Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
File: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft (raw, json)
Hash identifier: wOi37vLc2/V834dsfa+ODTDATiBELF9vMgInVXrQ7qE=
Subject key identifier: 20:9E:26:0D:F3:F1:DB:7A:B5:D7:97:87:86:5B:4C:CA:77:4D:AE:BF
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 019A145FDD239B811546D8341DAE9B61FF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
Manifest number: 0FFC
Signing time: Fri 24 Oct 2025 04:00:18 +0000
Manifest this update: Fri 24 Oct 2025 04:00:18 +0000
Manifest next update: Sat 25 Oct 2025 04:00:18 +0000
Files and hashes: 1: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl (hash: M9mj0AEiLBCPd2cxr421BSEWc+M1vRZBSa/vrV3hZes=)
2: NHhXoxxdMNakey6qmBeac9wJBd4.roa (hash: +reJ5PfpdsvDjpTAS5jPNWl9ybmFWN+FQOCbnBXMIy8=)
3: iobCcR3UyoYrtXm2S8hRWxvM3zg.roa (hash: 3usXJWbHzs8K4G1qHJnvLDQutknaGmUnq2D6gx78C1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:5f:dd:23:9b:81:15:46:d8:34:1d:ae:9b:61:ff:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: Oct 24 04:00:18 2025 GMT
Not After : Oct 25 04:00:18 2025 GMT
Subject: CN=209e260df3f1db7ab5d79787865b4cca774daebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:ca:75:6e:bc:52:63:39:dc:df:33:29:99:
94:b1:bd:c4:24:86:7f:81:a1:87:8c:c0:ea:89:89:
69:49:89:90:a4:41:64:09:36:e7:41:79:35:79:de:
eb:53:f2:e4:c8:79:b6:63:31:dc:87:69:07:e3:05:
7d:1b:69:f4:30:6b:3c:9c:56:f7:67:e5:28:c4:6d:
ed:1e:b2:b0:45:b0:d9:29:f1:28:1a:fa:1d:fa:5f:
58:e0:62:d2:fe:24:9a:e2:b3:e8:1b:8a:e7:70:be:
5f:ca:15:41:9e:0a:d3:59:54:6e:50:eb:28:03:fc:
d8:32:91:20:66:60:97:2f:10:0f:42:27:5d:74:ab:
a5:d5:6c:c3:39:13:b1:7d:94:08:31:f2:00:dd:a9:
a0:42:c0:d2:e4:07:de:dd:38:54:c2:e6:e6:c9:28:
47:a1:f7:90:9f:4f:df:f0:bf:dd:9b:57:be:f9:ff:
8f:29:37:f5:ee:bf:f3:42:da:cb:a6:7b:bd:a6:ba:
e5:e6:be:48:8c:df:d0:fc:52:0e:e6:13:c3:c3:34:
01:f3:21:76:4b:83:e9:66:f9:7e:3c:70:fd:10:86:
11:7a:6e:bf:93:12:7f:5a:05:31:78:d2:b3:3b:22:
ce:28:ea:4b:cc:77:33:11:8f:dd:65:53:04:5b:41:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9E:26:0D:F3:F1:DB:7A:B5:D7:97:87:86:5B:4C:CA:77:4D:AE:BF
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a2:6d:64:31:2f:87:08:19:c3:6b:00:78:d0:3f:1b:47:65:
4a:3f:d6:c4:97:6c:46:4f:73:3a:68:61:72:9f:8a:d8:fd:f2:
88:16:9a:ad:39:11:7e:7d:56:8a:27:fa:ef:18:40:1e:ff:5c:
