Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
File: WVskOnIz5XHDwXPrgkkRGQYyYBk.mft (raw, json)
Hash identifier: xNO6BWfCbPiQX6hGJDqhutKI3M5THcY4C+0AJbIztVg=
Subject key identifier: F3:4C:4E:EA:0C:D7:08:3F:25:E3:D5:77:BD:ED:CB:2D:1C:D1:23:BF
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial: 019A7293676970A4B708F30F92E99444F948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
Manifest number: 169A
Signing time: Tue 11 Nov 2025 11:00:54 +0000
Manifest this update: Tue 11 Nov 2025 11:00:54 +0000
Manifest next update: Wed 12 Nov 2025 11:00:54 +0000
Files and hashes: 1: 2580DhDO7oRxSgRoTYqJtzmDRZ8.roa (hash: 4RUkkYY+CZ3xO00bJ4wL39GFuDvJP7M2BRc09JQ7DH4=)
2: WVskOnIz5XHDwXPrgkkRGQYyYBk.crl (hash: h2w+EPBHu3MGNpBWnBXYVUMUth5pz2TLWvT/XLngqU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:67:69:70:a4:b7:08:f3:0f:92:e9:94:44:f9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b243a7233e571c3c173eb8249111906326019
Validity
Not Before: Nov 11 11:00:54 2025 GMT
Not After : Nov 12 11:00:54 2025 GMT
Subject: CN=f34c4eea0cd7083f25e3d577bdedcb2d1cd123bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:54:71:03:f8:73:54:f7:96:38:a3:a9:2d:
7e:50:4a:01:56:7a:68:c3:ae:bc:e8:c7:3f:22:ac:
ed:2f:8b:de:0b:29:cc:c1:e7:32:f5:7b:16:71:c8:
de:d2:be:92:13:7b:b6:cc:7f:77:0a:61:b1:e0:5c:
ef:f2:99:1a:03:5a:2d:55:c4:9a:7c:47:03:de:1b:
51:a7:ce:e2:9c:94:42:f9:f0:b1:16:ef:97:d3:ed:
fe:e5:5d:6b:2b:2a:ac:0d:8a:b7:e2:75:90:d3:51:
6d:33:a5:1a:b5:b3:71:bb:a3:21:85:3b:b6:a1:18:
4d:1e:0a:bb:27:09:4a:98:39:64:87:97:6f:f6:f2:
70:83:c7:37:a5:3f:94:d8:62:e3:9f:3f:55:51:7c:
16:d6:9d:69:bc:00:50:ff:be:7f:9c:60:bb:88:57:
9c:06:ee:25:56:32:9a:75:e9:28:e6:0c:b5:d6:eb:
5f:77:a6:f4:f4:72:84:8a:80:31:40:34:99:90:72:
0f:56:14:92:ff:71:6a:e0:6e:ea:ed:9a:81:5b:90:
c7:ac:cf:88:85:37:e0:c9:ab:1d:29:24:6d:83:26:
74:08:40:5e:d3:2e:c1:09:ab:4f:60:de:c8:fc:3e:
c5:24:f7:76:b4:e3:f4:22:9a:08:54:e1:53:7e:bf:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4C:4E:EA:0C:D7:08:3F:25:E3:D5:77:BD:ED:CB:2D:1C:D1:23:BF
X509v3 Authority Key Identifier:
keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:30:ee:e3:91:ea:a6:54:98:06:a0:d2:a3:a5:dd:84:3d:22:
fc:59:d8:7e:3b:df:a2:b5:79:4c:47:11:31:06:57:1f:67:21:
72:59:81:36:41:47:6b:8e:c9:35:bd:ce:30:1c:9b:0e:30:5e:
58:dd:06:b2:3b:c4:ae:7d:f7:87:16:a4:fb:e2:ff:de:b6:c1:
a7:40:c4:14:5f:53:91:f3:d7:32:be:08:00:a2:ae:9f:ce:10:
ff:fa:ae:a7:4d:5a:f0:ec:9c:60:2f:65:ab:5b:85:dc:41:d6:
ce:b3:d0:2c:1a:60:3b:a2:55:f2:6f:0d:9b:09:92:11:c6:5b:
cb:54:d0:c2:76:4b:e7:5d:e1:e7:c7:d7:d9:92:c9:42:40:aa:
61:65:62:b2:2f:2a:38:04:0a:7f:23:e1:9f:ab:32:26:e6:00:
f8:1a:8d:5b:4b:3f:ce:d8:cc:cd:b5:5c:5f:13:c5:b5:07:ae:
10:5e:91:f4:a5:4a:9d:3a:f4:57:34:9f:33:40:f3:e9:c7:8b:
0b:a0:8d:90:43:ec:72:f0:af:a8:2d:92:64:f4:cf:db:32:c0:
09:70:1b:3a:86:fc:99:9a:64:01:cc:61:87:62:30:d6:6f:ec:
e5:1e:c9:40:e1:15:ca:f3:e8:35:e6:2d:7e:b7:f4:ee:fb:51:
d5:ce:51:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk2dpcKS3CPMPkumURPlIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NWIyNDNhNzIzM2U1NzFjM2MxNzNlYjgyNDkxMTE5MDYz
MjYwMTkwHhcNMjUxMTExMTEwMDU0WhcNMjUxMTEyMTEwMDU0WjAzMTEwLwYDVQQD
EyhmMzRjNGVlYTBjZDcwODNmMjVlM2Q1NzdiZGVkY2IyZDFjZDEyM2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBdUcQP4c1T3ljijqS1+UEoBVnpo
w6686Mc/IqztL4veCynMwecy9XsWccje0r6SE3u2zH93CmGx4Fzv8pkaA1otVcSa
fEcD3htRp87inJRC+fCxFu+X0+3+5V1rKyqsDYq34nWQ01FtM6UatbNxu6MhhTu2
oRhNHgq7JwlKmDlkh5dv9vJwg8c3pT+U2GLjnz9VUXwW1p1pvABQ/75/nGC7iFec
Bu4lVjKadeko5gy11utfd6b09HKEioAxQDSZkHIPVhSS/3Fq4G7q7ZqBW5DHrM+I
hTfgyasdKSRtgyZ0CEBe0y7BCatPYN7I/D7FJPd2tOP0IpoIVOFTfr9R1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNMTuoM1wg/JePVd73tyy0c0SO/MB8GA1UdIwQY
MBaAFFlbJDpyM+Vxw8Fz64JJERkGMmAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lOWUwODctZTc2OC00NGQ4LTllYzgt
ODhlNDQ2NjkxNWY4LzEvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lOWUwODctZTc2OC00NGQ4LTllYzgtODhlNDQ2NjkxNWY4
LzEvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjDu45Hq
plSYBqDSo6XdhD0i/FnYfjvforV5TEcRMQZXH2chclmBNkFHa47JNb3OMBybDjBe
WN0GsjvErn33hxak++L/3rbBp0DEFF9TkfPXMr4IAKKun84Q//qup01a8OycYC9l
q1uF3EHWzrPQLBpgO6JV8m8NmwmSEcZby1TQwnZL513h58fX2ZLJQkCqYWVisi8q
OAQKfyPhn6syJuYA+BqNW0s/ztjMzbVcXxPFtQeuEF6R9KVKnTr0VzSfM0Dz6ceL
C6CNkEPscvCvqC2SZPTP2zLACXAbOob8mZpkAcxhh2Iw1m/s5R7JQOEVyvPoNeYt
frf07vtR1c5Rvw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 19:53:10 2025 by rpki-client