Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier: lPOkBLyR1AR+/TBWBJJwwXepqjCLER+gGFbL/JmLZ2g=
Subject key identifier: 7A:A5:25:A4:F9:46:C2:67:48:29:34:6F:1E:B0:8B:64:91:AE:A0:92
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer: /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial: 019A71B912184B6EE547B3D244956700731F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number: 150F
Signing time: Tue 11 Nov 2025 07:02:25 +0000
Manifest this update: Tue 11 Nov 2025 07:02:25 +0000
Manifest next update: Wed 12 Nov 2025 07:02:25 +0000
Files and hashes: 1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: WoAvX0YGkI9z4PcZmDCwuwsOV+IXff9agzQZvfflDJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:12:18:4b:6e:e5:47:b3:d2:44:95:67:00:73:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Validity
Not Before: Nov 11 07:02:25 2025 GMT
Not After : Nov 12 07:02:25 2025 GMT
Subject: CN=7aa525a4f946c2674829346f1eb08b6491aea092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:94:73:72:6d:01:36:b5:c8:a1:eb:5a:e1:
92:9d:02:e5:1f:98:cf:fe:ce:cf:a7:e4:05:89:43:
60:0c:fd:35:3e:75:31:27:24:f5:96:08:f4:d2:79:
e9:b8:ec:c9:ff:e6:cf:5d:64:b7:63:41:94:a1:54:
1f:7b:80:d1:1c:3b:2e:49:80:9a:b2:63:89:05:bf:
6f:10:8d:16:1d:c9:6f:8c:16:65:14:ac:46:0d:c1:
d6:91:76:e6:31:16:5d:15:a3:50:63:dc:28:cc:ca:
15:67:1e:64:e9:3e:c6:69:4b:1e:2a:97:11:7a:28:
97:a5:a7:6c:3a:86:55:d5:cd:bb:70:aa:c8:a8:e4:
6e:c0:68:a0:20:05:dc:f2:96:ac:19:1a:f1:a4:d1:
bd:f3:5a:14:74:97:1a:df:12:1d:fc:92:8a:e4:fa:
63:e4:e3:8f:6f:6d:20:d2:4b:0e:ce:8a:e2:30:de:
cb:c5:8a:b0:92:e5:de:f6:26:76:e7:f2:31:8f:90:
f2:8a:31:7a:0f:47:bc:f2:22:ec:e0:d3:31:b6:92:
7b:53:42:e9:f2:8c:03:aa:c3:21:aa:45:f2:cf:4e:
71:42:0f:4c:30:fb:a1:4d:a6:24:5b:56:65:1c:70:
e7:9f:e2:53:7d:1e:75:95:ac:ed:17:a6:32:4c:cf:
4f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A5:25:A4:F9:46:C2:67:48:29:34:6F:1E:B0:8B:64:91:AE:A0:92
X509v3 Authority Key Identifier:
keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:18:f0:c9:49:c6:35:ae:67:98:e9:0d:ab:ef:0b:52:01:d2:
15:89:f3:ac:08:0e:f0:83:c0:94:3d:6c:3b:10:dd:8b:5a:0b:
e6:63:4e:ef:eb:15:3f:a1:96:cf:08:77:5e:40:96:85:9f:5c:
35:ba:64:e7:dd:3f:6b:e6:5e:59:ea:e9:d4:0d:ae:6d:de:02:
16:c9:6b:7e:01:03:41:e6:b6:48:47:9d:c4:41:96:91:e1:83:
70:56:1a:fc:8a:cc:2d:a6:a6:ff:43:75:26:e1:44:6e:08:e9:
9a:a8:1e:4e:ac:fd:56:e0:a2:66:5b:cc:a5:55:c3:cb:2c:71:
fd:0b:8e:33:5c:c0:00:1c:76:10:ac:bf:da:13:23:79:c8:aa:
72:a6:ea:07:6b:f1:06:19:26:d3:30:af:bd:aa:d4:cd:b2:7a:
bd:28:8c:14:01:f7:4d:20:20:e0:be:93:39:fc:6b:11:d6:9d:
5b:60:8e:0b:5d:9c:55:81:3f:a0:0b:9d:6b:62:50:f8:48:08:
ac:c0:73:64:46:df:cf:c3:12:1c:71:38:f9:2e:b1:2a:2c:35:
85:8a:9c:d1:b7:32:5d:f8:d7:b0:d3:ed:af:07:c1:ae:b1:2d:
c4:66:11:15:67:d4:5d:4b:d6:59:d9:c0:75:40:73:e7:e3:b8:
54:46:f0:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRIYS27lR7PSRJVnAHMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMzdmNjM4YzBiZTQ2MDBiNDY2ZGU4ZTMzMGQ0Y2Y2YTdm
ZjNiM2UwHhcNMjUxMTExMDcwMjI1WhcNMjUxMTEyMDcwMjI1WjAzMTEwLwYDVQQD
Eyg3YWE1MjVhNGY5NDZjMjY3NDgyOTM0NmYxZWIwOGI2NDkxYWVhMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkKUc3JtATa1yKHrWuGSnQLlH5jP
/s7Pp+QFiUNgDP01PnUxJyT1lgj00nnpuOzJ/+bPXWS3Y0GUoVQfe4DRHDsuSYCa
smOJBb9vEI0WHclvjBZlFKxGDcHWkXbmMRZdFaNQY9wozMoVZx5k6T7GaUseKpcR
eiiXpadsOoZV1c27cKrIqORuwGigIAXc8pasGRrxpNG981oUdJca3xId/JKK5Ppj
5OOPb20g0ksOzoriMN7LxYqwkuXe9iZ25/Ixj5DyijF6D0e88iLs4NMxtpJ7U0Lp
8owDqsMhqkXyz05xQg9MMPuhTaYkW1ZlHHDnn+JTfR51laztF6YyTM9P+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqlJaT5RsJnSCk0bx6wi2SRrqCSMB8GA1UdIwQY
MBaAFME39jjAvkYAtGbejjMNTPan/zs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1RmMk9NQy1SZ0MwWnQ2T013MU05cWZfT3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80OTFhODktNTg1MC00MGI2LTg1ZjQt
MTU0NmJiNmQzNmJiLzEvd1RmMk9NQy1SZ0MwWnQ2T013MU05cWZfT3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80OTFhODktNTg1MC00MGI2LTg1ZjQtMTU0NmJiNmQzNmJi
LzEvd1RmMk9NQy1SZ0MwWnQ2T013MU05cWZfT3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhjwyUnG
Na5nmOkNq+8LUgHSFYnzrAgO8IPAlD1sOxDdi1oL5mNO7+sVP6GWzwh3XkCWhZ9c
Nbpk590/a+ZeWerp1A2ubd4CFslrfgEDQea2SEedxEGWkeGDcFYa/IrMLaam/0N1
JuFEbgjpmqgeTqz9VuCiZlvMpVXDyyxx/QuOM1zAABx2EKy/2hMjeciqcqbqB2vx
Bhkm0zCvvarUzbJ6vSiMFAH3TSAg4L6TOfxrEdadW2COC12cVYE/oAuda2JQ+EgI
rMBzZEbfz8MSHHE4+S6xKiw1hYqc0bcyXfjXsNPtrwfBrrEtxGYRFWfUXUvWWdnA
dUBz5+O4VEbwLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:43 2025 by rpki-client