Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier: s9DzOnEJzI/m+yqKuCle+AnbKuHKCm2QWRQOiY9097U=
Subject key identifier: 9E:7A:C7:2F:60:F5:17:BA:6F:56:F9:E9:2B:18:62:D3:F1:9D:AF:8B
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 019A70A4D55D5C0A7C59646962EE1429E7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 02:00:41 +0000
Manifest this update: Tue 11 Nov 2025 02:00:41 +0000
Manifest next update: Wed 12 Nov 2025 02:00:41 +0000
Files and hashes: 1: VvJo0lhVWVTAqGHGg1amh53Ljec.roa (hash: GwM4oNfSgsrgVocC2bDhcn2ZlYGWFP0EuCABmBUvrpo=)
2: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: p3/DFLlQRpLQQOum6Ul47p6i8sMm00xixuXE+YhGO6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d5:5d:5c:0a:7c:59:64:69:62:ee:14:29:e7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: Nov 11 02:00:41 2025 GMT
Not After : Nov 12 02:00:41 2025 GMT
Subject: CN=9e7ac72f60f517ba6f56f9e92b1862d3f19daf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:9b:9e:df:ab:b0:64:8e:28:99:2f:65:08:
1a:14:f7:98:a9:2e:5c:fd:df:b1:c6:69:ab:db:d9:
80:47:f7:51:bb:da:5c:38:65:1b:36:78:de:de:14:
e0:03:99:bd:61:6a:5b:9f:41:af:86:39:81:1a:df:
b5:9b:09:52:59:18:0f:d4:d7:16:ad:90:f1:45:c2:
81:64:80:b1:b9:25:74:b6:04:aa:f0:92:dd:b4:e1:
dc:5f:b8:01:d7:12:5b:6d:e5:54:9c:b7:c0:60:8c:
7f:cd:4a:1c:b6:1f:48:53:d4:fb:2e:41:89:62:7a:
c4:95:6d:17:0b:5a:44:ae:c1:e7:b7:ee:0b:b3:5f:
11:77:fd:18:e0:0c:e8:0a:f7:a6:00:1b:cc:e1:fb:
fa:a9:a0:fc:12:8d:7f:cc:98:6e:80:68:51:07:1e:
e2:b0:ba:b0:7c:f3:31:43:f2:c7:c2:30:79:ef:82:
46:57:a2:72:e8:8a:b8:ad:c2:1e:8b:2a:57:79:3d:
b4:e0:a4:7c:54:f9:cc:52:b9:05:3d:3b:c7:41:c6:
77:f7:28:6f:f9:ed:4f:ee:b6:65:36:c4:4d:a6:03:
6f:08:36:82:1d:ca:ff:6c:2f:a0:c4:1f:78:53:a9:
12:4d:76:07:a9:15:69:c4:07:a5:d7:4d:e0:36:ac:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7A:C7:2F:60:F5:17:BA:6F:56:F9:E9:2B:18:62:D3:F1:9D:AF:8B
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c2:81:0a:c1:e9:c6:d1:7c:85:c3:01:00:84:e3:1f:19:cc:
a8:f7:97:f9:d1:ec:4f:74:48:0e:52:86:a2:80:3f:9f:28:22:
ea:9f:c7:df:b4:d0:85:83:c8:d8:cb:3d:1b:5e:bc:bd:ed:25:
00:91:59:bf:16:61:5b:14:6a:ab:f8:5f:f3:7b:54:3a:7b:84:
57:38:d3:19:3e:41:0c:28:64:9f:2a:f0:40:90:21:26:9a:52:
46:0f:0b:57:6f:ca:b9:9e:2a:bd:58:42:c7:63:fd:13:28:ef:
88:6f:f4:b7:48:f8:0d:b8:68:cb:57:cf:f3:57:2d:35:c6:4d:
0f:1f:54:12:ee:26:b8:e0:9d:40:24:93:36:d0:4d:1a:27:a6:
7e:28:e6:20:26:0e:6c:48:53:38:ff:12:10:53:db:46:26:bc:
3a:84:7f:ba:7e:ed:f7:5b:55:ff:8a:cf:f3:27:1d:59:1f:3d:
4f:99:56:c3:9e:34:86:95:61:fa:a7:ed:4a:5b:21:92:d7:55:
69:06:10:c2:e3:8c:56:ec:bf:42:5b:70:a8:f4:0a:04:5d:8f:
fd:25:5f:fb:a0:6d:06:a2:8b:66:73:7c:49:1e:c2:dd:d3:49:
b7:ed:7b:2d:49:ce:8c:93:8f:b0:4a:55:20:87:b7:b2:fb:2e:
93:96:63:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpNVdXAp8WWRpYu4UKeewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNjgwNmVhMDYyZjYwNTM4NDEyODhiNDQ2ZTJlMGRlZDVi
MmYyZTcwHhcNMjUxMTExMDIwMDQxWhcNMjUxMTEyMDIwMDQxWjAzMTEwLwYDVQQD
Eyg5ZTdhYzcyZjYwZjUxN2JhNmY1NmY5ZTkyYjE4NjJkM2YxOWRhZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVSbnt+rsGSOKJkvZQgaFPeYqS5c
/d+xxmmr29mAR/dRu9pcOGUbNnje3hTgA5m9YWpbn0GvhjmBGt+1mwlSWRgP1NcW
rZDxRcKBZICxuSV0tgSq8JLdtOHcX7gB1xJbbeVUnLfAYIx/zUocth9IU9T7LkGJ
YnrElW0XC1pErsHnt+4Ls18Rd/0Y4AzoCvemABvM4fv6qaD8Eo1/zJhugGhRBx7i
sLqwfPMxQ/LHwjB574JGV6Jy6Iq4rcIeiypXeT204KR8VPnMUrkFPTvHQcZ39yhv
+e1P7rZlNsRNpgNvCDaCHcr/bC+gxB94U6kSTXYHqRVpxAel103gNqxn9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ56xy9g9Re6b1b56SsYYtPxna+LMB8GA1UdIwQY
MBaAFMNoBuoGL2BThBKItEbi4N7VsvLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zNjNiYTctODllMy00OTVmLWFhMmUt
YzFlYjczZmZkNDE2LzEvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8zNjNiYTctODllMy00OTVmLWFhMmUtYzFlYjczZmZkNDE2
LzEvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMKBCsHp
xtF8hcMBAITjHxnMqPeX+dHsT3RIDlKGooA/nygi6p/H37TQhYPI2Ms9G168ve0l
AJFZvxZhWxRqq/hf83tUOnuEVzjTGT5BDChknyrwQJAhJppSRg8LV2/KuZ4qvVhC
x2P9EyjviG/0t0j4Dbhoy1fP81ctNcZNDx9UEu4muOCdQCSTNtBNGiemfijmICYO
bEhTOP8SEFPbRia8OoR/un7t91tV/4rP8ycdWR89T5lWw540hpVh+qftSlshktdV
aQYQwuOMVuy/QltwqPQKBF2P/SVf+6BtBqKLZnN8SR7C3dNJt+17LUnOjJOPsEpV
IIe3svsuk5ZjLw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:10 2025 by rpki-client