Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
File: w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json)
Hash identifier: ihZABl2aL8Z1mLnUOhlEVo19WX5JimOmHsPtWHgGv78=
Subject key identifier: 90:3B:65:5D:1B:CA:E4:B0:E1:B7:C5:22:82:DE:63:2E:B2:77:FE:65
Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
Certificate issuer: /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Certificate serial: 019A236590CAED5A96C59B5D7D1784104789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
Manifest number: 0FF7
Signing time: Mon 27 Oct 2025 02:00:49 +0000
Manifest this update: Mon 27 Oct 2025 02:00:49 +0000
Manifest next update: Tue 28 Oct 2025 02:00:49 +0000
Files and hashes: 1: 2u_bcZkkSvx-ZcsdCRFCGyh5HjM.roa (hash: 7lJhGCJBImviva4lcJI32wc+2zEbO+nn7NwKLsiaeHg=)
2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: vBn1TpYrVPM/WU59pZIodOXznbVSIM+cttp2z4cBMso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:90:ca:ed:5a:96:c5:9b:5d:7d:17:84:10:47:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Validity
Not Before: Oct 27 02:00:49 2025 GMT
Not After : Oct 28 02:00:49 2025 GMT
Subject: CN=903b655d1bcae4b0e1b7c52282de632eb277fe65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:cf:4d:c1:99:c0:7c:21:ff:bd:be:31:f1:
42:50:00:9d:d6:80:b9:dd:cb:58:75:69:c2:f8:78:
4c:e0:1b:58:8d:fc:1d:4e:af:cd:64:ee:8c:d3:06:
8e:8a:b1:6d:cb:0d:05:d1:ac:e4:b8:e4:31:73:1b:
55:d3:20:84:24:50:37:00:6f:df:58:a7:4b:a4:32:
45:41:96:90:53:05:43:dc:d8:c4:f5:9a:69:df:bc:
5d:e7:80:28:4b:8e:95:62:c4:55:a5:e5:23:27:52:
2c:e2:e6:94:81:75:99:d6:cc:d7:db:84:a7:78:6d:
c5:38:f5:e5:68:64:d3:55:b8:47:d1:6c:0b:7b:4e:
ce:84:f7:df:2e:32:7a:d8:4a:b3:50:46:aa:61:52:
65:9c:b3:b7:3c:ec:b1:c8:c8:5f:d4:6e:f7:bf:1a:
04:ea:68:ad:eb:01:0d:c1:52:b1:db:60:21:81:23:
c0:3c:31:ff:b5:ef:37:47:15:0a:b5:8c:d6:9f:ae:
dc:b8:61:10:03:ac:3f:d9:eb:2b:c9:a1:36:95:64:
c4:29:a8:4f:86:c9:fe:bc:7f:31:d7:ca:7d:82:e1:
27:d6:5e:80:ee:87:58:8f:0f:ac:c4:ae:e1:a7:33:
e0:9f:2d:0e:02:ac:64:15:42:0f:28:e6:54:7a:14:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3B:65:5D:1B:CA:E4:B0:E1:B7:C5:22:82:DE:63:2E:B2:77:FE:65
X509v3 Authority Key Identifier:
keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:97:c6:e2:ae:76:59:61:79:bb:9d:6f:c0:7e:3a:ad:63:ca:
18:62:20:4a:3c:9e:0f:b9:db:13:d9:b8:8c:fc:4a:38:e7:7e:
06:31:ed:23:d2:45:b0:89:78:df:79:5e:15:d7:9d:19:eb:a5:
4a:31:44:cc:31:48:7e:91:af:b2:82:9f:dd:a2:3a:17:11:cd:
aa:40:ac:2f:90:15:88:92:95:f5:f5:7d:0e:d1:4c:d2:75:cb:
a2:61:50:5d:19:6e:97:d6:56:c6:84:08:0b:6a:0b:db:bf:3a:
69:17:68:4c:c0:ae:42:bf:22:cb:46:bb:d6:aa:2d:96:c5:dd:
63:26:b4:89:dd:24:8d:bb:23:91:d1:0f:8d:93:86:88:58:c4:
b2:0c:f2:a4:87:d4:15:84:d1:c9:3e:6d:47:57:be:21:f9:25:
42:1a:85:33:4f:b0:0c:81:e6:f8:fc:21:bd:6e:cc:89:7a:a6:
71:24:c0:90:88:27:0e:a0:c8:5e:60:c0:01:90:07:e3:2f:f8:
cd:a5:c3:a3:50:66:ac:e1:a8:f5:3a:70:8b:41:08:69:18:1a:
1d:62:22:f0:0e:1d:d2:f9:7c:51:91:21:b6:ee:d4:7e:bf:10:
bc:6c:bd:54:0a:d0:16:eb:9d:ea:d7:55:37:83:6e:6e:3c:dd:
cd:af:3d:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojZZDK7VqWxZtdfReEEEeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWFkZWViYzI4ZDdlMjdmZDllYjllZmIyMzU1MWRhZTIw
YjFkMGYwHhcNMjUxMDI3MDIwMDQ5WhcNMjUxMDI4MDIwMDQ5WjAzMTEwLwYDVQQD
Eyg5MDNiNjU1ZDFiY2FlNGIwZTFiN2M1MjI4MmRlNjMyZWIyNzdmZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztTPTcGZwHwh/72+MfFCUACd1oC5
3ctYdWnC+HhM4BtYjfwdTq/NZO6M0waOirFtyw0F0azkuOQxcxtV0yCEJFA3AG/f
WKdLpDJFQZaQUwVD3NjE9Zpp37xd54AoS46VYsRVpeUjJ1Is4uaUgXWZ1szX24Sn
eG3FOPXlaGTTVbhH0WwLe07OhPffLjJ62EqzUEaqYVJlnLO3POyxyMhf1G73vxoE
6mit6wENwVKx22AhgSPAPDH/te83RxUKtYzWn67cuGEQA6w/2esryaE2lWTEKahP
hsn+vH8x18p9guEn1l6A7odYjw+sxK7hpzPgny0OAqxkFUIPKOZUehS0lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJA7ZV0byuSw4bfFIoLeYy6yd/5lMB8GA1UdIwQY
MBaAFMNa3uvCjX4n/Z6577I1UdriCx0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYt
YjU1ZDdkN2YyYzQ4LzEvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYtYjU1ZDdkN2YyYzQ4
LzEvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZfG4q52
WWF5u51vwH46rWPKGGIgSjyeD7nbE9m4jPxKOOd+BjHtI9JFsIl433leFdedGeul
SjFEzDFIfpGvsoKf3aI6FxHNqkCsL5AViJKV9fV9DtFM0nXLomFQXRlul9ZWxoQI
C2oL2786aRdoTMCuQr8iy0a71qotlsXdYya0id0kjbsjkdEPjZOGiFjEsgzypIfU
FYTRyT5tR1e+IfklQhqFM0+wDIHm+PwhvW7MiXqmcSTAkIgnDqDIXmDAAZAH4y/4
zaXDo1BmrOGo9Tpwi0EIaRgaHWIi8A4d0vl8UZEhtu7Ufr8QvGy9VArQFuud6tdV
N4Nubjzdza89aA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 11:04:19 2025 by rpki-client