Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: AKzDHp1MbrqG/2GPOZhefBtQWRMfPd+1W6LbHafdYAA=
Subject key identifier: 4A:46:47:04:51:48:15:F7:AF:1A:DC:B8:30:60:88:40:3D:75:5F:65
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 019A571BC5A819C14941890D821716292AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 093A
Signing time: Thu 06 Nov 2025 03:00:29 +0000
Manifest this update: Thu 06 Nov 2025 03:00:29 +0000
Manifest next update: Fri 07 Nov 2025 03:00:29 +0000
Files and hashes: 1: 1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa (hash: LOYh8aPG/hc+f2Wb/Cw6QofBs2xxLo7hf2Lj5w8CzgE=)
2: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: sThjovHPYSV93mOPlgJSO4a388RYSKTYBfz0T51kTuM=)
3: wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa (hash: JT8633z6qqiHZIgSN23W3yJc2J/8lJJEZ1oYIJiRcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1b:c5:a8:19:c1:49:41:89:0d:82:17:16:29:2a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Nov 6 03:00:29 2025 GMT
Not After : Nov 7 03:00:29 2025 GMT
Subject: CN=4a464704514815f7af1adcb8306088403d755f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:da:3c:77:e1:ff:c8:41:5c:47:40:2b:d3:
34:81:a1:c8:e4:bf:b6:7c:f9:f4:b2:cc:26:05:75:
40:6e:73:e5:a4:20:55:a8:8a:41:5a:26:64:f4:a5:
d9:a3:d0:af:2c:9d:7c:33:6a:88:9a:3c:bf:1f:40:
f0:de:38:c5:76:b0:9f:be:f0:5b:9d:a0:3a:f7:51:
58:16:90:ab:d3:7f:00:7e:9b:53:3a:0f:62:98:be:
51:38:70:3f:4b:e1:6a:b8:de:d7:1c:84:48:11:37:
fa:3f:47:09:d5:57:5f:8a:c4:7a:3e:15:7f:16:03:
06:cf:36:9d:54:1c:2d:03:10:d3:48:ae:9f:e6:4f:
aa:da:9f:da:9f:07:ac:06:33:9c:01:e0:38:95:8a:
25:36:10:04:15:a3:70:ed:6b:f4:6f:17:e3:db:6b:
09:91:3a:7b:42:af:23:02:50:92:76:cc:3e:73:09:
d3:0c:d8:e2:40:cb:2d:2e:6f:6a:69:24:02:98:49:
c0:f4:01:1a:ca:ed:31:98:6c:41:8b:4e:12:55:06:
8a:9e:e7:81:51:a2:7c:ec:fc:bb:68:99:12:08:ef:
a3:69:cc:bd:8d:ff:54:d7:0c:da:0b:59:81:c1:df:
30:22:91:19:ff:bc:13:05:72:75:46:67:8b:e4:af:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:46:47:04:51:48:15:F7:AF:1A:DC:B8:30:60:88:40:3D:75:5F:65
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0c:89:a8:22:02:22:72:9f:60:3f:0e:6b:a7:f2:80:48:fc:
91:ba:16:1e:6b:ef:4b:1b:f3:12:75:10:4d:67:3f:38:a7:f1:
5d:16:fb:b4:ea:26:81:7e:dc:e8:25:ab:7b:b1:42:32:0f:30:
3b:13:5c:59:9a:3f:db:04:d9:3b:55:e6:b5:4e:bb:25:a5:2c:
09:f8:5f:ff:f0:f4:4d:df:c7:0f:7a:67:d4:b6:51:36:ad:1e:
21:73:a7:13:f3:d4:1a:14:02:2f:29:3c:3a:cd:3d:2d:3c:f9:
69:97:39:20:27:40:56:9b:e8:89:18:42:d0:94:9c:ed:4d:b2:
f8:db:83:74:39:94:a1:3f:9f:04:d4:39:37:ab:f4:7c:a6:42:
1b:80:19:02:23:3a:36:92:f0:23:0f:a6:3d:9e:be:76:be:34:
7b:74:5c:4a:3d:c9:9d:b3:57:80:21:17:46:02:c2:ee:15:9d:
28:9d:f6:56:91:cd:fb:1d:6d:34:22:dc:29:ee:5f:86:ff:e5:
7d:85:8f:e3:82:27:d3:15:d2:f2:0b:25:c5:d3:fa:60:bd:14:
dc:f2:13:7a:bc:ae:9e:1a:4e:51:b7:82:d6:bd:a1:87:d1:e1:
06:df:48:8b:b8:e9:98:9a:bf:26:dc:38:6d:51:8d:bf:5e:41:
38:70:fe:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpXG8WoGcFJQYkNghcWKSquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDRjZDdkZjg0YzMxOWQxOWFmMzViMTEwNGYxNzNlYmEy
YzZkYmQwHhcNMjUxMTA2MDMwMDI5WhcNMjUxMTA3MDMwMDI5WjAzMTEwLwYDVQQD
Eyg0YTQ2NDcwNDUxNDgxNWY3YWYxYWRjYjgzMDYwODg0MDNkNzU1ZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSXaPHfh/8hBXEdAK9M0gaHI5L+2
fPn0sswmBXVAbnPlpCBVqIpBWiZk9KXZo9CvLJ18M2qImjy/H0Dw3jjFdrCfvvBb
naA691FYFpCr038AfptTOg9imL5ROHA/S+FquN7XHIRIETf6P0cJ1VdfisR6PhV/
FgMGzzadVBwtAxDTSK6f5k+q2p/anwesBjOcAeA4lYolNhAEFaNw7Wv0bxfj22sJ
kTp7Qq8jAlCSdsw+cwnTDNjiQMstLm9qaSQCmEnA9AEayu0xmGxBi04SVQaKnueB
UaJ87Py7aJkSCO+jacy9jf9U1wzaC1mBwd8wIpEZ/7wTBXJ1RmeL5K/npwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpGRwRRSBX3rxrcuDBgiEA9dV9lMB8GA1UdIwQY
MBaAFMEEzX34TDGdGa81sRBPFz66LG29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQt
N2VmZjhmMWU5MWNkLzEvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQtN2VmZjhmMWU5MWNk
LzEvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgyJqCIC
InKfYD8Oa6fygEj8kboWHmvvSxvzEnUQTWc/OKfxXRb7tOomgX7c6CWre7FCMg8w
OxNcWZo/2wTZO1XmtU67JaUsCfhf//D0Td/HD3pn1LZRNq0eIXOnE/PUGhQCLyk8
Os09LTz5aZc5ICdAVpvoiRhC0JSc7U2y+NuDdDmUoT+fBNQ5N6v0fKZCG4AZAiM6
NpLwIw+mPZ6+dr40e3RcSj3JnbNXgCEXRgLC7hWdKJ32VpHN+x1tNCLcKe5fhv/l
fYWP44In0xXS8gslxdP6YL0U3PITeryunhpOUbeC1r2hh9HhBt9Ii7jpmJq/Jtw4
bVGNv15BOHD+BQ==
-----END CERTIFICATE-----
Generated at Thu Nov 6 12:23:17 2025 by rpki-client