Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
File: WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft (raw, json)
Hash identifier: agGh8CZFCZc2Kn2RMEaw15oClJlalANuDoqIh5/UxDc=
Subject key identifier: D9:6E:4C:78:9F:C5:89:EE:85:B0:A7:B5:C0:90:07:32:BE:38:49:33
Authority key identifier: 59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A
Certificate issuer: /CN=596d400faa5269099cc7b1c7a03ce69d8391f21a
Certificate serial: 019A4EF462748EA1A687B057E3470D7C7841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
Manifest number: 0771
Signing time: Tue 04 Nov 2025 13:00:29 +0000
Manifest this update: Tue 04 Nov 2025 13:00:29 +0000
Manifest next update: Wed 05 Nov 2025 13:00:29 +0000
Files and hashes: 1: WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl (hash: S5BQCq51vPCfzx09KwlnqyomfXIKE+Th9nKfB4CXTSQ=)
2: s5QSQwev5CqksmjM0AaoSdiOZEY.roa (hash: r2aK748rLgMwkpT8AEvF91wvzX74j/vxHw/8YYI08JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:62:74:8e:a1:a6:87:b0:57:e3:47:0d:7c:78:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=596d400faa5269099cc7b1c7a03ce69d8391f21a
Validity
Not Before: Nov 4 13:00:29 2025 GMT
Not After : Nov 5 13:00:29 2025 GMT
Subject: CN=d96e4c789fc589ee85b0a7b5c0900732be384933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f9:ab:30:ba:3c:67:85:ec:35:e7:3e:c0:7e:
24:18:67:74:99:31:cc:e4:45:74:71:db:9e:6f:08:
9e:3a:69:d7:34:71:0b:7c:86:1f:eb:cc:2a:21:56:
58:d0:3f:96:b5:6f:03:26:a2:f7:f4:ea:b8:7d:5c:
46:dc:77:59:32:a7:b9:b7:81:99:74:3b:7b:ed:8d:
20:4c:19:30:64:7b:99:b6:f2:61:e9:52:34:69:c0:
34:8c:74:9f:ed:7c:18:fa:06:8f:67:56:70:a5:97:
7c:33:1b:83:8c:85:7c:0c:99:0c:24:21:12:2f:43:
6f:6f:4d:17:65:7f:58:c7:be:18:d7:93:f1:3b:30:
96:37:98:8b:d0:d6:6d:e9:e4:06:2b:f8:57:05:19:
ec:3d:da:03:b5:c3:4b:cd:f8:f7:2d:f1:b3:fd:94:
4b:96:48:c5:4c:7b:88:79:5a:e7:76:a1:e4:a2:13:
56:d8:bb:28:75:11:74:f9:4e:25:f4:3f:15:d4:43:
f3:00:6f:50:5d:fb:64:63:a7:7d:a3:e9:85:b2:cc:
10:ee:65:5f:b2:31:0e:4a:43:76:0b:51:80:4d:65:
b9:26:1f:8e:76:6f:6a:b2:ef:18:16:c9:6a:47:1d:
a5:77:2f:b7:9e:5f:66:c8:95:fc:5e:82:66:1e:59:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6E:4C:78:9F:C5:89:EE:85:B0:A7:B5:C0:90:07:32:BE:38:49:33
X509v3 Authority Key Identifier:
keyid:59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5c:14:bf:ac:c5:4c:19:be:8a:c6:02:5b:1d:67:a3:96:0a:
9d:c7:a9:7d:aa:9d:8d:d6:79:97:f5:c7:30:62:c5:ce:10:14:
a4:dd:d4:15:cb:03:f2:54:d4:94:d7:c1:3d:25:41:d6:f3:6b:
f3:9e:ba:76:37:e0:40:9a:11:cb:05:2e:36:46:37:24:2b:f2:
94:1b:26:f3:0f:8d:42:58:ef:28:df:8e:8d:87:52:e5:45:dd:
d9:99:71:ea:e0:a5:30:28:ef:67:0b:83:db:2e:7f:86:d1:1c:
11:b6:e4:44:1c:7d:11:33:4d:2b:78:fd:aa:38:8e:b4:c2:7c:
a5:01:12:52:02:b6:7f:3e:a2:e6:e4:ce:a7:4e:ba:4b:a6:23:
a9:80:ec:c0:27:cb:3f:e5:cc:f1:3b:ad:07:7f:7a:d5:bd:2c:
ff:9f:77:32:f8:10:be:c3:1e:6d:d1:28:20:3d:b2:d1:c5:b8:
09:f5:ea:2c:35:75:cc:4e:cf:36:28:b5:c9:15:3e:3b:cd:82:
49:2c:c7:73:18:99:b7:4a:b1:82:a7:23:88:d4:78:6a:83:3a:
68:fe:70:d0:62:fa:7f:46:b7:a7:66:34:9a:98:c5:fb:56:1a:
a4:cd:b0:a7:9a:d7:3b:ad:68:8f:fe:eb:37:cf:8f:d5:a3:b6:
86:e9:a4:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9GJ0jqGmh7BX40cNfHhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NmQ0MDBmYWE1MjY5MDk5Y2M3YjFjN2EwM2NlNjlkODM5
MWYyMWEwHhcNMjUxMTA0MTMwMDI5WhcNMjUxMTA1MTMwMDI5WjAzMTEwLwYDVQQD
EyhkOTZlNGM3ODlmYzU4OWVlODViMGE3YjVjMDkwMDczMmJlMzg0OTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PmrMLo8Z4XsNec+wH4kGGd0mTHM
5EV0cduebwieOmnXNHELfIYf68wqIVZY0D+WtW8DJqL39Oq4fVxG3HdZMqe5t4GZ
dDt77Y0gTBkwZHuZtvJh6VI0acA0jHSf7XwY+gaPZ1ZwpZd8MxuDjIV8DJkMJCES
L0Nvb00XZX9Yx74Y15PxOzCWN5iL0NZt6eQGK/hXBRnsPdoDtcNLzfj3LfGz/ZRL
lkjFTHuIeVrndqHkohNW2LsodRF0+U4l9D8V1EPzAG9QXftkY6d9o+mFsswQ7mVf
sjEOSkN2C1GATWW5Jh+Odm9qsu8YFslqRx2ldy+3nl9myJX8XoJmHlmbrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNluTHifxYnuhbCntcCQBzK+OEkzMB8GA1UdIwQY
MBaAFFltQA+qUmkJnMexx6A85p2DkfIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hZTI1MWItNTcyZC00MWM0LWFkMmUt
YzI4N2RiOTM0OTEyLzEvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hZTI1MWItNTcyZC00MWM0LWFkMmUtYzI4N2RiOTM0OTEy
LzEvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFwUv6zF
TBm+isYCWx1no5YKncepfaqdjdZ5l/XHMGLFzhAUpN3UFcsD8lTUlNfBPSVB1vNr
8566djfgQJoRywUuNkY3JCvylBsm8w+NQljvKN+OjYdS5UXd2Zlx6uClMCjvZwuD
2y5/htEcEbbkRBx9ETNNK3j9qjiOtMJ8pQESUgK2fz6i5uTOp066S6YjqYDswCfL
P+XM8TutB3961b0s/593MvgQvsMebdEoID2y0cW4CfXqLDV1zE7PNii1yRU+O82C
SSzHcxiZt0qxgqcjiNR4aoM6aP5w0GL6f0a3p2Y0mpjF+1YapM2wp5rXO61oj/7r
N8+P1aO2humkyg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:08:21 2025 by rpki-client