Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
File: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json)
Hash identifier: WK9soNE3WZlt4fskY0dsTVhxpLrjAvM+Q3CxaXMIraA=
Subject key identifier: A5:E7:A0:C1:97:2A:64:B3:54:69:81:0E:B1:49:98:D7:DE:C3:12:9D
Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
Certificate issuer: /CN=f966238becd356df87d0c630248123f8f219e18c
Certificate serial: 019A4DE1AD1D3029CDD6C2D605D518C5F65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
Manifest number: 064A
Signing time: Tue 04 Nov 2025 08:00:26 +0000
Manifest this update: Tue 04 Nov 2025 08:00:26 +0000
Manifest next update: Wed 05 Nov 2025 08:00:26 +0000
Files and hashes: 1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: FU4qhgs/KYTKA30KtyQHfTriHYPhnPB7wh/5Qv0KC7c=)
2: qVNInsbhBFyRmIgRlhSK_CcLPjM.roa (hash: laAyeRcD8/2Z20+NXh12zW1wGOZiDGkQ810we5zegYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ad:1d:30:29:cd:d6:c2:d6:05:d5:18:c5:f6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f966238becd356df87d0c630248123f8f219e18c
Validity
Not Before: Nov 4 08:00:26 2025 GMT
Not After : Nov 5 08:00:26 2025 GMT
Subject: CN=a5e7a0c1972a64b35469810eb14998d7dec3129d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:b7:b7:b0:62:c6:91:64:46:6a:7f:73:cb:
65:3d:b5:5c:4e:1f:46:24:72:52:f4:50:a6:fe:5e:
9b:f0:77:39:ec:33:51:5a:15:43:da:1f:c6:d7:e3:
8c:24:5f:ff:57:2f:1e:d4:75:05:56:6d:2f:1f:11:
f7:a3:91:20:1a:a8:27:53:79:72:a5:a5:85:b7:b2:
7d:8c:26:b4:d4:26:c4:b7:f0:4f:75:c7:9f:35:eb:
8f:ca:c5:87:4b:d7:37:e6:87:4c:d9:55:80:0c:8f:
8a:89:e6:9f:5b:85:3c:1c:66:77:88:f2:51:fd:64:
82:8f:60:aa:a0:8b:08:bd:06:23:f1:76:d8:c6:18:
c1:9b:5d:ee:53:81:58:b2:c8:70:77:b8:69:9c:7d:
0f:67:25:29:d9:2c:2c:c8:0b:e6:a9:9c:81:11:2e:
ec:1f:37:91:ba:16:2c:b8:e8:ae:27:39:8e:4d:a0:
40:dc:b8:07:d7:3f:52:2d:cd:1c:78:5f:3a:9f:df:
da:f1:15:93:90:8e:bf:49:86:4d:db:74:22:8b:c9:
06:0a:47:58:ec:f6:3a:71:f8:80:9b:ef:ef:04:ab:
8b:fd:2f:70:82:59:57:9f:10:6c:f6:70:aa:db:40:
6c:ad:42:ac:10:29:aa:74:fd:22:f3:d0:7e:c8:43:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E7:A0:C1:97:2A:64:B3:54:69:81:0E:B1:49:98:D7:DE:C3:12:9D
X509v3 Authority Key Identifier:
keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:75:9f:6f:19:f4:94:f3:b3:68:e2:3c:0d:98:4e:96:94:c8:
83:17:84:f9:13:38:e3:8e:16:6d:72:c2:c0:f1:7b:0e:b5:f6:
