Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
File: wKatm4cwm9AHnPowXUhhP4fEcNg.mft (raw, json)
Hash identifier: i/GiM7U93URhBvKPAXrzATJ/KfnU5ynDE6BZ6yKFuJI=
Subject key identifier: 0B:8F:F9:2D:B9:53:74:EA:A8:38:D1:5F:9C:7E:D1:9D:74:E9:F9:94
Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
Certificate issuer: /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Certificate serial: 019A706E61134C0C187BE92F9D51ECEB0E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 01:01:13 +0000
Manifest this update: Tue 11 Nov 2025 01:01:13 +0000
Manifest next update: Wed 12 Nov 2025 01:01:13 +0000
Files and hashes: 1: fpbdoc2TI64xJycuwiFh9Gomr6A.roa (hash: cljwIs+0uajrjK0gVgOImyvI4O/zMxkT1vLqnWwJwe0=)
2: wKatm4cwm9AHnPowXUhhP4fEcNg.crl (hash: DPB7iYwdGPXmdacNVtys5NTf14frzLXw1vUCFmhE1iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:61:13:4c:0c:18:7b:e9:2f:9d:51:ec:eb:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Validity
Not Before: Nov 11 01:01:13 2025 GMT
Not After : Nov 12 01:01:13 2025 GMT
Subject: CN=0b8ff92db95374eaa838d15f9c7ed19d74e9f994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:ed:3f:03:86:f8:00:40:83:02:c6:e8:34:
74:39:d5:89:99:c4:c7:fd:ac:2d:2b:38:35:e3:6c:
ba:a8:f4:2c:87:03:31:41:d8:53:cf:be:b7:4c:0b:
91:23:06:ec:fa:b8:68:21:f5:79:bc:71:2d:d8:03:
0c:ca:d5:31:00:68:49:47:3e:a5:a6:f4:69:95:b6:
3a:7c:b1:f6:e6:5b:48:18:81:4c:35:d0:d6:b7:f9:
1d:a2:50:8d:c5:ea:e3:27:ec:27:e6:23:80:1a:7c:
ec:23:d5:93:80:8f:a6:5c:28:50:ee:9f:46:7d:43:
10:64:1e:3b:0e:08:1c:29:ae:21:eb:cc:5c:1b:d1:
17:c7:23:76:d9:c7:f6:4e:ff:ae:da:02:7b:0f:0a:
3f:63:17:8a:7f:e4:a9:e1:52:9f:1e:b3:ed:2f:8b:
70:b8:4b:cf:ba:df:3f:19:e2:90:82:4e:35:0b:95:
1e:9f:d1:0c:1f:9f:b1:e1:cc:69:7d:45:aa:39:ba:
de:2b:8f:1d:8b:54:51:67:e4:97:cb:db:8b:39:d4:
8f:e8:0c:e5:32:32:7e:e4:78:4d:54:18:1d:a9:20:
46:a8:89:1f:ac:b2:e4:b4:08:02:0b:27:e4:95:64:
95:16:f4:b4:da:be:62:ea:e8:96:61:76:50:dc:ca:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8F:F9:2D:B9:53:74:EA:A8:38:D1:5F:9C:7E:D1:9D:74:E9:F9:94
X509v3 Authority Key Identifier:
keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ff:67:34:bf:ce:97:91:27:50:94:dd:74:e4:1f:56:9a:f3:
00:26:5c:c7:e7:6c:28:4d:17:2a:ec:b6:2b:9b:5b:b6:b1:47:
9d:92:ba:4c:77:a3:e9:6c:6e:c0:4b:d3:0e:05:4a:65:c4:1f:
cb:f9:9a:c1:bf:68:3c:9c:b2:74:e1:ec:53:a4:5c:bc:98:b6:
2c:6e:fa:5c:35:b9:e6:65:70:8d:e4:13:c4:a7:a8:72:4c:0e:
3d:7f:9e:1a:0b:a1:b1:01:af:2d:1d:78:cc:94:5b:a9:50:31:
f8:a7:0f:e9:fa:81:98:f9:28:d6:ec:68:a8:47:a2:bd:f1:3e:
ed:24:28:d0:8f:b2:c3:11:ee:19:e7:1a:7a:35:9d:64:1c:60:
8d:d9:4a:39:d1:bb:f6:fb:23:23:67:b4:4c:66:3e:59:c0:a3:
4a:f3:ae:0c:bd:b9:94:05:32:ee:21:5f:30:77:11:e1:52:27:
c9:2d:90:49:c8:b5:5e:a7:4f:0e:d5:6f:2e:ba:62:a0:a5:53:
c5:8b:5e:06:29:ad:1c:ef:f8:1b:a7:08:61:a9:73:20:94:66:
aa:ca:08:9c:fe:52:31:76:06:5a:60:e8:8e:74:21:18:49:7f:
f8:16:4e:40:ca:ab:bf:58:8d:05:44:47:8c:2d:a5:35:d7:2b:
04:32:a8:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbmETTAwYe+kvnVHs6w5AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYTZhZDliODczMDliZDAwNzljZmEzMDVkNDg2MTNmODdj
NDcwZDgwHhcNMjUxMTExMDEwMTEzWhcNMjUxMTEyMDEwMTEzWjAzMTEwLwYDVQQD
EygwYjhmZjkyZGI5NTM3NGVhYTgzOGQxNWY5YzdlZDE5ZDc0ZTlmOTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/3tPwOG+ABAgwLG6DR0OdWJmcTH
/awtKzg142y6qPQshwMxQdhTz763TAuRIwbs+rhoIfV5vHEt2AMMytUxAGhJRz6l
pvRplbY6fLH25ltIGIFMNdDWt/kdolCNxerjJ+wn5iOAGnzsI9WTgI+mXChQ7p9G
fUMQZB47DggcKa4h68xcG9EXxyN22cf2Tv+u2gJ7Dwo/YxeKf+Sp4VKfHrPtL4tw
uEvPut8/GeKQgk41C5Uen9EMH5+x4cxpfUWqObreK48di1RRZ+SXy9uLOdSP6Azl
MjJ+5HhNVBgdqSBGqIkfrLLktAgCCyfklWSVFvS02r5i6uiWYXZQ3MpuswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuP+S25U3TqqDjRX5x+0Z106fmUMB8GA1UdIwQY
MBaAFMCmrZuHMJvQB5z6MF1IYT+HxHDYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0thdG00Y3dtOUFIblBvd1hVaGhQNGZFY05nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mY2M3MGUtZTRhNS00YjE5LWFiNGYt
NzAxMjdiNDliMzIzLzEvd0thdG00Y3dtOUFIblBvd1hVaGhQNGZFY05nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9mY2M3MGUtZTRhNS00YjE5LWFiNGYtNzAxMjdiNDliMzIz
LzEvd0thdG00Y3dtOUFIblBvd1hVaGhQNGZFY05nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcP9nNL/O
l5EnUJTddOQfVprzACZcx+dsKE0XKuy2K5tbtrFHnZK6THej6WxuwEvTDgVKZcQf
y/mawb9oPJyydOHsU6RcvJi2LG76XDW55mVwjeQTxKeockwOPX+eGguhsQGvLR14
zJRbqVAx+KcP6fqBmPko1uxoqEeivfE+7SQo0I+ywxHuGecaejWdZBxgjdlKOdG7
9vsjI2e0TGY+WcCjSvOuDL25lAUy7iFfMHcR4VInyS2QSci1XqdPDtVvLrpioKVT
xYteBimtHO/4G6cIYalzIJRmqsoInP5SMXYGWmDojnQhGEl/+BZOQMqrv1iNBURH
jC2lNdcrBDKosA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:19 2025 by rpki-client