Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: c92Sh1ST/dqXNDP/C8hKUZOALXWXnss5RSTOHrt7V4I=
Subject key identifier: 8F:3E:8E:D0:1D:25:ED:AA:90:9C:9D:49:81:41:87:41:B9:39:8D:96
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 019A7226051D3A2E2F21C030BCF855207848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 11A7
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: 7kdmagU4QbQazPFAKJN_jh3ESjI.roa (hash: UKie7fx67vGuUXCr+OJM9sf2md8+FYbcDpZ0gOMQ3f0=)
2: oMWup55nUaojGXh2IYtrkxVaIxk.roa (hash: IgvfZQFj2syunyqqYTcXoGNSKYWlXxrN3iDEjFeptJ0=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: GsE8huMGsYgs/YyZgLclaLXrszQDCZysKaEVzfGKFmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:05:1d:3a:2e:2f:21:c0:30:bc:f8:55:20:78:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=8f3e8ed01d25edaa909c9d4981418741b9398d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:e7:8b:0c:1d:33:45:a8:2d:1a:db:a5:65:
08:d7:fc:49:fb:73:fd:94:40:d0:1c:d8:0f:7e:75:
fe:e2:b5:c1:f3:71:1d:45:73:2c:1e:95:81:7e:7b:
89:b6:c3:64:ab:40:7d:4c:a5:a0:56:a4:f9:f7:5f:
40:8b:a5:8a:2e:c4:d2:cc:26:50:3c:60:90:f4:fa:
de:00:dd:48:9f:d0:69:3a:94:34:73:2f:36:03:e1:
cc:4f:34:e3:2e:bd:c5:4e:1d:29:80:ef:6a:a9:1e:
dd:63:8c:9d:ab:51:1c:98:e1:0c:7c:f7:46:c5:1c:
9a:0c:4e:42:d6:99:91:9a:d9:5a:f2:2f:d5:c4:fc:
25:ff:c7:8a:4c:11:ef:d8:d0:8f:2f:05:eb:f1:40:
c7:89:e4:35:56:66:80:ef:13:fd:b5:fb:16:eb:36:
18:18:2c:0a:5e:21:a2:b6:0f:e2:cf:06:d5:5d:8e:
7e:63:cf:99:e4:8c:05:86:af:d9:42:d4:fe:b8:40:
66:a1:32:6b:8a:39:4c:55:97:dd:7a:10:96:3a:0a:
84:32:75:7e:3b:bf:3d:36:71:02:81:82:76:1a:10:
9d:55:bd:c5:1b:39:70:b0:c4:fb:09:53:67:9c:51:
14:5f:7e:c3:db:62:e1:19:37:b7:f8:63:79:4c:d0:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3E:8E:D0:1D:25:ED:AA:90:9C:9D:49:81:41:87:41:B9:39:8D:96
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1f:96:12:69:99:96:f5:93:dd:34:2f:af:1f:a7:6b:95:c1:
74:b3:b3:cc:a1:e2:d2:3e:17:ed:75:47:3d:79:25:0a:72:40:
49:81:4b:1d:d1:31:b4:7a:ff:32:3e:66:52:41:f4:95:dc:3a:
96:8d:fd:10:89:93:c4:69:ed:a2:42:67:30:5c:cb:3d:10:1b:
12:7a:d1:f6:82:57:ac:bc:89:98:19:dd:d1:ca:a3:65:01:c5:
a8:3b:7b:c3:4f:bf:97:08:e8:74:47:96:fd:40:fc:f0:89:19:
7a:90:65:32:f1:ce:8f:63:75:0c:85:23:30:72:5c:c0:d5:82:
3a:1a:db:83:96:77:c3:9b:91:a7:bf:a5:b4:80:d2:22:35:db:
09:cc:33:dc:a2:1b:71:78:5a:2f:fb:13:b0:17:78:a4:69:9a:
f2:2f:52:6e:0e:6a:95:4d:2d:33:96:b4:33:f1:25:c8:67:dc:
d4:f9:d2:cd:96:07:6b:c2:84:a5:40:17:a7:d4:01:b4:d8:3f:
ab:cd:9c:46:4c:86:bc:de:e8:15:3d:0c:17:9f:a9:35:dd:3a:
f1:82:f0:4d:26:d7:b0:61:d7:08:21:83:52:55:0e:68:cb:f3:
d5:94:ac:13:9f:31:39:82:26:ab:01:ca:8c:6f:4f:19:08:51:
fe:2d:1f:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJgUdOi4vIcAwvPhVIHhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMGU2NWNhZGRiZWNkNDhkMmY4Nzc4Nzk5MzExMzg0MmJk
ZmNlNWQwHhcNMjUxMTExMDkwMTI1WhcNMjUxMTEyMDkwMTI1WjAzMTEwLwYDVQQD
Eyg4ZjNlOGVkMDFkMjVlZGFhOTA5YzlkNDk4MTQxODc0MWI5Mzk4ZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7jniwwdM0WoLRrbpWUI1/xJ+3P9
lEDQHNgPfnX+4rXB83EdRXMsHpWBfnuJtsNkq0B9TKWgVqT5919Ai6WKLsTSzCZQ
PGCQ9PreAN1In9BpOpQ0cy82A+HMTzTjLr3FTh0pgO9qqR7dY4ydq1EcmOEMfPdG
xRyaDE5C1pmRmtla8i/VxPwl/8eKTBHv2NCPLwXr8UDHieQ1VmaA7xP9tfsW6zYY
GCwKXiGitg/izwbVXY5+Y8+Z5IwFhq/ZQtT+uEBmoTJrijlMVZfdehCWOgqEMnV+
O789NnECgYJ2GhCdVb3FGzlwsMT7CVNnnFEUX37D22LhGTe3+GN5TNCHEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8+jtAdJe2qkJydSYFBh0G5OY2WMB8GA1UdIwQY
MBaAFMIOZcrdvs1I0vh3h5kxE4Qr385dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2It
N2VmYWE0YTc0Zjk3LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2ItN2VmYWE0YTc0Zjk3
LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAix+WEmmZ
lvWT3TQvrx+na5XBdLOzzKHi0j4X7XVHPXklCnJASYFLHdExtHr/Mj5mUkH0ldw6
lo39EImTxGntokJnMFzLPRAbEnrR9oJXrLyJmBnd0cqjZQHFqDt7w0+/lwjodEeW
/UD88IkZepBlMvHOj2N1DIUjMHJcwNWCOhrbg5Z3w5uRp7+ltIDSIjXbCcwz3KIb
cXhaL/sTsBd4pGma8i9Sbg5qlU0tM5a0M/ElyGfc1PnSzZYHa8KEpUAXp9QBtNg/
q82cRkyGvN7oFT0MF5+pNd068YLwTSbXsGHXCCGDUlUOaMvz1ZSsE58xOYImqwHK
jG9PGQhR/i0fVw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:55 2025 by rpki-client