Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
File: W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft (raw, json)
Hash identifier: AqISEWXjzYnyt6fdrMyvV2Kp5E1TDGIF7UIZPrz3RxU=
Subject key identifier: 10:23:88:11:DA:81:6D:40:1A:EB:A4:5F:B1:78:A2:17:01:57:AD:89
Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
Certificate issuer: /CN=5bdc41674d65d2af9174b1abace0b371362b4851
Certificate serial: 019A71B989ED449810495EF653D0443E032D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
Manifest number: 0CCF
Signing time: Tue 11 Nov 2025 07:02:56 +0000
Manifest this update: Tue 11 Nov 2025 07:02:56 +0000
Manifest next update: Wed 12 Nov 2025 07:02:56 +0000
Files and hashes: 1: W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl (hash: uV1l7/NGgj3lUceav2lyQ/ZN7l1KfWBMSogHn2LLDVk=)
2: WdWyM9k6KcLoz5FUrSgiaxd0SUM.roa (hash: 9FkYuv3N9sKiJBFCLi9r1CgkkKmg2nuXBs/YrWrih48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:89:ed:44:98:10:49:5e:f6:53:d0:44:3e:03:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851
Validity
Not Before: Nov 11 07:02:56 2025 GMT
Not After : Nov 12 07:02:56 2025 GMT
Subject: CN=10238811da816d401aeba45fb178a2170157ad89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:96:0c:5f:bc:1d:7b:50:74:6b:ff:bf:ef:
ee:65:d1:a4:2a:0e:2a:1d:3f:82:c0:5f:87:e5:94:
21:ef:a9:78:22:ef:f0:61:1e:a5:56:77:87:8a:99:
91:cc:26:ed:26:50:27:6d:51:1a:47:2c:f8:5c:e1:
3f:0d:a4:1f:5e:62:4e:13:1b:80:6d:62:a9:7e:e6:
74:90:03:ac:53:21:78:20:fc:94:e5:48:28:67:71:
20:ad:14:e7:1c:ed:58:ff:15:a2:f7:9b:f8:7f:56:
b0:03:57:31:e1:2a:74:f1:31:c8:57:f3:fe:5a:00:
dd:02:81:47:26:2d:36:85:84:03:4e:eb:4c:32:f1:
1c:f7:70:2a:71:b3:b3:27:99:a4:30:ed:b9:78:f3:
d9:f1:d8:df:2a:c1:c6:68:81:6d:60:b9:e1:15:4c:
11:60:dd:71:c3:64:47:78:99:cf:8b:a9:6a:3e:2b:
3b:f6:fb:ab:66:30:9b:47:1f:73:00:b1:9b:f6:0d:
a0:cc:e3:46:7b:11:69:f6:7e:8a:bd:d7:fd:c0:f5:
d5:98:9a:18:32:3a:b4:63:57:3d:bd:37:3d:06:8a:
8b:52:05:67:cf:47:ac:bb:f1:82:8b:4f:ad:d8:a9:
a1:3d:56:e1:2a:ff:2b:6a:0f:e8:96:62:b3:72:f9:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:23:88:11:DA:81:6D:40:1A:EB:A4:5F:B1:78:A2:17:01:57:AD:89
X509v3 Authority Key Identifier:
keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5a:b5:1f:d8:b4:e2:e8:60:80:14:39:7c:43:e5:88:49:ba:
98:56:c0:6a:3d:3e:02:b6:ab:0d:82:05:30:36:70:db:b8:a4:
94:4f:6f:b1:bb:f0:a1:0b:fd:c6:74:de:ff:70:b9:f1:e4:54:
66:05:a7:82:26:2a:50:6c:3e:21:2b:d4:94:7b:7b:b9:ed:d5:
8f:ed:51:79:14:a6:25:28:c6:2a:84:44:5b:43:e8:a2:61:b6:
9b:62:7d:48:c3:33:95:93:fe:b4:88:0e:21:3c:db:9c:7c:0b:
c1:51:1d:46:14:46:2f:9f:b9:c1:fb:50:ec:4e:c1:5b:f6:e6:
fc:65:4d:2f:78:82:e6:8a:30:29:fd:aa:a1:c2:c8:a6:ee:91:
91:58:e9:38:67:27:00:9d:aa:7f:e1:45:ab:24:35:25:82:31:
1d:aa:34:98:22:c2:49:b0:d8:88:fb:7f:7d:aa:53:13:01:d1:
d4:a8:3f:08:4a:fa:32:80:d4:cf:5f:fd:b1:ea:65:34:a6:cc:
8b:86:f5:08:00:49:bb:cb:1a:0f:bc:66:62:a6:f9:cf:e7:30:
6f:6c:92:b3:fa:c1:cc:e1:94:5f:a4:01:95:c2:ed:32:60:9d:
b8:39:b3:e9:92:2f:72:1a:23:6b:38:ef:d2:42:47:68:84:59:
55:70:69:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuYntRJgQSV72U9BEPgMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZGM0MTY3NGQ2NWQyYWY5MTc0YjFhYmFjZTBiMzcxMzYy
YjQ4NTEwHhcNMjUxMTExMDcwMjU2WhcNMjUxMTEyMDcwMjU2WjAzMTEwLwYDVQQD
EygxMDIzODgxMWRhODE2ZDQwMWFlYmE0NWZiMTc4YTIxNzAxNTdhZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk2WDF+8HXtQdGv/v+/uZdGkKg4q
HT+CwF+H5ZQh76l4Iu/wYR6lVneHipmRzCbtJlAnbVEaRyz4XOE/DaQfXmJOExuA
bWKpfuZ0kAOsUyF4IPyU5UgoZ3EgrRTnHO1Y/xWi95v4f1awA1cx4Sp08THIV/P+
WgDdAoFHJi02hYQDTutMMvEc93AqcbOzJ5mkMO25ePPZ8djfKsHGaIFtYLnhFUwR
YN1xw2RHeJnPi6lqPis79vurZjCbRx9zALGb9g2gzONGexFp9n6Kvdf9wPXVmJoY
Mjq0Y1c9vTc9BoqLUgVnz0esu/GCi0+t2KmhPVbhKv8rag/olmKzcvlPfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAjiBHagW1AGuukX7F4ohcBV62JMB8GA1UdIwQY
MBaAFFvcQWdNZdKvkXSxq6zgs3E2K0hRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWIt
OWY2N2ZmNmFmZDUwLzEvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWItOWY2N2ZmNmFmZDUw
LzEvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlq1H9i0
4uhggBQ5fEPliEm6mFbAaj0+ArarDYIFMDZw27iklE9vsbvwoQv9xnTe/3C58eRU
ZgWngiYqUGw+ISvUlHt7ue3Vj+1ReRSmJSjGKoREW0PoomG2m2J9SMMzlZP+tIgO
ITzbnHwLwVEdRhRGL5+5wftQ7E7BW/bm/GVNL3iC5oowKf2qocLIpu6RkVjpOGcn
AJ2qf+FFqyQ1JYIxHao0mCLCSbDYiPt/fapTEwHR1Kg/CEr6MoDUz1/9seplNKbM
i4b1CABJu8saD7xmYqb5z+cwb2ySs/rBzOGUX6QBlcLtMmCduDmz6ZIvchojazjv
0kJHaIRZVXBpTw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:56 2025 by rpki-client