Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
File: wd13fOfXCSaMDFWlnADGrqWyGb0.mft (raw, json)
Hash identifier: H1YGE4GYVpPe4s4+ElXpzdS7VKC8//H38yUwU8lamsA=
Subject key identifier: E2:F5:CB:A2:9A:F3:F6:73:D4:9D:63:55:56:FB:38:5F:24:E1:29:20
Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
Certificate issuer: /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Certificate serial: 019A4DAB1504EADACEAD4D8853AE5CC11D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
Manifest number: 11FA
Signing time: Tue 04 Nov 2025 07:00:48 +0000
Manifest this update: Tue 04 Nov 2025 07:00:48 +0000
Manifest next update: Wed 05 Nov 2025 07:00:48 +0000
Files and hashes: 1: Ex-cB_4h1wPjXU2C6qgnvAowG6s.roa (hash: Pfofg8M1L5a51wZ24aPVDYrdbmmkhLSc6VaiAue9C68=)
2: wd13fOfXCSaMDFWlnADGrqWyGb0.crl (hash: LCpLl1U+Fv0GK+dWWNaeF3dCAKeIXmbBBjl1sRqAcSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:15:04:ea:da:ce:ad:4d:88:53:ae:5c:c1:1d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Validity
Not Before: Nov 4 07:00:48 2025 GMT
Not After : Nov 5 07:00:48 2025 GMT
Subject: CN=e2f5cba29af3f673d49d635556fb385f24e12920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:a0:a3:2e:2d:7f:53:c6:d0:f5:c1:04:a0:
c7:a4:66:de:c9:95:de:f5:ce:7b:9d:8f:c0:1d:18:
24:34:39:0d:8d:bb:62:ed:fd:d7:49:04:01:7e:78:
2c:a5:63:06:2d:fc:e3:c5:6b:40:ea:90:98:9b:ef:
9d:83:cc:5c:bb:16:99:f1:b1:2a:e6:bb:f1:90:9a:
83:29:3e:17:f0:cf:70:13:cb:d1:29:47:d0:cc:36:
53:e8:13:b3:b2:bf:4d:13:a7:d0:f2:f5:2d:65:fc:
18:2d:f8:9b:00:16:c4:d0:fb:42:92:71:6b:16:06:
20:eb:67:b2:8d:7f:b0:09:fb:59:54:27:94:0c:65:
a2:ba:de:0d:37:bd:9e:bd:23:38:c3:ad:4c:00:43:
a3:aa:a6:e6:02:c8:ce:43:82:7a:09:02:31:1c:9e:
74:cc:36:e0:4b:9e:6a:f8:af:7e:3c:d5:40:f1:7a:
e3:d1:1c:aa:64:78:93:43:9d:26:32:15:07:6b:2c:
4c:5a:19:a3:fd:03:a9:dd:e1:bf:5a:b0:6c:09:18:
5c:6a:bc:ea:65:b2:22:33:44:36:d1:50:9c:7c:65:
74:55:1f:89:6f:ca:12:46:3a:d2:6d:33:36:2d:cb:
ca:cb:22:2f:10:a4:48:4e:8f:b1:27:c5:a1:b3:d0:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F5:CB:A2:9A:F3:F6:73:D4:9D:63:55:56:FB:38:5F:24:E1:29:20
X509v3 Authority Key Identifier:
keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:62:c0:57:41:21:00:06:26:ba:75:e3:e5:74:fb:7c:35:e4:
3d:60:4e:96:3a:1c:ad:f6:ac:df:9f:2a:80:66:19:8a:79:78:
9c:23:dc:08:4f:1c:1c:5e:7c:6e:6c:04:14:b5:ab:2f:43:dd:
