Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
File: WXIYySXnbh6YCYdfftGvqX72950.mft (raw, json)
Hash identifier: iM5CjOhVvwh0JdzuUzpyyX6dkUO542Qz4kXzPbe+iPk=
Subject key identifier: 11:2D:53:EA:62:06:0F:63:C9:51:10:68:42:5B:A9:BE:49:ED:B8:39
Authority key identifier: 59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D
Certificate issuer: /CN=597218c925e76e1e9809875f7ed1afa97ef6f79d
Certificate serial: 019A70A5408F6278910752799AB17F8D0353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
Manifest number: 014E
Signing time: Tue 11 Nov 2025 02:01:09 +0000
Manifest this update: Tue 11 Nov 2025 02:01:09 +0000
Manifest next update: Wed 12 Nov 2025 02:01:09 +0000
Files and hashes: 1: GYq7npqDI9nx5r20ZgfqjJ8jCBE.roa (hash: ohpsx6f/3RHy+wstuJFR07y68Swe9+64PHH/6mRDCMM=)
2: WXIYySXnbh6YCYdfftGvqX72950.crl (hash: F6PDv6vuCcc2N9UOrLSzvwMs3sfw1Pel5fzud+u6W9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:40:8f:62:78:91:07:52:79:9a:b1:7f:8d:03:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597218c925e76e1e9809875f7ed1afa97ef6f79d
Validity
Not Before: Nov 11 02:01:09 2025 GMT
Not After : Nov 12 02:01:09 2025 GMT
Subject: CN=112d53ea62060f63c9511068425ba9be49edb839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:db:b0:c9:96:1d:a9:1a:51:4a:27:38:ad:
0f:dc:fa:4f:dc:46:13:c7:9a:1c:cb:c2:88:35:9a:
b8:89:da:73:70:54:b8:5e:d5:74:b6:f4:25:b0:d7:
d6:a6:51:46:29:ae:e8:40:f3:09:02:6f:bd:4e:9a:
a1:7d:e2:4a:7c:5d:71:b2:c4:ee:ac:7f:ce:a5:a1:
14:67:3e:7c:eb:2d:27:f4:f5:f2:5e:96:26:49:65:
7c:d7:ac:53:aa:10:11:19:57:cb:0b:6f:02:55:b7:
b3:d7:76:42:c2:93:ba:21:6e:28:78:62:ae:74:7a:
cd:b9:58:d6:db:0a:f4:96:3d:b2:f1:04:52:6c:18:
47:4c:5e:2e:8d:11:18:f8:39:3f:e4:78:56:c7:ce:
c9:6b:76:07:e9:c0:a8:eb:37:e2:39:58:05:af:ca:
07:26:8e:fe:98:6c:04:ec:76:4f:ec:be:c2:fa:4c:
0a:72:fa:61:f5:a5:a0:61:3e:83:91:2c:c6:9f:bf:
6f:7d:33:da:2a:40:1b:23:a1:5d:06:6e:42:be:d1:
b4:af:57:3a:f5:d7:45:6a:04:79:4c:d3:4b:fc:32:
7c:6f:79:49:03:1d:00:bc:db:de:15:57:d1:e0:d7:
80:88:b5:77:8f:93:7e:cc:20:f7:f3:85:c2:cb:75:
4b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2D:53:EA:62:06:0F:63:C9:51:10:68:42:5B:A9:BE:49:ED:B8:39
X509v3 Authority Key Identifier:
keyid:59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ef:cb:f9:40:d6:cd:6e:6b:22:fa:2f:bb:bd:de:52:36:4b:
65:fe:98:cb:d0:c3:c1:da:0f:95:45:99:b8:8f:72:fe:86:42:
