Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
File: w_W0TiSnGM-yONFLvHVe8VLylcE.mft (raw, json)
Hash identifier: M2PGQTrfAMunUhhZZ23hWEuuDrXGqDks2BpHSXn7V4o=
Subject key identifier: 1F:7A:75:8A:DA:2A:CF:29:90:3A:3A:95:23:B5:B1:06:D6:08:43:B7
Authority key identifier: C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
Certificate issuer: /CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Certificate serial: 019A5150C6A7790DEF3DD157845E9E51BF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
Manifest number: 0CE8
Signing time: Wed 05 Nov 2025 00:00:39 +0000
Manifest this update: Wed 05 Nov 2025 00:00:39 +0000
Manifest next update: Thu 06 Nov 2025 00:00:39 +0000
Files and hashes: 1: w_W0TiSnGM-yONFLvHVe8VLylcE.crl (hash: Nu+WTqxYsBInyu2nZQowO8o24e8gn8mJc8SAATDGw1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:c6:a7:79:0d:ef:3d:d1:57:84:5e:9e:51:bf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Validity
Not Before: Nov 5 00:00:39 2025 GMT
Not After : Nov 6 00:00:39 2025 GMT
Subject: CN=1f7a758ada2acf29903a3a9523b5b106d60843b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:1e:11:50:95:3e:c4:7a:cc:a2:78:fe:05:
70:d6:0f:10:ec:ae:fb:5e:21:36:ec:40:5b:e4:82:
9d:8d:0f:e0:a4:47:ba:bb:c0:cf:58:0e:10:57:9f:
71:2c:5e:b9:9c:c7:93:cd:73:7f:0e:c6:5a:de:6d:
ec:5a:e8:21:24:09:f2:74:68:7c:a0:99:a8:92:c5:
4b:1a:06:f8:bc:64:57:c4:cc:fe:55:25:91:78:ad:
8e:15:00:6e:5f:7e:c4:2f:a5:69:e0:8d:74:1f:b1:
90:4d:2a:d7:9d:58:e4:5b:80:d8:a1:9c:83:9b:f2:
1d:3d:31:e8:32:dc:20:72:8f:e1:95:58:ee:c3:2a:
fd:f7:13:e3:cb:f8:f1:69:da:8e:64:8b:0a:c0:f8:
d1:03:86:80:ef:1b:65:6a:9d:6e:db:67:55:dd:b1:
6e:ff:d0:e3:53:25:9c:23:38:32:1a:98:a9:52:91:
a3:fd:2a:88:ce:9e:55:ed:c6:fa:10:d1:1c:52:fa:
e5:65:6d:af:10:3b:d2:24:28:af:7e:35:20:d1:cf:
1e:fd:74:22:af:38:3e:d6:ef:ca:9c:83:c4:d2:1e:
ab:1b:16:15:5c:26:54:47:d3:40:6c:38:30:39:2d:
fe:74:d8:c7:4e:33:b0:1d:79:90:28:b0:21:bd:0d:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7A:75:8A:DA:2A:CF:29:90:3A:3A:95:23:B5:B1:06:D6:08:43:B7
X509v3 Authority Key Identifier:
keyid:C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:37:62:4d:48:d6:50:e8:19:62:6c:5f:45:52:53:9f:2e:25:
56:39:a2:58:bf:61:a8:60:cd:68:ce:80:23:88:9f:36:a1:cd:
96:6e:a0:be:0b:a0:47:74:54:00:29:1b:55:12:cc:eb:8d:8d:
a7:da:bb:aa:53:5a:db:c7:f1:85:8e:43:5d:54:0d:05:66:f2:
21:bc:a8:ec:ee:c8:e5:d3:b4:f2:b0:76:3c:13:a3:3d:b7:29:
03:8f:c9:cd:10:92:fe:63:e9:45:50:79:7f:4b:5d:3f:13:19:
ae:eb:44:4d:4f:05:9e:e8:8f:61:a3:42:09:75:f8:2b:35:64:
8b:81:1d:69:24:57:d9:78:7f:24:e6:a2:07:0b:7b:a2:f6:50:
4d:ba:2a:1e:dc:0c:28:17:58:60:93:de:47:ae:0a:0c:7a:3c:
55:78:57:3a:4a:5e:f4:29:b0:4f:7c:de:46:f1:5c:9e:c0:8a:
d4:d5:9b:9d:ad:ac:36:86:ed:c3:3a:dd:9e:8d:73:88:fc:05:
53:f1:43:32:d0:74:6d:1b:04:ba:ac:65:1a:cc:4e:9b:1d:2c:
b2:4b:5b:8f:e0:85:6f:ae:1a:e9:3d:04:ea:78:f2:6a:cc:0b:
fd:b6:5e:4d:09:13:51:e3:f6:be:b5:1e:e6:1f:02:13:41:5b:
2d:c1:9f:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUManeQ3vPdFXhF6eUb9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZjViNDRlMjRhNzE4Y2ZiMjM4ZDE0YmJjNzU1ZWYxNTJm
Mjk1YzEwHhcNMjUxMTA1MDAwMDM5WhcNMjUxMTA2MDAwMDM5WjAzMTEwLwYDVQQD
EygxZjdhNzU4YWRhMmFjZjI5OTAzYTNhOTUyM2I1YjEwNmQ2MDg0M2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7MeEVCVPsR6zKJ4/gVw1g8Q7K77
XiE27EBb5IKdjQ/gpEe6u8DPWA4QV59xLF65nMeTzXN/DsZa3m3sWughJAnydGh8
oJmoksVLGgb4vGRXxMz+VSWReK2OFQBuX37EL6Vp4I10H7GQTSrXnVjkW4DYoZyD
m/IdPTHoMtwgco/hlVjuwyr99xPjy/jxadqOZIsKwPjRA4aA7xtlap1u22dV3bFu
/9DjUyWcIzgyGpipUpGj/SqIzp5V7cb6ENEcUvrlZW2vEDvSJCivfjUg0c8e/XQi
rzg+1u/KnIPE0h6rGxYVXCZUR9NAbDgwOS3+dNjHTjOwHXmQKLAhvQ3EFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB96dYraKs8pkDo6lSO1sQbWCEO3MB8GA1UdIwQY
MBaAFMP1tE4kpxjPsjjRS7x1XvFS8pXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd19XMFRpU25HTS15T05GTHZIVmU4Vkx5bGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82Yjc0ODUtYTI2NS00ZTI5LWIyN2Qt
MWJjMGM3YmFmNWUzLzEvd19XMFRpU25HTS15T05GTHZIVmU4Vkx5bGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82Yjc0ODUtYTI2NS00ZTI5LWIyN2QtMWJjMGM3YmFmNWUz
LzEvd19XMFRpU25HTS15T05GTHZIVmU4Vkx5bGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzdiTUjW
UOgZYmxfRVJTny4lVjmiWL9hqGDNaM6AI4ifNqHNlm6gvgugR3RUACkbVRLM642N
p9q7qlNa28fxhY5DXVQNBWbyIbyo7O7I5dO08rB2PBOjPbcpA4/JzRCS/mPpRVB5
f0tdPxMZrutETU8FnuiPYaNCCXX4KzVki4EdaSRX2Xh/JOaiBwt7ovZQTboqHtwM
KBdYYJPeR64KDHo8VXhXOkpe9CmwT3zeRvFcnsCK1NWbna2sNobtwzrdno1ziPwF
U/FDMtB0bRsEuqxlGsxOmx0ssktbj+CFb64a6T0E6njyaswL/bZeTQkTUeP2vrUe
5h8CE0FbLcGfnQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:29 2025 by rpki-client