Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
File: WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft (raw, json)
Hash identifier: bBATHphUYEZKb3y4vOhKZ66D4K7iiRIGA443aj4L3Tw=
Subject key identifier: 03:32:90:00:17:72:1A:96:F2:90:D0:F5:C0:6B:86:32:4E:A8:95:1F
Authority key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
Certificate issuer: /CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Certificate serial: 019A722663B27A865BD4C63A1D995287587B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
Manifest number: 0CFF
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: D1M0sjr1PH8Yys4-1MS43KjOpQM.roa (hash: 2Q7ZkQbIGE2fBfzNEEGOF12hD07hA4SM+mHj72HM/gU=)
2: WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl (hash: CoID/7dBmHNABXLRezZ/bE/XDGA3E4SJKIfqw7r+2ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:63:b2:7a:86:5b:d4:c6:3a:1d:99:52:87:58:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=0332900017721a96f290d0f5c06b86324ea8951f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:b9:6e:e1:e9:d8:59:34:c2:05:be:df:4d:
f0:2b:0c:a8:a0:66:5e:4c:1e:42:ed:51:1e:a1:d8:
23:a9:08:6e:04:0e:73:78:34:28:68:bb:a8:5c:3e:
24:f6:87:5d:c5:50:3d:50:d7:54:d1:48:f9:01:92:
85:92:5b:b8:15:28:af:20:3b:3c:2c:77:5f:49:e5:
dd:62:8e:8c:32:a9:02:34:39:fe:d8:a5:23:68:da:
5a:2b:a5:d0:5e:3a:b5:ee:8d:0f:f9:41:c3:86:93:
25:5a:f9:b6:dc:4c:2b:b1:e4:6f:93:ac:52:c9:d1:
95:91:11:57:30:d5:7c:42:d8:47:d2:49:a4:68:5c:
f1:b0:a1:5f:66:b7:f3:7c:eb:66:06:91:77:36:bd:
6d:36:6e:9a:ef:7c:e8:93:f0:3c:d3:08:ab:33:be:
62:7e:72:c6:cc:f6:ac:5e:20:65:38:10:99:27:a5:
09:5a:19:07:bd:96:b2:5b:0b:2a:1b:f7:f2:e7:d3:
76:76:8a:13:2d:de:6d:f1:26:7c:e6:92:a4:0d:6d:
42:4c:4b:83:9d:44:bc:f8:d1:de:b1:9b:5a:4c:0a:
b7:2a:c9:c3:f0:80:cb:3d:cc:01:12:f8:41:49:1c:
c3:b7:08:05:ef:20:16:a8:67:b0:e3:49:d5:f1:01:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:90:00:17:72:1A:96:F2:90:D0:F5:C0:6B:86:32:4E:A8:95:1F
X509v3 Authority Key Identifier:
keyid:58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5f:96:51:ea:42:f9:4f:30:0c:d2:21:5b:6b:06:5f:61:45:
94:00:f5:1c:32:61:ad:6f:08:02:66:68:d0:32:ee:c7:02:3d:
f3:69:9e:62:2d:02:7a:b7:fc:13:76:26:42:b3:d6:7f:16:17:
13:77:ac:6f:c7:ad:7e:4a:bd:46:75:45:97:9c:97:73:2f:54:
37:c6:e3:ed:9c:82:70:cb:e9:8c:ba:94:41:b3:d3:72:9a:32:
6e:83:3f:e6:97:bf:73:fc:54:8d:4b:d5:35:d6:56:33:96:21:
20:60:89:a8:09:1b:c0:00:92:83:a6:18:81:fa:87:fd:d4:93:
fe:98:db:ab:a2:16:21:a1:8a:cf:9d:ac:ef:c1:27:4f:48:28:
7b:52:24:65:6f:71:c9:68:9f:03:8c:8f:0c:ee:58:0f:44:82:
64:ca:9e:c1:24:18:30:a1:21:3f:f5:b6:a2:3b:e6:c6:54:6b:
59:86:72:99:df:28:36:7c:24:6b:b7:76:de:52:e8:1e:83:fc:
ba:1f:f9:e1:31:fc:54:f8:9b:2c:85:63:42:2e:b2:26:d7:c3:
1b:8a:a1:73:15:2d:16:08:4e:2b:ab:4c:ee:73:c1:a9:b3:c8:
db:8c:06:de:d2:e1:5f:2d:4d:f7:04:e3:09:51:c9:b5:c3:01:
d2:1f:e1:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJmOyeoZb1MY6HZlSh1h7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2VlM2MyZWM0YTE5MDI1YzAzOTJhZDFlZTZhNDY0MWJj
ZGQwYzgwHhcNMjUxMTExMDkwMTQ5WhcNMjUxMTEyMDkwMTQ5WjAzMTEwLwYDVQQD
EygwMzMyOTAwMDE3NzIxYTk2ZjI5MGQwZjVjMDZiODYzMjRlYTg5NTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2m5buHp2Fk0wgW+303wKwyooGZe
TB5C7VEeodgjqQhuBA5zeDQoaLuoXD4k9oddxVA9UNdU0Uj5AZKFklu4FSivIDs8
LHdfSeXdYo6MMqkCNDn+2KUjaNpaK6XQXjq17o0P+UHDhpMlWvm23EwrseRvk6xS
ydGVkRFXMNV8QthH0kmkaFzxsKFfZrfzfOtmBpF3Nr1tNm6a73zok/A80wirM75i
fnLGzPasXiBlOBCZJ6UJWhkHvZayWwsqG/fy59N2dooTLd5t8SZ85pKkDW1CTEuD
nUS8+NHesZtaTAq3KsnD8IDLPcwBEvhBSRzDtwgF7yAWqGew40nV8QGW5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMykAAXchqW8pDQ9cBrhjJOqJUfMB8GA1UdIwQY
MBaAFFg+48LsShkCXAOSrR7mpGQbzdDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNzNiMGItN2MwYy00NDhhLThiY2Mt
MzVjYzIxNGRlYTgxLzEvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNzNiMGItN2MwYy00NDhhLThiY2MtMzVjYzIxNGRlYTgx
LzEvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASV+WUepC
+U8wDNIhW2sGX2FFlAD1HDJhrW8IAmZo0DLuxwI982meYi0Cerf8E3YmQrPWfxYX
E3esb8etfkq9RnVFl5yXcy9UN8bj7ZyCcMvpjLqUQbPTcpoyboM/5pe/c/xUjUvV
NdZWM5YhIGCJqAkbwACSg6YYgfqH/dST/pjbq6IWIaGKz52s78EnT0goe1IkZW9x
yWifA4yPDO5YD0SCZMqewSQYMKEhP/W2ojvmxlRrWYZymd8oNnwka7d23lLoHoP8
uh/54TH8VPibLIVjQi6yJtfDG4qhcxUtFghOK6tM7nPBqbPI24wG3tLhXy1N9wTj
CVHJtcMB0h/hmg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:12 2025 by rpki-client