Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
File: Wik9777xDXPPEfK-hlVYjtpopEw.mft (raw, json)
Hash identifier: pYo7RZGjC+bH/OGR2fMfXi2St2XttJmCXErSc8FSKFc=
Subject key identifier: F2:81:0C:31:D2:E5:9F:5C:A7:54:7D:2C:5B:F0:91:35:E0:4A:A5:06
Authority key identifier: 5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
Certificate issuer: /CN=5a293defbef10d73cf11f2be8655588eda68a44c
Certificate serial: 019A72CA89ED54E40F37768891251FF23F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
Manifest number: 023F
Signing time: Tue 11 Nov 2025 12:01:07 +0000
Manifest this update: Tue 11 Nov 2025 12:01:07 +0000
Manifest next update: Wed 12 Nov 2025 12:01:07 +0000
Files and hashes: 1: Wik9777xDXPPEfK-hlVYjtpopEw.crl (hash: vn69rNGK+gYv93SCjzVNrbwnmWkrAxYkAyPY4nguZSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:89:ed:54:e4:0f:37:76:88:91:25:1f:f2:3f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a293defbef10d73cf11f2be8655588eda68a44c
Validity
Not Before: Nov 11 12:01:07 2025 GMT
Not After : Nov 12 12:01:07 2025 GMT
Subject: CN=f2810c31d2e59f5ca7547d2c5bf09135e04aa506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:63:0c:6a:c5:ad:1d:96:69:8f:d8:98:1c:
db:4f:b3:ae:c5:2a:20:98:08:bc:b6:6f:a7:7c:ac:
94:bf:d2:e2:fa:f8:ba:d8:ed:62:35:fa:b3:bd:f7:
e6:d5:20:49:d3:a3:5f:f0:f7:a9:07:5b:51:c4:bb:
83:db:b5:3e:cc:08:ef:cb:2e:bb:7e:61:65:c3:62:
c0:18:79:1a:bd:83:1a:00:fa:68:15:bb:1c:f1:a9:
00:4a:2f:6a:f1:e4:d9:12:35:cd:02:fc:75:0f:ca:
a9:f5:38:4c:a0:4a:f7:f9:a0:ff:d8:27:19:cd:75:
d7:62:04:69:bc:16:91:01:21:a2:7e:de:e5:4a:39:
ab:b1:87:60:fd:b3:a4:a3:83:ae:f8:92:4f:05:aa:
57:d1:77:cb:3d:42:1f:eb:1b:fc:2d:a2:fd:f9:a1:
b7:02:61:25:b6:fd:7e:59:0b:3a:c7:dc:1e:48:2b:
4e:02:fd:dc:e0:5f:f1:de:59:bd:52:f5:d4:31:c9:
2d:27:37:42:ed:90:10:59:a6:c3:c3:3f:af:0b:50:
43:8c:e1:c1:74:89:68:1a:f9:4e:b5:2b:ba:75:e9:
17:30:0a:d5:09:d8:f9:c2:9e:64:52:fe:d6:41:35:
d9:46:27:c2:c8:8e:4f:ad:4f:f9:5a:08:96:d1:7d:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:81:0C:31:D2:E5:9F:5C:A7:54:7D:2C:5B:F0:91:35:E0:4A:A5:06
X509v3 Authority Key Identifier:
keyid:5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1d:5c:3a:40:48:57:a1:3d:c3:ba:bb:7c:bf:bd:8e:40:b7:
5e:09:47:80:a0:74:d9:8a:ae:48:3a:4d:e6:d7:cf:f7:b6:eb:
db:70:dc:5c:7a:f2:cb:82:32:0c:19:3f:db:1e:a0:c7:18:55:
