Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
File: wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft (raw, json)
Hash identifier: QehdGnqdshbHo7jXDZ9Wmy4mo4C3lz6nEOAT5uVkDcE=
Subject key identifier: 2C:40:F4:6D:3E:3C:46:93:6D:24:CE:71:3B:C8:21:6E:D6:A8:66:6E
Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
Certificate issuer: /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Certificate serial: 019A4D066D3F024213A078E0EF87D64ABA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
Manifest number: 0373
Signing time: Tue 04 Nov 2025 04:00:57 +0000
Manifest this update: Tue 04 Nov 2025 04:00:57 +0000
Manifest next update: Wed 05 Nov 2025 04:00:57 +0000
Files and hashes: 1: neX2MoGsrH8B_YW8P6u0bRQHpTA.roa (hash: R0pBtoL7OVYDCk4RiVwa4ZDNGgYBxm8WfoJ2QgcKQh0=)
2: wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl (hash: EeYLj8+a2ovkBBAfVr7GudZAWbp2YS6Z9yAMRhLTQ9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:6d:3f:02:42:13:a0:78:e0:ef:87:d6:4a:ba:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Validity
Not Before: Nov 4 04:00:57 2025 GMT
Not After : Nov 5 04:00:57 2025 GMT
Subject: CN=2c40f46d3e3c46936d24ce713bc8216ed6a8666e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:c2:4f:ff:87:92:fe:ed:ed:13:32:58:98:
cc:98:9f:c8:6f:38:e4:89:30:38:3c:aa:88:8c:f2:
f8:ce:71:f4:3c:bb:c6:c1:50:30:c7:b0:84:f1:d5:
d6:30:d8:ce:88:b3:98:51:8e:a8:49:64:88:d2:7a:
df:a0:4f:88:b9:fd:df:59:aa:51:31:50:f9:04:f1:
44:21:e0:42:37:2c:98:cb:5e:cf:45:ed:d0:24:81:
c2:89:9c:94:84:f1:2b:e7:ef:a2:6a:1c:f7:f5:ab:
59:6d:9c:9c:e0:11:7b:5a:1e:f5:d8:1e:7a:df:2f:
8b:59:49:ab:1a:76:0b:45:22:7a:10:38:dd:99:46:
9c:4f:8a:31:65:1c:e7:95:77:77:78:d2:bf:46:2a:
17:9b:09:c5:68:cd:47:9d:6a:20:8c:ac:39:f1:d2:
ca:29:29:2c:0a:ab:63:a7:56:28:aa:be:b0:56:5c:
26:e3:73:6a:b9:25:59:5a:45:ee:0c:fb:79:0b:f3:
7d:c8:14:9b:91:92:e4:64:40:fa:23:9e:c8:df:84:
df:e6:b0:a5:5d:81:6c:f3:1b:c7:6e:ad:8a:a4:96:
be:9d:c5:c7:9e:70:25:74:54:34:c7:56:ea:d0:aa:
da:7d:02:f4:39:f8:f1:7c:55:41:c9:6d:cd:33:1c:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:40:F4:6D:3E:3C:46:93:6D:24:CE:71:3B:C8:21:6E:D6:A8:66:6E
X509v3 Authority Key Identifier:
keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:71:6d:85:eb:f3:48:0a:f7:22:3d:77:54:52:f6:10:c4:fc:
32:b9:7f:94:26:b7:e8:54:28:f9:95:8f:f8:27:f7:82:26:56:
