Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
File: 1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft (raw, json)
Hash identifier: WFZ9najMEKdS7k4P+leyPGAWYMiZbiuWSFnAn9UrkxI=
Subject key identifier: 47:57:92:07:8A:E4:4E:24:6C:6F:40:D3:77:97:37:C1:7F:2C:84:5A
Authority key identifier: FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9
Certificate issuer: /CN=fb01e011cf657f4ad3f22c6dee70c7ff57b3b8b9
Certificate serial: 019A7112DBD8FE86BBB60011DCCD560BCABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
Manifest number: A4
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: 1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl (hash: CrUL8kbKh1pqsPMKIkKBE11AUoeX8UwZ8tuLTDe32C4=)
2: cImMIHu74LDJdQtr4cdiVxmjPwA.roa (hash: V4tY5FuY4hbG5AokGnGbbJm1R50idKq6hOVxa7nBfk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:db:d8:fe:86:bb:b6:00:11:dc:cd:56:0b:ca:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb01e011cf657f4ad3f22c6dee70c7ff57b3b8b9
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=475792078ae44e246c6f40d3779737c17f2c845a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:a9:06:1d:4d:0d:a7:c7:2a:81:4d:40:e9:
45:3c:16:11:34:91:e6:a4:ae:2e:8a:53:4a:f7:f4:
77:46:25:b5:3b:f4:de:20:5f:ea:69:50:ab:5a:2e:
98:66:8f:58:3e:bc:0c:90:a1:a6:ce:94:f4:8e:50:
ca:88:28:dc:f7:e7:69:e6:97:9f:d2:35:6b:bd:6a:
96:6d:d6:0b:8d:cb:f7:81:18:b8:62:75:79:ac:67:
f8:e8:bf:90:4b:88:06:69:4e:51:ec:51:42:4c:51:
de:b7:d5:36:4d:d4:68:91:02:f0:e2:e8:54:5f:37:
f8:18:ce:2a:65:13:8a:0e:7e:bd:da:8e:05:c6:b3:
af:4c:21:d9:45:1c:7c:c3:ae:cc:99:eb:c4:f9:f6:
8f:e7:f6:8a:ee:ae:71:86:a0:a1:58:18:62:c4:2b:
80:b2:e5:cf:d3:32:bc:cc:93:64:cb:5b:5f:d7:5b:
67:9f:d8:9e:8b:35:04:8f:22:f7:72:b7:7f:39:6c:
68:7f:d3:18:16:9d:64:a9:b5:82:3e:d0:ce:89:2b:
fe:90:79:15:27:9e:0c:21:06:7e:8f:1b:8b:8f:a4:
09:a8:e8:3c:01:cf:f4:84:5d:90:b9:9b:3d:f7:89:
25:d0:1c:72:4b:42:b7:be:00:41:c9:a2:76:66:0e:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:57:92:07:8A:E4:4E:24:6C:6F:40:D3:77:97:37:C1:7F:2C:84:5A
X509v3 Authority Key Identifier:
keyid:FB:01:E0:11:CF:65:7F:4A:D3:F2:2C:6D:EE:70:C7:FF:57:B3:B8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a19b9f-469f-4475-a1e8-b8395d653e6e/1/1-wHgEc9lf0rT8ixt7nDH_1ezuLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e4:99:0e:13:14:6f:4e:8f:f4:c6:7b:0b:b4:5f:3e:ee:bf:
33:5a:45:20:8b:4a:8b:57:e3:4a:d8:81:49:2b:69:39:a4:a4:
