Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier: AtYvW/MemyBOofx9JAnCQOSYga6MjDYHgNxOUVwTazM=
Subject key identifier: B8:2B:D8:54:35:77:86:63:CC:BC:12:75:A4:2D:3F:84:F8:00:C4:40
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 019A1C1941ED128EA0B4B9D90113BA7E06E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 16:00:08 +0000
Manifest this update: Sat 25 Oct 2025 16:00:08 +0000
Manifest next update: Sun 26 Oct 2025 16:00:08 +0000
Files and hashes: 1: 1-FQBZTT5afKyG6FIAOC0DP_Gyes.roa (hash: QUXwHR9U/j2PM2tc+oqu+jlOONy/4+OVBz6LYmOZ3uc=)
2: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: F1IuHlyU1NdlWyD+JarN3D7oOzu8WVXFwIeR6xL9JCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 16:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:41:ed:12:8e:a0:b4:b9:d9:01:13:ba:7e:06:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: Oct 25 16:00:08 2025 GMT
Not After : Oct 26 16:00:08 2025 GMT
Subject: CN=b82bd85435778663ccbc1275a42d3f84f800c440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:d2:42:1b:65:1f:8a:d8:2e:4d:2c:bf:c6:
fe:62:bc:be:71:12:f4:e4:24:7c:62:86:f9:46:36:
39:c9:31:c6:7f:33:a8:cc:04:d2:3c:b5:49:cf:4a:
02:6f:2c:cc:1e:38:c5:4b:0f:c7:25:39:39:c5:6e:
95:7b:60:5d:de:53:aa:e4:f7:3a:bd:47:06:7b:63:
27:5d:85:e6:62:37:44:a3:98:35:6c:4e:42:a1:79:
c3:c2:e6:12:3e:b7:bb:cd:2b:43:d6:42:47:6c:13:
f1:01:1d:94:20:5a:a7:2e:20:f9:17:af:98:dd:5b:
33:f9:a9:3b:c7:a7:87:94:35:ca:b5:57:ef:53:eb:
cc:40:72:1d:47:f5:bd:4e:9e:d8:e8:38:41:97:5e:
5b:40:a0:d2:3d:b2:f7:42:f4:55:90:a0:07:b5:66:
df:73:39:22:74:af:18:6f:b3:78:b6:ab:2e:31:7e:
67:5d:4f:f1:df:bf:d0:da:4d:2c:64:79:73:47:f2:
73:c0:d1:54:13:62:75:1a:61:f9:75:a1:a2:e3:a9:
c3:57:7b:0f:d7:7f:50:10:7e:70:9c:94:23:25:b7:
6f:c2:57:36:5c:91:80:47:2f:13:40:f1:dc:d2:96:
a6:17:0d:d6:84:49:0a:6b:c3:b3:86:4d:fc:d8:86:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:D8:54:35:77:86:63:CC:BC:12:75:A4:2D:3F:84:F8:00:C4:40
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fe:38:7f:e3:88:3f:23:b3:b4:2a:95:63:e5:8b:65:53:0b:
21:81:bc:d0:ed:67:bc:19:90:26:38:19:70:16:34:d3:4c:93:
a4:cc:e4:1c:86:b2:b8:78:63:3a:17:e0:23:b5:2c:b2:2a:f8:
0a:a3:40:9c:a3:0a:08:db:02:1a:c7:94:1e:b9:8c:10:9f:fb:
4f:c4:62:72:8e:12:c6:cf:fa:dc:e5:0e:ae:0d:5f:69:73:08:
00:a3:2a:d3:73:05:a6:70:08:88:c5:2e:41:21:93:c5:0e:98:
de:e1:5f:c7:cd:c7:02:9d:f1:e6:5e:0c:dc:0b:5e:44:22:6f:
30:8d:d0:47:b3:94:bb:11:2f:a5:72:7e:1f:49:42:da:80:7a:
74:24:ee:5e:3d:84:78:fd:bc:c9:0b:cd:20:8b:e8:31:19:05:
38:cd:a3:45:96:01:41:93:66:59:b8:20:7c:00:28:67:3e:ce:
be:ec:1f:05:fe:07:e2:e1:de:f3:1c:23:4d:ba:3e:9f:e8:7b:
0e:7b:6f:63:0c:ff:a9:2e:1e:92:56:a1:87:c7:a7:e6:97:64:
0c:00:c0:01:2c:68:83:0c:3f:fe:90:4a:42:fa:22:f8:8f:42:
17:25:df:d3:e0:6d:15:ef:04:19:e3:78:a1:65:bf:2e:b9:69:
6a:21:50:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocGUHtEo6gtLnZARO6fgbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNDU2YzlmN2Y3OWI5ODcxOTZjNDY4NDAyMzk2YTE4N2Mx
NTZkN2MwHhcNMjUxMDI1MTYwMDA4WhcNMjUxMDI2MTYwMDA4WjAzMTEwLwYDVQQD
EyhiODJiZDg1NDM1Nzc4NjYzY2NiYzEyNzVhNDJkM2Y4NGY4MDBjNDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb3SQhtlH4rYLk0sv8b+Yry+cRL0
5CR8Yob5RjY5yTHGfzOozATSPLVJz0oCbyzMHjjFSw/HJTk5xW6Ve2Bd3lOq5Pc6
vUcGe2MnXYXmYjdEo5g1bE5CoXnDwuYSPre7zStD1kJHbBPxAR2UIFqnLiD5F6+Y
3Vsz+ak7x6eHlDXKtVfvU+vMQHIdR/W9Tp7Y6DhBl15bQKDSPbL3QvRVkKAHtWbf
czkidK8Yb7N4tqsuMX5nXU/x37/Q2k0sZHlzR/JzwNFUE2J1GmH5daGi46nDV3sP
139QEH5wnJQjJbdvwlc2XJGARy8TQPHc0pamFw3WhEkKa8Ozhk382IYveQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgr2FQ1d4ZjzLwSdaQtP4T4AMRAMB8GA1UdIwQY
MBaAFFtFbJ9/ebmHGWxGhAI5ahh8FW18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTIt
OWZlODZkZWE4NjJhLzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTItOWZlODZkZWE4NjJh
LzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARf44f+OI
PyOztCqVY+WLZVMLIYG80O1nvBmQJjgZcBY000yTpMzkHIayuHhjOhfgI7Ussir4
CqNAnKMKCNsCGseUHrmMEJ/7T8Rico4Sxs/63OUOrg1faXMIAKMq03MFpnAIiMUu
QSGTxQ6Y3uFfx83HAp3x5l4M3AteRCJvMI3QR7OUuxEvpXJ+H0lC2oB6dCTuXj2E
eP28yQvNIIvoMRkFOM2jRZYBQZNmWbggfAAoZz7OvuwfBf4H4uHe8xwjTbo+n+h7
DntvYwz/qS4eklahh8en5pdkDADAASxogww//pBKQvoi+I9CFyXf0+BtFe8EGeN4
oWW/LrlpaiFQ2g==
-----END CERTIFICATE-----
Generated at Sat Oct 25 21:52:49 2025 by rpki-client