Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
File: 1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft (raw, json)
Hash identifier: kSHLusai0zTCOS27uBbgj0xfTppxXg+l5IKkUdH7Xxw=
Subject key identifier: DF:53:46:07:66:3A:2F:76:71:E3:65:24:F5:7E:90:5A:29:79:B5:64
Authority key identifier: F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
Certificate issuer: /CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Certificate serial: 019A4E4FD68B49599317DD2337B2545B4E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 10:00:46 +0000
Manifest this update: Tue 04 Nov 2025 10:00:46 +0000
Manifest next update: Wed 05 Nov 2025 10:00:46 +0000
Files and hashes: 1: 1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl (hash: mlwrbFaOBFUr+d9U3oLZK3B1Z5HAGmFAwZyck8EafPA=)
2: PqTOmFPSGAKNeE2YcblZG_Wl6iY.roa (hash: 8Xr6waKnu+E2qqO+UtOvKWYxqXyjlVupEIsHjk9OnCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d6:8b:49:59:93:17:dd:23:37:b2:54:5b:4e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Validity
Not Before: Nov 4 10:00:46 2025 GMT
Not After : Nov 5 10:00:46 2025 GMT
Subject: CN=df534607663a2f7671e36524f57e905a2979b564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:1b:54:a0:8c:f9:7c:54:e7:0d:ba:1f:7a:
1d:a5:bd:d6:d6:12:30:81:48:ab:18:e4:d0:8c:9e:
d1:11:d0:3e:cf:c5:0e:86:1c:a4:81:aa:13:14:7b:
a5:09:ab:9f:d1:18:46:57:41:88:7a:fc:d7:16:ba:
29:3a:47:54:fc:8d:58:c1:bb:d4:24:39:b8:fd:08:
58:db:ba:8d:37:eb:d7:f1:9b:8a:04:d1:6f:f4:2b:
03:17:a9:d9:9e:7d:05:3f:67:d6:c6:ff:77:75:71:
c1:37:e4:70:51:62:2a:01:62:62:c5:6d:31:64:fc:
ef:39:ce:41:18:68:12:91:80:70:b0:82:03:87:09:
cc:90:0e:a8:be:37:25:04:a7:b1:f2:7b:f4:06:35:
95:49:bc:ed:16:7f:ac:19:21:67:05:a5:39:7a:7b:
0a:b0:42:8a:6b:d9:ad:22:46:15:44:bd:83:e2:96:
9e:5e:77:65:28:a4:aa:68:71:21:70:77:4c:11:ab:
4e:48:85:b9:9e:25:c9:33:88:c2:32:30:6b:98:ba:
c3:f4:d9:a0:28:23:52:b0:88:6f:42:5b:67:62:4d:
40:52:d5:0f:a7:8a:00:35:57:bc:7e:97:bd:54:5d:
4a:11:c2:9f:70:bb:67:7c:08:f1:c1:5d:30:ab:d4:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:53:46:07:66:3A:2F:76:71:E3:65:24:F5:7E:90:5A:29:79:B5:64
X509v3 Authority Key Identifier:
keyid:F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8d:96:bf:b3:d6:88:46:9a:38:88:be:3a:29:bd:eb:96:c2:
29:1e:e1:d5:64:03:5c:4c:ce:e0:e1:9d:d0:26:7b:7a:e3:20:
a7:c5:21:75:8e:62:5f:ca:41:49:03:7b:18:e0:b7:50:d7:97:
85:27:b6:38:46:a7:10:d6:fa:cb:cf:96:c8:a2:71:a7:08:51:
74:03:30:d9:e6:41:65:4f:1f:50:28:70:dd:b6:59:1c:8d:be:
e3:4d:22:29:54:81:fd:a8:b3:76:3f:1a:a7:11:7d:dc:46:be:
61:43:cf:0b:5c:68:7f:b8:b3:ac:6d:29:b4:53:62:f0:82:77:
dd:1e:d3:27:19:2f:ce:62:9c:b0:1a:8e:9e:40:e5:f1:13:46:
f0:08:0d:0b:48:aa:99:0f:91:78:41:5a:5c:db:9c:21:7e:20:
3d:13:70:9f:05:73:dd:d4:26:7e:f9:35:3f:50:33:0e:9c:04:
6e:e8:dc:1d:01:01:3e:ba:99:01:25:dd:62:f2:57:7c:f5:dc:
12:9b:9e:a2:4e:8e:cc:dc:a9:53:a4:06:de:62:9d:6e:5d:2c:
fc:17:bb:c1:2d:0a:3f:ff:80:5c:47:0f:1d:e4:b9:5d:0e:dd:
bb:e5:5f:ce:05:5f:4d:86:07:7e:d7:74:3a:63:71:4b:39:01:
91:7c:66:3f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpOT9aLSVmTF90jN7JUW04FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjMyNDdkMGQ4M2I5ZjYwOGNmODY0ZjQyN2NkZmU5NGIy
NTJhMTAwHhcNMjUxMTA0MTAwMDQ2WhcNMjUxMTA1MTAwMDQ2WjAzMTEwLwYDVQQD
EyhkZjUzNDYwNzY2M2EyZjc2NzFlMzY1MjRmNTdlOTA1YTI5NzliNTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuQbVKCM+XxU5w26H3odpb3W1hIw
gUirGOTQjJ7REdA+z8UOhhykgaoTFHulCauf0RhGV0GIevzXFropOkdU/I1YwbvU
JDm4/QhY27qNN+vX8ZuKBNFv9CsDF6nZnn0FP2fWxv93dXHBN+RwUWIqAWJixW0x
ZPzvOc5BGGgSkYBwsIIDhwnMkA6ovjclBKex8nv0BjWVSbztFn+sGSFnBaU5ensK
sEKKa9mtIkYVRL2D4paeXndlKKSqaHEhcHdMEatOSIW5niXJM4jCMjBrmLrD9Nmg
KCNSsIhvQltnYk1AUtUPp4oANVe8fpe9VF1KEcKfcLtnfAjxwV0wq9QAXwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFN9TRgdmOi92ceNlJPV+kFopebVkMB8GA1UdIwQY
MBaAFPljJH0Ng7n2CM+GT0J83+lLJSoQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XTWtmUTJEdWZZSXo0WlBRbnpmNlVzbEtoQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvOTViNDM0LTNkZTAtNDhlOS04OGU5
LTJkN2YzODQ3NGMwOC8xLzEtV01rZlEyRHVmWUl6NFpQUW56ZjZVc2xLaEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M2Lzk1YjQzNC0zZGUwLTQ4ZTktODhlOS0yZDdmMzg0NzRj
MDgvMS8xLVdNa2ZRMkR1ZllJejRaUFFuemY2VXNsS2hBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgY2W
v7PWiEaaOIi+Oim965bCKR7h1WQDXEzO4OGd0CZ7euMgp8UhdY5iX8pBSQN7GOC3
UNeXhSe2OEanENb6y8+WyKJxpwhRdAMw2eZBZU8fUChw3bZZHI2+400iKVSB/aiz
dj8apxF93Ea+YUPPC1xof7izrG0ptFNi8IJ33R7TJxkvzmKcsBqOnkDl8RNG8AgN
C0iqmQ+ReEFaXNucIX4gPRNwnwVz3dQmfvk1P1AzDpwEbujcHQEBPrqZASXdYvJX
fPXcEpueok6OzNypU6QG3mKdbl0s/Be7wS0KP/+AXEcPHeS5XQ7du+VfzgVfTYYH
ftd0OmNxSzkBkXxmPw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:21 2025 by rpki-client