Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: 6Gsw6cdACrFcU32dyvg7fUfmtNCKofnWtilDz/MFM4c=
Subject key identifier: 06:7C:0A:75:76:CB:95:06:1A:68:82:2E:CC:37:86:CF:04:B0:93:EF
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 019A51504BB4AC5D6C1AE23C4D844A02D369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 00:00:07 +0000
Manifest this update: Wed 05 Nov 2025 00:00:07 +0000
Manifest next update: Thu 06 Nov 2025 00:00:07 +0000
Files and hashes: 1: 2ckuuQNGelqhfIDU0HMZ3G_jIN4.roa (hash: Ly3hlzB/x5T87M29FpEs5LMZzWEyS3uYaMyLbALjnTU=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: wx1ymHtJrb/4PV6CFivVSdpvBnH1giYGbgA0cKa7Rqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:4b:b4:ac:5d:6c:1a:e2:3c:4d:84:4a:02:d3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Nov 5 00:00:07 2025 GMT
Not After : Nov 6 00:00:07 2025 GMT
Subject: CN=067c0a7576cb95061a68822ecc3786cf04b093ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:ce:33:ff:99:ea:cb:27:8f:18:24:e3:51:
86:07:07:b0:e1:e8:1e:fc:a9:57:9b:f9:9b:47:bd:
44:b1:14:4d:6d:d7:6c:ce:59:45:be:1c:cd:62:36:
1e:b8:0f:1d:98:e4:7e:0d:f9:18:c5:d4:a3:dd:4a:
4f:02:9f:9a:ad:fe:fb:b4:13:d4:46:aa:26:41:8a:
de:dc:8d:d9:28:26:8b:80:2e:84:4e:18:87:a1:6a:
6d:0e:19:12:21:d2:be:59:2c:88:a1:e4:a7:ec:53:
e8:e4:31:25:32:19:bd:18:ae:d8:15:8d:2e:8c:56:
a6:be:26:2d:f6:55:a7:54:55:c0:89:29:48:27:f2:
63:09:18:80:7b:52:00:38:68:1b:68:6e:b9:bc:13:
c5:93:60:1f:57:91:8f:47:78:b1:7e:af:5f:7f:15:
ef:c0:30:83:03:45:67:f3:3b:01:37:0f:34:a9:99:
45:69:08:6c:aa:b2:38:a5:91:47:88:e9:0d:ff:d3:
e1:c3:4b:18:9f:32:94:f8:0c:4e:69:54:b5:9a:2b:
f2:bc:4a:3d:b9:c5:1d:73:f2:8f:af:b9:7b:1f:54:
c3:ad:78:21:ee:6b:dc:81:31:c8:5e:1c:7a:64:7a:
b4:52:66:6a:ab:42:1b:87:38:f0:2a:f4:7e:25:a2:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7C:0A:75:76:CB:95:06:1A:68:82:2E:CC:37:86:CF:04:B0:93:EF
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:be:74:d8:77:5b:c8:06:42:67:29:21:fb:aa:b7:44:8e:77:
99:cc:e6:b3:ca:f6:92:85:dc:50:3d:52:87:aa:e5:2d:9f:c6:
15:33:31:1c:9c:0a:0a:31:ee:13:75:42:b8:a8:a8:44:26:2d:
8f:2e:67:5b:1d:90:ad:b9:f9:4f:28:97:6d:6c:86:58:15:f5:
e0:9e:3c:76:35:26:4b:04:63:d2:dd:53:0b:8a:ec:01:3f:c7:
18:c2:e0:24:f1:f8:f5:dd:15:ee:b1:1e:56:78:45:88:54:b7:
79:a1:1d:d0:c4:33:ad:b0:eb:2b:64:46:1f:01:d8:ba:36:12:
85:ad:01:db:67:78:29:56:2e:a3:6c:f1:01:f7:eb:1f:69:34:
4f:95:82:5f:09:d0:f7:86:c8:6e:5c:24:be:70:b4:43:5c:29:
3c:94:6d:31:58:02:e1:39:d5:6d:8d:35:27:78:89:b4:ac:d8:
53:4d:7b:48:da:c6:04:69:01:66:0c:dc:37:77:45:87:de:5e:
e6:d4:24:7e:c3:27:13:02:fe:cb:9e:68:ba:c9:47:e6:6f:14:
ef:fc:7d:f8:0b:cd:14:ce:c7:13:f2:f2:e9:03:5b:55:cd:76:
b6:94:f9:40:3e:19:c8:b0:9e:9b:b2:4e:e3:b7:ee:9e:15:32:
bc:66:e2:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUEu0rF1sGuI8TYRKAtNpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYTIzMzU5MGRlNTg2ZTBjNTU4MjFjNmY2ZDU3MzJhZmM4
NDEyMjkwHhcNMjUxMTA1MDAwMDA3WhcNMjUxMTA2MDAwMDA3WjAzMTEwLwYDVQQD
EygwNjdjMGE3NTc2Y2I5NTA2MWE2ODgyMmVjYzM3ODZjZjA0YjA5M2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotDOM/+Z6ssnjxgk41GGBwew4ege
/KlXm/mbR71EsRRNbddszllFvhzNYjYeuA8dmOR+DfkYxdSj3UpPAp+arf77tBPU
RqomQYre3I3ZKCaLgC6EThiHoWptDhkSIdK+WSyIoeSn7FPo5DElMhm9GK7YFY0u
jFamviYt9lWnVFXAiSlIJ/JjCRiAe1IAOGgbaG65vBPFk2AfV5GPR3ixfq9ffxXv
wDCDA0Vn8zsBNw80qZlFaQhsqrI4pZFHiOkN/9Phw0sYnzKU+AxOaVS1mivyvEo9
ucUdc/KPr7l7H1TDrXgh7mvcgTHIXhx6ZHq0UmZqq0IbhzjwKvR+JaLb7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ8CnV2y5UGGmiCLsw3hs8EsJPvMB8GA1UdIwQY
MBaAFMCiM1kN5YbgxVghxvbVcyr8hBIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1Mzgt
YTg0ZWI0MTFlZjhhLzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1MzgtYTg0ZWI0MTFlZjhh
LzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHr502Hdb
yAZCZykh+6q3RI53mczms8r2koXcUD1Sh6rlLZ/GFTMxHJwKCjHuE3VCuKioRCYt
jy5nWx2Qrbn5TyiXbWyGWBX14J48djUmSwRj0t1TC4rsAT/HGMLgJPH49d0V7rEe
VnhFiFS3eaEd0MQzrbDrK2RGHwHYujYSha0B22d4KVYuo2zxAffrH2k0T5WCXwnQ
94bIblwkvnC0Q1wpPJRtMVgC4TnVbY01J3iJtKzYU017SNrGBGkBZgzcN3dFh95e
5tQkfsMnEwL+y55ouslH5m8U7/x9+AvNFM7HE/Ly6QNbVc12tpT5QD4ZyLCem7JO
47funhUyvGbiHQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:40:16 2025 by rpki-client