Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: lcmDvimXGAf4SjyoWi/RWO/wOW3hWQ+1xSJynBeo0/c=
Subject key identifier: A0:ED:D5:74:79:A2:46:0F:28:AB:92:49:BD:A8:DE:87:44:84:1A:B4
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 0199D46ECC6B671A170A95EB5D22D87100B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 0E31
Signing time: Sat 11 Oct 2025 18:00:55 +0000
Manifest this update: Sat 11 Oct 2025 18:00:55 +0000
Manifest next update: Sun 12 Oct 2025 18:00:55 +0000
Files and hashes: 1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: lIU04n3iSNM50UzcSJouLAyeoM1WgXZWuLA71A2uxJE=)
2: QCTiWGHEKmUOdJTM7oPATib-rWI.roa (hash: k26mJ2kyD6PN3QHWZlo9Dbc0a0mryGGisjgGFZ6rWDs=)
3: hrRzVBROURephwaz7IZClsaHDKQ.roa (hash: Fof+bR6X5zJSmDYDTc8T97sYO9am/Pj5PX1jkaREIks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d4:6e:cc:6b:67:1a:17:0a:95:eb:5d:22:d8:71:00:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Oct 11 18:00:55 2025 GMT
Not After : Oct 12 18:00:55 2025 GMT
Subject: CN=a0edd57479a2460f28ab9249bda8de8744841ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:52:16:65:e2:48:2d:92:bf:4a:6e:f3:10:
ae:ba:2b:97:d1:b0:23:76:26:81:c1:b3:72:db:76:
09:9d:90:db:41:9a:c0:67:b7:87:e9:32:03:8f:35:
ef:61:73:b3:24:1d:d3:de:56:f0:db:8e:e1:94:0a:
2f:00:33:6a:5f:9f:c1:2c:b8:d2:0f:3c:2d:eb:70:
07:4a:c7:6d:2e:c1:7a:7c:b1:f9:15:00:cb:a4:fc:
36:e9:3e:b8:9c:0e:0e:b4:2b:e9:81:8d:1c:0a:82:
dd:b5:e0:55:13:2c:69:c5:91:66:dc:ed:aa:99:e5:
92:e1:66:2e:53:46:e4:24:f4:52:ab:4e:f7:96:5c:
ae:65:c2:a3:24:34:b6:d3:d8:0e:d0:28:27:bd:bf:
46:44:ef:6b:1f:8c:f1:6e:42:99:57:a0:c4:1d:87:
af:96:79:22:31:b0:a3:c4:97:0e:2f:eb:40:4c:b0:
0e:cf:db:20:6c:61:b8:0a:27:bc:54:b8:a8:1e:2f:
2c:b9:97:9e:d4:7e:b1:4c:91:8e:1d:45:dd:d7:44:
23:15:f5:ff:c1:14:0d:cf:9a:88:57:3b:c3:c0:08:
61:e5:e1:28:35:a9:5e:c0:69:e0:de:44:c9:0e:5e:
95:1d:3d:ff:44:17:f1:4d:4e:46:48:bf:d0:5b:da:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:ED:D5:74:79:A2:46:0F:28:AB:92:49:BD:A8:DE:87:44:84:1A:B4
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fa:a2:e9:21:e7:cc:9d:ba:c0:27:7b:cd:fe:54:0a:de:d0:
16:f0:dd:25:0c:3e:29:87:a2:65:c8:a9:74:0c:0b:1c:b7:fa:
57:d4:c7:7b:12:81:07:6e:25:a5:4f:a4:33:58:50:22:6b:5e:
3c:82:c1:d9:6e:02:dc:5b:78:4d:bc:17:46:7f:06:ad:50:b1:
3c:db:55:71:17:07:68:74:8b:ae:49:48:49:a4:ae:1e:82:da:
df:c8:3f:a0:29:03:4f:cb:a9:22:bf:82:77:c0:c1:d6:d9:54:
ae:e4:8c:7c:06:36:0f:68:ff:66:96:ae:98:34:8c:58:12:c7:
83:58:bf:db:96:77:a3:93:12:3a:c8:73:08:62:39:6e:e0:01:
84:8e:a2:0c:35:9c:6c:db:2f:90:8f:ec:3d:4d:84:d0:71:19:
4e:41:7a:8e:65:b9:9c:81:3f:7b:a5:40:00:e1:f1:5c:fd:77:
59:c6:c0:16:5a:96:04:63:f6:59:7f:80:fc:3d:41:bd:1b:7a:
a2:21:df:77:6e:6c:7d:96:2a:32:92:14:c3:a6:44:6f:b2:71:
30:a7:d7:6a:c7:76:ad:56:b7:4a:5e:40:3a:aa:68:ca:4d:70:
d6:cf:68:af:78:6c:60:3b:97:34:bf:c4:d7:4d:f7:33:8e:30:
10:a5:a1:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnUbsxrZxoXCpXrXSLYcQC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjIwY2VjNzA5NzRkMDM3ZDc3Njk3NThjNzQ2NjgzMDVi
MzJjZjIwHhcNMjUxMDExMTgwMDU1WhcNMjUxMDEyMTgwMDU1WjAzMTEwLwYDVQQD
EyhhMGVkZDU3NDc5YTI0NjBmMjhhYjkyNDliZGE4ZGU4NzQ0ODQxYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIhSFmXiSC2Sv0pu8xCuuiuX0bAj
diaBwbNy23YJnZDbQZrAZ7eH6TIDjzXvYXOzJB3T3lbw247hlAovADNqX5/BLLjS
Dzwt63AHSsdtLsF6fLH5FQDLpPw26T64nA4OtCvpgY0cCoLdteBVEyxpxZFm3O2q
meWS4WYuU0bkJPRSq073llyuZcKjJDS209gO0Cgnvb9GRO9rH4zxbkKZV6DEHYev
lnkiMbCjxJcOL+tATLAOz9sgbGG4Cie8VLioHi8suZee1H6xTJGOHUXd10QjFfX/
wRQNz5qIVzvDwAhh5eEoNalewGng3kTJDl6VHT3/RBfxTU5GSL/QW9rCdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDt1XR5okYPKKuSSb2o3odEhBq0MB8GA1UdIwQY
MBaAFNViDOxwl00DfXdpdYx0ZoMFsyzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMjNhOTItN2QzOC00OWVjLWJhOTkt
YmU0MzRjYjlmOGY4LzEvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMjNhOTItN2QzOC00OWVjLWJhOTktYmU0MzRjYjlmOGY4
LzEvMVdJTTdIQ1hUUU45ZDJsMWpIUm1nd1d6TFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPqi6SHn
zJ26wCd7zf5UCt7QFvDdJQw+KYeiZcipdAwLHLf6V9THexKBB24lpU+kM1hQImte
PILB2W4C3Ft4TbwXRn8GrVCxPNtVcRcHaHSLrklISaSuHoLa38g/oCkDT8upIr+C
d8DB1tlUruSMfAY2D2j/ZpaumDSMWBLHg1i/25Z3o5MSOshzCGI5buABhI6iDDWc
bNsvkI/sPU2E0HEZTkF6jmW5nIE/e6VAAOHxXP13WcbAFlqWBGP2WX+A/D1BvRt6
oiHfd25sfZYqMpIUw6ZEb7JxMKfXasd2rVa3Sl5AOqpoyk1w1s9or3hsYDuXNL/E
1033M44wEKWhxA==
-----END CERTIFICATE-----
Generated at Sun Oct 12 00:51:15 2025 by rpki-client