Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File: wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier: /8bKE/vbXMdSBq31fdAfuwlja9ccIyaYaoGs1e2hlrs=
Subject key identifier: 57:FA:EE:6C:B1:9D:3A:AF:0B:B2:EE:EA:3B:D3:89:43:67:13:9D:F6
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer: /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial: 019A72CAB4A7CDD5788DC3E7D064EE1E8C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number: 0992
Signing time: Tue 11 Nov 2025 12:01:18 +0000
Manifest this update: Tue 11 Nov 2025 12:01:18 +0000
Manifest next update: Wed 12 Nov 2025 12:01:18 +0000
Files and hashes: 1: JlMTszQ0SriAWERqlr9FMnp6WvU.roa (hash: M6WDGwhPPqHvkOqSI6cVPu36gkAbrulfoDxAqaGV7po=)
2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: APjSqpZ4OjB9M9zLFxA9DzPh/sxYrsKTOqJZlOgCY1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b4:a7:cd:d5:78:8d:c3:e7:d0:64:ee:1e:8c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Validity
Not Before: Nov 11 12:01:18 2025 GMT
Not After : Nov 12 12:01:18 2025 GMT
Subject: CN=57faee6cb19d3aaf0bb2eeea3bd3894367139df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:5a:e7:8d:b6:99:be:61:fe:db:b7:e5:01:
7d:59:08:aa:9a:1c:17:d2:6f:98:14:35:99:93:1d:
71:6e:f6:98:3f:6d:7d:47:dc:bf:47:04:b2:d7:aa:
df:fe:16:d4:7e:4e:4c:bd:fc:fb:aa:22:11:49:31:
5f:59:6d:99:0f:85:1a:cd:ac:62:8a:39:5f:75:23:
e5:d2:05:8e:78:0c:8d:29:f1:c4:7e:4d:e6:2e:6b:
32:d6:8c:64:c8:6d:3d:e3:d3:46:7c:5c:0e:34:97:
68:50:ee:61:ba:0a:d3:6d:ab:c7:d0:16:19:67:96:
f5:14:d1:fc:13:76:44:fd:af:47:68:8d:9d:87:ff:
54:fc:e5:dc:9b:e7:75:df:20:ea:e5:e7:41:ac:ce:
01:76:8a:bc:da:16:3a:0e:57:d3:12:f2:14:13:9a:
63:08:f8:fc:90:b9:e9:f8:57:f5:5a:ac:65:de:ab:
db:39:cb:83:e4:15:d8:50:27:6b:74:84:82:86:9b:
e1:08:b9:46:d2:bc:0c:81:85:6e:e6:8d:f1:5f:1f:
4f:74:5f:c2:78:32:33:e8:7c:29:04:1a:14:d7:ce:
d0:49:6e:a0:1c:06:5b:8d:b6:9a:a4:69:d2:b3:8d:
0a:44:5a:26:dd:66:db:f0:47:9d:86:8c:f0:c0:0f:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:EE:6C:B1:9D:3A:AF:0B:B2:EE:EA:3B:D3:89:43:67:13:9D:F6
X509v3 Authority Key Identifier:
keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4c:0a:aa:b9:f4:71:9c:2b:a6:19:0a:38:b3:78:b7:42:8f:
0e:a3:ab:e3:fb:28:93:4f:8b:3d:04:8c:9f:a1:9d:3d:7c:51:
86:3f:4c:27:3f:f8:ae:50:9a:26:78:04:10:f2:c1:16:f3:50:
c0:bc:2b:6f:67:2f:07:52:f7:50:8c:f1:02:a4:76:b7:14:bd:
06:6d:cd:84:c4:cd:88:50:d5:67:70:77:cc:b4:66:ae:52:a7:
42:d4:1e:e8:2c:18:8a:4e:ce:d1:4a:c4:14:3e:e9:c7:27:4a:
44:6e:37:9f:4f:3d:28:23:cc:d0:6a:0a:4f:90:59:40:68:a7:
73:11:d4:0d:dc:c3:cc:3b:b8:e3:db:1d:0f:03:06:a1:77:41:
5e:04:26:13:b3:cd:03:45:59:4d:a2:57:c7:d8:19:77:a8:84:
b0:52:ec:bf:ae:17:39:a6:69:15:79:21:20:a1:2b:1b:5f:b7:
b6:0d:38:92:c6:09:6a:6c:d5:1a:09:a2:41:cc:46:d1:b4:ec:
7d:51:d0:1a:20:52:e6:a4:c6:3c:3f:c6:5f:1f:2b:5c:e1:01:
ec:d8:a9:40:f1:bd:91:7d:49:d3:e6:94:7b:69:d2:d0:e6:56:
65:10:af:af:a8:d7:87:2c:de:5c:6e:ca:4c:13:60:bd:2d:c6:
16:1e:25:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyrSnzdV4jcPn0GTuHoyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYTkxMWQ2OWM0ZjY0NTdhMTA5ZGU3N2IxYzc1MjQ5ZGM1
MzBlMTcwHhcNMjUxMTExMTIwMTE4WhcNMjUxMTEyMTIwMTE4WjAzMTEwLwYDVQQD
Eyg1N2ZhZWU2Y2IxOWQzYWFmMGJiMmVlZWEzYmQzODk0MzY3MTM5ZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwFa5422mb5h/tu35QF9WQiqmhwX
0m+YFDWZkx1xbvaYP219R9y/RwSy16rf/hbUfk5Mvfz7qiIRSTFfWW2ZD4Uazaxi
ijlfdSPl0gWOeAyNKfHEfk3mLmsy1oxkyG0949NGfFwONJdoUO5hugrTbavH0BYZ
Z5b1FNH8E3ZE/a9HaI2dh/9U/OXcm+d13yDq5edBrM4Bdoq82hY6DlfTEvIUE5pj
CPj8kLnp+Ff1Wqxl3qvbOcuD5BXYUCdrdISChpvhCLlG0rwMgYVu5o3xXx9PdF/C
eDIz6HwpBBoU187QSW6gHAZbjbaapGnSs40KRFom3Wbb8EedhozwwA+SGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFf67myxnTqvC7Lu6jvTiUNnE532MB8GA1UdIwQY
MBaAFMKpEdacT2RXoQned7HHUkncUw4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jNjUzNWQtNzIxZi00MzAxLTlkODkt
ZmNkYWQyYjU2NTZiLzEvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jNjUzNWQtNzIxZi00MzAxLTlkODktZmNkYWQyYjU2NTZi
LzEvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUwKqrn0
cZwrphkKOLN4t0KPDqOr4/sok0+LPQSMn6GdPXxRhj9MJz/4rlCaJngEEPLBFvNQ
wLwrb2cvB1L3UIzxAqR2txS9Bm3NhMTNiFDVZ3B3zLRmrlKnQtQe6CwYik7O0UrE
FD7pxydKRG43n089KCPM0GoKT5BZQGincxHUDdzDzDu449sdDwMGoXdBXgQmE7PN
A0VZTaJXx9gZd6iEsFLsv64XOaZpFXkhIKErG1+3tg04ksYJamzVGgmiQcxG0bTs
fVHQGiBS5qTGPD/GXx8rXOEB7NipQPG9kX1J0+aUe2nS0OZWZRCvr6jXhyzeXG7K
TBNgvS3GFh4lzg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:57 2025 by rpki-client