9c:ce:e0:3a:fd:82:a7:f7:5a:76:c6:1d:38:00:58:d9:35:c4:
16:0f:9a:0c:8e:1c:88:8d:ca:1e:1f:c4:d3:6f:15:6e:ef:be:
9e:aa:e0:98:92:09:bd:2d:e6:2b:76:e4:a8:ec:df:f2:45:90:
3b:41:9f:80:0d:03:77:d4:bd:0c:3e:c8:34:00:c7:e3:fa:a4:
22:2c:6d:d2:a9:a6:24:50:41:de:8d:95:c2:c3:52:7c:11:35:
27:d2:3b:98:a9:cd:f3:e4:5b:e7:54:ef:72:0d:c6:a9:eb:5d:
c9:05:47:9e:26:b7:7b:ac:c7:80:e8:ac:6c:b3:55:13:54:b2:
92:fb:64:5c:da:3b:b6:13:3d:de:f3:26:52:77:4f:ec:29:5b:
d8:f7:aa:39:96:c0:f2:46:b1:de:eb:84:e4:3e:af:26:e3:73:
a1:68:08:cf:1a:d4:21:36:ec:9f:77:30:f9:04:7f:14:28:54:
bf:e3:c9:eb:ee:59:be:ab:bc:3f:50:15:cd:cd:31:e2:77:14:
ff:de:95:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqxUE6trOrU2IU65cwR2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZGQ3NzdjZTdkNzA5MjY4YzBjNTVhNTljMDBjNmFlYTVi
MjE5YmQwHhcNMjUxMTA0MDcwMDQ4WhcNMjUxMTA1MDcwMDQ4WjAzMTEwLwYDVQQD
EyhlMmY1Y2JhMjlhZjNmNjczZDQ5ZDYzNTU1NmZiMzg1ZjI0ZTEyOTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqygoy4tf1PG0PXBBKDHpGbeyZXe
9c57nY/AHRgkNDkNjbti7f3XSQQBfngspWMGLfzjxWtA6pCYm++dg8xcuxaZ8bEq
5rvxkJqDKT4X8M9wE8vRKUfQzDZT6BOzsr9NE6fQ8vUtZfwYLfibABbE0PtCknFr
FgYg62eyjX+wCftZVCeUDGWiut4NN72evSM4w61MAEOjqqbmAsjOQ4J6CQIxHJ50
zDbgS55q+K9+PNVA8Xrj0RyqZHiTQ50mMhUHayxMWhmj/QOp3eG/WrBsCRhcarzq
ZbIiM0Q20VCcfGV0VR+Jb8oSRjrSbTM2LcvKyyIvEKRITo+xJ8Whs9DZtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOL1y6Ka8/Zz1J1jVVb7OF8k4SkgMB8GA1UdIwQY
MBaAFMHdd3zn1wkmjAxVpZwAxq6lshm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2QxM2ZPZlhDU2FNREZXbG5BREdycVd5R2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81OWUxMDctNzA0Zi00NDgwLWI2OWUt
ZjA2YTc2MWM5YTIwLzEvd2QxM2ZPZlhDU2FNREZXbG5BREdycVd5R2IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS81OWUxMDctNzA0Zi00NDgwLWI2OWUtZjA2YTc2MWM5YTIw
LzEvd2QxM2ZPZlhDU2FNREZXbG5BREdycVd5R2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGLAV0Eh
AAYmunXj5XT7fDXkPWBOljocrfas358qgGYZinl4nCPcCE8cHF58bmwEFLWrL0Pd
nM7gOv2Cp/dadsYdOABY2TXEFg+aDI4ciI3KHh/E028Vbu++nqrgmJIJvS3mK3bk
qOzf8kWQO0GfgA0Dd9S9DD7INADH4/qkIixt0qmmJFBB3o2VwsNSfBE1J9I7mKnN
8+Rb51Tvcg3GqetdyQVHnia3e6zHgOisbLNVE1SykvtkXNo7thM93vMmUndP7Clb
2PeqOZbA8kax3uuE5D6vJuNzoWgIzxrUITbsn3cw+QR/FChUv+PJ6+5Zvqu8P1AV
zc0x4ncU/96VBg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:11 2025 by rpki-client