14:31:e8:f8:1f:24:fb:27:57:1e:cc:39:d9:61:b4:21:09:6d:
3e:1e:73:68:c5:8d:5c:df:a8:0d:7b:c4:ce:61:2c:bd:05:a0:
f5:ac:80:3f:93:76:7b:9b:d3:8a:e4:3c:47:bf:4e:17:59:b9:
eb:78:10:66:75:3c:27:a8:19:84:6a:a3:b2:4a:a1:48:84:19:
ca:78:3a:ea:72:1b:00:26:2e:4e:03:f6:f4:92:dc:bc:f8:4a:
8f:e9:f2:55:91:bb:0b:04:c4:a8:d6:6c:73:a6:9c:c1:94:c3:
4c:37:e6:9b:5c:8f:3f:17:31:07:9f:08:07:4e:c7:a5:5a:9e:
12:f9:96:5f:34:d7:20:82:8d:46:ee:aa:df:d6:19:64:c8:73:
28:4f:ab:f7:cb:b3:85:d9:f8:04:c6:a0:b5:fe:a7:1d:dc:84:
bf:3f:88:86:94:04:bf:33:c0:e8:72:11:a8:e9:39:dc:27:a3:
e8:5a:7c:1f:4a:7c:dc:d7:84:0a:3b:75:55:09:0e:88:4f:56:
92:d3:e3:66:42:91:6f:b1:0c:92:f5:18:b7:f3:8e:12:22:d2:
67:83:a2:d7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpN4a0dMCnN1sLWBdUYxfZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjYyMzhiZWNkMzU2ZGY4N2QwYzYzMDI0ODEyM2Y4ZjIx
OWUxOGMwHhcNMjUxMTA0MDgwMDI2WhcNMjUxMTA1MDgwMDI2WjAzMTEwLwYDVQQD
EyhhNWU3YTBjMTk3MmE2NGIzNTQ2OTgxMGViMTQ5OThkN2RlYzMxMjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqre3t7BixpFkRmp/c8tlPbVcTh9G
JHJS9FCm/l6b8Hc57DNRWhVD2h/G1+OMJF//Vy8e1HUFVm0vHxH3o5EgGqgnU3ly
paWFt7J9jCa01CbEt/BPdcefNeuPysWHS9c35odM2VWADI+KieafW4U8HGZ3iPJR
/WSCj2CqoIsIvQYj8XbYxhjBm13uU4FYsshwd7hpnH0PZyUp2SwsyAvmqZyBES7s
HzeRuhYsuOiuJzmOTaBA3LgH1z9SLc0ceF86n9/a8RWTkI6/SYZN23Qii8kGCkdY
7PY6cfiAm+/vBKuL/S9wgllXnxBs9nCq20BsrUKsECmqdP0i89B+yEPj6wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKXnoMGXKmSzVGmBDrFJmNfewxKdMB8GA1UdIwQY
MBaAFPlmI4vs01bfh9DGMCSBI/jyGeGMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XWWppLXpUVnQtSDBNWXdKSUVqLVBJWjRZdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvYThlY2U3LTJiNmMtNDQ1MS04YjNk
LTMzMmRiZDlhNjBhZi8xLzEtV1lqaS16VFZ0LUgwTVl3SklFai1QSVo0WXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I3L2E4ZWNlNy0yYjZjLTQ0NTEtOGIzZC0zMzJkYmQ5YTYw
YWYvMS8xLVdZamktelRWdC1IME1Zd0pJRWotUElaNFl3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXWf
bxn0lPOzaOI8DZhOlpTIgxeE+RM4444WbXLCwPF7DrX2FDHo+B8k+ydXHsw52WG0
IQltPh5zaMWNXN+oDXvEzmEsvQWg9ayAP5N2e5vTiuQ8R79OF1m563gQZnU8J6gZ
hGqjskqhSIQZyng66nIbACYuTgP29JLcvPhKj+nyVZG7CwTEqNZsc6acwZTDTDfm
m1yPPxcxB58IB07HpVqeEvmWXzTXIIKNRu6q39YZZMhzKE+r98uzhdn4BMagtf6n
HdyEvz+IhpQEvzPA6HIRqOk53Cej6Fp8H0p83NeECjt1VQkOiE9WktPjZkKRb7EM
kvUYt/OOEiLSZ4Oi1w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:27 2025 by rpki-client