Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
File: W20XjxOFEwa1Y03xWXFjGfTYJHg.mft (raw, json)
Hash identifier: URQMZwIp2rcnkLlDiZlGnkOQdTF+23LAnmi/YtDn+IE=
Subject key identifier: 37:57:7A:83:1D:C9:10:15:36:32:ED:8E:34:49:C7:F4:40:C0:7B:A9
Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478
Certificate serial: 019A5187B335F6636AA773580B9DCCF8E769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
Manifest number: 0DAA
Signing time: Wed 05 Nov 2025 01:00:38 +0000
Manifest this update: Wed 05 Nov 2025 01:00:38 +0000
Manifest next update: Thu 06 Nov 2025 01:00:38 +0000
Files and hashes: 1: 4Y2Nbo1_a6IBq8Cl0IDfGwKCP_M.roa (hash: 0bsJSEvzwH1XPIlPA10NL/s8qRTvdmZt752O+GQRDjw=)
2: W20XjxOFEwa1Y03xWXFjGfTYJHg.crl (hash: /fusEAIVL+HkDeMAX9qy9J9PmyB4brxfZdYDJHPxMmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:b3:35:f6:63:6a:a7:73:58:0b:9d:cc:f8:e7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6d178f13851306b5634df159716319f4d82478
Validity
Not Before: Nov 5 01:00:38 2025 GMT
Not After : Nov 6 01:00:38 2025 GMT
Subject: CN=37577a831dc910153632ed8e3449c7f440c07ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:ea:af:ce:70:97:e4:eb:73:e7:b6:da:18:
2f:fe:43:62:f2:70:53:c7:2e:d9:10:b1:cb:3a:5f:
13:1f:3e:ce:03:0e:e7:54:0d:f4:7e:bc:d4:23:70:
4f:17:a5:59:63:bb:c1:13:d1:47:24:cd:35:ec:3a:
c9:fd:04:48:01:b2:5a:7a:b2:07:9d:d6:71:a2:84:
7c:71:28:3e:8a:1a:bd:d9:ea:be:92:ff:77:6f:56:
50:b8:e0:46:84:74:0b:51:0e:e2:59:4a:e9:79:ef:
ef:6a:64:eb:dc:5d:df:d0:7b:d4:db:3d:5b:48:20:
07:16:5b:82:73:2b:29:3a:02:27:49:3e:7c:1f:08:
8a:8c:62:98:c5:69:2e:98:ca:c4:16:3c:37:5e:52:
b7:ab:ee:76:3a:bf:ab:50:51:37:99:92:e4:03:61:
2a:f9:f9:d3:ea:48:45:79:69:8b:3f:38:ae:72:1f:
2e:cd:36:c0:45:27:69:73:be:13:ec:ec:80:a4:51:
b6:0f:01:9d:8a:0e:b9:9b:1a:11:37:a8:4b:14:5f:
a1:4e:ef:b1:9e:28:0e:b8:e4:23:7f:42:45:75:d7:
ae:e2:53:a9:28:e8:b4:2c:9e:81:c3:40:1f:44:75:
cc:ea:88:91:50:16:c9:82:5b:12:8a:d4:74:28:51:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:57:7A:83:1D:C9:10:15:36:32:ED:8E:34:49:C7:F4:40:C0:7B:A9
X509v3 Authority Key Identifier:
keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:90:d3:6a:fe:4e:e0:27:c2:92:63:b2:5c:e7:a0:3b:bf:7b:
18:b5:96:b1:54:1c:8b:0e:2f:07:98:00:0e:ad:e1:f9:7e:72:
31:d9:05:41:e1:20:25:38:1b:1e:30:90:47:de:28:13:fa:45:
a3:85:5f:0e:42:9e:29:05:be:c8:e9:c7:ea:d2:3c:99:59:05:
23:c9:5e:f2:fa:4b:c1:0f:72:48:89:b7:8b:45:7c:fe:4e:e3:
3c:42:ac:38:97:a3:40:76:2c:13:ca:18:d6:e9:52:fd:b4:41:
05:4e:94:a1:df:e6:04:0a:9c:5e:bf:42:63:da:2e:c1:26:9c:
cb:52:0f:67:70:38:e3:f0:11:17:e3:c6:ce:7b:04:78:0d:0b:
5d:ab:42:1f:cd:65:da:08:f5:f5:b5:1f:1b:7a:2b:e6:9b:c3:
44:fa:07:b6:36:e8:b8:9e:aa:6d:01:3f:9b:2e:32:77:86:03:
30:49:73:e5:f0:5b:26:27:2b:f8:39:6f:b8:62:48:7e:19:1d:
07:c9:c8:23:24:6f:86:c5:42:97:b1:e5:f5:5b:97:92:df:8a:
a9:ae:44:64:d4:5e:74:af:ee:98:b0:39:59:5d:34:4e:64:d0:
61:c2:fe:e5:78:b1:60:9e:0f:00:32:5a:a9:ef:a0:a6:44:3b:
12:4d:05:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh7M19mNqp3NYC53M+OdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNmQxNzhmMTM4NTEzMDZiNTYzNGRmMTU5NzE2MzE5ZjRk
ODI0NzgwHhcNMjUxMTA1MDEwMDM4WhcNMjUxMTA2MDEwMDM4WjAzMTEwLwYDVQQD
EygzNzU3N2E4MzFkYzkxMDE1MzYzMmVkOGUzNDQ5YzdmNDQwYzA3YmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbvqr85wl+Trc+e22hgv/kNi8nBT
xy7ZELHLOl8THz7OAw7nVA30frzUI3BPF6VZY7vBE9FHJM017DrJ/QRIAbJaerIH
ndZxooR8cSg+ihq92eq+kv93b1ZQuOBGhHQLUQ7iWUrpee/vamTr3F3f0HvU2z1b
SCAHFluCcyspOgInST58HwiKjGKYxWkumMrEFjw3XlK3q+52Or+rUFE3mZLkA2Eq
+fnT6khFeWmLPziuch8uzTbARSdpc74T7OyApFG2DwGdig65mxoRN6hLFF+hTu+x
nigOuOQjf0JFddeu4lOpKOi0LJ6Bw0AfRHXM6oiRUBbJglsSitR0KFHUBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdXeoMdyRAVNjLtjjRJx/RAwHupMB8GA1UdIwQY
MBaAFFttF48ThRMGtWNN8VlxYxn02CR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2It
NGJiOTRjYmMyZTczLzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2ItNGJiOTRjYmMyZTcz
LzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5DTav5O
4CfCkmOyXOegO797GLWWsVQciw4vB5gADq3h+X5yMdkFQeEgJTgbHjCQR94oE/pF
o4VfDkKeKQW+yOnH6tI8mVkFI8le8vpLwQ9ySIm3i0V8/k7jPEKsOJejQHYsE8oY
1ulS/bRBBU6Uod/mBAqcXr9CY9ouwSacy1IPZ3A44/ARF+PGznsEeA0LXatCH81l
2gj19bUfG3or5pvDRPoHtjbouJ6qbQE/my4yd4YDMElz5fBbJicr+DlvuGJIfhkd
B8nIIyRvhsVCl7Hl9VuXkt+Kqa5EZNRedK/umLA5WV00TmTQYcL+5XixYJ4PADJa
qe+gpkQ7Ek0Ffg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:54:05 2025 by rpki-client