Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
File: wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json)
Hash identifier: 2hOP0r/efSnwX/wpoabnPH+sTdcdLPjx34poNLihSgU=
Subject key identifier: D3:EA:0F:63:8D:3E:5C:88:C0:C9:26:11:8C:F3:24:98:B7:32:FD:D0
Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
Certificate issuer: /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Certificate serial: 019A7225ABE62F23328A848535AD317C9E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
Manifest number: 1494
Signing time: Tue 11 Nov 2025 09:01:02 +0000
Manifest this update: Tue 11 Nov 2025 09:01:02 +0000
Manifest next update: Wed 12 Nov 2025 09:01:02 +0000
Files and hashes: 1: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: iErxDZZn9S7GqsaC1QAMTfH5oIbvX/LNRW71QQm2VWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ab:e6:2f:23:32:8a:84:85:35:ad:31:7c:9e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Validity
Not Before: Nov 11 09:01:02 2025 GMT
Not After : Nov 12 09:01:02 2025 GMT
Subject: CN=d3ea0f638d3e5c88c0c926118cf32498b732fdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:e1:69:1c:eb:ca:ab:12:27:ad:b9:b3:ff:
bd:3e:95:c2:a2:32:b2:88:29:f3:a8:3c:3e:83:a5:
fe:6c:96:a9:c0:a2:41:8d:8c:78:ed:24:36:6d:36:
4d:ee:a0:d7:21:66:8a:3c:9b:c3:e0:5b:5e:be:14:
f1:88:eb:4b:9e:f7:17:66:00:78:0d:45:ba:82:db:
1c:8c:1d:47:61:6e:26:ff:a5:90:d3:02:4e:12:df:
0b:9f:59:69:5a:15:55:14:06:19:4f:92:28:ff:f2:
d1:58:1d:6a:2b:be:b8:79:f9:b4:90:b5:0a:2c:8c:
86:7d:10:b7:6e:e6:57:1c:b7:41:72:0b:ff:b2:7d:
d9:5e:19:08:15:c5:cb:fa:69:cc:62:94:94:4f:f1:
98:9c:53:c7:d8:27:19:e6:e9:5f:37:d6:cf:29:4e:
8d:f0:7a:f2:45:22:08:4d:05:25:e8:e3:0e:70:ae:
8e:af:1e:a2:61:d1:8a:b6:e9:7e:a6:96:7b:0b:3a:
b9:3c:9c:36:51:46:88:62:5a:6a:91:ac:dc:6f:1b:
a1:bd:87:3a:b1:38:8f:10:4c:9d:bd:7f:8d:d5:20:
11:cf:6f:d5:90:0d:70:25:6f:a9:59:92:58:05:06:
55:10:49:d2:89:c6:b8:58:ca:2f:67:e9:13:c1:08:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EA:0F:63:8D:3E:5C:88:C0:C9:26:11:8C:F3:24:98:B7:32:FD:D0
X509v3 Authority Key Identifier:
keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f9:43:8c:0f:ac:6e:38:c0:ea:b0:54:95:72:63:21:bc:ee:
e2:e7:d1:4b:44:84:42:4c:1c:c4:ea:af:0d:61:00:96:27:61:
33:e7:2d:f2:63:87:c9:b7:20:0b:82:13:63:2e:7f:e8:b5:d4:
a4:e6:ea:52:e3:84:82:85:b8:f8:3a:c7:61:66:86:26:e7:2e:
44:62:52:32:e6:a1:72:3d:31:ca:7e:85:0d:a1:ce:76:1e:68:
2d:29:ee:15:07:e5:97:6a:15:a0:a5:16:d5:60:6a:4e:1c:d6:
dd:db:04:2f:3f:c8:2c:e7:10:3f:31:72:82:c1:22:29:82:1a:
40:de:b8:2d:a7:25:80:bb:58:ed:97:af:91:3a:fc:5a:cd:47:
ac:35:8c:9f:74:df:02:99:dd:55:7a:6c:6a:19:bd:5a:55:38:
56:4b:4a:68:e7:79:51:78:b3:a5:54:bf:22:9c:8f:f0:30:34:
b2:17:75:1a:5e:53:7b:29:45:6a:ea:d3:77:0e:e7:c7:b5:9a:
f0:82:76:98:63:7a:9d:5a:0f:6f:e3:86:bd:37:dc:d0:9a:10:
63:d0:55:61:1c:a8:8c:d9:96:17:bf:9b:d8:fe:1a:ac:14:6a:
9e:73:9c:15:a6:f7:bd:1f:3f:22:f8:4c:8c:1d:48:88:8d:b7:
95:ef:b4:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJavmLyMyioSFNa0xfJ5IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxM2M5ZmI1OWM5OWNkZmI0YTZkODQyOWNkODM3MDU5MDYw
MTJiMTEwHhcNMjUxMTExMDkwMTAyWhcNMjUxMTEyMDkwMTAyWjAzMTEwLwYDVQQD
EyhkM2VhMGY2MzhkM2U1Yzg4YzBjOTI2MTE4Y2YzMjQ5OGI3MzJmZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqzhaRzryqsSJ625s/+9PpXCojKy
iCnzqDw+g6X+bJapwKJBjYx47SQ2bTZN7qDXIWaKPJvD4FtevhTxiOtLnvcXZgB4
DUW6gtscjB1HYW4m/6WQ0wJOEt8Ln1lpWhVVFAYZT5Io//LRWB1qK764efm0kLUK
LIyGfRC3buZXHLdBcgv/sn3ZXhkIFcXL+mnMYpSUT/GYnFPH2CcZ5ulfN9bPKU6N
8HryRSIITQUl6OMOcK6Orx6iYdGKtul+ppZ7Czq5PJw2UUaIYlpqkazcbxuhvYc6
sTiPEEydvX+N1SARz2/VkA1wJW+pWZJYBQZVEEnSica4WMovZ+kTwQjJXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPqD2ONPlyIwMkmEYzzJJi3Mv3QMB8GA1UdIwQY
MBaAFME8n7Wcmc37Sm2EKc2DcFkGASsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9hNzFkMDYtYjE0MC00Njk1LTg5MWMt
YWRlYzA3ZDIyZjQ2LzEvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9hNzFkMDYtYjE0MC00Njk1LTg5MWMtYWRlYzA3ZDIyZjQ2
LzEvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/lDjA+s
bjjA6rBUlXJjIbzu4ufRS0SEQkwcxOqvDWEAlidhM+ct8mOHybcgC4ITYy5/6LXU
pObqUuOEgoW4+DrHYWaGJucuRGJSMuahcj0xyn6FDaHOdh5oLSnuFQfll2oVoKUW
1WBqThzW3dsELz/ILOcQPzFygsEiKYIaQN64LaclgLtY7ZevkTr8Ws1HrDWMn3Tf
ApndVXpsahm9WlU4VktKaOd5UXizpVS/IpyP8DA0shd1Gl5TeylFaurTdw7nx7Wa
8IJ2mGN6nVoPb+OGvTfc0JoQY9BVYRyojNmWF7+b2P4arBRqnnOcFab3vR8/IvhM
jB1IiI23le+0Hw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:09 2025 by rpki-client