWGEj0tx6P+hpCR0YY0RzcDTL230pAcoLByABeZhEFN
Inh9TwJh0lWKDOndYICURDzWrFSHmxve8/Kzaos5fLJdUuoDA48ZClUn+kztNS3y
YGv2VdTzg6HbtFuJPdnMo1LL2QioYJg5+WWApJb7+05VAHF7CKzskL6dB4Ky+/gb
qDGWuFErgVWPdUZLiRraFe96k4XJaK+wV+GH11Mi6Mq+fRAIqO61d6h3swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9Z0FGwGbm2/9PBsgMskUWefd7sMB8GA1UdIwQY
MBaAFMNAlOMjbc0cg1ETeRo4JNopc9+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzIt
ZThhMzlkZDYwODY0LzEvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzItZThhMzlkZDYwODY0
LzEvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3tEChvX
vi4nPh0/vrWQHY/+SCCCJlLDsEGpQ7dzLiDA38D8zkWCR5D+DdqITUiVXTMD8Un9
Th8slTYte1XCZOkH7FlzNMNhILSOgM8XDyRJoRgSjYcq408mEUdZrnGC6Lz8siul
YKYT4+6etY8ZNWHdPjja8eU88bPvt8SpEaQoUv6CAUT/q8b7AurtwTkCdaXE4f4E
JyO6nVNQlamrGeNOZjn4yw+V4UgpTbEaAHYxK22tapNlNfDGRT7+VN1gjMwGYuAq
DQ8d8seLtUvDTdDFLTJXd9HdZMjMpWyo3sFiBunLZBc3vvzGUz9e8I77+1G9eLmt
vLxFSE0HMwVicw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:40:57 2025 by rpki-client