Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
File: wvMmbgYS2DFPTp-So9uLyyU-2rw.mft (raw, json)
Hash identifier: y/460xBTHPKPmUzpLU20lurIGH05P62cemm4Kc4e1eE=
Subject key identifier: FF:51:4A:85:70:86:CB:83:81:73:2C:92:82:E1:85:6A:68:BD:C7:A4
Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
Certificate issuer: /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Certificate serial: 019A2E20862E3AF9FE9E692FC46045D8791C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
Manifest number: 0B5B
Signing time: Wed 29 Oct 2025 04:01:14 +0000
Manifest this update: Wed 29 Oct 2025 04:01:14 +0000
Manifest next update: Thu 30 Oct 2025 04:01:14 +0000
Files and hashes: 1: 9QfEv6VDYJHwg-_mBcw3nPg902w.roa (hash: bDGQkiI5avL3G45Js05YIuwiQofAZ2dxukXBkwwmDkY=)
2: wvMmbgYS2DFPTp-So9uLyyU-2rw.crl (hash: Si5ve2GoKmaA89qdrgOVQDnojsUnhdrzUWgC6zspjic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:86:2e:3a:f9:fe:9e:69:2f:c4:60:45:d8:79:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Validity
Not Before: Oct 29 04:01:14 2025 GMT
Not After : Oct 30 04:01:14 2025 GMT
Subject: CN=ff514a857086cb8381732c9282e1856a68bdc7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:64:c5:1a:54:aa:0f:be:b7:56:6c:32:a9:
fc:e0:1b:64:63:e7:91:6d:e6:b2:b1:9b:1d:07:f3:
3e:66:db:b5:c4:f1:e0:d9:5d:d8:96:72:73:fb:ce:
7c:a5:24:0b:ce:4b:fb:3e:17:1a:76:5b:a4:77:2b:
48:cf:a4:9e:50:69:59:34:63:29:3c:a4:c1:67:9e:
de:38:81:4b:ec:dd:70:ec:0c:31:4e:94:a0:4b:d2:
a6:85:69:52:bc:86:ac:6c:e2:bb:2d:a0:d2:58:6e:
37:99:a4:7d:4b:9e:81:1d:04:9a:d8:c5:2c:ea:2f:
ab:49:48:a7:f0:89:6e:88:42:b6:61:ea:ba:c7:45:
d5:16:2a:1b:4b:02:87:29:ca:60:55:4c:59:98:eb:
a9:94:6b:c8:c8:f5:b9:08:22:82:06:17:d7:76:39:
72:43:fb:e0:2e:63:d7:57:c1:3b:66:06:a0:89:f1:
e8:bf:96:8b:99:bf:70:c7:cc:26:c2:54:a7:1f:f9:
e5:e7:02:a0:10:64:81:6d:56:45:55:0c:e4:0b:97:
dd:cb:5d:cf:6d:2f:e1:7d:3b:85:a2:67:52:aa:e8:
72:43:e2:12:63:9d:01:be:f8:23:b8:60:2d:84:9d:
64:70:d8:c5:52:e1:fb:28:c1:da:3d:80:36:c5:00:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:51:4A:85:70:86:CB:83:81:73:2C:92:82:E1:85:6A:68:BD:C7:A4
X509v3 Authority Key Identifier:
keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:34:ab:76:10:fd:91:28:81:34:64:4f:cc:38:08:97:37:ac:
df:4b:d4:71:b7:72:43:02:2c:9d:4d:f8:73:8e:5f:bd:f6:4b:
29:a3:bc:73:5e:a7:05:da:98:6f:4b:7c:e1:e1:40:ca:c7:a5:
67:c6:51:dd:6c:a8:29:5b:f3:19:ea:40:a2:84:59:ee:23:bc:
01:0a:a9:71:7a:2b:fd:a4:7f:b5:c2:b2:20:62:44:d9:7b:be:
c0:5c:b9:5b:88:fd:d6:9a:77:fe:e7:83:dd:7c:4a:cb:f6:cc:
94:3b:8c:23:14:50:7d:b5:54:0e:ad:51:6d:14:0d:a0:5a:9a:
a0:2d:ca:f0:e5:4b:94:56:4f:e2:0c:6f:bf:cd:00:29:64:18:
33:b1:5f:a2:57:79:fa:a7:46:41:89:7a:a2:83:80:ed:52:7c:
ef:d8:23:3a:68:8b:06:45:b5:d5:93:2f:8e:8d:0f:28:77:dc:
07:6e:cb:d4:93:57:0b:2d:6e:79:7e:82:bb:72:48:79:0d:12:
51:ba:80:4d:b2:b8:4f:b0:71:93:68:e9:ce:19:3d:58:17:3f:
5b:03:88:ff:7b:ac:12:9e:05:5e:55:8d:35:82:d6:b8:bc:f7:
e8:1a:c9:a4:58:ee:b3:c8:68:f5:23:18:29:ef:f4:fb:be:b8:
a0:e7:9f:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZouIIYuOvn+nmkvxGBF2HkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZjMyNjZlMDYxMmQ4MzE0ZjRlOWY5MmEzZGI4YmNiMjUz
ZWRhYmMwHhcNMjUxMDI5MDQwMTE0WhcNMjUxMDMwMDQwMTE0WjAzMTEwLwYDVQQD
EyhmZjUxNGE4NTcwODZjYjgzODE3MzJjOTI4MmUxODU2YTY4YmRjN2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0llkxRpUqg++t1ZsMqn84BtkY+eR
beaysZsdB/M+Ztu1xPHg2V3YlnJz+858pSQLzkv7PhcadlukdytIz6SeUGlZNGMp
PKTBZ57eOIFL7N1w7AwxTpSgS9KmhWlSvIasbOK7LaDSWG43maR9S56BHQSa2MUs
6i+rSUin8IluiEK2Yeq6x0XVFiobSwKHKcpgVUxZmOuplGvIyPW5CCKCBhfXdjly
Q/vgLmPXV8E7ZgagifHov5aLmb9wx8wmwlSnH/nl5wKgEGSBbVZFVQzkC5fdy13P
bS/hfTuFomdSquhyQ+ISY50BvvgjuGAthJ1kcNjFUuH7KMHaPYA2xQB7IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9RSoVwhsuDgXMskoLhhWpovcekMB8GA1UdIwQY
MBaAFMLzJm4GEtgxT06fkqPbi8slPtq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kY2VhY2YtZGFlMi00NzYzLWIzOTkt
MmZiOTlmZTVlNDc3LzEvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kY2VhY2YtZGFlMi00NzYzLWIzOTktMmZiOTlmZTVlNDc3
LzEvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjSrdhD9
kSiBNGRPzDgIlzes30vUcbdyQwIsnU34c45fvfZLKaO8c16nBdqYb0t84eFAysel
Z8ZR3WyoKVvzGepAooRZ7iO8AQqpcXor/aR/tcKyIGJE2Xu+wFy5W4j91pp3/ueD
3XxKy/bMlDuMIxRQfbVUDq1RbRQNoFqaoC3K8OVLlFZP4gxvv80AKWQYM7Ffold5
+qdGQYl6ooOA7VJ879gjOmiLBkW11ZMvjo0PKHfcB27L1JNXCy1ueX6Cu3JIeQ0S
UbqATbK4T7Bxk2jpzhk9WBc/WwOI/3usEp4FXlWNNYLWuLz36BrJpFjus8ho9SMY
Ke/0+764oOefqA==
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:33:22 2025 by rpki-client