Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
File: rwsdp573_B75WWLcigHyuNSzUr8.mft (raw, json)
Hash identifier: ZHowjm5z77lvhHytzoESkzyHaVTFas512jEwRY/E7e4=
Subject key identifier: 6E:74:92:9E:2A:AD:BE:77:56:A0:6D:24:0E:38:1F:8F:83:C5:71:43
Authority key identifier: AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF
Certificate issuer: /CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf
Certificate serial: 019A4E8668B4E2EA68E31F39110D5EFD1B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 11:00:22 +0000
Manifest this update: Tue 04 Nov 2025 11:00:22 +0000
Manifest next update: Wed 05 Nov 2025 11:00:22 +0000
Files and hashes: 1: U5_8oTuDnte69dU3vdG0YoeLHOc.roa (hash: rv7n9SJHDz/xEcEFGYa9oVX9oX3xMxXlPJsPEJruS+w=)
2: rwsdp573_B75WWLcigHyuNSzUr8.crl (hash: s1DcsUHZ+ElpfM4cqtao4q+8PKpDqz1w28QrqSeQRd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:68:b4:e2:ea:68:e3:1f:39:11:0d:5e:fd:1b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf
Validity
Not Before: Nov 4 11:00:22 2025 GMT
Not After : Nov 5 11:00:22 2025 GMT
Subject: CN=6e74929e2aadbe7756a06d240e381f8f83c57143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:1b:04:07:d8:59:82:1d:2d:66:1e:5f:39:
71:e4:7c:96:dc:fa:a8:14:f8:4f:73:ec:ab:ac:7f:
7e:12:2a:f3:9e:6d:ea:3b:e6:54:7c:93:1a:92:37:
b9:32:74:b3:ab:66:1d:ff:e6:75:3b:a1:01:02:7e:
57:4c:77:56:b3:5f:a5:0b:fc:b0:7f:95:d3:9a:09:
ac:3a:be:33:a7:51:c9:ad:f4:8b:d6:e1:64:a6:a1:
c8:40:51:27:a2:76:c2:96:43:1c:9e:e0:a3:6d:68:
e0:12:72:73:7a:1d:80:0a:d7:65:bc:fd:af:3f:f1:
bc:15:6e:3f:fa:b3:2e:c4:89:ce:aa:18:70:3e:d5:
c7:4f:73:41:a4:96:7b:54:e4:50:c7:f5:25:e3:75:
c2:a6:27:4c:40:69:a3:47:f8:a2:d4:55:bf:82:4b:
56:f6:74:99:ae:82:6f:6d:0e:cf:13:8a:5c:b1:d9:
02:c0:a4:31:ea:94:11:f3:66:53:2b:c8:d0:67:be:
c3:19:2e:bb:c8:a5:15:38:53:72:1d:4a:71:e3:06:
84:b5:f6:22:7f:f3:2f:75:76:5b:ab:5a:b9:af:59:
08:9b:59:7d:07:73:b1:21:d5:2a:bd:51:72:3e:13:
1c:2c:44:d7:30:24:c7:90:98:35:d5:b3:4d:b9:77:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:74:92:9E:2A:AD:BE:77:56:A0:6D:24:0E:38:1F:8F:83:C5:71:43
X509v3 Authority Key Identifier:
keyid:AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:10:90:1a:76:34:1b:3d:eb:6c:08:de:50:33:de:5f:fe:1b:
bd:d8:fc:c3:81:64:04:a4:0f:61:2b:ce:e5:96:40:95:06:96:
1a:df:a4:a2:f3:a7:15:58:f8:66:0c:62:37:51:71:99:0a:dc:
60:3c:d9:db:d2:cf:74:6e:aa:79:ed:53:b6:b9:d2:e8:3a:02:
13:65:a8:bb:d0:ec:23:b3:b6:98:9d:95:56:70:3c:a2:68:c1:
f6:0d:16:bd:c6:f8:67:7a:4b:33:18:b2:34:20:e5:49:bc:10:
79:6d:8e:d5:61:e6:83:e1:5a:a4:5a:de:98:6b:5d:d9:e4:7d:
00:2a:d6:a9:40:29:99:11:1b:aa:b3:49:09:71:eb:0d:0e:e8:
43:4b:d3:7d:14:3d:2d:29:fd:08:ad:3b:d1:8a:86:a9:07:7a:
dd:77:4f:93:e2:14:9b:14:4b:6b:4f:ca:bc:57:87:b5:54:f0:
e3:ea:07:b3:81:aa:c4:35:ca:df:91:5c:e7:33:86:21:91:b3:
5a:83:6c:00:cb:4a:a6:29:ea:79:bb:7d:57:7e:bf:d9:25:2a:
0d:de:dc:eb:b6:3c:23:e1:90:f7:d5:17:eb:18:87:bf:65:26:
0d:b8:33:80:d5:60:1a:c6:02:e8:73:c3:55:3d:f6:24:06:c9:
8c:5a:a7:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhmi04upo4x85EQ1e/RuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMGIxZGE3OWVmN2ZjMWVmOTU5NjJkYzhhMDFmMmI4ZDRi
MzUyYmYwHhcNMjUxMTA0MTEwMDIyWhcNMjUxMTA1MTEwMDIyWjAzMTEwLwYDVQQD
Eyg2ZTc0OTI5ZTJhYWRiZTc3NTZhMDZkMjQwZTM4MWY4ZjgzYzU3MTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4UbBAfYWYIdLWYeXzlx5HyW3Pqo
FPhPc+yrrH9+Eirznm3qO+ZUfJMakje5MnSzq2Yd/+Z1O6EBAn5XTHdWs1+lC/yw
f5XTmgmsOr4zp1HJrfSL1uFkpqHIQFEnonbClkMcnuCjbWjgEnJzeh2ACtdlvP2v
P/G8FW4/+rMuxInOqhhwPtXHT3NBpJZ7VORQx/Ul43XCpidMQGmjR/ii1FW/gktW
9nSZroJvbQ7PE4pcsdkCwKQx6pQR82ZTK8jQZ77DGS67yKUVOFNyHUpx4waEtfYi
f/MvdXZbq1q5r1kIm1l9B3OxIdUqvVFyPhMcLETXMCTHkJg11bNNuXdCHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG50kp4qrb53VqBtJA44H4+DxXFDMB8GA1UdIwQY
MBaAFK8LHaee9/we+Vli3IoB8rjUs1K/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndzZHA1NzNfQjc1V1dMY2lnSHl1TlN6VXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8wMDg5OGEtZTdjMC00ODM2LWE5NmIt
OTJiMmVhMzE5YmMxLzEvcndzZHA1NzNfQjc1V1dMY2lnSHl1TlN6VXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8wMDg5OGEtZTdjMC00ODM2LWE5NmItOTJiMmVhMzE5YmMx
LzEvcndzZHA1NzNfQjc1V1dMY2lnSHl1TlN6VXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURCQGnY0
Gz3rbAjeUDPeX/4bvdj8w4FkBKQPYSvO5ZZAlQaWGt+kovOnFVj4ZgxiN1FxmQrc
YDzZ29LPdG6qee1TtrnS6DoCE2Wou9DsI7O2mJ2VVnA8omjB9g0Wvcb4Z3pLMxiy
NCDlSbwQeW2O1WHmg+FapFremGtd2eR9ACrWqUApmREbqrNJCXHrDQ7oQ0vTfRQ9
LSn9CK070YqGqQd63XdPk+IUmxRLa0/KvFeHtVTw4+oHs4GqxDXK35Fc5zOGIZGz
WoNsAMtKpinqebt9V36/2SUqDd7c67Y8I+GQ99UX6xiHv2UmDbgzgNVgGsYC6HPD
VT32JAbJjFqnNw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:36 2025 by rpki-client