c7:1c:82:d9:24:44:a7:dc:72:95:2a:e6:a1:a7:26:9f:05:88:
02:59:8c:50:e3:d4:37:09:6d:87:b2:0c:dd:da:b9:50:3c:ef:
c9:4f:d2:b6:e1:2c:5f:49:1c:4c:78:dc:61:78:d0:e7:ea:e4:
e0:ba:a5:3b:2e:35:b2:78:bc:75:d4:6f:31:3e:52:45:a8:0b:
6d:8c:d4:b3:aa:ab:fa:16:2f:a8:b1:85:41:18:74:5f:4f:c3:
b4:2f:fb:64:a5:c8:f2:78:66:f1:fc:81:d3:a2:bb:e2:ff:35:
26:25:37:a9:2c:c1:47:1f:4f:61:f8:53:e1:94:47:71:a9:d6:
59:71:0e:9e:13:ac:4e:2f:66:e1:75:50:41:a7:f1:12:13:b9:
2a:ae:20:80:34:f2:49:43:09:8d:9e:1e:2b:d4:63:0b:ef:e9:
1d:62:41:01:66:bd:2e:94:74:fa:c0:e6:b5:39:3f:fa:ba:d5:
08:4e:2c:e8:59:7f:91:8f:bf:0f:0b:40:ac:76:1f:48:fe:56:
61:84:30:e5:30:e1:00:c1:a5:ff:20:78:15:35:b2:3f:a3:c2:
67:f8:10:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpUCPYniRB1J5mrF/jQNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzIxOGM5MjVlNzZlMWU5ODA5ODc1ZjdlZDFhZmE5N2Vm
NmY3OWQwHhcNMjUxMTExMDIwMTA5WhcNMjUxMTEyMDIwMTA5WjAzMTEwLwYDVQQD
EygxMTJkNTNlYTYyMDYwZjYzYzk1MTEwNjg0MjViYTliZTQ5ZWRiODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1/bsMmWHakaUUonOK0P3PpP3EYT
x5ocy8KINZq4idpzcFS4XtV0tvQlsNfWplFGKa7oQPMJAm+9TpqhfeJKfF1xssTu
rH/OpaEUZz586y0n9PXyXpYmSWV816xTqhARGVfLC28CVbez13ZCwpO6IW4oeGKu
dHrNuVjW2wr0lj2y8QRSbBhHTF4ujREY+Dk/5HhWx87Ja3YH6cCo6zfiOVgFr8oH
Jo7+mGwE7HZP7L7C+kwKcvph9aWgYT6DkSzGn79vfTPaKkAbI6FdBm5CvtG0r1c6
9ddFagR5TNNL/DJ8b3lJAx0AvNveFVfR4NeAiLV3j5N+zCD384XCy3VLuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEtU+piBg9jyVEQaEJbqb5J7bg5MB8GA1UdIwQY
MBaAFFlyGMkl524emAmHX37Rr6l+9vedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hJWXlTWG5iaDZZQ1lkZmZ0R3ZxWDcyOTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC81Njg3MjgtNGM1Ni00YThmLWFmYjMt
YzQ0ZjlkN2ZmZGY2LzEvV1hJWXlTWG5iaDZZQ1lkZmZ0R3ZxWDcyOTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC81Njg3MjgtNGM1Ni00YThmLWFmYjMtYzQ0ZjlkN2ZmZGY2
LzEvV1hJWXlTWG5iaDZZQ1lkZmZ0R3ZxWDcyOTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+/L+UDW
zW5rIvovu73eUjZLZf6Yy9DDwdoPlUWZuI9y/oZCxxyC2SREp9xylSrmoacmnwWI
AlmMUOPUNwlth7IM3dq5UDzvyU/StuEsX0kcTHjcYXjQ5+rk4LqlOy41sni8ddRv
MT5SRagLbYzUs6qr+hYvqLGFQRh0X0/DtC/7ZKXI8nhm8fyB06K74v81JiU3qSzB
Rx9PYfhT4ZRHcanWWXEOnhOsTi9m4XVQQafxEhO5Kq4ggDTySUMJjZ4eK9RjC+/p
HWJBAWa9LpR0+sDmtTk/+rrVCE4s6Fl/kY+/DwtArHYfSP5WYYQw5TDhAMGl/yB4
FTWyP6PCZ/gQHg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:07 2025 by rpki-client