Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
File: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json)
Hash identifier: fuqzVuEfUxG+E+g2JIq9E3FQXOhVyFlCE8DHDRWL87s=
Subject key identifier: 2D:A1:3A:43:40:43:53:7F:88:23:1E:BB:5C:2B:FD:4C:C3:51:98:C3
Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
Certificate issuer: /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Certificate serial: 019A4F626C99AA42FFFB8072BC6F5D6566E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
Manifest number: 15AB
Signing time: Tue 04 Nov 2025 15:00:41 +0000
Manifest this update: Tue 04 Nov 2025 15:00:41 +0000
Manifest next update: Wed 05 Nov 2025 15:00:41 +0000
Files and hashes: 1: 52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa (hash: mEm534ZT6ZgaZ/3v86vVc5+tMaW3MbmkjCPIio5FpX8=)
2: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: l9ocsukupd5ofobqSFvR1EhOm0hxUUin/5Tm3bMqQ4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:6c:99:aa:42:ff:fb:80:72:bc:6f:5d:65:66:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Validity
Not Before: Nov 4 15:00:41 2025 GMT
Not After : Nov 5 15:00:41 2025 GMT
Subject: CN=2da13a434043537f88231ebb5c2bfd4cc35198c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:39:0b:52:fe:f4:11:d5:7c:c2:f0:d6:9a:
78:62:3d:4c:85:2b:41:2e:03:0a:50:4b:63:f1:5e:
b3:ca:02:ba:da:fc:35:f6:1b:ed:4a:c7:f4:94:02:
d0:e0:88:e6:f3:86:ad:13:38:95:cb:d9:d9:5b:81:
88:75:57:fd:fa:44:29:0f:dd:5c:46:22:ce:de:e4:
98:26:7c:97:c2:72:17:8b:5c:9a:43:a8:08:9e:15:
56:e1:93:ce:7a:9f:15:f3:3c:fb:73:f7:69:c6:b2:
37:b2:04:83:6b:1b:ed:2f:d7:4c:fa:ae:5f:f2:32:
b0:2f:24:09:a8:c4:30:08:63:a6:73:ae:97:a3:71:
59:19:e2:b6:57:42:ba:c6:82:e2:98:c4:e6:85:5b:
51:e5:12:e1:bf:f4:5e:0a:f0:d6:b0:92:6b:91:95:
ce:18:4c:63:16:42:18:b6:93:16:ac:3b:16:f5:5b:
d5:ca:76:e4:cd:71:22:75:4b:3a:42:f5:bb:e5:84:
6e:68:4b:4a:e3:b1:e8:1d:5a:54:e6:c1:de:2a:ac:
73:cd:7f:35:ee:bd:cf:32:ea:2b:52:95:4b:7c:1b:
d2:14:ab:d1:59:75:a5:1f:39:18:23:bc:6f:c4:fb:
89:81:f1:ce:b7:ac:85:b9:df:14:4b:c6:a0:08:43:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A1:3A:43:40:43:53:7F:88:23:1E:BB:5C:2B:FD:4C:C3:51:98:C3
X509v3 Authority Key Identifier:
keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a0:76:7f:0e:31:57:6a:fc:53:08:f4:86:a1:5a:7d:7d:27:
60:00:bf:c0:38:40:3f:51:b3:11:2f:ce:49:d4:84:39:66:7a:
4e:18:da:5b:25:6d:65:5a:44:a7:07:b7:0c:cb:6d:fd:1c:13:
be:18:b9:66:37:1a:6c:22:c2:ac:fd:ff:bb:a1:cd:ce:ff:4a:
8f:a3:9f:37:3c:92:a9:8f:7a:af:10:c0:cc:74:19:46:be:34:
19:5d:a3:a3:fa:f3:94:71:53:93:05:ae:4c:7a:91:99:b1:13:
0a:53:80:9a:17:e2:8e:00:17:dd:b9:61:01:6b:82:a8:88:25:
b2:c2:07:ea:c0:e7:1e:99:e9:29:ca:63:19:0b:9d:d6:81:85:
f6:cb:e8:41:f4:7e:55:3f:6b:78:af:87:e8:d4:1b:47:42:33:
6b:bf:15:7e:e0:25:0a:ec:99:dd:b6:2d:f6:dd:42:11:73:32:
10:a1:6b:2d:49:3e:21:2c:c6:a3:28:ff:1f:4d:85:ad:b7:e8:
05:b0:51:e9:96:1f:0b:53:6a:3c:52:98:9e:66:e9:8c:20:9b:
6b:3b:d2:e1:ab:eb:2b:c4:4e:e8:d6:12:65:80:4a:01:38:97:
ee:bb:4b:50:2a:48:48:bd:70:15:6f:36:3f:08:f6:9e:9a:8f:
3d:6a:ef:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYmyZqkL/+4ByvG9dZWbmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDY2ZGI4YWUxNjU1ZmMzZDhhNGFhOTllYmJkOTNhM2Zl
MGUzZTQwHhcNMjUxMTA0MTUwMDQxWhcNMjUxMTA1MTUwMDQxWjAzMTEwLwYDVQQD
EygyZGExM2E0MzQwNDM1MzdmODgyMzFlYmI1YzJiZmQ0Y2MzNTE5OGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHE5C1L+9BHVfMLw1pp4Yj1MhStB
LgMKUEtj8V6zygK62vw19hvtSsf0lALQ4Ijm84atEziVy9nZW4GIdVf9+kQpD91c
RiLO3uSYJnyXwnIXi1yaQ6gInhVW4ZPOep8V8zz7c/dpxrI3sgSDaxvtL9dM+q5f
8jKwLyQJqMQwCGOmc66Xo3FZGeK2V0K6xoLimMTmhVtR5RLhv/ReCvDWsJJrkZXO
GExjFkIYtpMWrDsW9VvVynbkzXEidUs6QvW75YRuaEtK47HoHVpU5sHeKqxzzX81
7r3PMuorUpVLfBvSFKvRWXWlHzkYI7xvxPuJgfHOt6yFud8US8agCEPddwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2hOkNAQ1N/iCMeu1wr/UzDUZjDMB8GA1UdIwQY
MBaAFFsGbbiuFlX8PYpKqZ672To/4OPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt
OWNlYWExYjdhMTE2LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2
LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKB2fw4x
V2r8Uwj0hqFafX0nYAC/wDhAP1GzES/OSdSEOWZ6ThjaWyVtZVpEpwe3DMtt/RwT
vhi5ZjcabCLCrP3/u6HNzv9Kj6OfNzySqY96rxDAzHQZRr40GV2jo/rzlHFTkwWu
THqRmbETClOAmhfijgAX3blhAWuCqIglssIH6sDnHpnpKcpjGQud1oGF9svoQfR+
VT9reK+H6NQbR0Iza78VfuAlCuyZ3bYt9t1CEXMyEKFrLUk+ISzGoyj/H02Frbfo
BbBR6ZYfC1NqPFKYnmbpjCCbazvS4avrK8RO6NYSZYBKATiX7rtLUCpISL1wFW82
Pwj2npqPPWrv+g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:00 2025 by rpki-client