Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File: woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier: x4pw+y2DUvp16PrNlRBsqWsomFzDrN4auuRzFOTWJ24=
Subject key identifier: 5A:2E:9B:34:5F:83:8D:62:28:4F:8B:33:12:80:E3:96:08:63:B0:8B
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 019A72264D492526F4DCBE8D9465CF1E88A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (hash: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=)
2: TKlbM4JoTI14SvlWl9KxKwEmigw.roa (hash: YEHXScxruB3ZAlC0fbNpVAnfjw2qlaMRSrlrmf/M0XY=)
3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: Kn/lL9+JbRVZEMQrW7G5hRMkRv2CGZ55qGEaAaI8AoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4d:49:25:26:f4:dc:be:8d:94:65:cf:1e:88:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=5a2e9b345f838d62284f8b331280e3960863b08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:68:3b:73:d4:d6:53:62:dc:f4:20:90:99:
6f:cb:c5:c2:6f:1b:d9:ab:35:e5:81:bf:c5:b9:a2:
57:a7:02:96:79:d1:5b:2e:a7:8d:01:0b:48:95:67:
8c:a3:cf:55:ac:b1:61:b2:29:4b:9e:1d:ad:83:7f:
20:02:5f:72:29:b4:15:fa:4e:e6:52:49:10:5d:ba:
a8:8a:67:82:50:45:84:34:26:e7:0b:2e:5c:87:17:
ec:38:fd:e2:63:d6:dc:ba:a4:34:47:40:6e:4d:bc:
bc:dd:0f:84:67:8e:9d:d1:8a:39:e6:f1:b7:28:e8:
c5:c7:f5:e0:78:90:42:03:e0:1a:b5:60:b5:67:b5:
58:bb:e0:23:2e:2b:91:10:f0:83:b4:b4:67:4e:7b:
f5:20:0c:d4:2a:cd:50:be:f7:1c:05:c2:83:b2:b6:
41:dd:40:1f:22:48:eb:f5:b8:f5:40:98:6d:73:52:
f9:1c:5a:a7:15:4f:6d:43:a6:8b:a8:41:b5:78:ab:
b3:ec:94:5f:a6:61:b4:b8:7b:d2:0e:c8:86:46:94:
b1:97:d2:1c:86:8f:15:6c:41:9c:61:fa:26:35:1f:
f5:23:e4:be:0c:89:88:29:d5:1c:78:e3:84:be:e0:
54:f2:e9:68:97:c6:91:7a:04:ae:49:69:74:f1:d1:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:9B:34:5F:83:8D:62:28:4F:8B:33:12:80:E3:96:08:63:B0:8B
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:21:02:19:8c:c4:5c:5b:36:cd:57:00:f0:6d:23:74:4b:1b:
0b:4c:10:8f:b2:bf:69:9b:fe:62:fb:08:3c:75:01:0e:69:72:
04:5a:39:fb:ac:a0:27:c1:be:61:99:0c:c7:e6:08:da:46:46:
cf:b8:a1:69:bc:36:1d:17:d0:89:c4:e6:09:a8:8e:3e:62:8e:
d8:fc:80:d6:00:71:05:9b:1a:52:94:ba:e1:79:5a:ae:46:a2:
43:78:d9:81:14:d3:62:8c:a0:ac:a6:5b:11:af:4d:29:24:98:
2a:d7:27:71:c4:e1:7b:8b:b8:de:94:c8:6f:75:b1:a7:e3:07:
bc:6f:d4:6d:f1:f0:3a:c8:57:a4:96:3e:e6:7f:1e:46:98:bb:
3a:40:08:13:c9:45:b2:72:7f:86:3b:cc:f5:d4:9f:9f:dc:6e:
aa:db:dc:a1:88:cc:e9:db:71:3a:91:49:cc:53:b9:d2:f2:c0:
39:f7:86:5f:0c:e6:f4:cf:78:db:b1:32:d2:c7:3e:62:7a:6b:
4f:36:ae:15:5c:05:e4:00:6a:8a:8a:30:17:0a:a0:29:c3:f4:
d3:3b:a0:56:61:f9:34:02:24:44:4a:54:c8:13:c2:0a:95:96:
6c:4f:e2:cf:8e:2f:30:ea:94:9f:df:c3:66:f5:b0:1c:3d:9d:
0e:49:60:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJk1JJSb03L6NlGXPHoiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyODVhMTQ3NGUzODYyN2UzMDFhNTUxYmUzNGVmYTQ1ODJh
NWNmMzkwHhcNMjUxMTExMDkwMTQ0WhcNMjUxMTEyMDkwMTQ0WjAzMTEwLwYDVQQD
Eyg1YTJlOWIzNDVmODM4ZDYyMjg0ZjhiMzMxMjgwZTM5NjA4NjNiMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvNoO3PU1lNi3PQgkJlvy8XCbxvZ
qzXlgb/FuaJXpwKWedFbLqeNAQtIlWeMo89VrLFhsilLnh2tg38gAl9yKbQV+k7m
UkkQXbqoimeCUEWENCbnCy5chxfsOP3iY9bcuqQ0R0BuTby83Q+EZ46d0Yo55vG3
KOjFx/XgeJBCA+AatWC1Z7VYu+AjLiuREPCDtLRnTnv1IAzUKs1QvvccBcKDsrZB
3UAfIkjr9bj1QJhtc1L5HFqnFU9tQ6aLqEG1eKuz7JRfpmG0uHvSDsiGRpSxl9Ic
ho8VbEGcYfomNR/1I+S+DImIKdUceOOEvuBU8ulol8aRegSuSWl08dGEIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoumzRfg41iKE+LMxKA45YIY7CLMB8GA1UdIwQY
MBaAFMKFoUdOOGJ+MBpVG+NO+kWCpc85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd29XaFIwNDRZbjR3R2xVYjQwNzZSWUtsenprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9iNDlmODEtODUzNi00YTY3LTg5OWYt
ZDVlNjM4NTZkNTVkLzEvd29XaFIwNDRZbjR3R2xVYjQwNzZSWUtsenprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9iNDlmODEtODUzNi00YTY3LTg5OWYtZDVlNjM4NTZkNTVk
LzEvd29XaFIwNDRZbjR3R2xVYjQwNzZSWUtsenprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxyECGYzE
XFs2zVcA8G0jdEsbC0wQj7K/aZv+YvsIPHUBDmlyBFo5+6ygJ8G+YZkMx+YI2kZG
z7ihabw2HRfQicTmCaiOPmKO2PyA1gBxBZsaUpS64XlarkaiQ3jZgRTTYoygrKZb
Ea9NKSSYKtcnccThe4u43pTIb3Wxp+MHvG/UbfHwOshXpJY+5n8eRpi7OkAIE8lF
snJ/hjvM9dSfn9xuqtvcoYjM6dtxOpFJzFO50vLAOfeGXwzm9M9427Ey0sc+Ynpr
TzauFVwF5ABqioowFwqgKcP00zugVmH5NAIkREpUyBPCCpWWbE/iz44vMOqUn9/D
ZvWwHD2dDklgfw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:01 2025 by rpki-client