Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
File: W0lMbhb0nQi-dhyowOqnEihy-oI.mft (raw, json)
Hash identifier: 4iue1OyDv34xHZq5mIUtAowl7pwMANfwkAZ7WHdVlys=
Subject key identifier: 46:87:56:21:B9:44:A0:93:FC:7E:1C:11:96:36:D2:1F:6F:5A:33:B0
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Certificate issuer: /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial: 019A4E86AA81DC3C164E5B64293019B249FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: 3K3BWWtJTikdCXD1GiHEAWkWrNM.roa (hash: 8sWSqC8Ih92DS5DdfTRJP5hCXAztrqlMm3kUKR0XOZc=)
2: TJ2hwoBGgOzkeWhqHN6Mxx7QhtA.roa (hash: 3R7yJP25UZbo9ce0Ffrs5KJBp9yypSbTdrsjbTzVD5w=)
3: W0lMbhb0nQi-dhyowOqnEihy-oI.crl (hash: dhjV6e//D62CBj4geWAkd1D/MKuuHIHp4sfR2wDrUdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:aa:81:dc:3c:16:4e:5b:64:29:30:19:b2:49:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=46875621b944a093fc7e1c119636d21f6f5a33b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:47:b4:f5:41:8e:ad:e3:55:ab:d9:d0:1b:
05:b0:a8:4f:3f:73:63:b8:1a:24:6a:8b:f8:bd:44:
39:33:8d:75:aa:83:b7:db:60:51:79:6b:b4:a8:00:
97:89:72:7c:5c:15:aa:ba:a2:92:c9:25:b5:8e:9e:
b8:fa:3d:35:43:2e:f2:80:33:a3:4e:bf:27:8e:03:
e7:47:a1:9a:44:1a:6f:bb:e8:c9:26:de:27:be:cd:
dc:a3:ba:b6:6d:03:41:bc:51:f1:86:aa:c0:2b:0b:
5f:50:9b:c1:68:c2:1a:59:c5:bf:4b:8e:d5:e0:51:
09:ee:0c:ca:42:70:a8:6a:55:51:09:d8:03:55:54:
10:ac:03:f7:04:dc:e1:ec:de:e0:2e:8d:15:91:8f:
65:8a:e1:55:ae:46:0f:79:bb:09:5d:ed:db:79:b0:
b3:fb:42:fc:a4:88:4d:4e:aa:0c:ae:57:50:95:a9:
83:b6:b1:e8:6a:68:3a:a5:e3:66:de:35:c8:8a:92:
fb:bd:a7:9a:7d:0d:62:f4:eb:41:6a:d7:9a:9f:bd:
19:fc:af:b9:24:2e:77:78:9c:11:d9:dc:6c:f4:cb:
b8:06:1c:fc:6c:12:f7:1d:27:29:65:7c:ff:16:33:
0b:2a:e6:35:c0:f3:0f:bd:97:9d:48:fb:12:f1:d8:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:87:56:21:B9:44:A0:93:FC:7E:1C:11:96:36:D2:1F:6F:5A:33:B0
X509v3 Authority Key Identifier:
keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:95:f2:ff:3d:24:dc:3e:12:82:e6:d9:fa:8d:92:38:41:1b:
61:89:f5:de:19:20:1d:03:91:9e:5a:c9:6c:95:c3:0a:b9:2d:
5b:83:a3:ff:fd:0e:78:4c:b8:ac:07:90:ae:f6:09:ae:38:32:
1d:1b:91:41:73:c8:f0:3a:9b:f7:09:df:60:93:29:21:98:03:
f9:aa:b7:af:e0:de:09:82:fc:34:b0:2f:00:b0:fe:28:48:f4:
54:6c:c4:7f:5b:a6:57:d0:f0:7b:b8:23:eb:5d:1d:39:46:46:
d4:28:fe:f1:1b:96:36:6c:af:90:b2:f4:b1:35:9d:1b:b8:80:
00:4c:d3:f5:fa:60:4e:2f:f3:31:f4:7b:85:c9:15:f0:2b:61:
4d:c9:2f:be:8c:2a:28:38:ea:34:6b:84:8f:ae:96:fd:7f:0f:
62:d8:fd:b2:1e:ad:c7:5e:8a:f2:ec:3d:dc:48:fd:ba:7d:ea:
10:2f:4a:c5:88:6e:d3:4d:db:0c:73:d3:1b:11:32:12:c5:38:
73:9a:37:14:56:c8:d6:ec:e9:13:7a:ca:4c:59:c7:2d:7f:cc:
7a:02:9a:81:2c:ee:78:9b:c0:c4:70:f3:d0:95:c1:c4:61:b0:
f6:d7:7a:1a:80:f9:80:8b:7b:69:61:44:8b:36:84:d6:d8:11:
0f:6a:9d:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhqqB3DwWTltkKTAZskn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNDk0YzZlMTZmNDlkMDhiZTc2MWNhOGMwZWFhNzEyMjg3
MmZhODIwHhcNMjUxMTA0MTEwMDM5WhcNMjUxMTA1MTEwMDM5WjAzMTEwLwYDVQQD
Eyg0Njg3NTYyMWI5NDRhMDkzZmM3ZTFjMTE5NjM2ZDIxZjZmNWEzM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruxHtPVBjq3jVavZ0BsFsKhPP3Nj
uBokaov4vUQ5M411qoO322BReWu0qACXiXJ8XBWquqKSySW1jp64+j01Qy7ygDOj
Tr8njgPnR6GaRBpvu+jJJt4nvs3co7q2bQNBvFHxhqrAKwtfUJvBaMIaWcW/S47V
4FEJ7gzKQnCoalVRCdgDVVQQrAP3BNzh7N7gLo0VkY9liuFVrkYPebsJXe3bebCz
+0L8pIhNTqoMrldQlamDtrHoamg6peNm3jXIipL7vaeafQ1i9OtBatean70Z/K+5
JC53eJwR2dxs9Mu4Bhz8bBL3HScpZXz/FjMLKuY1wPMPvZedSPsS8dh4LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaHViG5RKCT/H4cEZY20h9vWjOwMB8GA1UdIwQY
MBaAFFtJTG4W9J0IvnYcqMDqpxIocvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MmJjZjQtZDBmMi00ZjllLTg3NGQt
YzJjNmY2YTQwOTdmLzEvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85MmJjZjQtZDBmMi00ZjllLTg3NGQtYzJjNmY2YTQwOTdm
LzEvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJXy/z0k
3D4SgubZ+o2SOEEbYYn13hkgHQORnlrJbJXDCrktW4Oj//0OeEy4rAeQrvYJrjgy
HRuRQXPI8Dqb9wnfYJMpIZgD+aq3r+DeCYL8NLAvALD+KEj0VGzEf1umV9Dwe7gj
610dOUZG1Cj+8RuWNmyvkLL0sTWdG7iAAEzT9fpgTi/zMfR7hckV8CthTckvvowq
KDjqNGuEj66W/X8PYtj9sh6tx16K8uw93Ej9un3qEC9KxYhu003bDHPTGxEyEsU4
c5o3FFbI1uzpE3rKTFnHLX/MegKagSzueJvAxHDz0JXBxGGw9td6GoD5gIt7aWFE
izaE1tgRD2qdKg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:41 2025 by rpki-client