Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: OAwsZDlkKztEHYcwVYCjiotNF1I2pBN8arR4z5411mc=
Subject key identifier: 8A:5D:61:BE:FE:9D:17:45:33:28:22:33:A8:A9:D8:01:D6:4F:F6:93
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 019A4D3CCA3443200F80963E6B8A815CB112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 1526
Signing time: Tue 04 Nov 2025 05:00:20 +0000
Manifest this update: Tue 04 Nov 2025 05:00:20 +0000
Manifest next update: Wed 05 Nov 2025 05:00:20 +0000
Files and hashes: 1: 1FW1XbyYUs66xbKImXHkiZU-xAA.roa (hash: DA26l55wpmFxpEPwr1TEVKDAhIdZwBFIGz/j/ljF/kM=)
2: rQGBYURhHxIS2gUjxgxhWlf8G-M.roa (hash: d90EC3mny7b2jkfAqHp6/1/Pw4XbnGm5shftI7zAdH4=)
3: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: 58A3h4imxG/J2ZZ1LDaoNjgTBSGx1OSHLQTbh5Ijzlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:ca:34:43:20:0f:80:96:3e:6b:8a:81:5c:b1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Nov 4 05:00:20 2025 GMT
Not After : Nov 5 05:00:20 2025 GMT
Subject: CN=8a5d61befe9d174533282233a8a9d801d64ff693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:6f:29:41:ad:73:cb:de:73:1e:ba:b4:ac:
d3:26:a5:ed:55:5a:f7:d7:7d:48:a6:11:b9:b6:bc:
83:19:00:85:b2:ec:38:71:9a:45:61:78:87:9a:d7:
7e:d4:bf:f3:02:7e:47:cd:e3:54:bc:08:80:76:48:
ef:fa:f3:55:6f:d9:8f:26:27:40:59:dd:55:80:e5:
ea:df:4d:5c:7e:dc:dc:a9:58:0c:e7:a1:fe:fc:b9:
71:d6:57:cc:90:67:81:fb:fb:ad:9c:e8:31:d5:a4:
da:93:92:2f:dc:40:76:92:ad:6b:20:69:ef:52:b6:
fb:5e:f8:b8:bb:ee:ee:7d:6e:45:4b:27:00:b2:7b:
70:a4:98:84:d4:3c:e2:4f:78:75:e8:51:45:b7:5f:
ec:e3:2c:c6:97:07:f1:1d:90:fc:44:c6:50:10:2c:
f7:9d:80:15:26:4c:cd:9c:43:a8:9d:87:eb:3f:e2:
e7:83:04:f3:ad:4f:60:e8:67:7f:a7:d4:12:78:60:
13:e7:11:ad:16:e0:6c:43:c1:d9:44:a5:1c:04:cc:
0a:93:7a:ba:05:e7:e9:b9:93:d3:63:6b:0f:dc:df:
96:8e:f2:89:7e:1f:be:2b:64:94:e8:da:92:c7:0e:
27:12:14:bc:f2:6f:b1:26:7a:ef:23:7c:ea:49:6f:
e2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5D:61:BE:FE:9D:17:45:33:28:22:33:A8:A9:D8:01:D6:4F:F6:93
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:61:c8:ef:40:5c:d5:07:5a:f4:14:4a:40:ab:b3:f0:53:1d:
4d:28:63:07:1b:95:24:5f:70:a7:c8:5b:da:f0:27:35:1c:13:
16:93:bb:5a:5b:8e:79:e8:7d:20:b8:29:ab:1e:5f:12:9a:8f:
57:f4:28:65:a4:82:d1:87:dc:23:36:03:b4:ab:87:f6:f1:a9:
27:8a:0b:dc:47:d3:f9:75:49:d5:5d:ac:3a:43:aa:f2:13:70:
61:b8:e9:bb:5f:87:10:19:72:99:cc:2b:3c:b2:59:da:54:52:
48:d0:e7:09:b2:3c:bf:cf:38:ca:d7:e8:f9:3f:85:87:3c:1c:
25:86:da:38:35:85:63:4d:5c:8d:b9:fa:41:d5:fb:d1:a8:7f:
8e:29:b8:28:53:d6:f7:3f:71:bc:c0:06:ac:e4:28:3b:7a:7f:
d6:b1:55:dd:59:16:6f:43:e3:00:f4:77:6e:e7:0e:fc:ac:90:
b8:e3:89:51:64:a5:1e:68:14:75:72:34:62:9b:c8:a9:5a:42:
e2:c4:63:b3:10:c5:c6:7a:22:f7:e4:6a:d9:c0:1a:53:6f:e9:
ca:97:4d:33:c7:38:cb:2d:66:b1:86:27:15:05:b7:30:87:96:
13:a0:aa:de:5b:06:a9:e5:4d:71:c7:21:9c:6d:15:f8:a8:25:
c3:2f:4e:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPMo0QyAPgJY+a4qBXLESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzIwZmJjNDhmYTU5YTdkOGRlYTU3OTA4ZjM1MGExYjk3
NDU5ZGYwHhcNMjUxMTA0MDUwMDIwWhcNMjUxMTA1MDUwMDIwWjAzMTEwLwYDVQQD
Eyg4YTVkNjFiZWZlOWQxNzQ1MzMyODIyMzNhOGE5ZDgwMWQ2NGZmNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuVvKUGtc8vecx66tKzTJqXtVVr3
131IphG5tryDGQCFsuw4cZpFYXiHmtd+1L/zAn5HzeNUvAiAdkjv+vNVb9mPJidA
Wd1VgOXq301cftzcqVgM56H+/Llx1lfMkGeB+/utnOgx1aTak5Iv3EB2kq1rIGnv
Urb7Xvi4u+7ufW5FSycAsntwpJiE1DziT3h16FFFt1/s4yzGlwfxHZD8RMZQECz3
nYAVJkzNnEOonYfrP+LngwTzrU9g6Gd/p9QSeGAT5xGtFuBsQ8HZRKUcBMwKk3q6
BefpuZPTY2sP3N+WjvKJfh++K2SU6NqSxw4nEhS88m+xJnrvI3zqSW/iKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpdYb7+nRdFMygiM6ip2AHWT/aTMB8GA1UdIwQY
MBaAFMHCD7xI+lmn2N6leQjzUKG5dFnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgt
MzAyY2UxYmM5OWMwLzEvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgtMzAyY2UxYmM5OWMw
LzEvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmHI70Bc
1Qda9BRKQKuz8FMdTShjBxuVJF9wp8hb2vAnNRwTFpO7WluOeeh9ILgpqx5fEpqP
V/QoZaSC0YfcIzYDtKuH9vGpJ4oL3EfT+XVJ1V2sOkOq8hNwYbjpu1+HEBlymcwr
PLJZ2lRSSNDnCbI8v884ytfo+T+FhzwcJYbaODWFY01cjbn6QdX70ah/jim4KFPW
9z9xvMAGrOQoO3p/1rFV3VkWb0PjAPR3bucO/KyQuOOJUWSlHmgUdXI0YpvIqVpC
4sRjsxDFxnoi9+Rq2cAaU2/pypdNM8c4yy1msYYnFQW3MIeWE6Cq3lsGqeVNccch
nG0V+Kglwy9OsQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:46 2025 by rpki-client