Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
File: wWFXjOD_N_BsJjYuosY1e5hjO3A.mft (raw, json)
Hash identifier: 2mFXd5ifICxeZKR4bRTCvGOci2q2/rhHGRr69sbvyEk=
Subject key identifier: 76:C6:8E:CF:73:88:4B:48:66:69:B2:F1:A7:FB:BD:CF:01:AA:7D:69
Authority key identifier: C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
Certificate issuer: /CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Certificate serial: 019A71B8DA6E7D18717EB3ADAD3AB03F7DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
Manifest number: 0ECF
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: VaQFkBkaVYjwzbk-d1HfVSqGj30.roa (hash: mgqfVOInqFPvEjCxJre+1kdiyjEUS8UusvaHKwVL6Uo=)
2: wWFXjOD_N_BsJjYuosY1e5hjO3A.crl (hash: PmsDEB27cqQf3abA0xm5HutaX27AoF1zkY+YnY7Q9Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:da:6e:7d:18:71:7e:b3:ad:ad:3a:b0:3f:7d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=76c68ecf73884b486669b2f1a7fbbdcf01aa7d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:6e:e2:d0:53:6d:b6:f0:59:c6:c7:c7:b9:
b1:9b:91:0d:27:9d:16:f1:fc:5e:1d:ca:24:a4:db:
03:d0:ab:6e:3d:0d:b7:3f:5a:1b:7f:f7:0c:fc:56:
78:3d:8b:15:97:3b:0f:16:d4:20:49:d9:d9:58:88:
11:90:a9:68:b4:11:e1:22:aa:a3:ab:1d:14:07:ed:
d1:9d:2f:5d:f3:f1:34:3b:3b:d0:0b:8d:aa:a9:e6:
2f:f9:d0:c0:97:8b:74:1a:91:b5:61:d8:79:be:bc:
04:50:3c:cb:e9:c2:94:d9:e3:07:b3:7c:b6:34:eb:
c2:d0:f6:ff:2e:f2:f3:03:bc:06:e3:1d:f4:cd:73:
aa:5b:f4:7a:45:b6:51:47:f4:88:55:53:46:18:35:
e9:08:28:d0:93:d1:f2:a0:c2:18:60:86:74:0b:83:
25:c0:47:cd:8b:dc:27:c2:5c:14:77:af:f1:ee:67:
69:30:22:ed:74:95:e7:7f:8e:ec:70:1d:39:4b:ad:
bc:1e:b7:0d:75:02:6f:c8:f7:49:65:05:00:45:10:
9a:76:86:e8:4d:e4:59:b5:31:82:1b:a2:2e:b4:f2:
4c:74:4b:f4:91:df:07:6a:5f:6d:80:3f:ed:aa:80:
92:c4:f6:d4:39:d7:df:5a:25:ef:5f:39:93:ee:5c:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C6:8E:CF:73:88:4B:48:66:69:B2:F1:A7:FB:BD:CF:01:AA:7D:69
X509v3 Authority Key Identifier:
keyid:C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b6:98:69:92:de:a9:f1:12:b2:7b:f5:62:f3:37:86:8d:6b:
2b:8d:a4:59:91:61:c3:2c:71:3b:a6:27:cd:fe:e2:3c:da:ae:
34:6a:6b:eb:bf:d5:88:fb:d3:36:f0:14:87:c9:a7:67:bb:65:
2a:f0:81:05:0a:fa:83:aa:e9:02:07:35:0d:0f:d1:55:35:d7:
6c:3a:ac:4f:35:b7:95:50:d1:1d:ee:e4:47:fa:bd:cf:8e:6c:
12:b1:35:02:23:3c:f2:0d:ca:68:12:eb:57:4b:f9:79:42:f8:
fd:24:74:08:03:4f:db:c0:95:7b:6c:f0:73:2e:d8:c8:15:b0:
a0:9f:8d:d9:06:20:34:78:26:97:1a:8b:4e:8f:f5:cf:28:87:
e1:bc:51:dd:1e:1a:0c:85:25:e3:44:23:68:47:94:ef:57:0f:
e9:fd:ab:13:aa:29:11:77:d7:ad:b7:78:38:d2:2c:b5:f6:1e:
fe:72:ea:16:2d:8a:e1:ca:77:ac:a7:38:cc:2a:0c:b9:a2:15:
7b:37:6a:fc:a2:6d:f7:65:a6:dd:bd:5c:3a:bb:fd:d3:e9:a3:
7e:1a:f0:6b:d0:97:48:51:99:8e:cd:92:64:5a:f0:3c:36:1c:
92:e0:e0:20:4d:b1:b2:00:a9:02:94:bc:4f:62:aa:f0:ad:44:
9c:8b:5c:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuNpufRhxfrOtrTqwP32jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNjE1NzhjZTBmZjM3ZjA2YzI2MzYyZWEyYzYzNTdiOTg2
MzNiNzAwHhcNMjUxMTExMDcwMjExWhcNMjUxMTEyMDcwMjExWjAzMTEwLwYDVQQD
Eyg3NmM2OGVjZjczODg0YjQ4NjY2OWIyZjFhN2ZiYmRjZjAxYWE3ZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYJu4tBTbbbwWcbHx7mxm5ENJ50W
8fxeHcokpNsD0KtuPQ23P1obf/cM/FZ4PYsVlzsPFtQgSdnZWIgRkKlotBHhIqqj
qx0UB+3RnS9d8/E0OzvQC42qqeYv+dDAl4t0GpG1Ydh5vrwEUDzL6cKU2eMHs3y2
NOvC0Pb/LvLzA7wG4x30zXOqW/R6RbZRR/SIVVNGGDXpCCjQk9HyoMIYYIZ0C4Ml
wEfNi9wnwlwUd6/x7mdpMCLtdJXnf47scB05S628HrcNdQJvyPdJZQUARRCadobo
TeRZtTGCG6IutPJMdEv0kd8Hal9tgD/tqoCSxPbUOdffWiXvXzmT7lzKfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbGjs9ziEtIZmmy8af7vc8Bqn1pMB8GA1UdIwQY
MBaAFMFhV4zg/zfwbCY2LqLGNXuYYztwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYjgzNzMtMGMyYy00YjA2LWJmNjkt
YWZiZjRlY2YyYjUwLzEvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYjgzNzMtMGMyYy00YjA2LWJmNjktYWZiZjRlY2YyYjUw
LzEvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7aYaZLe
qfESsnv1YvM3ho1rK42kWZFhwyxxO6Ynzf7iPNquNGpr67/ViPvTNvAUh8mnZ7tl
KvCBBQr6g6rpAgc1DQ/RVTXXbDqsTzW3lVDRHe7kR/q9z45sErE1AiM88g3KaBLr
V0v5eUL4/SR0CANP28CVe2zwcy7YyBWwoJ+N2QYgNHgmlxqLTo/1zyiH4bxR3R4a
DIUl40QjaEeU71cP6f2rE6opEXfXrbd4ONIstfYe/nLqFi2K4cp3rKc4zCoMuaIV
ezdq/KJt92Wm3b1cOrv90+mjfhrwa9CXSFGZjs2SZFrwPDYckuDgIE2xsgCpApS8
T2Kq8K1EnItc0Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:01 2025 by rpki-client