43:0a:6d:5b:9c:10:34:38:07:c7:b7:86:2f:f3:49:01:74:a4:
9d:cf:ce:2c:db:54:30:5f:61:c5:09:94:b6:07:34:b2:20:ed:
93:f0:eb:f1:15:32:18:d2:9b:76:fa:4b:cc:5c:60:44:9c:9c:
de:28:30:27:7a:9a:c2:47:d3:02:1a:07:93:a4:14:70:37:4e:
53:24:97:ae:89:78:26:20:7f:42:5c:35:9f:9d:2b:42:94:85:
e1:f0:4e:f8:f6:34:20:5a:a2:6c:90:2f:8e:fa:38:ba:ac:35:
de:02:cc:85:20:8d:55:c8:cb:06:2e:03:56:80:60:4a:00:e7:
13:76:d8:47:18:ac:8f:07:32:f8:18:f4:22:ac:b1:ff:91:ed:
44:a5:c4:96:97:5c:66:70:bc:15:b3:2a:88:0b:17:97:9b:9e:
97:be:5b:b8:75:6c:f6:20:5b:fc:0b:0d:16:77:53:2c:a6:23:
a0:2c:83:2d:0c:d7:d9:41:2b:3e:1f:8a:25:13:71:48:89:0d:
19:38:b7:84
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZoUX90jm4EVRtg0Ha6bYf9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjI5Nzc1MjgzNzMzYTQ1YzQ1NGI4ZDdiZTVhNjZkZjBk
YjFhMTcwHhcNMjUxMDI0MDQwMDE4WhcNMjUxMDI1MDQwMDE4WjAzMTEwLwYDVQQD
EygyMDllMjYwZGYzZjFkYjdhYjVkNzk3ODc4NjViNGNjYTc3NGRhZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwzKdW68UmM53N8zKZmUsb3EJIZ/
gaGHjMDqiYlpSYmQpEFkCTbnQXk1ed7rU/LkyHm2YzHch2kH4wV9G2n0MGs8nFb3
Z+UoxG3tHrKwRbDZKfEoGvod+l9Y4GLS/iSa4rPoG4rncL5fyhVBngrTWVRuUOso
A/zYMpEgZmCXLxAPQidddKul1WzDOROxfZQIMfIA3amgQsDS5Afe3ThUwubmyShH
ofeQn0/f8L/dm1e++f+PKTf17r/zQtrLpnu9prrl5r5IjN/Q/FIO5hPDwzQB8yF2
S4PpZvl+PHD9EIYRem6/kxJ/WgUxeNKzOyLOKOpLzHczEY/dZVMEW0EQ1QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCCeJg3z8dt6tdeXh4ZbTMp3Ta6/MB8GA1UdIwQY
MBaAFPlil3UoNzOkXEVLjXvlpm3w2xoXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XS1hkU2czTTZSY1JVdU5lLVdtYmZEYkdoYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZWJmY2U2LTI4NTctNDA0Yi05Yjc0
LWIzMjRlMDI1YjkyOS8xLzEtV0tYZFNnM002UmNSVXVOZS1XbWJmRGJHaGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdkL2ViZmNlNi0yODU3LTQwNGItOWI3NC1iMzI0ZTAyNWI5
MjkvMS8xLVdLWGRTZzNNNlJjUlV1TmUtV21iZkRiR2hjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6Jt
ZDEvhwgZw2sAeNA/G0dlSj/WxJdsRk9zOmhhcp+K2P3yiBaarTkRfn1Wiif67xhA
Hv9cQwptW5wQNDgHx7eGL/NJAXSknc/OLNtUMF9hxQmUtgc0siDtk/Dr8RUyGNKb
dvpLzFxgRJyc3igwJ3qawkfTAhoHk6QUcDdOUySXrol4JiB/Qlw1n50rQpSF4fBO
+PY0IFqibJAvjvo4uqw13gLMhSCNVcjLBi4DVoBgSgDnE3bYRxisjwcy+Bj0Iqyx
/5HtRKXElpdcZnC8FbMqiAsXl5uel75buHVs9iBb/AsNFndTLKYjoCyDLQzX2UEr
Ph+KJRNxSIkNGTi3hA==
-----END CERTIFICATE-----
Generated at Fri Oct 24 08:25:44 2025 by rpki-client