Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
File: wuJKnaa-B1Tt3BR41pTm2p4Volg.mft (raw, json)
Hash identifier: +NnNJxvs699YZ6yujoaBkPBgkWhA9Qk87+4B4h9DU5M=
Subject key identifier: 0A:15:08:F0:FB:9D:79:37:EC:B5:24:2A:EB:F4:86:84:87:29:E8:13
Authority key identifier: C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
Certificate issuer: /CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Certificate serial: 019A4DAAC59D758DC60BFA9AFAE74925387D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
Manifest number: 169B
Signing time: Tue 04 Nov 2025 07:00:28 +0000
Manifest this update: Tue 04 Nov 2025 07:00:28 +0000
Manifest next update: Wed 05 Nov 2025 07:00:28 +0000
Files and hashes: 1: h69ZP3KGJST0X8t2H0a84vHIE78.roa (hash: J750FBzG47GmCm3WoGWQrJESMcKlRjC1SRSpKQ3Vchw=)
2: wuJKnaa-B1Tt3BR41pTm2p4Volg.crl (hash: 1pSHxVEplpDe980PaIB1XViSueSc/1BTlDgrIE0vsd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:c5:9d:75:8d:c6:0b:fa:9a:fa:e7:49:25:38:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Validity
Not Before: Nov 4 07:00:28 2025 GMT
Not After : Nov 5 07:00:28 2025 GMT
Subject: CN=0a1508f0fb9d7937ecb5242aebf486848729e813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:52:45:27:e6:3a:28:c9:6c:09:ca:9c:cc:
c3:79:55:f0:96:d4:69:aa:29:e6:42:a6:4e:79:1d:
11:52:cc:91:7d:a9:01:8d:5e:dc:46:25:64:31:eb:
75:db:f4:2d:16:18:e7:95:13:ec:f2:7a:6e:3e:95:
e3:40:db:72:9a:55:2b:76:33:f1:05:99:fb:4a:76:
4e:af:2b:c8:8b:55:e3:07:07:8e:a4:7a:42:35:1c:
30:d4:4b:96:70:0b:62:27:a5:c8:40:a1:95:d0:b6:
39:41:a5:ac:18:b4:25:e7:bc:c8:2f:35:6e:f7:f1:
a5:ea:01:36:ee:32:79:03:21:ab:f8:b7:c2:43:7b:
86:11:66:5a:94:da:ab:52:47:10:6b:e8:63:b6:5f:
70:a4:23:85:42:48:7f:4a:a0:32:18:ea:d5:91:d7:
ca:4d:9a:f9:29:9e:44:dc:df:de:25:b6:46:8c:9c:
51:3f:c7:09:ee:89:d4:a5:4e:cb:e7:e5:8f:f7:59:
85:f1:05:52:e4:83:80:d7:a5:42:4a:ea:20:89:69:
16:90:0c:eb:34:7c:51:e1:f5:68:b5:2e:2f:59:4f:
66:41:9e:44:f0:d5:3e:bf:7c:e7:26:03:ce:75:1b:
65:72:31:cc:c3:fc:89:ff:62:00:4d:bc:5e:23:6e:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:08:F0:FB:9D:79:37:EC:B5:24:2A:EB:F4:86:84:87:29:E8:13
X509v3 Authority Key Identifier:
keyid:C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:05:ba:72:e1:63:a7:6e:bc:05:d7:fd:31:6e:bb:a4:6d:bc:
16:5f:b4:16:93:7e:84:ce:58:d8:01:22:05:c8:3b:eb:2a:36:
78:1f:ac:c1:7e:77:1b:f1:75:64:15:c5:99:df:dc:0c:c7:c1:
0f:4e:47:49:4d:95:2d:65:68:17:a6:0f:5e:cf:ee:d8:43:96:
d3:47:6f:dd:25:ca:33:fb:52:4e:dd:e7:d0:11:a6:c6:dd:77:
f3:03:30:4a:38:3e:91:86:f1:68:45:17:7c:28:b3:bd:5b:f1:
69:ad:9b:30:7a:ef:b9:1e:17:88:81:6c:8a:a7:cb:ed:ca:d7:
36:d3:40:5f:e9:c4:3e:6b:36:c4:1a:29:e7:76:bd:c3:c4:79:
f5:fc:c0:b9:17:be:52:06:fb:d2:59:62:c5:aa:3d:a7:cb:10:
08:f4:8d:99:8d:d5:c2:04:b2:75:7c:ab:82:64:c5:94:b7:15:
ee:f4:95:71:8b:51:ec:0e:80:14:ab:e9:bb:91:9b:bf:b9:e2:
7e:3c:38:97:ce:0a:5a:97:4b:31:e7:be:06:07:97:f6:db:c0:
3a:cf:10:3e:28:48:a3:dc:ed:a5:b0:3e:b3:7f:1d:11:f4:52:
54:67:31:ec:d1:62:87:00:fb:98:ca:5c:05:46:95:ba:9f:8b:
1e:14:ee:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqsWddY3GC/qa+udJJTh9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZTI0YTlkYTZiZTA3NTRlZGRjMTQ3OGQ2OTRlNmRhOWUx
NWEyNTgwHhcNMjUxMTA0MDcwMDI4WhcNMjUxMTA1MDcwMDI4WjAzMTEwLwYDVQQD
EygwYTE1MDhmMGZiOWQ3OTM3ZWNiNTI0MmFlYmY0ODY4NDg3MjllODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofZSRSfmOijJbAnKnMzDeVXwltRp
qinmQqZOeR0RUsyRfakBjV7cRiVkMet12/QtFhjnlRPs8npuPpXjQNtymlUrdjPx
BZn7SnZOryvIi1XjBweOpHpCNRww1EuWcAtiJ6XIQKGV0LY5QaWsGLQl57zILzVu
9/Gl6gE27jJ5AyGr+LfCQ3uGEWZalNqrUkcQa+hjtl9wpCOFQkh/SqAyGOrVkdfK
TZr5KZ5E3N/eJbZGjJxRP8cJ7onUpU7L5+WP91mF8QVS5IOA16VCSuogiWkWkAzr
NHxR4fVotS4vWU9mQZ5E8NU+v3znJgPOdRtlcjHMw/yJ/2IATbxeI24WqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoVCPD7nXk37LUkKuv0hoSHKegTMB8GA1UdIwQY
MBaAFMLiSp2mvgdU7dwUeNaU5tqeFaJYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZTU5ZjItYmU3YS00MmQ5LTllNjAt
NTBlMjUzM2ZjZDRlLzEvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80ZTU5ZjItYmU3YS00MmQ5LTllNjAtNTBlMjUzM2ZjZDRl
LzEvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwW6cuFj
p268Bdf9MW67pG28Fl+0FpN+hM5Y2AEiBcg76yo2eB+swX53G/F1ZBXFmd/cDMfB
D05HSU2VLWVoF6YPXs/u2EOW00dv3SXKM/tSTt3n0BGmxt138wMwSjg+kYbxaEUX
fCizvVvxaa2bMHrvuR4XiIFsiqfL7crXNtNAX+nEPms2xBop53a9w8R59fzAuRe+
Ugb70llixao9p8sQCPSNmY3VwgSydXyrgmTFlLcV7vSVcYtR7A6AFKvpu5Gbv7ni
fjw4l84KWpdLMee+BgeX9tvAOs8QPihIo9ztpbA+s38dEfRSVGcx7NFihwD7mMpc
BUaVup+LHhTubw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:42 2025 by rpki-client