Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json)
Hash identifier: MKKkOJetvgjlRm9QT6qzzTdzBon1UdBMk6Ia850CMuw=
Subject key identifier: 0F:D5:A1:DF:45:02:57:BC:3A:12:CB:8E:A0:10:54:A3:CA:60:06:C5
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 0199C41FFBF8A0F047D8B3EBFE526202DA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
Manifest number: 0D0A
Signing time: Wed 08 Oct 2025 14:00:54 +0000
Manifest this update: Wed 08 Oct 2025 14:00:54 +0000
Manifest next update: Thu 09 Oct 2025 14:00:54 +0000
Files and hashes: 1: 42TScFyDsL36h4YpEfhHoHfnzjk.roa (hash: PlV9CG6o3L7E63lVcJyc5UxCQesBmENg5els1UMNldc=)
2: GzDEyQPlP7XqkDOXMJVrm-t5quA.roa (hash: yHlRVvenZ9bcsv8W/dTmVIqnz02wrgwCRtxhDUrDoKo=)
3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: ceZHUt0b8kWsa4eOfUSRXl6FTa5QJe2vWcvwAV1GKfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:1f:fb:f8:a0:f0:47:d8:b3:eb:fe:52:62:02:da:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: Oct 8 14:00:54 2025 GMT
Not After : Oct 9 14:00:54 2025 GMT
Subject: CN=0fd5a1df450257bc3a12cb8ea01054a3ca6006c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:2a:9a:cd:34:98:6c:ec:9c:2a:ad:fa:13:
5f:73:04:b5:d4:b1:21:c7:80:d7:ba:dc:80:fa:55:
d7:ff:9b:ea:56:6b:fe:59:36:95:5b:12:63:f6:bf:
3d:21:2d:56:73:6e:d9:ac:39:2d:81:2f:e8:6e:e1:
e4:d8:ec:0a:f6:82:1d:68:76:45:16:2f:2f:df:d4:
9a:f4:e4:a3:98:e2:ba:7e:88:12:40:cd:ba:c9:20:
b3:09:84:4d:03:d6:f1:7a:be:22:de:1b:ca:b8:82:
fc:71:d7:93:cd:95:62:07:66:fb:55:53:5a:6a:ff:
19:4c:ed:81:c0:e4:5a:fe:e6:13:85:c7:a7:89:7c:
f5:05:44:81:06:f8:9c:5f:29:bc:98:40:7f:0e:bb:
a9:e2:81:d0:b0:59:75:f6:15:3f:1d:85:86:9f:1f:
88:b3:39:3f:73:ff:16:ac:2c:ee:8d:b5:c7:a7:54:
01:1a:92:af:69:24:59:bb:eb:75:5b:da:6f:df:ae:
10:50:bb:7f:78:61:28:e6:b5:6b:7f:c2:94:06:63:
c3:5e:c0:d3:e3:8c:e6:09:2f:2a:aa:16:97:cc:da:
43:a5:2a:c6:27:0f:a2:d4:13:da:2e:a8:43:cc:d2:
73:1a:6a:ba:f6:9d:96:c6:c6:20:7f:94:d4:05:e3:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D5:A1:DF:45:02:57:BC:3A:12:CB:8E:A0:10:54:A3:CA:60:06:C5
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b0:13:ef:8b:8e:c8:ea:ab:5b:83:b8:43:40:45:47:06:b2:
71:92:55:9d:e8:e9:0d:2d:8b:91:d8:c0:0c:6c:21:1c:44:94:
c5:f1:6a:34:13:b2:80:27:0f:8f:1d:db:cc:d8:a5:2f:e1:c2:
29:fe:08:b3:2a:89:08:81:4f:92:54:1d:54:d4:b1:39:c8:39:
8c:da:3e:6e:ff:6f:37:f4:79:9c:ae:97:81:cf:c3:45:20:5f:
14:2f:59:40:97:71:b3:8e:1a:d3:44:35:08:55:15:25:69:97:
ea:58:9c:e4:ab:be:32:02:27:ca:b1:7a:dc:ac:e3:32:b7:7f:
75:d0:bd:af:dd:e0:01:18:b5:80:91:9d:10:ee:90:51:7f:b8:
fe:81:57:14:15:5c:46:f3:5b:75:49:53:99:cb:cf:97:76:5a:
f1:d6:22:8a:b5:b3:3c:73:39:20:ea:f0:c4:fa:4f:b0:d9:b3:
3b:fe:c6:04:89:76:f8:da:7e:c6:7e:6a:92:8c:b7:e8:8b:79:
15:39:31:e9:a8:e7:9a:29:8b:17:47:74:1f:4c:c9:43:fb:66:
a6:0d:9c:4a:92:14:15:52:ff:60:94:30:26:19:7e:84:c4:b3:
bd:d0:0a:e6:6d:1c:c2:9f:65:e4:60:24:80:55:c9:f6:25:ed:
c6:92:13:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEH/v4oPBH2LPr/lJiAtokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjkyNTcxMTA4OTU4Nzg2YjY1ZmZhMjQxYjFmMTFmNmQw
NThiNTYwHhcNMjUxMDA4MTQwMDU0WhcNMjUxMDA5MTQwMDU0WjAzMTEwLwYDVQQD
EygwZmQ1YTFkZjQ1MDI1N2JjM2ExMmNiOGVhMDEwNTRhM2NhNjAwNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjoqms00mGzsnCqt+hNfcwS11LEh
x4DXutyA+lXX/5vqVmv+WTaVWxJj9r89IS1Wc27ZrDktgS/obuHk2OwK9oIdaHZF
Fi8v39Sa9OSjmOK6fogSQM26ySCzCYRNA9bxer4i3hvKuIL8cdeTzZViB2b7VVNa
av8ZTO2BwORa/uYThceniXz1BUSBBvicXym8mEB/Drup4oHQsFl19hU/HYWGnx+I
szk/c/8WrCzujbXHp1QBGpKvaSRZu+t1W9pv364QULt/eGEo5rVrf8KUBmPDXsDT
44zmCS8qqhaXzNpDpSrGJw+i1BPaLqhDzNJzGmq69p2WxsYgf5TUBePd4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/Vod9FAle8OhLLjqAQVKPKYAbFMB8GA1UdIwQY
MBaAFMD5JXEQiVh4a2X/okGx8R9tBYtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQt
OWIyYjllYTk1NTM1LzEvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQtOWIyYjllYTk1NTM1
LzEvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLAT74uO
yOqrW4O4Q0BFRwaycZJVnejpDS2LkdjADGwhHESUxfFqNBOygCcPjx3bzNilL+HC
Kf4IsyqJCIFPklQdVNSxOcg5jNo+bv9vN/R5nK6Xgc/DRSBfFC9ZQJdxs44a00Q1
CFUVJWmX6lic5Ku+MgInyrF63KzjMrd/ddC9r93gARi1gJGdEO6QUX+4/oFXFBVc
RvNbdUlTmcvPl3Za8dYiirWzPHM5IOrwxPpPsNmzO/7GBIl2+Np+xn5qkoy36It5
FTkx6ajnmimLF0d0H0zJQ/tmpg2cSpIUFVL/YJQwJhl+hMSzvdAK5m0cwp9l5GAk
gFXJ9iXtxpITkQ==
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:15:39 2025 by rpki-client