Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
File: wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json)
Hash identifier: y7wzX04S6EnbtaWAsaARLLa2xB6r1X0g5CxCMmKkJtA=
Subject key identifier: 3D:D2:BB:EB:C4:27:62:C1:27:C6:D6:B9:91:AD:CD:A3:F7:58:9E:E7
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 019A2478157BB3503CFB707A425C99890A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 07:00:40 +0000
Manifest this update: Mon 27 Oct 2025 07:00:40 +0000
Manifest next update: Tue 28 Oct 2025 07:00:40 +0000
Files and hashes: 1: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (hash: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=)
2: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (hash: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=)
3: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: tKYTqC9L+QnTrGRpf0Bpy2uZF5fBI1pXbmvVNabSpss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:15:7b:b3:50:3c:fb:70:7a:42:5c:99:89:0a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Oct 27 07:00:40 2025 GMT
Not After : Oct 28 07:00:40 2025 GMT
Subject: CN=3dd2bbebc42762c127c6d6b991adcda3f7589ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3a:24:05:3a:a2:a0:62:c9:f6:cf:eb:b6:54:
fd:7e:5c:f0:68:18:d4:f7:24:ca:11:78:92:91:e8:
03:3e:55:df:68:e1:2f:11:8e:7c:a4:c1:89:3c:dc:
9f:bb:5a:f4:63:d4:8b:54:f0:f7:c2:81:d1:6e:2d:
21:bd:6c:42:f8:81:25:9a:55:5a:e8:f7:c4:5b:f5:
16:b5:cb:8e:06:d3:08:b6:74:2b:e4:92:64:e6:80:
75:57:d2:6f:42:3c:1b:8b:00:e6:e5:81:99:0f:e4:
0a:c3:93:e7:d8:65:71:0c:e9:83:df:85:83:db:07:
70:82:3a:86:5c:19:ef:b4:47:66:c2:07:36:43:ca:
20:02:6e:8f:1c:0a:77:cd:88:ff:36:d4:9b:6a:72:
ae:45:5e:c4:2d:99:75:ac:07:de:49:a6:46:36:3a:
31:1e:66:ac:d0:23:d3:4f:3d:6b:26:d9:6d:15:4b:
b6:b3:4d:a6:91:80:a7:76:49:8c:d7:5e:a5:51:48:
08:f7:c0:bb:20:54:46:5b:b2:a9:85:59:dd:d9:9f:
2b:47:59:79:61:ca:ed:69:92:a3:16:15:c3:ec:a3:
be:8a:81:16:ff:84:18:63:eb:81:e7:88:a7:0d:f6:
eb:5d:77:70:05:0e:47:31:a9:8d:e4:fe:6f:37:69:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D2:BB:EB:C4:27:62:C1:27:C6:D6:B9:91:AD:CD:A3:F7:58:9E:E7
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:35:4c:29:86:a6:33:16:33:53:60:ab:8b:59:82:e5:c5:6d:
3c:04:d3:6b:e6:d3:03:da:9d:e4:2e:d4:09:d7:25:28:d4:60:
5a:36:66:51:04:62:17:a3:db:b7:34:58:ff:62:ae:c5:7e:ed:
e7:43:34:51:f1:8f:80:46:0f:b7:16:52:90:68:f7:49:2a:89:
9e:50:7f:0f:85:fa:bd:af:1e:b8:44:37:a6:ce:54:f0:f0:e8:
5b:58:95:e1:26:6b:f7:0a:29:3d:df:a1:32:c6:a5:c8:7a:75:
b6:a9:2e:67:62:ad:4a:a4:c6:72:3c:63:21:e1:82:a1:8e:a5:
2b:49:71:56:3d:b9:86:9f:f3:48:ec:11:30:12:6f:2b:2b:10:
a9:dd:d1:67:66:83:cb:18:04:a0:c8:2c:7a:ce:bc:d6:9f:f8:
27:07:07:54:89:8b:7f:00:16:fe:4e:82:03:50:06:44:91:21:
95:3b:ca:cf:68:be:f8:7c:bf:bf:10:80:db:5e:07:be:20:df:
a6:b5:7f:8c:e4:6b:f1:d4:3b:da:e9:a6:be:d6:0d:c8:8e:8e:
82:38:93:eb:ed:83:29:da:2a:8c:70:e2:ff:35:fb:5e:10:ef:
63:5f:99:e4:84:69:4e:11:7f:ec:2f:b8:2e:f2:72:40:18:0f:
aa:d7:84:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokeBV7s1A8+3B6QlyZiQpyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZDJhODg0NWNkZjY1NzZkZThlYjAxMTE4MDhhYmQ2NWZk
OGJjNDQwHhcNMjUxMDI3MDcwMDQwWhcNMjUxMDI4MDcwMDQwWjAzMTEwLwYDVQQD
EygzZGQyYmJlYmM0Mjc2MmMxMjdjNmQ2Yjk5MWFkY2RhM2Y3NTg5ZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jokBTqioGLJ9s/rtlT9flzwaBjU
9yTKEXiSkegDPlXfaOEvEY58pMGJPNyfu1r0Y9SLVPD3woHRbi0hvWxC+IElmlVa
6PfEW/UWtcuOBtMItnQr5JJk5oB1V9JvQjwbiwDm5YGZD+QKw5Pn2GVxDOmD34WD
2wdwgjqGXBnvtEdmwgc2Q8ogAm6PHAp3zYj/NtSbanKuRV7ELZl1rAfeSaZGNjox
Hmas0CPTTz1rJtltFUu2s02mkYCndkmM116lUUgI98C7IFRGW7KphVnd2Z8rR1l5
YcrtaZKjFhXD7KO+ioEW/4QYY+uB54inDfbrXXdwBQ5HMamN5P5vN2mT7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3Su+vEJ2LBJ8bWuZGtzaP3WJ7nMB8GA1UdIwQY
MBaAFMDSqIRc32V23o6wERgIq9Zf2LxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd05Lb2hGemZaWGJlanJBUkdBaXIxbF9ZdkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83Njk3NDMtNGJhMS00M2NlLWFmMjMt
NDg0NjA2MmY5YTczLzEvd05Lb2hGemZaWGJlanJBUkdBaXIxbF9ZdkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83Njk3NDMtNGJhMS00M2NlLWFmMjMtNDg0NjA2MmY5YTcz
LzEvd05Lb2hGemZaWGJlanJBUkdBaXIxbF9ZdkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTVMKYam
MxYzU2Cri1mC5cVtPATTa+bTA9qd5C7UCdclKNRgWjZmUQRiF6PbtzRY/2KuxX7t
50M0UfGPgEYPtxZSkGj3SSqJnlB/D4X6va8euEQ3ps5U8PDoW1iV4SZr9wopPd+h
MsalyHp1tqkuZ2KtSqTGcjxjIeGCoY6lK0lxVj25hp/zSOwRMBJvKysQqd3RZ2aD
yxgEoMgses681p/4JwcHVImLfwAW/k6CA1AGRJEhlTvKz2i++Hy/vxCA214HviDf
prV/jORr8dQ72ummvtYNyI6OgjiT6+2DKdoqjHDi/zX7XhDvY1+Z5IRpThF/7C+4
LvJyQBgPqteENA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:35:03 2025 by rpki-client