Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
File: wVxXxJbEN46ATCYTOYB11U74qWI.mft (raw, json)
Hash identifier: Gy8yZL2c1wmIPwQ1chYSBW5/CQL90TL+DZZ8FBWHnls=
Subject key identifier: 63:73:DC:E7:B4:7E:A7:4A:C4:80:5D:4C:6B:E6:FF:F9:0A:B0:1C:B7
Authority key identifier: C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62
Certificate issuer: /CN=c15c57c496c4378e804c2613398075d54ef8a962
Certificate serial: 019A71B787EDB1FCBBF5DC7563409E4B142A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
Manifest number: 01F1
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: r_DBy6crqhZV3E-t_JBcSU0M1aQ.roa (hash: x0KRqoMjmgWvFfwQSKfZBbO2VD1mpoCn3DkZilOBe/8=)
2: wVxXxJbEN46ATCYTOYB11U74qWI.crl (hash: hdDYJds9m5hYNkbHihXRIZ7Jx3x8b0x5WQz9MCUUalM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:87:ed:b1:fc:bb:f5:dc:75:63:40:9e:4b:14:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15c57c496c4378e804c2613398075d54ef8a962
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=6373dce7b47ea74ac4805d4c6be6fff90ab01cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:d8:b8:49:4d:fb:b2:87:e4:59:f7:fa:d7:
7b:8e:be:0f:84:0b:e4:8d:ed:0d:7b:2c:7e:2c:5d:
f0:85:91:1e:5e:84:48:40:4f:07:93:08:96:6c:8a:
92:75:a9:27:e8:05:25:ab:f1:b4:dc:86:f2:49:be:
17:e4:9e:9d:6c:d3:f5:c8:51:92:d2:57:75:ba:29:
3a:c5:85:dd:f7:fd:58:33:8c:0c:23:f5:6b:47:f6:
19:39:8d:50:58:65:6a:34:21:3e:72:f9:b0:b8:e2:
0c:69:bd:84:a0:cf:f2:c0:c1:ff:d5:0a:08:41:f1:
65:f1:86:24:b6:57:f9:d0:a3:21:47:e3:e7:d9:eb:
02:b1:09:93:d1:d4:25:0b:3b:b4:2a:50:5a:99:c5:
c2:23:52:9b:af:b5:3a:41:06:c0:1d:0b:2c:0e:2e:
f3:e3:aa:bd:57:de:46:dd:be:65:77:cb:78:d4:38:
e2:c7:4f:1c:be:da:bc:60:fd:07:4c:09:84:1a:d1:
e1:73:14:8f:70:77:ab:da:b9:3a:bc:c4:f7:96:95:
98:28:23:51:f2:3e:7c:cc:6f:8d:da:03:15:b2:d6:
15:a9:81:63:78:6b:f0:c2:e7:47:9c:44:2b:45:73:
c9:fd:4b:fd:48:4f:5b:d0:a0:61:42:9b:d9:d8:e3:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:73:DC:E7:B4:7E:A7:4A:C4:80:5D:4C:6B:E6:FF:F9:0A:B0:1C:B7
X509v3 Authority Key Identifier:
keyid:C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8f:28:f4:9f:4b:27:1c:f8:58:05:a2:49:47:40:8f:7e:a7:
54:30:3c:f6:82:70:8b:7c:1f:c1:4e:89:25:fb:18:a6:af:a5:
ea:09:0d:a8:98:47:3f:14:23:e3:2e:1f:36:63:25:8e:3b:65:
8f:56:12:05:10:93:4c:1d:eb:d2:ea:50:51:79:97:16:09:57:
2a:71:e6:3b:96:26:d9:10:99:cf:ba:3b:e9:13:bd:29:7f:01:
46:4f:74:cc:06:f4:4b:ae:1c:cd:e4:0b:c7:d4:d6:e4:06:8f:
7a:f2:4b:dc:7c:ee:a5:c3:80:4e:a1:63:b1:a5:b1:75:8b:b0:
dc:49:76:ba:eb:8e:0d:3f:aa:4e:44:5c:e8:01:7a:20:c4:25:
9c:92:3f:c6:2c:01:ea:cf:b3:ad:91:09:61:d7:c3:ad:a1:a7:
dd:9e:58:6e:8a:4c:2e:7b:bf:36:c4:b2:9a:74:cc:8d:dc:22:
aa:a0:e6:dc:32:1d:c1:e6:9c:0e:29:e8:01:f0:2e:94:6d:24:
0b:07:af:c2:ee:05:ed:6b:e1:ce:c5:ec:c5:58:14:06:57:be:
2f:6c:a1:2f:86:3d:56:c5:e0:a6:e4:98:ab:ab:13:8c:02:3f:
52:59:08:4c:42:2d:72:70:55:6f:44:74:45:63:7d:f3:e2:cf:
04:f7:52:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt4ftsfy79dx1Y0CeSxQqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNWM1N2M0OTZjNDM3OGU4MDRjMjYxMzM5ODA3NWQ1NGVm
OGE5NjIwHhcNMjUxMTExMDcwMDQ0WhcNMjUxMTEyMDcwMDQ0WjAzMTEwLwYDVQQD
Eyg2MzczZGNlN2I0N2VhNzRhYzQ4MDVkNGM2YmU2ZmZmOTBhYjAxY2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYfYuElN+7KH5Fn3+td7jr4PhAvk
je0Neyx+LF3whZEeXoRIQE8HkwiWbIqSdakn6AUlq/G03IbySb4X5J6dbNP1yFGS
0ld1uik6xYXd9/1YM4wMI/VrR/YZOY1QWGVqNCE+cvmwuOIMab2EoM/ywMH/1QoI
QfFl8YYktlf50KMhR+Pn2esCsQmT0dQlCzu0KlBamcXCI1Kbr7U6QQbAHQssDi7z
46q9V95G3b5ld8t41Djix08cvtq8YP0HTAmEGtHhcxSPcHer2rk6vMT3lpWYKCNR
8j58zG+N2gMVstYVqYFjeGvwwudHnEQrRXPJ/Uv9SE9b0KBhQpvZ2OPi3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNz3Oe0fqdKxIBdTGvm//kKsBy3MB8GA1UdIwQY
MBaAFMFcV8SWxDeOgEwmEzmAddVO+KliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Z4WHhKYkVONDZBVENZVE9ZQjExVTc0cVdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kODQ3NTgtZjI1ZC00YjNkLTkxNzYt
YTg4MTU2Mzc5NWQzLzEvd1Z4WHhKYkVONDZBVENZVE9ZQjExVTc0cVdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kODQ3NTgtZjI1ZC00YjNkLTkxNzYtYTg4MTU2Mzc5NWQz
LzEvd1Z4WHhKYkVONDZBVENZVE9ZQjExVTc0cVdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaY8o9J9L
Jxz4WAWiSUdAj36nVDA89oJwi3wfwU6JJfsYpq+l6gkNqJhHPxQj4y4fNmMljjtl
j1YSBRCTTB3r0upQUXmXFglXKnHmO5Ym2RCZz7o76RO9KX8BRk90zAb0S64czeQL
x9TW5AaPevJL3HzupcOATqFjsaWxdYuw3El2uuuODT+qTkRc6AF6IMQlnJI/xiwB
6s+zrZEJYdfDraGn3Z5YbopMLnu/NsSymnTMjdwiqqDm3DIdweacDinoAfAulG0k
Cwevwu4F7WvhzsXsxVgUBle+L2yhL4Y9VsXgpuSYq6sTjAI/UlkITEItcnBVb0R0
RWN98+LPBPdSMA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:06 2025 by rpki-client