Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File: wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier: y7FmdiYQjpCZapquU2egEW5wE+b/hIGPhoUBxSn4T8I=
Subject key identifier: 9A:56:87:9F:2F:61:DC:BC:5F:BC:1A:53:A5:B6:5B:1A:21:B2:3E:E5
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 019A53AD4EA1E0DC580AA1F9F2C94D7CDD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 11:00:58 +0000
Manifest this update: Wed 05 Nov 2025 11:00:58 +0000
Manifest next update: Thu 06 Nov 2025 11:00:58 +0000
Files and hashes: 1: Hz0_dopdOcTkQoi-4Q3mO6vS7ig.roa (hash: b8veFauUO102FVzcJY91NJg1d1nr7MA++Qf08FQhoiA=)
2: UnNAY2Ug9GVCcRKfH683OrLARtI.roa (hash: ZNLzC1DICXd5qw96hU96BotIt+MMzxMspSwOQt7KMEQ=)
3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: bCxLcad9Y/kxQdPwpfQQ1ZdwgQkSru0DA0wT1fwH/HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:4e:a1:e0:dc:58:0a:a1:f9:f2:c9:4d:7c:dd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Nov 5 11:00:58 2025 GMT
Not After : Nov 6 11:00:58 2025 GMT
Subject: CN=9a56879f2f61dcbc5fbc1a53a5b65b1a21b23ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:b6:3f:7f:be:ed:16:75:f3:ca:f5:5b:98:
a4:ba:0d:bb:3e:94:0c:4f:d5:93:d4:81:9e:a9:09:
f7:1d:45:55:0e:01:1e:72:26:d3:04:ba:f0:5b:a9:
32:14:e0:b0:a8:cd:91:85:c9:2a:ea:25:0f:93:90:
24:85:f3:21:43:08:30:9a:39:87:20:a3:c2:27:53:
48:90:78:07:c9:e0:93:f0:64:77:b1:75:d4:d3:25:
7a:f6:f1:3b:cb:4f:7a:25:f3:e9:c9:12:b1:64:60:
01:7e:41:5d:7e:52:f2:97:85:6f:cb:ee:39:9e:f7:
ab:d0:fd:71:ab:6f:d9:ec:f1:75:3a:e4:d6:1d:87:
1b:94:0a:59:47:ca:9f:b2:f8:0f:9a:97:29:89:c2:
33:9f:59:d0:ea:4a:8e:39:0d:de:85:a1:e2:75:19:
95:e8:45:5e:05:20:ce:c7:bb:fc:33:53:fe:54:ed:
0b:7d:82:db:5f:83:f1:9d:ad:a2:bb:3e:66:ec:0c:
6e:7b:12:c7:2c:57:65:d6:41:b6:ab:c0:09:d1:26:
b4:4c:f1:4d:8d:3f:51:39:ae:c4:63:85:3a:48:d3:
ff:4b:7d:e7:96:0f:37:4f:1c:10:a8:6a:18:e0:3b:
ca:df:7d:31:0f:d7:31:4b:81:0b:f9:ba:a2:c6:d9:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:56:87:9F:2F:61:DC:BC:5F:BC:1A:53:A5:B6:5B:1A:21:B2:3E:E5
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4f:d2:13:d3:4a:e1:3c:26:93:d9:e6:8c:68:61:16:89:26:
84:84:52:b0:1d:cc:09:75:14:97:f1:c1:0b:19:14:d3:0a:36:
0a:47:0a:c4:82:93:36:a3:0a:d2:f8:fe:9a:71:4c:8e:87:eb:
89:60:30:57:c0:15:a7:c3:12:3e:5b:bb:64:66:9c:e5:0c:68:
9f:c6:29:15:57:52:8b:e0:df:69:2c:4d:5f:14:7f:16:2b:ae:
ca:e7:9f:5e:53:9c:ef:5b:9e:61:e4:d4:fa:f3:70:ce:a9:31:
23:88:ac:39:2b:60:5f:6d:5f:8a:db:6f:0c:cc:76:49:0f:5b:
58:8d:4e:a0:a0:32:58:b5:b3:2f:da:3c:bd:32:30:01:65:f4:
fa:b0:9a:62:52:56:c9:ee:0d:71:61:45:12:52:18:d4:fc:a8:
1d:35:14:be:c7:90:54:e5:23:84:fb:61:d6:38:5b:57:7b:cd:
07:b2:42:6b:8b:c7:00:06:ab:cb:1c:d6:36:d7:77:12:bd:78:
56:12:26:30:d1:da:ec:29:fc:e7:7f:00:ad:c3:75:16:f3:c8:
f6:63:f8:08:21:3c:80:18:83:aa:d9:c8:8f:71:24:fd:ef:c0:
b0:90:2a:f3:f1:3b:ad:b9:c9:61:77:c3:86:34:6b:3a:57:b6:
9b:21:84:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTrU6h4NxYCqH58slNfN1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZGMyZjg1MDI2MTU4Y2JkOWZmNDlkYTE1ZGIyMjVmMDUz
MDc0YWMwHhcNMjUxMTA1MTEwMDU4WhcNMjUxMTA2MTEwMDU4WjAzMTEwLwYDVQQD
Eyg5YTU2ODc5ZjJmNjFkY2JjNWZiYzFhNTNhNWI2NWIxYTIxYjIzZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQu2P3++7RZ188r1W5ikug27PpQM
T9WT1IGeqQn3HUVVDgEecibTBLrwW6kyFOCwqM2Rhckq6iUPk5AkhfMhQwgwmjmH
IKPCJ1NIkHgHyeCT8GR3sXXU0yV69vE7y096JfPpyRKxZGABfkFdflLyl4Vvy+45
nver0P1xq2/Z7PF1OuTWHYcblApZR8qfsvgPmpcpicIzn1nQ6kqOOQ3ehaHidRmV
6EVeBSDOx7v8M1P+VO0LfYLbX4Pxna2iuz5m7AxuexLHLFdl1kG2q8AJ0Sa0TPFN
jT9ROa7EY4U6SNP/S33nlg83TxwQqGoY4DvK330xD9cxS4EL+bqixtnF9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpWh58vYdy8X7waU6W2Wxohsj7lMB8GA1UdIwQY
MBaAFMHcL4UCYVjL2f9J2hXbIl8FMHSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjNlODktMDAxOC00ZGM5LWE5NWEt
Mjg0ZWM4MTYwMmU3LzEvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82ZjNlODktMDAxOC00ZGM5LWE5NWEtMjg0ZWM4MTYwMmU3
LzEvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0/SE9NK
4Twmk9nmjGhhFokmhIRSsB3MCXUUl/HBCxkU0wo2CkcKxIKTNqMK0vj+mnFMjofr
iWAwV8AVp8MSPlu7ZGac5Qxon8YpFVdSi+DfaSxNXxR/FiuuyuefXlOc71ueYeTU
+vNwzqkxI4isOStgX21fittvDMx2SQ9bWI1OoKAyWLWzL9o8vTIwAWX0+rCaYlJW
ye4NcWFFElIY1PyoHTUUvseQVOUjhPth1jhbV3vNB7JCa4vHAAaryxzWNtd3Er14
VhImMNHa7Cn8538ArcN1FvPI9mP4CCE8gBiDqtnIj3Ek/e/AsJAq8/E7rbnJYXfD
hjRrOle2myGEMg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:50:24 2025 by rpki-client