Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
File: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft (raw, json)
Hash identifier: 8Ujfq+OnMOu4a6uhGJf05XzT69YOoxwuRMmnb+1D9ow=
Subject key identifier: 8D:93:A0:97:6A:C3:CE:C7:F3:EC:41:A3:17:CC:3A:A5:DF:2D:11:1A
Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Certificate serial: 019A71B8C9209C76582DF825C8D6640F821D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:06 +0000
Manifest this update: Tue 11 Nov 2025 07:02:06 +0000
Manifest next update: Wed 12 Nov 2025 07:02:06 +0000
Files and hashes: 1: sNmSuLPwop12596I--vLe1Fw_L8.roa (hash: rnnFcpfS8qT33aKuf/kRcr+W7tCgIM7nW6QVvMfILWQ=)
2: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl (hash: cEQfRkFQjybz0DYNd4C4IxUPgUK0lXWgPm9SDb3u3nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c9:20:9c:76:58:2d:f8:25:c8:d6:64:0f:82:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Validity
Not Before: Nov 11 07:02:06 2025 GMT
Not After : Nov 12 07:02:06 2025 GMT
Subject: CN=8d93a0976ac3cec7f3ec41a317cc3aa5df2d111a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:04:9c:5e:d4:6b:05:19:e7:af:bd:88:17:
09:e6:9a:1b:19:d4:ed:af:74:59:34:95:5b:04:de:
de:2b:9c:c9:56:07:8c:bc:c0:46:3c:ab:fa:cb:84:
a4:ce:bc:db:2a:b9:12:16:f3:a8:c1:44:4a:c2:22:
ca:49:3f:4e:c5:3c:16:30:49:3f:c6:92:2b:d1:36:
99:7a:02:fc:3c:be:e3:1b:6b:40:ba:1e:92:e9:b0:
71:a7:b9:f9:d7:a9:6a:be:7f:1c:96:fc:b5:3c:48:
c8:37:2d:cc:8b:9d:19:b9:c8:74:25:e5:54:35:25:
09:0b:47:38:59:93:2b:aa:9d:1e:c6:79:72:43:dd:
90:3f:0e:ad:a2:c5:36:a9:24:37:f3:cf:f6:b1:9f:
02:4e:75:92:30:d9:12:9a:eb:4b:b8:c9:1b:58:37:
be:d5:a9:73:6e:49:03:6c:4a:a4:35:88:0d:a7:e2:
42:c2:e8:a7:1a:0b:38:5f:4f:ab:82:58:56:db:6b:
a5:c6:92:27:16:c9:4e:82:8f:19:7b:ac:a0:53:7f:
d7:fe:7b:ac:49:3a:5c:92:9a:e2:e6:a3:25:90:b5:
cf:f7:5f:1f:63:4f:82:bd:12:1e:08:5b:f7:8e:41:
34:6e:c6:c1:c8:9a:1a:8b:3b:82:80:7e:01:a5:cf:
f5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:93:A0:97:6A:C3:CE:C7:F3:EC:41:A3:17:CC:3A:A5:DF:2D:11:1A
X509v3 Authority Key Identifier:
keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:aa:bb:a5:d1:e9:6c:d0:67:c3:2e:fe:63:da:ef:35:2c:39:
d1:89:d2:eb:0f:01:c2:69:56:e2:a9:f4:ac:30:e6:44:31:65:
cf:e8:49:cd:00:ba:2e:e3:82:41:1d:27:17:65:6a:44:3b:08:
2e:91:bf:e5:f6:c7:99:d0:1d:3d:91:94:f6:a9:2e:2c:5c:56:
69:54:f2:c1:6f:b5:ee:3c:08:4f:a6:c0:e7:14:5c:76:b6:4f:
da:24:39:be:67:94:68:80:a1:df:a5:04:38:6a:5c:95:02:7a:
a0:a1:06:ee:51:ef:f7:0a:34:6e:95:f2:71:c2:7f:ec:48:91:
35:81:97:51:c6:ee:f9:f0:6e:15:ac:ce:9e:1a:84:4e:4a:59:
b6:7d:b6:64:9e:ce:42:7a:81:5d:3e:e9:8d:65:59:97:19:60:
8e:ca:f9:ad:be:bf:ba:bc:79:bd:03:4f:7f:03:c3:7f:a5:bf:
2f:9c:77:8e:1e:86:1a:60:17:a8:6e:77:fd:e9:eb:67:e5:ed:
6e:12:d2:8e:50:71:32:ee:38:40:49:04:65:b3:a5:6b:d1:7f:
73:77:2c:72:ea:47:69:18:a8:c8:51:bf:8a:79:c6:b8:62:1c:
55:86:d0:c9:16:eb:64:2a:ff:59:3a:11:3c:be:e2:d4:16:4f:
e9:ea:d7:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuMkgnHZYLfglyNZkD4IdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTQyZTVkNWNmYWE0NTIxNjZiYzdiNTVhNjU1NThmNTI0
ZDY3NTEwHhcNMjUxMTExMDcwMjA2WhcNMjUxMTEyMDcwMjA2WjAzMTEwLwYDVQQD
Eyg4ZDkzYTA5NzZhYzNjZWM3ZjNlYzQxYTMxN2NjM2FhNWRmMmQxMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdcEnF7UawUZ56+9iBcJ5pobGdTt
r3RZNJVbBN7eK5zJVgeMvMBGPKv6y4SkzrzbKrkSFvOowURKwiLKST9OxTwWMEk/
xpIr0TaZegL8PL7jG2tAuh6S6bBxp7n516lqvn8clvy1PEjINy3Mi50Zuch0JeVU
NSUJC0c4WZMrqp0exnlyQ92QPw6tosU2qSQ388/2sZ8CTnWSMNkSmutLuMkbWDe+
1alzbkkDbEqkNYgNp+JCwuinGgs4X0+rglhW22ulxpInFslOgo8Ze6ygU3/X/nus
STpckpri5qMlkLXP918fY0+CvRIeCFv3jkE0bsbByJoaizuCgH4Bpc/1yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2ToJdqw87H8+xBoxfMOqXfLREaMB8GA1UdIwQY
MBaAFMAULl1c+qRSFmvHtVplVY9STWdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iN2YxZGEtNDY3YS00MzYyLThiMmUt
MTk3MGRlODRhMWYwLzEvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iN2YxZGEtNDY3YS00MzYyLThiMmUtMTk3MGRlODRhMWYw
LzEvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaq7pdHp
bNBnwy7+Y9rvNSw50YnS6w8BwmlW4qn0rDDmRDFlz+hJzQC6LuOCQR0nF2VqRDsI
LpG/5fbHmdAdPZGU9qkuLFxWaVTywW+17jwIT6bA5xRcdrZP2iQ5vmeUaICh36UE
OGpclQJ6oKEG7lHv9wo0bpXyccJ/7EiRNYGXUcbu+fBuFazOnhqETkpZtn22ZJ7O
QnqBXT7pjWVZlxlgjsr5rb6/urx5vQNPfwPDf6W/L5x3jh6GGmAXqG53/enrZ+Xt
bhLSjlBxMu44QEkEZbOla9F/c3cscupHaRioyFG/innGuGIcVYbQyRbrZCr/WToR
PL7i1BZP6erXOQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:33 2025 by rpki-client