Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier: MNnaMXx773X1WKT9EJ4lFsX7nFgFK7iM3GshhzrbA1s=
Subject key identifier: 90:FC:18:DC:FF:D9:0F:7E:6A:FC:A0:B3:36:5D:89:20:AC:70:C1:B4
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial: 019A725CAD8FA733B6CFAD27BD5AF3880B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number: 0C94
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: H+VanXpZcXav1Pv2M2Mr5EJ55Jqigy43yreDJrsF3nQ=)
2: yZvcP-Ps4yo6pgIgUKI5eTzNp2U.roa (hash: MDG4N8hqJwJQSXIs3A2EDMOqJcbMoF8xcYaXQrrz3Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ad:8f:a7:33:b6:cf:ad:27:bd:5a:f3:88:0b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=90fc18dcffd90f7e6afca0b3365d8920ac70c1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:93:0d:80:4e:66:3f:11:ba:f9:a9:31:12:
90:fc:eb:e5:ba:91:5a:50:ba:e3:b6:1f:3d:9d:bb:
63:b8:17:38:01:80:f1:a4:b3:4b:89:fc:4c:05:65:
3d:f6:68:e0:da:48:cd:75:36:c2:28:ad:97:32:6e:
d1:d6:70:c2:71:93:f0:41:8c:a5:36:d3:a0:ed:b8:
32:d7:69:c6:64:c0:ef:cd:bd:db:5d:45:f4:57:8e:
19:ea:fc:6c:a7:5d:87:63:9d:86:10:9c:3b:7f:92:
f7:a9:7e:6d:e4:ba:05:2f:80:6b:1b:ba:e7:0c:81:
b9:5b:b6:a2:71:41:a6:87:33:1d:d6:9c:bf:23:98:
fd:10:32:93:df:8a:8d:63:c6:b3:38:ee:05:f5:e0:
20:d3:96:93:68:c0:00:27:38:68:07:8d:4a:7f:ec:
e3:dc:5f:3b:9f:bf:14:36:6a:3b:82:73:3d:e4:13:
d5:52:a0:ed:8d:6c:f8:cd:25:e2:97:e2:d6:d9:8d:
ad:66:a1:25:b0:07:7e:3d:63:50:a4:12:5a:40:4e:
e7:46:14:cd:4e:45:08:c4:d0:fc:a9:c8:1e:c9:d0:
86:04:db:df:10:13:a9:07:c3:9b:7b:fb:a0:39:57:
cc:10:f8:1a:27:fc:7c:e3:20:f0:1c:8b:fe:13:6e:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FC:18:DC:FF:D9:0F:7E:6A:FC:A0:B3:36:5D:89:20:AC:70:C1:B4
X509v3 Authority Key Identifier:
keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8a:13:b2:31:ef:fd:a1:b6:42:88:5f:0a:2b:ed:a5:04:3b:
6f:3a:d2:b3:5b:9c:f8:48:5a:49:07:0b:03:80:17:b3:03:b0:
13:ed:44:4a:fe:2d:0c:ed:94:8c:77:38:af:dd:30:d1:8f:7a:
18:89:df:7f:3f:99:61:c8:38:0a:30:aa:f9:66:5e:4a:c0:4b:
af:a1:c8:a2:81:84:53:df:88:41:8e:ed:04:79:73:c8:6f:16:
c1:32:fe:3f:bf:62:26:db:3f:c1:3b:03:1c:74:c3:5b:cb:a3:
dd:f9:ac:e8:bf:e4:aa:ce:08:df:8d:26:5e:4e:da:eb:7d:b7:
6d:4c:7d:6c:5b:f4:e7:97:2c:b5:04:d7:d8:89:95:69:0d:d2:
0a:b4:e0:9e:b8:8a:0c:d2:8c:96:34:05:78:8a:f5:0e:8d:8e:
10:9f:1a:a0:74:49:e7:86:54:f2:dc:b4:a5:14:54:76:60:78:
0f:7b:58:a7:f1:10:81:8b:cd:28:55:2b:75:e0:26:42:02:06:
21:d3:20:cb:62:27:7f:e7:f7:be:8b:eb:7b:b5:8d:6e:1e:62:
9d:3d:e1:9c:a5:ec:14:28:a1:e9:f6:c3:1f:3f:7b:5c:a1:ba:
72:19:ea:1b:48:c8:db:64:8d:62:7a:70:5a:06:8b:9f:1c:0e:
72:6c:c6:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXK2PpzO2z60nvVrziAtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNWQ0M2RjZGUxMGI5MjMxNzlkNWIxYmQ3NGVhNDNhY2My
MjEwOTMwHhcNMjUxMTExMTAwMTA3WhcNMjUxMTEyMTAwMTA3WjAzMTEwLwYDVQQD
Eyg5MGZjMThkY2ZmZDkwZjdlNmFmY2EwYjMzNjVkODkyMGFjNzBjMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqOTDYBOZj8RuvmpMRKQ/OvlupFa
ULrjth89nbtjuBc4AYDxpLNLifxMBWU99mjg2kjNdTbCKK2XMm7R1nDCcZPwQYyl
NtOg7bgy12nGZMDvzb3bXUX0V44Z6vxsp12HY52GEJw7f5L3qX5t5LoFL4BrG7rn
DIG5W7aicUGmhzMd1py/I5j9EDKT34qNY8azOO4F9eAg05aTaMAAJzhoB41Kf+zj
3F87n78UNmo7gnM95BPVUqDtjWz4zSXil+LW2Y2tZqElsAd+PWNQpBJaQE7nRhTN
TkUIxND8qcgeydCGBNvfEBOpB8Obe/ugOVfMEPgaJ/x84yDwHIv+E24s7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJD8GNz/2Q9+avygszZdiSCscMG0MB8GA1UdIwQY
MBaAFMJdQ9zeELkjF51bG9dOpDrMIhCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NGU0YmItOWJmNS00NzhiLTg1YTEt
NjQ5MzExMTM5ODgzLzEvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NGU0YmItOWJmNS00NzhiLTg1YTEtNjQ5MzExMTM5ODgz
LzEvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYoTsjHv
/aG2QohfCivtpQQ7bzrSs1uc+EhaSQcLA4AXswOwE+1ESv4tDO2UjHc4r90w0Y96
GInffz+ZYcg4CjCq+WZeSsBLr6HIooGEU9+IQY7tBHlzyG8WwTL+P79iJts/wTsD
HHTDW8uj3fms6L/kqs4I340mXk7a6323bUx9bFv055cstQTX2ImVaQ3SCrTgnriK
DNKMljQFeIr1Do2OEJ8aoHRJ54ZU8ty0pRRUdmB4D3tYp/EQgYvNKFUrdeAmQgIG
IdMgy2Inf+f3vovre7WNbh5inT3hnKXsFCih6fbDHz97XKG6chnqG0jI22SNYnpw
WgaLnxwOcmzGGg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:19 2025 by rpki-client