Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File: wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier: fg8Zj8nRuO2BcyFD1MnO7PsJ/T3UFVWiw+HMvVy8zZA=
Subject key identifier: DC:33:A4:AB:8C:BC:4D:A0:78:EE:51:B5:68:CC:59:7A:E0:F6:DF:81
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 019A209C570E3435A56398766CE440B4BD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number: 1704
Signing time: Sun 26 Oct 2025 13:01:48 +0000
Manifest this update: Sun 26 Oct 2025 13:01:48 +0000
Manifest next update: Mon 27 Oct 2025 13:01:48 +0000
Files and hashes: 1: 2oAVyU2seJGTQFfvnoLEW0LxBMw.roa (hash: ZURqts9j5VKp8XJN1Pz3dvi3R29PhjPq43deEFPHUGM=)
2: AT0dJX8We-n1OQnzvfJggA9FrB4.roa (hash: 9UAeHkptLtx/0ySMZUXtLEVDmGoLUOk5U9+no/9RFDk=)
3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: TK4HrcjiumDdRiLzL9D5uV6ffy/kMLL7cXb7b6grRZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:57:0e:34:35:a5:63:98:76:6c:e4:40:b4:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Oct 26 13:01:48 2025 GMT
Not After : Oct 27 13:01:48 2025 GMT
Subject: CN=dc33a4ab8cbc4da078ee51b568cc597ae0f6df81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:2c:78:ef:4d:46:67:de:36:f4:72:50:2c:
02:2f:cf:46:da:bc:36:ae:05:5b:96:ce:5d:37:9c:
bc:4f:17:65:fa:6c:84:30:d3:f9:ba:7f:27:b4:88:
8d:4a:8a:63:76:e9:d7:d8:94:4d:8e:90:16:e4:e8:
21:e5:6c:0f:ba:8b:ad:95:d5:0e:26:1d:7a:e9:bd:
61:38:5b:0c:58:69:88:f8:46:6b:8c:37:11:be:cc:
8c:76:12:02:41:03:2b:d7:2a:6d:01:1f:08:96:c8:
48:32:00:45:19:29:68:3a:7f:15:d4:86:fc:9e:9f:
7b:c8:82:b2:3e:05:af:bd:73:6a:72:86:ed:66:e1:
47:8f:c5:0c:8c:2e:e4:e6:ad:ff:85:7d:4f:dd:d3:
ad:5f:94:6c:14:c2:67:72:ab:7d:61:d7:5a:2d:d8:
5f:d2:6a:00:0e:8c:cd:95:7b:58:fb:d1:0f:88:e0:
f6:81:d7:dc:46:11:55:a7:62:f7:4d:d3:b8:68:0a:
3d:3c:ec:38:98:02:0a:45:ce:ea:72:9a:d8:49:b4:
de:1e:0d:a5:8e:cf:69:ff:a3:2c:76:35:4b:3e:79:
6e:59:70:2f:53:fc:c2:06:b5:7a:f8:26:39:57:35:
2b:b0:95:02:bf:db:2c:aa:9a:c3:5d:cc:74:72:13:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:33:A4:AB:8C:BC:4D:A0:78:EE:51:B5:68:CC:59:7A:E0:F6:DF:81
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:68:0a:2f:c8:39:d1:87:8a:1a:20:ee:92:54:ed:60:1d:48:
41:40:d4:16:e6:80:df:1c:e4:2f:f1:59:56:ca:58:5e:29:c6:
c4:b2:5d:1f:9d:89:1e:13:89:82:43:db:aa:e6:b5:dc:db:1a:
