Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: /3nzdvw3eI26v1jqrl1BO1anGTt8hYmizYatyw5QvXg=
Subject key identifier: AE:E5:87:12:C6:62:4A:4F:C8:36:CB:F9:BA:AF:20:50:98:78:11:06
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 019A50077E01632E15FE1A0391660FED2062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 100A
Signing time: Tue 04 Nov 2025 18:00:59 +0000
Manifest this update: Tue 04 Nov 2025 18:00:59 +0000
Manifest next update: Wed 05 Nov 2025 18:00:59 +0000
Files and hashes: 1: 2if-W7_9B6ndVwa4CXKbXlfYipY.roa (hash: x6w8qlU6igwl5cXDxoZUE8Lr1i8+UZJJXlmem9XWOSg=)
2: iNIpA6NRoHEtD1Gdwv0RcZxMEOY.roa (hash: QoWSCTkZW/GH9j1mmy2Sv0c+Jd5oUQpoqRVhrzgy26s=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: v1ZMJvPF0v0zrjtD5W5T2UKI9M/5xS/pyYPuVvJu6CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:7e:01:63:2e:15:fe:1a:03:91:66:0f:ed:20:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Nov 4 18:00:59 2025 GMT
Not After : Nov 5 18:00:59 2025 GMT
Subject: CN=aee58712c6624a4fc836cbf9baaf205098781106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:ab:c0:29:e4:c2:2d:38:5a:54:05:12:22:
99:4d:5e:42:b7:21:9c:d7:a7:b5:81:40:39:c1:24:
8c:2e:2d:df:85:a7:21:15:77:d9:3d:21:0c:da:68:
64:b4:f6:34:1c:c7:65:f3:d7:24:0b:4b:5f:c4:e5:
72:da:2d:e4:a8:5b:eb:88:7c:2f:e9:e8:27:3f:d7:
ae:6e:a0:48:3e:20:50:40:25:9a:57:92:70:5a:84:
83:ff:6f:dc:e1:ad:df:40:bb:4a:4e:52:d2:37:c5:
ad:c4:78:b7:89:32:23:36:3d:ab:30:7e:7f:92:4e:
ef:0c:a7:1a:e9:5e:9e:3e:d0:ab:f1:73:f8:fb:59:
78:51:14:c6:86:c6:7e:78:a6:58:2f:87:be:90:11:
cc:f2:af:bc:b9:5a:90:e6:44:6e:cb:c1:9b:08:af:
dc:b0:18:3e:47:43:19:e8:88:00:e6:1a:c1:ad:48:
df:29:9e:fa:a6:d4:47:63:fb:97:20:cc:d9:69:6d:
71:57:b3:cf:1a:7b:3e:80:5f:39:be:ab:aa:45:2c:
76:94:83:f8:31:4f:23:7c:36:6f:d6:91:9b:3b:59:
82:12:bc:e8:21:b7:b2:ab:dd:f7:50:8f:a0:fd:71:
5f:5a:3b:3f:cb:5f:a0:89:82:c4:94:b6:6f:12:23:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E5:87:12:C6:62:4A:4F:C8:36:CB:F9:BA:AF:20:50:98:78:11:06
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:35:32:39:2f:fc:5e:80:6f:5e:b4:89:1f:4b:c9:13:e5:e2:
71:3a:b4:ac:45:c0:be:ea:9f:cd:71:8b:40:86:08:77:fa:d5:
a8:e8:1f:76:5d:14:fe:3e:db:cd:2c:2e:b5:ed:a7:d1:ff:1a:
ad:0a:ac:de:9a:3e:19:4a:f6:4a:46:48:5a:92:c3:a2:0e:0b:
f5:4d:81:35:74:4e:d6:f5:1c:bc:d4:f2:09:0f:08:82:c1:08:
d7:7f:e0:e5:9d:34:5d:8c:6e:66:a5:34:03:0b:e4:cd:cc:49:
02:08:b0:3c:75:ae:d3:16:4c:6c:7c:34:85:b4:44:dd:4e:94:
a5:91:25:68:05:48:bb:b2:ec:98:a7:2f:a4:10:db:40:55:d7:
ae:66:2f:78:90:b6:37:5f:bc:bd:b2:08:f2:45:d5:86:0d:cd:
38:7b:55:7c:89:0f:20:60:6b:3f:32:7e:f4:ae:9e:48:77:9e:
df:86:cd:f8:ae:11:fa:06:15:17:5f:b1:6b:35:c4:fd:f9:71:
bb:61:8e:44:d4:37:e6:f3:fe:53:87:cd:ee:2e:37:6c:d7:62:
55:d6:c3:29:fb:5a:a8:7f:4c:98:20:fc:4f:df:49:06:16:df:
85:5e:b0:f1:30:17:1c:61:a4:9f:c6:9e:e1:95:28:cf:1e:55:
ed:1b:da:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB34BYy4V/hoDkWYP7SBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMmQ1NTNiMjhjNWQwZWE1YjFlZjYwYzliY2UzM2RmNTBi
Y2I0OTMwHhcNMjUxMTA0MTgwMDU5WhcNMjUxMTA1MTgwMDU5WjAzMTEwLwYDVQQD
EyhhZWU1ODcxMmM2NjI0YTRmYzgzNmNiZjliYWFmMjA1MDk4NzgxMTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjurwCnkwi04WlQFEiKZTV5CtyGc
16e1gUA5wSSMLi3fhachFXfZPSEM2mhktPY0HMdl89ckC0tfxOVy2i3kqFvriHwv
6egnP9eubqBIPiBQQCWaV5JwWoSD/2/c4a3fQLtKTlLSN8WtxHi3iTIjNj2rMH5/
kk7vDKca6V6ePtCr8XP4+1l4URTGhsZ+eKZYL4e+kBHM8q+8uVqQ5kRuy8GbCK/c
sBg+R0MZ6IgA5hrBrUjfKZ76ptRHY/uXIMzZaW1xV7PPGns+gF85vquqRSx2lIP4
MU8jfDZv1pGbO1mCErzoIbeyq933UI+g/XFfWjs/y1+giYLElLZvEiODUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7lhxLGYkpPyDbL+bqvIFCYeBEGMB8GA1UdIwQY
MBaAFMItVTsoxdDqWx72DJvOM99QvLSTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTc2NDQtOTNkNC00NDU3LThlNWUt
OTY3NTA2ODg1N2YxLzEvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lMTc2NDQtOTNkNC00NDU3LThlNWUtOTY3NTA2ODg1N2Yx
LzEvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTUyOS/8
XoBvXrSJH0vJE+XicTq0rEXAvuqfzXGLQIYId/rVqOgfdl0U/j7bzSwute2n0f8a
rQqs3po+GUr2SkZIWpLDog4L9U2BNXRO1vUcvNTyCQ8IgsEI13/g5Z00XYxuZqU0
AwvkzcxJAgiwPHWu0xZMbHw0hbRE3U6UpZElaAVIu7LsmKcvpBDbQFXXrmYveJC2
N1+8vbII8kXVhg3NOHtVfIkPIGBrPzJ+9K6eSHee34bN+K4R+gYVF1+xazXE/flx
u2GORNQ35vP+U4fN7i43bNdiVdbDKftaqH9MmCD8T99JBhbfhV6w8TAXHGGkn8ae
4ZUozx5V7RvavA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:36 2025 by rpki-client