Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
File: wrUuo8q9FGpXffzfuHX_WjV1ctc.mft (raw, json)
Hash identifier: 2FecWkoS+/f29l2PSUunNQa0heXOJqCuTqn/yrBlrnk=
Subject key identifier: 76:99:B9:59:90:EC:4B:3E:F3:8C:8F:7C:58:EE:7A:E8:93:45:A6:CE
Authority key identifier: C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7
Certificate issuer: /CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
Certificate serial: 019A2AB14672505143E80A16256458FFDE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
Manifest number: 067F
Signing time: Tue 28 Oct 2025 12:00:52 +0000
Manifest this update: Tue 28 Oct 2025 12:00:52 +0000
Manifest next update: Wed 29 Oct 2025 12:00:52 +0000
Files and hashes: 1: MG_LemiZ4GgmFKwuBUT8GzFCS9o.roa (hash: OHMWKPBCF82oEvnytVAEpjmK3rUs3XOc7SKkHkxU2KQ=)
2: wrUuo8q9FGpXffzfuHX_WjV1ctc.crl (hash: fUnyIrj7YY5dgXyge5Ism8xQY59YZh6s4vy2JwByAmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:46:72:50:51:43:e8:0a:16:25:64:58:ff:de:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
Validity
Not Before: Oct 28 12:00:52 2025 GMT
Not After : Oct 29 12:00:52 2025 GMT
Subject: CN=7699b95990ec4b3ef38c8f7c58ee7ae89345a6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:8c:0d:b6:89:5b:c7:59:78:5c:24:fa:f9:
d8:7e:53:33:6d:be:b4:a9:26:7e:21:63:62:f5:02:
b8:ff:00:36:00:e2:6a:49:8e:06:67:2e:5f:8e:b9:
e8:f8:d5:20:30:f2:2b:7b:f1:01:7f:5d:79:0c:77:
49:d1:01:2e:dc:e8:6f:1d:94:4b:34:45:7a:42:00:
7b:d4:91:d9:19:70:60:58:89:43:d8:91:05:b4:a6:
28:42:0d:2a:83:97:83:84:67:3f:c1:ce:84:f1:75:
ff:3f:68:ed:80:ae:f2:77:92:c4:be:bf:bc:5b:13:
cf:a9:52:b8:4d:9a:47:e4:61:eb:53:d9:a0:6c:13:
d1:cc:50:0d:0e:b9:33:93:c5:90:5c:2d:97:37:30:
9a:29:05:5c:08:2d:14:99:df:1d:fd:dd:cb:16:4f:
ec:71:14:4e:3a:af:71:a8:c6:c4:d0:cb:dd:ec:d1:
e6:0b:6f:d5:7c:0c:81:80:de:e3:1d:37:3d:48:0a:
32:53:ec:60:0f:c4:eb:72:09:a5:10:2d:d8:c1:a9:
ce:5a:f4:65:53:7b:86:32:6b:12:eb:87:9c:56:df:
2f:65:28:ca:21:5d:52:d6:54:61:cd:88:1d:6b:09:
ba:12:fd:75:ab:1f:1a:40:6d:b5:d5:11:cf:3f:7f:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:99:B9:59:90:EC:4B:3E:F3:8C:8F:7C:58:EE:7A:E8:93:45:A6:CE
X509v3 Authority Key Identifier:
keyid:C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d7:5e:a3:dc:c5:ba:53:9e:81:6e:8c:b9:83:74:5e:4e:b0:
fa:aa:96:58:28:6f:e9:78:c7:1f:d9:e1:d2:d5:88:e2:64:5c:
05:79:3f:aa:b2:60:24:7f:ea:9d:ce:96:4e:66:3b:3a:13:ac:
3a:48:a3:09:58:22:23:3f:ba:e8:2c:71:dd:09:e6:d6:3a:b8:
e6:06:85:a5:de:2b:1e:19:06:92:c1:70:02:60:44:67:58:fa:
cb:17:59:f2:4a:16:f8:7f:9c:29:c1:ef:1d:cc:5d:34:ac:7c:
53:dd:be:55:2c:c3:be:01:e8:96:91:1b:b1:b3:79:75:fd:80:
ab:f2:ae:08:f1:ef:ab:59:f7:81:eb:32:42:88:82:24:88:58:
17:6f:3d:f4:14:05:b1:f4:e7:8c:15:d4:f4:3c:7d:96:99:64:
bd:6e:2d:16:65:30:d8:cf:9e:5c:ec:56:09:e9:39:34:df:04:
69:67:98:78:16:2a:67:de:df:52:8a:6a:10:96:c7:b9:a8:8c:
17:d9:a5:46:fa:46:8f:b9:9e:a1:f8:99:34:c5:36:32:5c:2c:
25:a4:12:94:b6:21:b4:ea:02:f2:f3:6b:13:c2:c3:9e:97:23:
ee:e7:c9:83:db:c2:f4:b5:83:0c:ff:72:ac:3b:9d:dc:74:d9:
4a:8a:c7:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqsUZyUFFD6AoWJWRY/952MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYjUyZWEzY2FiZDE0NmE1NzdkZmNkZmI4NzVmZjVhMzU3
NTcyZDcwHhcNMjUxMDI4MTIwMDUyWhcNMjUxMDI5MTIwMDUyWjAzMTEwLwYDVQQD
Eyg3Njk5Yjk1OTkwZWM0YjNlZjM4YzhmN2M1OGVlN2FlODkzNDVhNmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoReMDbaJW8dZeFwk+vnYflMzbb60
qSZ+IWNi9QK4/wA2AOJqSY4GZy5fjrno+NUgMPIre/EBf115DHdJ0QEu3OhvHZRL
NEV6QgB71JHZGXBgWIlD2JEFtKYoQg0qg5eDhGc/wc6E8XX/P2jtgK7yd5LEvr+8
WxPPqVK4TZpH5GHrU9mgbBPRzFANDrkzk8WQXC2XNzCaKQVcCC0Umd8d/d3LFk/s
cRROOq9xqMbE0Mvd7NHmC2/VfAyBgN7jHTc9SAoyU+xgD8TrcgmlEC3YwanOWvRl
U3uGMmsS64ecVt8vZSjKIV1S1lRhzYgdawm6Ev11qx8aQG211RHPP39w6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaZuVmQ7Es+84yPfFjueuiTRabOMB8GA1UdIwQY
MBaAFMK1LqPKvRRqV33837h1/1o1dXLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kODVhMjMtMTQ4YS00ZGJmLWIyYTMt
NGMyNmQwMjBkNDI1LzEvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kODVhMjMtMTQ4YS00ZGJmLWIyYTMtNGMyNmQwMjBkNDI1
LzEvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATddeo9zF
ulOegW6MuYN0Xk6w+qqWWChv6XjHH9nh0tWI4mRcBXk/qrJgJH/qnc6WTmY7OhOs
OkijCVgiIz+66Cxx3Qnm1jq45gaFpd4rHhkGksFwAmBEZ1j6yxdZ8koW+H+cKcHv
HcxdNKx8U92+VSzDvgHolpEbsbN5df2Aq/KuCPHvq1n3gesyQoiCJIhYF2899BQF
sfTnjBXU9Dx9lplkvW4tFmUw2M+eXOxWCek5NN8EaWeYeBYqZ97fUopqEJbHuaiM
F9mlRvpGj7meofiZNMU2MlwsJaQSlLYhtOoC8vNrE8LDnpcj7ufJg9vC9LWDDP9y
rDud3HTZSorHXQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 16:03:41 2025 by rpki-client