6e:1d:b1:e4:32:8e:e4:3e:a7:07:d2:e1:40:d5:aa:3e:a9:c1:
a0:08:40:fb:53:d9:2b:ab:7c:5f:7b:cf:61:80:22:e9:9b:b6:
88:63:a6:1b:b0:d7:af:5f:80:99:fe:71:58:e4:94:6e:c6:27:
84:e4:92:ba:41:4e:64:30:4e:54:e8:2c:4f:be:83:f2:36:83:
ba:f3:80:23:c5:ef:21:57:ed:9b:88:6c:13:d2:8f:0c:be:76:
0a:07:90:f8:c7:6b:9c:04:6d:ad:05:f0:ad:41:7e:ad:73:f0:
e3:f2:99:8f:c0:b3:ba:83:e8:96:99:23:98:eb:57:eb:9d:1b:
48:a2:04:e2:6d:f0:31:38:dd:35:72:fc:e5:e6:13:ae:b7:77:
2c:ea:eb:ad:e6:e3:ab:9f:60:11:d8:d9:1b:96:46:64:ff:8b:
01:72:e2:78:a7:76:e0:ea:db:b1:96:f8:cb:a7:bd:83:b5:f8:
b8:db:45:6a:db:3c:80:2e:9b:f0:33:60:c4:31:b4:0b:51:7d:
97:4f:ed:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZognFcONDWlY5h2bORAtL1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDJhMjM0ZTIyNGJmODc5OTZmMmYwZGY1NTllYWQ4ODJm
OWU2NTEwHhcNMjUxMDI2MTMwMTQ4WhcNMjUxMDI3MTMwMTQ4WjAzMTEwLwYDVQQD
EyhkYzMzYTRhYjhjYmM0ZGEwNzhlZTUxYjU2OGNjNTk3YWUwZjZkZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDIseO9NRmfeNvRyUCwCL89G2rw2
rgVbls5dN5y8Txdl+myEMNP5un8ntIiNSopjdunX2JRNjpAW5Ogh5WwPuoutldUO
Jh166b1hOFsMWGmI+EZrjDcRvsyMdhICQQMr1yptAR8IlshIMgBFGSloOn8V1Ib8
np97yIKyPgWvvXNqcobtZuFHj8UMjC7k5q3/hX1P3dOtX5RsFMJncqt9YddaLdhf
0moADozNlXtY+9EPiOD2gdfcRhFVp2L3TdO4aAo9POw4mAIKRc7qcprYSbTeHg2l
js9p/6MsdjVLPnluWXAvU/zCBrV6+CY5VzUrsJUCv9ssqprDXcx0chPDdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwzpKuMvE2geO5RtWjMWXrg9t+BMB8GA1UdIwQY
MBaAFMLSojTiJL+HmW8vDfVZ6tiC+eZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RLaU5PSWt2NGVaYnk4TjlWbnEySUw1NWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kMWVlNGItZTg4YS00ZTQxLWE2MTYt
NGIyNDhkYTZjOTZjLzEvd3RLaU5PSWt2NGVaYnk4TjlWbnEySUw1NWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kMWVlNGItZTg4YS00ZTQxLWE2MTYtNGIyNDhkYTZjOTZj
LzEvd3RLaU5PSWt2NGVaYnk4TjlWbnEySUw1NWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGgKL8g5
0YeKGiDuklTtYB1IQUDUFuaA3xzkL/FZVspYXinGxLJdH52JHhOJgkPbqua13Nsa
bh2x5DKO5D6nB9LhQNWqPqnBoAhA+1PZK6t8X3vPYYAi6Zu2iGOmG7DXr1+Amf5x
WOSUbsYnhOSSukFOZDBOVOgsT76D8jaDuvOAI8XvIVftm4hsE9KPDL52CgeQ+Mdr
nARtrQXwrUF+rXPw4/KZj8CzuoPolpkjmOtX650bSKIE4m3wMTjdNXL85eYTrrd3
LOrrrebjq59gEdjZG5ZGZP+LAXLieKd24OrbsZb4y6e9g7X4uNtFats8gC6b8DNg
xDG0C1F9l0/tCw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:51:33 2025 by rpki-client