
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
File: wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft (raw, json)
Hash identifier: Yl4UTFyjvpTB+PsvubsAEm/1knC2l3u2sZsXSShcJYw=
Subject key identifier: F4:08:CD:88:53:39:51:3B:FE:27:04:C7:B1:B4:D5:99:B4:9C:2A:6A
Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
Certificate issuer: /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Certificate serial: 019A52D2232BE924075112D1C595D4236157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:01:34 +0000
Manifest this update: Wed 05 Nov 2025 07:01:34 +0000
Manifest next update: Thu 06 Nov 2025 07:01:34 +0000
Files and hashes: 1: CMFtvIRrP8F50u4CVRtzzHXRYto.roa (hash: zBitZQVL6CHlOMMwjKpEh8Pxjt6+cJBsedg4te+yLPA=)
2: wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl (hash: /7DiFxLdYZFvXs4QpklzfVs4/Ts40LMXUsdKAtXpaOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:23:2b:e9:24:07:51:12:d1:c5:95:d4:23:61:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Validity
Not Before: Nov 5 07:01:34 2025 GMT
Not After : Nov 6 07:01:34 2025 GMT
Subject: CN=f408cd885339513bfe2704c7b1b4d599b49c2a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:7d:32:ba:ec:c8:eb:3b:60:73:07:8b:85:
b1:14:86:c4:be:d1:07:8b:12:92:2a:06:1a:dd:ee:
46:dd:b8:34:dd:da:2b:23:93:b0:7a:87:93:3a:78:
09:48:f9:7c:2b:97:a8:fc:d0:ae:b7:e2:09:90:ce:
04:17:2d:fd:56:25:ec:fd:69:32:43:2e:97:a6:b5:
3a:10:5b:33:85:d0:ca:06:49:5e:58:e2:40:36:f3:
c9:4b:ce:c9:4e:df:71:49:ac:32:e9:bf:5c:4a:ef:
ed:24:2e:83:03:cb:1e:5d:34:34:67:84:43:83:93:
82:ba:7a:1f:c4:4d:aa:a7:1a:f6:78:50:34:de:c3:
ff:ba:7a:ee:b2:95:03:87:4c:47:d5:d4:a7:32:fe:
69:e4:56:8e:d4:fc:d6:f5:f5:ac:a5:56:d7:79:c4:
99:33:0b:9a:49:c0:fc:c2:db:73:1a:38:ec:35:93:
0a:b1:d9:32:95:90:e3:7f:01:80:ee:f4:8c:a9:ed:
f0:9d:c7:e0:d2:64:c6:0f:ab:59:9d:33:a4:eb:65:
82:20:0c:b9:ab:44:7a:6e:b0:c6:0e:17:27:32:9c:
8b:0c:e5:16:36:9b:36:28:9a:c7:04:68:09:52:8d:
a2:e9:3b:90:76:35:d4:70:3e:c6:e0:c1:2c:bb:fa:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:08:CD:88:53:39:51:3B:FE:27:04:C7:B1:B4:D5:99:B4:9C:2A:6A
X509v3 Authority Key Identifier:
keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:70:18:ba:73:7f:a6:5e:e5:85:45:6c:c6:ad:c3:62:38:73:
0f:88:a6:59:43:b4:5b:81:c9:e1:af:2e:f5:86:44:67:b0:ee:
60:1e:31:11:68:3a:82:e2:34:9d:1b:b0:94:64:78:76:93:1b:
27:82:89:c2:47:da:f3:fd:bd:8c:29:26:be:72:eb:1d:c0:27:
4c:8b:3c:48:74:42:ee:e9:0e:95:0e:15:e1:33:8c:cf:e1:b3:
63:11:c3:65:78:e7:ad:10:73:14:35:ae:45:8b:10:45:f4:44:
d9:9a:50:5f:a2:8b:a3:fb:a6:2e:fb:79:67:45:91:7a:22:61:
fc:c5:6d:d5:8f:dd:b1:96:fb:c1:68:0a:a8:19:f7:fe:60:7e:
f6:0a:b1:b6:75:ae:da:fd:44:f8:4d:35:ec:e7:63:e9:17:28:
56:18:76:77:b2:a8:4f:8d:3b:e0:70:40:e4:e5:f2:6c:2f:2c:
20:71:48:f3:c5:55:98:d7:6f:89:d7:c3:96:9d:1b:32:46:46:
b9:38:30:9e:2b:42:b3:64:31:d5:34:ef:48:24:a6:13:b0:08:
34:d1:cd:53:c5:32:cb:06:9b:4b:51:17:f0:6b:73:97:a6:38:
27:62:02:33:37:92:6d:9b:07:25:45:7e:6b:c1:3e:cd:57:52:
c7:d7:98:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0iMr6SQHURLRxZXUI2FXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjYxMjJiNGNlZWU0MWY5N2ZmYjhjYzIyNTUwYmUzZmEw
YTUzZGMwHhcNMjUxMTA1MDcwMTM0WhcNMjUxMTA2MDcwMTM0WjAzMTEwLwYDVQQD
EyhmNDA4Y2Q4ODUzMzk1MTNiZmUyNzA0YzdiMWI0ZDU5OWI0OWMyYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmh9MrrsyOs7YHMHi4WxFIbEvtEH
ixKSKgYa3e5G3bg03dorI5OweoeTOngJSPl8K5eo/NCut+IJkM4EFy39ViXs/Wky
Qy6XprU6EFszhdDKBkleWOJANvPJS87JTt9xSawy6b9cSu/tJC6DA8seXTQ0Z4RD
g5OCunofxE2qpxr2eFA03sP/unruspUDh0xH1dSnMv5p5FaO1PzW9fWspVbXecSZ
MwuaScD8wttzGjjsNZMKsdkylZDjfwGA7vSMqe3wncfg0mTGD6tZnTOk62WCIAy5
q0R6brDGDhcnMpyLDOUWNps2KJrHBGgJUo2i6TuQdjXUcD7G4MEsu/oDMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQIzYhTOVE7/icEx7G01Zm0nCpqMB8GA1UdIwQY
MBaAFMEmEitM7uQfl/+4zCJVC+P6ClPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84MDM5M2YtMmJkNS00NjY4LWFjYmQt
MTUyYjQ2M2FhM2NhLzEvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC84MDM5M2YtMmJkNS00NjY4LWFjYmQtMTUyYjQ2M2FhM2Nh
LzEvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3AYunN/
pl7lhUVsxq3DYjhzD4imWUO0W4HJ4a8u9YZEZ7DuYB4xEWg6guI0nRuwlGR4dpMb
J4KJwkfa8/29jCkmvnLrHcAnTIs8SHRC7ukOlQ4V4TOMz+GzYxHDZXjnrRBzFDWu
RYsQRfRE2ZpQX6KLo/umLvt5Z0WReiJh/MVt1Y/dsZb7wWgKqBn3/mB+9gqxtnWu
2v1E+E017Odj6RcoVhh2d7KoT4074HBA5OXybC8sIHFI88VVmNdvidfDlp0bMkZG
uTgwnitCs2Qx1TTvSCSmE7AINNHNU8UyywabS1EX8Gtzl6Y4J2ICMzeSbZsHJUV+
a8E+zVdSx9eYWA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:43 2025 by rpki-client