Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: 9W5FaIaqViHcigVGuoACSIRGjm8T/wVACZXAaPEWqJc=
Subject key identifier: 2A:FB:7F:AC:DE:2F:1C:4A:81:06:F0:58:AF:64:16:68:26:99:0F:0F
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019A522CBE2ED2723AFD0BF10210DC2FEB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 0211
Signing time: Wed 05 Nov 2025 04:00:55 +0000
Manifest this update: Wed 05 Nov 2025 04:00:55 +0000
Manifest next update: Thu 06 Nov 2025 04:00:55 +0000
Files and hashes: 1: 1Fb4jd1urOHJo5_owKu58GeUbfQ.roa (hash: HWTH5r2vvToQGYptxfGymBxA0UDvVBAeiYA9Tehs7MM=)
2: bkgPAomj5Hty0jREj4Wi4CYSl34.roa (hash: xTOY7fOryKrBCrnTTY9ZhQG8l94maF649pWjsuI216E=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: d09fSbn51WzeEDtFGapMWrIeoqRg2HSun7U4MYGPq6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:be:2e:d2:72:3a:fd:0b:f1:02:10:dc:2f:eb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Nov 5 04:00:55 2025 GMT
Not After : Nov 6 04:00:55 2025 GMT
Subject: CN=2afb7facde2f1c4a8106f058af64166826990f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:8b:53:64:be:ee:9e:d5:7b:4c:59:79:65:
b6:95:6c:f2:fe:d2:cc:1b:7b:57:64:7f:4c:a7:e1:
a6:cc:17:98:ed:22:c9:e2:19:1f:fe:1c:34:02:a8:
f0:d2:b1:f9:ad:eb:f7:e6:82:a4:ff:75:ef:f1:e2:
3e:29:32:66:aa:01:73:86:a2:bc:1f:dc:b0:e7:a1:
52:ed:41:7c:f3:fe:45:6b:77:9a:44:7b:c3:49:ba:
5f:5d:fe:88:ce:48:c3:dd:2a:fc:64:6b:78:6d:54:
f0:c0:fe:7a:29:9e:f8:9a:da:6e:bf:0d:5c:31:d8:
cc:b4:36:c8:f0:93:c9:e9:17:b9:af:ab:3a:6a:c6:
33:f2:66:58:39:57:75:6c:57:57:fa:f1:c0:f1:82:
b1:08:60:4f:88:b3:f0:5a:f3:72:ca:86:b4:95:63:
39:f3:4b:60:e2:cc:53:4b:a7:ab:7a:95:e6:53:a6:
9a:b9:0a:f8:45:4e:56:d4:35:2c:85:b5:0d:9a:aa:
41:f3:61:de:c8:f5:e8:14:31:27:c9:c0:2b:7d:61:
96:48:7a:7b:ee:68:dc:90:5f:80:68:92:a5:02:5e:
d8:83:e2:c5:4c:f8:54:a9:e6:96:fd:3c:d7:99:b5:
a9:1d:e2:f3:fd:bb:e2:4f:c2:19:47:13:be:a4:3c:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:7F:AC:DE:2F:1C:4A:81:06:F0:58:AF:64:16:68:26:99:0F:0F
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:81:52:97:ff:02:68:7d:8b:8a:d1:43:21:02:f8:06:78:ad:
2d:0e:b6:21:c2:7e:5e:8a:7f:c2:62:28:96:1b:b5:7e:06:71:
5b:6a:ac:ca:55:d0:b4:da:32:b7:ce:8c:47:d0:b3:be:92:ab:
77:d1:2a:3b:0a:59:aa:e6:bc:6f:82:ed:f9:9e:80:ec:f1:d1:
fd:39:f5:c2:9e:c3:a9:df:e2:ac:f8:a1:c3:1a:47:8a:56:5c:
2e:22:aa:f7:a8:5e:e5:88:dc:81:60:e6:bf:f4:dc:4f:2f:c2:
b5:a5:a9:61:b5:f9:f4:d3:e0:f1:62:84:6e:e1:bc:eb:83:ae:
67:68:57:0e:01:09:a4:c6:ae:27:ae:1a:64:f8:05:36:a5:17:
ba:39:ec:5e:a2:31:4b:4c:35:af:24:e6:09:7f:15:75:0c:cb:
b6:41:99:6b:aa:7f:c4:a6:95:f4:e2:d3:6d:a5:d0:e3:a0:20:
28:8a:79:b2:bf:4d:a2:a9:4a:31:1e:15:16:4f:0d:bf:e1:ca:
bb:f2:2c:3b:37:36:ee:ec:12:f7:ae:62:88:91:32:5a:66:46:
89:c1:ad:35:54:01:71:7c:4e:0f:f3:d5:fd:fb:02:06:e7:89:
29:48:da:33:09:e3:69:1c:a0:67:13:4f:c9:d3:0c:ba:2a:02:
3c:7e:85:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLL4u0nI6/QvxAhDcL+taMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYTRkMTQyZDQxMGFhYjA5MDUxMTJjNGFlNTc5MDc2YzBl
NmRjODEwHhcNMjUxMTA1MDQwMDU1WhcNMjUxMTA2MDQwMDU1WjAzMTEwLwYDVQQD
EygyYWZiN2ZhY2RlMmYxYzRhODEwNmYwNThhZjY0MTY2ODI2OTkwZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m+LU2S+7p7Ve0xZeWW2lWzy/tLM
G3tXZH9Mp+GmzBeY7SLJ4hkf/hw0Aqjw0rH5rev35oKk/3Xv8eI+KTJmqgFzhqK8
H9yw56FS7UF88/5Fa3eaRHvDSbpfXf6IzkjD3Sr8ZGt4bVTwwP56KZ74mtpuvw1c
MdjMtDbI8JPJ6Re5r6s6asYz8mZYOVd1bFdX+vHA8YKxCGBPiLPwWvNyyoa0lWM5
80tg4sxTS6erepXmU6aauQr4RU5W1DUshbUNmqpB82HeyPXoFDEnycArfWGWSHp7
7mjckF+AaJKlAl7Yg+LFTPhUqeaW/TzXmbWpHeLz/bviT8IZRxO+pDzH6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr7f6zeLxxKgQbwWK9kFmgmmQ8PMB8GA1UdIwQY
MBaAFMGk0ULUEKqwkFESxK5XkHbA5tyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYt
OTkwOTc2NzBiNDRlLzEvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYtOTkwOTc2NzBiNDRl
LzEvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoFSl/8C
aH2LitFDIQL4BnitLQ62IcJ+Xop/wmIolhu1fgZxW2qsylXQtNoyt86MR9CzvpKr
d9EqOwpZqua8b4Lt+Z6A7PHR/Tn1wp7Dqd/irPihwxpHilZcLiKq96he5YjcgWDm
v/TcTy/CtaWpYbX59NPg8WKEbuG864OuZ2hXDgEJpMauJ64aZPgFNqUXujnsXqIx
S0w1ryTmCX8VdQzLtkGZa6p/xKaV9OLTbaXQ46AgKIp5sr9NoqlKMR4VFk8Nv+HK
u/IsOzc27uwS965iiJEyWmZGicGtNVQBcXxOD/PV/fsCBueJKUjaMwnjaRygZxNP
ydMMuioCPH6Fvg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:09 2025 by rpki-client