Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
File: _w3fP-V3IgGv94wk6X-UTDgF_2s.mft (raw, json)
Hash identifier: vbXt9PM/ohqnT5E3wOlBra5/GJlgBO6uiqIfnh2DHqQ=
Subject key identifier: BA:0A:D8:14:AA:B5:72:34:CC:9D:4A:FC:5B:91:32:CE:02:6C:28:82
Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
Certificate issuer: /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Certificate serial: 019A26D4BF14248B9BDDA92F6E03294B0D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
Manifest number: 0575
Signing time: Mon 27 Oct 2025 18:01:07 +0000
Manifest this update: Mon 27 Oct 2025 18:01:07 +0000
Manifest next update: Tue 28 Oct 2025 18:01:07 +0000
Files and hashes: 1: 9ia0_iaxbX6JryuxqnLg3hd0L3g.roa (hash: KiNlWxgmk2eySTFhfbvvmaccM60Lf3LwZy/tqN4KWhY=)
2: ASer5kiqDiVWOaPZMylwsoahAIw.roa (hash: u7jpBR9dXty+UTW4qdoR89luPMWxLAPFa0EB+Y83dzY=)
3: U6zuk58ajYVysKNz6qXWGH9vBbQ.roa (hash: 61zuuE5vE5Y4+HWAkm8iJSGF4xuX2/gytqBlot9g8YQ=)
4: _w3fP-V3IgGv94wk6X-UTDgF_2s.crl (hash: avpI/sr3vqsa+VbedamOyDVwUumZl4cPNWp8Zn73AQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:bf:14:24:8b:9b:dd:a9:2f:6e:03:29:4b:0d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Validity
Not Before: Oct 27 18:01:07 2025 GMT
Not After : Oct 28 18:01:07 2025 GMT
Subject: CN=ba0ad814aab57234cc9d4afc5b9132ce026c2882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:a2:9b:0c:af:f6:94:a6:f8:c8:8a:d0:e7:
75:2b:72:44:17:97:09:f0:c1:83:54:bf:f6:8d:53:
bd:00:a7:d2:c4:49:5b:05:92:71:a2:b1:f3:6b:78:
e5:7d:5f:39:e2:53:c3:6c:54:49:b6:5e:05:39:17:
72:19:e0:79:74:a7:59:0c:d9:3c:5f:f1:18:2c:2c:
0f:d8:24:9b:69:df:b2:25:3b:e7:49:f6:6b:11:11:
9c:8e:bb:f0:5e:3f:40:4b:19:eb:8a:a2:33:64:30:
4b:57:98:bd:21:00:0e:df:2a:e3:aa:62:8c:3f:3a:
21:e8:08:20:e8:a3:13:7f:3c:2a:35:d0:df:af:e3:
17:c7:5f:ca:8a:71:06:e9:7e:92:8f:37:34:c0:32:
e4:74:5a:87:79:bd:64:fb:a8:84:14:eb:0f:dd:8c:
0a:d2:c9:c8:5c:6e:67:b3:4c:5c:9e:00:10:a7:a6:
5c:41:86:cb:62:6b:01:1a:13:2c:65:6c:90:22:a8:
f1:79:8f:3a:10:e4:c9:37:40:bd:66:b2:15:89:e2:
d5:8b:13:65:a3:d0:73:9d:61:45:39:39:b9:b4:ad:
15:d0:5d:5b:4d:f9:f3:49:3c:dc:da:76:3e:2a:12:
c8:e2:be:26:4f:5d:14:cf:64:74:75:6e:d4:ab:83:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0A:D8:14:AA:B5:72:34:CC:9D:4A:FC:5B:91:32:CE:02:6C:28:82
X509v3 Authority Key Identifier:
keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:be:32:5f:91:85:82:5d:51:bf:c3:9a:02:a9:f9:70:9e:30:
00:0e:0f:1b:59:07:63:02:92:54:01:80:92:cd:78:e5:d7:a4:
0f:de:f3:79:a1:d6:0f:17:5b:e0:e6:8c:81:70:1e:e4:db:9b:
89:4e:30:f8:c2:d2:44:23:9a:f4:0b:49:0e:2d:14:a0:cb:e0:
04:66:db:8f:65:18:ea:60:29:75:82:3c:3e:b9:15:72:5a:12:
20:8e:dc:f0:ef:1c:10:76:6b:af:e7:73:45:07:e2:ba:74:10:
28:94:c7:78:34:c1:79:51:24:9e:5d:f1:dd:ad:56:10:bb:7d:
9c:c9:57:6d:ca:8b:df:7e:ac:2f:0e:00:b0:64:f9:4f:87:76:
db:81:0a:8d:44:26:da:15:d4:37:12:f2:22:75:40:9e:7c:6e:
32:0d:3d:58:8e:68:b4:d5:2d:60:91:9c:e3:83:18:33:21:8c:
c2:64:05:3f:e7:2e:45:d1:6e:ad:06:38:85:70:26:05:b9:21:
de:ab:3a:e4:72:a5:d6:aa:15:49:79:8b:47:e2:ee:36:a5:a6:
21:ba:f1:ac:ba:22:39:dd:7c:67:e3:0c:0d:df:50:cd:e5:3e:
20:41:43:49:15:dd:b4:60:0e:2b:a1:30:8d:ba:03:dc:e9:ee:
bf:08:aa:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZom1L8UJIub3akvbgMpSw0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMGRkZjNmZTU3NzIyMDFhZmY3OGMyNGU5N2Y5NDRjMzgw
NWZmNmIwHhcNMjUxMDI3MTgwMTA3WhcNMjUxMDI4MTgwMTA3WjAzMTEwLwYDVQQD
EyhiYTBhZDgxNGFhYjU3MjM0Y2M5ZDRhZmM1YjkxMzJjZTAyNmMyODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNaimwyv9pSm+MiK0Od1K3JEF5cJ
8MGDVL/2jVO9AKfSxElbBZJxorHza3jlfV854lPDbFRJtl4FORdyGeB5dKdZDNk8
X/EYLCwP2CSbad+yJTvnSfZrERGcjrvwXj9ASxnriqIzZDBLV5i9IQAO3yrjqmKM
Pzoh6Agg6KMTfzwqNdDfr+MXx1/KinEG6X6Sjzc0wDLkdFqHeb1k+6iEFOsP3YwK
0snIXG5ns0xcngAQp6ZcQYbLYmsBGhMsZWyQIqjxeY86EOTJN0C9ZrIVieLVixNl
o9BznWFFOTm5tK0V0F1bTfnzSTzc2nY+KhLI4r4mT10Uz2R0dW7Uq4P32wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoK2BSqtXI0zJ1K/FuRMs4CbCiCMB8GA1UdIwQY
MBaAFP8N3z/ldyIBr/eMJOl/lEw4Bf9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEt
MDRkMTI0N2U1ZDBhLzEvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEtMDRkMTI0N2U1ZDBh
LzEvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKr4yX5GF
gl1Rv8OaAqn5cJ4wAA4PG1kHYwKSVAGAks145dekD97zeaHWDxdb4OaMgXAe5Nub
iU4w+MLSRCOa9AtJDi0UoMvgBGbbj2UY6mApdYI8PrkVcloSII7c8O8cEHZrr+dz
RQfiunQQKJTHeDTBeVEknl3x3a1WELt9nMlXbcqL336sLw4AsGT5T4d224EKjUQm
2hXUNxLyInVAnnxuMg09WI5otNUtYJGc44MYMyGMwmQFP+cuRdFurQY4hXAmBbkh
3qs65HKl1qoVSXmLR+LuNqWmIbrxrLoiOd18Z+MMDd9QzeU+IEFDSRXdtGAOK6Ew
jboD3Onuvwiq8A==
-----END CERTIFICATE-----
Generated at Mon Oct 27 19:57:22 2025 by rpki-client