Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
File: WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json)
Hash identifier: AP4M9qudOPIKZ+4Z4R1LfOSRbtBGWZsf1DNwADTkepg=
Subject key identifier: 07:D3:75:EA:21:6D:AC:1D:4F:77:E6:6E:88:69:07:76:AD:D1:C4:70
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial: 019A73381A1EF1D824C4A048590F48B42735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
Manifest number: 106C
Signing time: Tue 11 Nov 2025 14:00:47 +0000
Manifest this update: Tue 11 Nov 2025 14:00:47 +0000
Manifest next update: Wed 12 Nov 2025 14:00:47 +0000
Files and hashes: 1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: weCKHqxlbBRixHf+67dTUDYUscLO/v6Z9q7KU2h4MGc=)
2: taSqw31_rwZ-hq0xkmTZUp1cyvw.roa (hash: V6lzw9iNkrzm6qgoGO8eVYLPpqNejoCjLT7yaMGPS3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:1a:1e:f1:d8:24:c4:a0:48:59:0f:48:b4:27:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Validity
Not Before: Nov 11 14:00:47 2025 GMT
Not After : Nov 12 14:00:47 2025 GMT
Subject: CN=07d375ea216dac1d4f77e66e88690776add1c470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:31:dc:e8:54:f1:b4:7e:c1:57:8c:d1:56:
f2:d6:cc:5e:27:29:c1:dc:23:4f:bd:85:7b:ea:1c:
62:02:09:40:42:93:67:cf:9f:66:7c:56:7c:b4:dd:
d8:e0:0f:da:38:76:4b:bf:e4:b6:94:10:b2:83:bd:
db:4c:4e:35:b3:7c:97:15:11:86:a9:5c:63:3f:10:
56:6c:d2:f3:96:c7:eb:88:91:ae:d1:9c:79:6c:71:
27:fa:d6:2e:27:75:7b:1d:e9:66:38:d4:3f:30:9b:
85:79:55:4b:d3:f4:04:56:d0:4b:5e:ab:78:e6:02:
ee:09:06:7f:e6:36:1c:1e:70:72:5a:97:9b:dd:87:
ba:ba:b2:c2:88:d0:8a:8c:f5:75:b7:1c:a8:ac:c7:
a7:e8:9b:d7:7a:9c:32:83:c7:0f:71:c1:96:68:97:
9a:10:91:2a:cd:f1:d9:9b:08:ef:05:06:69:6a:0b:
70:08:f3:51:d2:36:db:44:b7:c8:7a:6f:f9:3a:60:
9a:c1:ee:5b:6c:3a:19:d1:55:d0:48:6a:b9:9a:85:
dc:81:91:8b:d7:ef:fe:11:32:60:2d:c8:4c:4d:41:
d2:ab:cd:d0:3e:97:90:ba:f2:29:e1:ed:9d:87:18:
a9:f5:18:cc:aa:2e:18:b2:71:47:87:56:06:7e:d8:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D3:75:EA:21:6D:AC:1D:4F:77:E6:6E:88:69:07:76:AD:D1:C4:70
X509v3 Authority Key Identifier:
keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f4:12:19:82:0e:42:53:08:c2:2a:9f:b6:8c:36:0c:b1:eb:
05:64:71:36:71:69:e9:e4:7a:dc:c4:5a:92:1d:30:45:e3:f3:
fd:6d:3e:4b:91:e8:1c:7e:c7:1c:97:0a:93:cc:f2:2a:2b:b1:
18:95:82:1f:8a:86:09:ae:4f:4f:6c:1c:32:48:a8:50:fa:7d:
82:56:13:01:9a:ce:25:80:15:9a:f3:8f:46:b0:f7:64:a9:ef:
a5:54:20:3a:9c:5d:82:5d:9a:77:fd:f2:2f:86:f6:59:23:ca:
63:4d:d1:bb:3f:ca:3f:25:fe:e0:b4:b2:d3:bc:8e:64:ce:cf:
81:55:ef:00:ae:22:17:ff:f2:9f:d7:a2:b5:4e:8b:f4:12:69:
41:a3:a9:e1:9e:18:3a:04:83:5e:35:06:6f:ff:b7:9f:28:ca:
a7:60:d6:aa:97:fd:68:4c:dc:c4:c6:e5:05:de:64:21:35:e4:
0b:da:9a:6b:24:11:3a:e3:a0:e3:17:43:9a:b7:c0:6b:d9:80:
74:51:d7:70:2c:ce:65:bf:45:ab:5b:63:0e:40:70:a0:2c:be:
b8:a9:77:9c:04:fe:b2:63:ea:4d:80:5f:0d:e2:40:bc:0f:af:
0c:f5:7b:fe:c1:d5:d0:e5:d2:fb:a9:b7:73:fa:10:a6:f5:3f:
a2:14:5f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOBoe8dgkxKBIWQ9ItCc1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZGExMTU1NjM5OWUyOGZjNTVkYWIzYmEwNzg2OGZmNDkx
YzZmYjgwHhcNMjUxMTExMTQwMDQ3WhcNMjUxMTEyMTQwMDQ3WjAzMTEwLwYDVQQD
EygwN2QzNzVlYTIxNmRhYzFkNGY3N2U2NmU4ODY5MDc3NmFkZDFjNDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWEx3OhU8bR+wVeM0Vby1sxeJynB
3CNPvYV76hxiAglAQpNnz59mfFZ8tN3Y4A/aOHZLv+S2lBCyg73bTE41s3yXFRGG
qVxjPxBWbNLzlsfriJGu0Zx5bHEn+tYuJ3V7HelmONQ/MJuFeVVL0/QEVtBLXqt4
5gLuCQZ/5jYcHnByWpeb3Ye6urLCiNCKjPV1txyorMen6JvXepwyg8cPccGWaJea
EJEqzfHZmwjvBQZpagtwCPNR0jbbRLfIem/5OmCawe5bbDoZ0VXQSGq5moXcgZGL
1+/+ETJgLchMTUHSq83QPpeQuvIp4e2dhxip9RjMqi4YsnFHh1YGftiY/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfTdeohbawdT3fmbohpB3at0cRwMB8GA1UdIwQY
MBaAFFraEVVjmeKPxV2rO6B4aP9JHG+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84MTIzNTctM2Q3MC00NjhlLWIwNDQt
ODRhZmVhYWJiMzczLzEvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84MTIzNTctM2Q3MC00NjhlLWIwNDQtODRhZmVhYWJiMzcz
LzEvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfQSGYIO
QlMIwiqftow2DLHrBWRxNnFp6eR63MRakh0wRePz/W0+S5HoHH7HHJcKk8zyKiux
GJWCH4qGCa5PT2wcMkioUPp9glYTAZrOJYAVmvOPRrD3ZKnvpVQgOpxdgl2ad/3y
L4b2WSPKY03Ruz/KPyX+4LSy07yOZM7PgVXvAK4iF//yn9eitU6L9BJpQaOp4Z4Y
OgSDXjUGb/+3nyjKp2DWqpf9aEzcxMblBd5kITXkC9qaayQROuOg4xdDmrfAa9mA
dFHXcCzOZb9Fq1tjDkBwoCy+uKl3nAT+smPqTYBfDeJAvA+vDPV7/sHV0OXS+6m3
c/oQpvU/ohRfOg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:16 2025 by rpki-client