d0:a6:f1:a8:57:89:62:c3:77:18:02:26:28:77:4d:14:90:1e:
65:d7:66:93:c0:ae:28:32:fc:f6:38:b1:e3:22:79:e8:2b:fb:
e8:5e:10:c6:2e:d3:bd:17:29:2e:fc:49:a1:04:34:e7:a3:d6:
b7:60:fb:d3:5f:cc:ab:71:e2:af:7f:69:10:9b:e2:ec:55:a4:
8c:61:c7:33:a1:f5:37:37:53:19:2b:77:f6:69:5b:90:ba:d4:
6b:7e:8a:c4:81:f7:3c:2e:fa:b5:50:25:15:b7:de:ac:d0:c1:
49:0b:3c:aa:6a:13:9a:19:31:f7:9f:55:05:7a:5b:82:32:18:
83:14:d5:41:1c:15:6f:06:74:a9:39:ab:aa:9c:bf:ff:ea:b4:
e2:33:36:ef:b9:e2:ab:0e:2c:5b:e4:6d:a4:4a:65:b9:53:53:
de:98:31:f0:bf:70:92:37:8c:3a:83:39:47:13:0b:0c:db:d5:
6f:92:f4:06:08:75:db:cb:e8:14:bd:1b:18:a4:43:99:5b:90:
48:01:1f:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyontVOQPN3aIkSUf8j8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMjkzZGVmYmVmMTBkNzNjZjExZjJiZTg2NTU1ODhlZGE2
OGE0NGMwHhcNMjUxMTExMTIwMTA3WhcNMjUxMTEyMTIwMTA3WjAzMTEwLwYDVQQD
EyhmMjgxMGMzMWQyZTU5ZjVjYTc1NDdkMmM1YmYwOTEzNWUwNGFhNTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRljDGrFrR2WaY/YmBzbT7OuxSog
mAi8tm+nfKyUv9Li+vi62O1iNfqzvffm1SBJ06Nf8PepB1tRxLuD27U+zAjvyy67
fmFlw2LAGHkavYMaAPpoFbsc8akASi9q8eTZEjXNAvx1D8qp9ThMoEr3+aD/2CcZ
zXXXYgRpvBaRASGift7lSjmrsYdg/bOko4Ou+JJPBapX0XfLPUIf6xv8LaL9+aG3
AmEltv1+WQs6x9weSCtOAv3c4F/x3lm9UvXUMcktJzdC7ZAQWabDwz+vC1BDjOHB
dIloGvlOtSu6dekXMArVCdj5wp5kUv7WQTXZRifCyI5PrU/5WgiW0X0j9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKBDDHS5Z9cp1R9LFvwkTXgSqUGMB8GA1UdIwQY
MBaAFFopPe++8Q1zzxHyvoZVWI7aaKRMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2lrOTc3N3hEWFBQRWZLLWhsVllqdHBvcEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZmU1M2UtMGNhMy00YzYxLWIyOTct
NTQzZTIxNDI2OTA4LzEvV2lrOTc3N3hEWFBQRWZLLWhsVllqdHBvcEV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wZmU1M2UtMGNhMy00YzYxLWIyOTctNTQzZTIxNDI2OTA4
LzEvV2lrOTc3N3hEWFBQRWZLLWhsVllqdHBvcEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQx1cOkBI
V6E9w7q7fL+9jkC3XglHgKB02YquSDpN5tfP97br23DcXHryy4IyDBk/2x6gxxhV
0KbxqFeJYsN3GAImKHdNFJAeZddmk8CuKDL89jix4yJ56Cv76F4Qxi7TvRcpLvxJ
oQQ056PWt2D701/Mq3Hir39pEJvi7FWkjGHHM6H1NzdTGSt39mlbkLrUa36KxIH3
PC76tVAlFbferNDBSQs8qmoTmhkx959VBXpbgjIYgxTVQRwVbwZ0qTmrqpy//+q0
4jM277niqw4sW+RtpEpluVNT3pgx8L9wkjeMOoM5RxMLDNvVb5L0Bgh128voFL0b
GKRDmVuQSAEfVA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:14 2025 by rpki-client