b2:c1:f2:19:bf:30:c7:af:21:f6:24:46:d7:cb:fc:1f:55:da:
bc:77:d9:41:6c:ae:42:4e:a9:3a:49:08:c3:bb:2c:fc:3c:1b:
72:d5:6f:5e:e7:80:20:7b:76:99:3f:1f:54:6b:33:33:3c:44:
18:6b:1e:94:d1:f7:d0:90:77:50:de:17:a1:e3:58:03:c3:f3:
de:7f:16:fd:c1:3f:a1:2c:6f:c6:9d:4a:0b:d7:9b:88:43:d0:
43:23:d0:ee:fe:56:08:16:72:af:10:bd:fd:e4:dd:3e:75:b3:
2b:99:16:56:81:6a:34:1b:47:c2:78:a2:5e:69:f8:01:68:3d:
34:80:1e:90:ee:18:12:11:99:a2:34:e0:b1:a7:59:67:7c:5d:
a6:8b:b6:d1:a4:78:f5:39:2c:c9:39:a9:31:72:6e:38:e9:c2:
bf:ec:e0:1e:34:3a:da:ea:12:3c:c3:78:1d:14:c7:f0:32:a8:
98:cc:f6:3a:68:45:db:46:0e:9a:6c:a8:14:25:6c:43:ca:77:
66:6a:ec:1d:7a:44:b9:fb:1f:ea:72:85:91:8a:26:8d:58:05:
88:76:b5:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBm0/AkIToHjg74fWSrqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNDk3YjRlZmRiOGJjY2E1NDYwZDE4OWQ3NjE4ZjZiOGFj
NjhiMDkwHhcNMjUxMTA0MDQwMDU3WhcNMjUxMTA1MDQwMDU3WjAzMTEwLwYDVQQD
EygyYzQwZjQ2ZDNlM2M0NjkzNmQyNGNlNzEzYmM4MjE2ZWQ2YTg2NjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXDCT/+Hkv7t7RMyWJjMmJ/Ibzjk
iTA4PKqIjPL4znH0PLvGwVAwx7CE8dXWMNjOiLOYUY6oSWSI0nrfoE+Iuf3fWapR
MVD5BPFEIeBCNyyYy17PRe3QJIHCiZyUhPEr5++iahz39atZbZyc4BF7Wh712B56
3y+LWUmrGnYLRSJ6EDjdmUacT4oxZRznlXd3eNK/RioXmwnFaM1HnWogjKw58dLK
KSksCqtjp1Yoqr6wVlwm43NquSVZWkXuDPt5C/N9yBSbkZLkZED6I57I34Tf5rCl
XYFs8xvHbq2KpJa+ncXHnnAldFQ0x1bq0KrafQL0OfjxfFVByW3NMxzFHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxA9G0+PEaTbSTOcTvIIW7WqGZuMB8GA1UdIwQY
MBaAFMFJe079uLzKVGDRiddhj2uKxosJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1VsN1R2MjR2TXBVWU5HSjEyR1BhNHJHaXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hODFkZjktZTg0ZS00ZDk0LWFkYTkt
YzRjZGVjMTA0NjY3LzEvd1VsN1R2MjR2TXBVWU5HSjEyR1BhNHJHaXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hODFkZjktZTg0ZS00ZDk0LWFkYTktYzRjZGVjMTA0NjY3
LzEvd1VsN1R2MjR2TXBVWU5HSjEyR1BhNHJHaXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInFthevz
SAr3Ij13VFL2EMT8Mrl/lCa36FQo+ZWP+Cf3giZWssHyGb8wx68h9iRG18v8H1Xa
vHfZQWyuQk6pOkkIw7ss/DwbctVvXueAIHt2mT8fVGszMzxEGGselNH30JB3UN4X
oeNYA8Pz3n8W/cE/oSxvxp1KC9ebiEPQQyPQ7v5WCBZyrxC9/eTdPnWzK5kWVoFq
NBtHwniiXmn4AWg9NIAekO4YEhGZojTgsadZZ3xdpou20aR49TksyTmpMXJuOOnC
v+zgHjQ62uoSPMN4HRTH8DKomMz2OmhF20YOmmyoFCVsQ8p3ZmrsHXpEufsf6nKF
kYomjVgFiHa16g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:16 2025 by rpki-client