Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File: wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier: b27fS+VYnd8jEOCxKu39mr6dZzNmtdN3ZErGlB0xwhw=
Subject key identifier: D2:E9:11:79:19:9E:A6:93:43:6A:55:04:CD:A3:02:81:A4:30:E4:B4
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: 019A232E01E28E5F8997E79A9CE026F2D8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number: 1034
Signing time: Mon 27 Oct 2025 01:00:08 +0000
Manifest this update: Mon 27 Oct 2025 01:00:08 +0000
Manifest next update: Tue 28 Oct 2025 01:00:08 +0000
Files and hashes: 1: 2GK7KjijxkSp5rFI9ZFtp0atb8k.roa (hash: wdEjqmgar3oUItYyi55t1/3r4eSEpgrdLi/xchL3smU=)
2: XqKPzfmuCzaXuReNqmun-bylVl0.roa (hash: fIH8TXgcjjHXQ/BvOpbDJ0pldyGYRtZMTKQJxTQ5HkU=)
3: ty37WXzEM_QABRJJkI6c7K_G8EQ.roa (hash: KUqDTpdF99zPoKmTMTv8GshjWBlrKcQSI4Ly51l4brg=)
4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: eEYHWQAXcEJIbl60KTDwQfJ9xGEN52Zc4aN5TvPQCuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:01:e2:8e:5f:89:97:e7:9a:9c:e0:26:f2:d8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Oct 27 01:00:08 2025 GMT
Not After : Oct 28 01:00:08 2025 GMT
Subject: CN=d2e91179199ea693436a5504cda30281a430e4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:f6:60:b0:33:9b:d9:14:cf:31:9d:89:62:
a0:50:ab:e7:2b:ad:95:01:48:d8:6b:93:43:07:f4:
5b:35:55:78:72:43:ba:a3:91:30:71:b3:66:02:1c:
40:8f:bc:20:90:ff:3f:34:4e:f5:11:0d:f4:17:2a:
3f:5a:8b:64:98:de:87:e3:92:8b:53:25:36:a2:4e:
00:9c:2e:bf:a2:01:cb:77:90:ea:5b:e9:0d:5d:63:
0d:fa:59:0f:1c:53:99:d2:0b:a2:ca:d0:9e:50:4c:
9f:52:17:13:9d:ff:d6:75:e9:5f:eb:48:f0:fe:60:
89:f4:63:2a:d6:7a:21:b7:3a:d4:e7:5e:0b:14:c4:
50:b2:92:08:11:55:df:29:4e:12:ae:30:67:c7:cb:
eb:f2:fc:c2:56:47:06:07:58:40:2b:c4:d1:5f:66:
34:53:77:7d:bc:51:dd:d6:5f:7b:ef:1e:55:a1:47:
99:22:83:e9:fa:c0:39:ae:d8:16:fc:cf:f0:0a:e1:
14:df:58:0e:ab:fa:56:2c:36:0d:6f:dd:fc:35:dc:
1a:31:a1:37:6b:f6:60:be:a7:42:d9:ee:61:fb:90:
76:ce:bd:48:d0:d3:8d:11:e0:2b:09:b3:85:71:93:
55:28:ac:80:81:4e:e5:2d:4f:c7:c8:59:00:87:55:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E9:11:79:19:9E:A6:93:43:6A:55:04:CD:A3:02:81:A4:30:E4:B4
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8f:28:13:c9:f1:0a:66:0d:c2:52:c5:d9:fc:ba:d5:b1:ed:
20:0b:91:05:e7:39:d3:f6:7e:f6:6e:c9:58:2a:de:c6:28:4c:
46:bb:45:c9:08:7b:28:86:58:5d:20:6b:e2:0e:51:1f:11:bc:
e4:ef:28:47:56:e7:aa:cb:92:94:8f:ea:7f:01:38:74:62:fd:
e7:b2:3e:32:a0:99:61:4a:2e:84:a8:83:56:87:d7:f0:db:aa:
ab:4a:4a:aa:ca:40:57:e7:a6:5c:4c:b5:54:1e:9e:b0:6a:bd:
19:41:1f:a8:91:cb:c3:17:81:16:d4:c0:66:be:da:c2:74:75:
ff:72:f4:ca:b5:a0:d1:68:4f:53:40:f0:ed:63:0b:85:b7:59:
c8:71:c9:44:28:46:7c:67:4a:cb:be:d0:6a:07:1b:ba:ec:04:
76:e9:78:f3:ea:cb:6e:6e:a0:77:61:1a:3e:f4:33:8f:4c:c0:
64:ce:22:d1:65:5c:1e:ac:4b:89:5c:19:5a:26:a8:ad:5e:c6:
e7:73:7e:22:60:b9:47:6c:4a:b4:a9:61:34:7b:ae:45:cc:b7:
8c:01:57:a2:85:25:1d:54:8b:63:73:d9:6c:de:88:0d:3a:1f:
a6:41:5e:31:07:5c:7a:d2:3d:77:06:ca:93:38:f8:db:c4:34:
c5:ed:21:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojLgHijl+Jl+eanOAm8ti+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDI4NWRmNWIwMzllMGYwNGUyZGZlY2UyOGE1YThmYmVj
NmU5MzgwHhcNMjUxMDI3MDEwMDA4WhcNMjUxMDI4MDEwMDA4WjAzMTEwLwYDVQQD
EyhkMmU5MTE3OTE5OWVhNjkzNDM2YTU1MDRjZGEzMDI4MWE0MzBlNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JX2YLAzm9kUzzGdiWKgUKvnK62V
AUjYa5NDB/RbNVV4ckO6o5EwcbNmAhxAj7wgkP8/NE71EQ30Fyo/WotkmN6H45KL
UyU2ok4AnC6/ogHLd5DqW+kNXWMN+lkPHFOZ0guiytCeUEyfUhcTnf/Wdelf60jw
/mCJ9GMq1nohtzrU514LFMRQspIIEVXfKU4SrjBnx8vr8vzCVkcGB1hAK8TRX2Y0
U3d9vFHd1l977x5VoUeZIoPp+sA5rtgW/M/wCuEU31gOq/pWLDYNb938NdwaMaE3
a/ZgvqdC2e5h+5B2zr1I0NONEeArCbOFcZNVKKyAgU7lLU/HyFkAh1XDkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLpEXkZnqaTQ2pVBM2jAoGkMOS0MB8GA1UdIwQY
MBaAFMEChd9bA54PBOLf7OKKWo++xuk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUt
NTJhZmM3N2NhMThmLzEvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUtNTJhZmM3N2NhMThm
LzEvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhY8oE8nx
CmYNwlLF2fy61bHtIAuRBec50/Z+9m7JWCrexihMRrtFyQh7KIZYXSBr4g5RHxG8
5O8oR1bnqsuSlI/qfwE4dGL957I+MqCZYUouhKiDVofX8Nuqq0pKqspAV+emXEy1
VB6esGq9GUEfqJHLwxeBFtTAZr7awnR1/3L0yrWg0WhPU0Dw7WMLhbdZyHHJRChG
fGdKy77QagcbuuwEdul48+rLbm6gd2EaPvQzj0zAZM4i0WVcHqxLiVwZWiaorV7G
53N+ImC5R2xKtKlhNHuuRcy3jAFXooUlHVSLY3PZbN6IDTofpkFeMQdcetI9dwbK
kzj428Q0xe0hDg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:30 2025 by rpki-client