f4:a8:14:ce:a4:79:fd:7c:27:db:15:ea:3d:02:9e:c8:9d:61:
41:9c:a4:81:c3:fa:ec:e2:de:83:2d:1a:de:0b:da:23:b0:46:
a4:14:0c:f6:5c:ae:35:83:66:36:90:f4:a8:14:7a:b3:10:64:
3e:bc:5f:4a:7d:7a:e6:90:f8:5d:01:25:f7:4e:22:b7:cb:fe:
22:69:b2:2b:70:15:31:8b:e5:52:8a:c6:4c:ce:c8:1c:86:3e:
cc:fb:59:95:56:8b:c2:64:13:ba:3d:b9:0a:2b:1b:97:df:8e:
00:72:8f:f7:e8:27:a7:26:d9:40:81:ac:06:23:c9:7d:be:27:
0c:6e:5d:b7:8a:f4:84:4d:cd:15:6f:a9:a9:81:c9:55:e6:e5:
5a:e7:f3:3b:30:4d:0d:d1:fd:c1:32:0e:ec:72:3b:59:b4:cf:
86:7c:51:27:7d:76:6f:66:05:89:85:43:7f:c7:1a:21:8d:17:
27:8c:e0:b7:7f:a0:e7:79:94:d6:87:48:0d:b0:07:5e:ea:2e:
f1:39:d0:5e:8f:40:ee:7a:70:a0:0d:98:1f:e4:bc:16:fb:ac:
ff:12:72:7c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpxEtvY/oa7tgAR3M1WC8q+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDFlMDExY2Y2NTdmNGFkM2YyMmM2ZGVlNzBjN2ZmNTdi
M2I4YjkwHhcNMjUxMTExMDQwMDUyWhcNMjUxMTEyMDQwMDUyWjAzMTEwLwYDVQQD
Eyg0NzU3OTIwNzhhZTQ0ZTI0NmM2ZjQwZDM3Nzk3MzdjMTdmMmM4NDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkqpBh1NDafHKoFNQOlFPBYRNJHm
pK4uilNK9/R3RiW1O/TeIF/qaVCrWi6YZo9YPrwMkKGmzpT0jlDKiCjc9+dp5pef
0jVrvWqWbdYLjcv3gRi4YnV5rGf46L+QS4gGaU5R7FFCTFHet9U2TdRokQLw4uhU
Xzf4GM4qZROKDn692o4FxrOvTCHZRRx8w67MmevE+faP5/aK7q5xhqChWBhixCuA
suXP0zK8zJNky1tf11tnn9ieizUEjyL3crd/OWxof9MYFp1kqbWCPtDOiSv+kHkV
J54MIQZ+jxuLj6QJqOg8Ac/0hF2QuZs994kl0BxyS0K3vgBByaJ2Zg68FwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEdXkgeK5E4kbG9A03eXN8F/LIRaMB8GA1UdIwQY
MBaAFPsB4BHPZX9K0/Isbe5wx/9Xs7i5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13SGdFYzlsZjByVDhpeHQ3bkRIXzFlenVMay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvYTE5YjlmLTQ2OWYtNDQ3NS1hMWU4
LWI4Mzk1ZDY1M2U2ZS8xLzEtd0hnRWM5bGYwclQ4aXh0N25ESF8xZXp1TGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNhL2ExOWI5Zi00NjlmLTQ0NzUtYTFlOC1iODM5NWQ2NTNl
NmUvMS8xLXdIZ0VjOWxmMHJUOGl4dDduREhfMWV6dUxrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+SZ
DhMUb06P9MZ7C7RfPu6/M1pFIItKi1fjStiBSStpOaSk9KgUzqR5/Xwn2xXqPQKe
yJ1hQZykgcP67OLegy0a3gvaI7BGpBQM9lyuNYNmNpD0qBR6sxBkPrxfSn165pD4
XQEl904it8v+ImmyK3AVMYvlUorGTM7IHIY+zPtZlVaLwmQTuj25Cisbl9+OAHKP
9+gnpybZQIGsBiPJfb4nDG5dt4r0hE3NFW+pqYHJVeblWufzOzBNDdH9wTIO7HI7
WbTPhnxRJ312b2YFiYVDf8caIY0XJ4zgt3+g53mU1odIDbAHXuou8TnQXo9A7npw
oA2YH+S8Fvus/xJyfA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:36 2025 by rpki-client