Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
File: W2c0Iu_35BxeBteOUp9JH1kVD_k.mft (raw, json)
Hash identifier: TxTvvHb6ZZKKRxKTy+vyBhzaR8SXjlHF7fxyAfcFNFo=
Subject key identifier: 94:89:71:A6:8C:1D:88:8F:20:7B:78:F4:14:BF:02:C9:D5:3C:84:C1
Authority key identifier: 5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
Certificate issuer: /CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Certificate serial: 019A7225A01A91CBEB65091D9A9BC49C960A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
Manifest number: 1460
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: W2c0Iu_35BxeBteOUp9JH1kVD_k.crl (hash: BEqkj0Fu0EmPYLsV2wb6AUJjU89Qx1PhMOPaRF+ms5M=)
2: f2eeaIi_NtiLs6nRUcClmpkBy5k.roa (hash: 8pw5kFZ35WiQs2DDHCW04FDgssajvxmkQJ4ITw5fsyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a0:1a:91:cb:eb:65:09:1d:9a:9b:c4:9c:96:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=948971a68c1d888f207b78f414bf02c9d53c84c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:39:30:6b:c9:47:d3:21:92:33:0b:42:9f:
76:d0:b4:e3:bc:69:ea:62:a2:19:0b:b3:8b:59:ba:
a9:3e:ed:28:06:03:48:00:c5:d0:64:15:59:c0:ad:
1e:15:c1:71:de:30:f3:23:c8:9d:46:6d:5a:95:cd:
4c:ba:ad:ac:84:d7:21:b4:d2:16:87:6c:0e:4c:ea:
09:d4:99:c9:29:99:04:54:1e:a0:d6:01:70:61:b1:
5a:95:4e:2b:45:82:10:89:51:2b:07:3a:6b:ba:22:
06:e4:be:68:54:e9:c9:e2:bf:0f:b5:b3:19:4a:e5:
f2:28:c3:c7:42:82:80:2f:3e:ea:65:d3:22:d1:40:
83:86:92:ca:d3:21:1d:e8:7c:ad:38:66:76:44:e0:
7b:bb:c5:5d:49:c2:27:fb:58:98:f9:e2:b2:0c:23:
04:d4:d9:f4:50:f2:94:94:5d:83:58:8e:f2:0a:2d:
80:30:a8:ae:3f:dd:81:06:77:45:0d:99:d3:74:ac:
81:74:85:eb:8e:5c:0f:64:30:00:20:7f:8e:ec:94:
37:02:ce:9d:ff:cc:8e:53:be:98:8a:95:2e:43:25:
0e:66:df:e4:5f:d3:d7:8d:dc:ba:45:bc:05:8b:0f:
6f:39:cf:4c:f6:66:45:3f:9e:4e:6d:93:67:61:d2:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:89:71:A6:8C:1D:88:8F:20:7B:78:F4:14:BF:02:C9:D5:3C:84:C1
X509v3 Authority Key Identifier:
keyid:5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f6:a9:6b:cd:34:f3:46:8b:73:c7:7d:ca:80:0a:7b:81:2a:
28:d4:fb:f5:47:9d:21:40:d5:3e:a5:ae:0f:1b:74:90:c5:db:
96:65:71:0e:d9:f3:ad:45:28:e3:8e:88:0c:bc:5e:50:94:23:
fa:8d:b5:04:fe:37:f2:7e:db:8a:3c:06:1e:64:b4:e3:05:e0:
91:bd:93:da:ec:85:48:68:2c:f8:ff:ee:35:f7:62:8a:b5:e0:
81:42:e5:64:da:13:0e:94:1e:a3:f3:94:07:85:44:ca:b0:14:
14:88:1f:b2:b8:b7:8d:a9:66:51:3d:70:95:74:c5:cc:a2:4e:
ce:bc:b6:4d:2a:63:9d:65:b3:f8:a4:48:ba:81:f0:54:89:1d:
8f:bb:6d:6e:f4:c6:92:f3:4d:64:f7:8a:86:be:4e:56:3a:e6:
90:66:ca:aa:be:a7:db:2e:3a:04:35:ba:76:27:4e:ec:c0:5e:
00:8a:18:51:68:79:68:9b:b3:8c:7a:9b:45:2a:4a:2d:b5:9f:
7b:8c:89:3b:c0:f0:29:7d:af:33:f5:7c:78:11:f2:63:e0:66:
f9:16:81:2c:f1:79:bf:7e:7c:35:bc:d8:a1:88:53:10:d8:e6:
ac:2e:53:3f:11:e3:67:8b:06:3d:30:54:1d:e2:ab:2a:82:18:
82:f5:ac:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJaAakcvrZQkdmpvEnJYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjczNDIyZWZmN2U0MWM1ZTA2ZDc4ZTUyOWY0OTFmNTkx
NTBmZjkwHhcNMjUxMTExMDkwMDU5WhcNMjUxMTEyMDkwMDU5WjAzMTEwLwYDVQQD
Eyg5NDg5NzFhNjhjMWQ4ODhmMjA3Yjc4ZjQxNGJmMDJjOWQ1M2M4NGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdg5MGvJR9MhkjMLQp920LTjvGnq
YqIZC7OLWbqpPu0oBgNIAMXQZBVZwK0eFcFx3jDzI8idRm1alc1Muq2shNchtNIW
h2wOTOoJ1JnJKZkEVB6g1gFwYbFalU4rRYIQiVErBzpruiIG5L5oVOnJ4r8PtbMZ
SuXyKMPHQoKALz7qZdMi0UCDhpLK0yEd6HytOGZ2ROB7u8VdScIn+1iY+eKyDCME
1Nn0UPKUlF2DWI7yCi2AMKiuP92BBndFDZnTdKyBdIXrjlwPZDAAIH+O7JQ3As6d
/8yOU76YipUuQyUOZt/kX9PXjdy6RbwFiw9vOc9M9mZFP55ObZNnYdIN1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSJcaaMHYiPIHt49BS/AsnVPITBMB8GA1UdIwQY
MBaAFFtnNCLv9+QcXgbXjlKfSR9ZFQ/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJjMEl1XzM1QnhlQnRlT1VwOUpIMWtWRF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jN2QyMmItMjE0Ny00MzM2LTkwMDkt
ZjkzNTVmZDk4YjZiLzEvVzJjMEl1XzM1QnhlQnRlT1VwOUpIMWtWRF9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jN2QyMmItMjE0Ny00MzM2LTkwMDktZjkzNTVmZDk4YjZi
LzEvVzJjMEl1XzM1QnhlQnRlT1VwOUpIMWtWRF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvapa800
80aLc8d9yoAKe4EqKNT79UedIUDVPqWuDxt0kMXblmVxDtnzrUUo446IDLxeUJQj
+o21BP438n7bijwGHmS04wXgkb2T2uyFSGgs+P/uNfdiirXggULlZNoTDpQeo/OU
B4VEyrAUFIgfsri3jalmUT1wlXTFzKJOzry2TSpjnWWz+KRIuoHwVIkdj7ttbvTG
kvNNZPeKhr5OVjrmkGbKqr6n2y46BDW6didO7MBeAIoYUWh5aJuzjHqbRSpKLbWf
e4yJO8DwKX2vM/V8eBHyY+Bm+RaBLPF5v358NbzYoYhTENjmrC5TPxHjZ4sGPTBU
HeKrKoIYgvWszg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:57 2025 by rpki-client