Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: sw+Bq3WEYDQV7b4YfE6ixj2h/Pp9Vpynf/sVHODYZA4=
Subject key identifier: 1E:10:01:CC:4D:59:6D:85:95:C8:FC:91:57:35:1F:07:46:9E:CD:AF
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 019A7149A281CF81A8CA07ABA2898F992B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:00:42 +0000
Manifest this update: Tue 11 Nov 2025 05:00:42 +0000
Manifest next update: Wed 12 Nov 2025 05:00:42 +0000
Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: UdwF038LxtAOZz7c1DzeUkG97uJ196rBwHR2GLy2DGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a2:81:cf:81:a8:ca:07:ab:a2:89:8f:99:2b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Nov 11 05:00:42 2025 GMT
Not After : Nov 12 05:00:42 2025 GMT
Subject: CN=1e1001cc4d596d8595c8fc9157351f07469ecdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:0f:c2:15:b4:87:21:71:69:a4:94:aa:fb:
09:07:fa:3f:a1:09:9f:5d:d3:70:9a:25:3d:da:42:
04:8c:7a:d2:89:a4:56:08:73:86:0a:2f:1c:4f:cb:
b1:6c:53:a7:73:c9:bc:89:86:06:75:96:5c:0e:19:
41:55:26:6a:b6:bf:1d:ca:0f:a7:c7:fd:41:77:56:
77:c3:70:fe:49:9f:45:8f:8e:17:5f:d0:c5:3e:70:
be:6d:e8:33:cd:1d:64:80:fd:2e:cd:33:41:51:b6:
17:6c:d9:59:72:82:e3:ba:20:26:11:62:28:0b:33:
5d:6b:94:fa:f1:c0:3f:f5:3b:4a:29:55:52:96:c2:
ff:ee:f1:3f:f3:72:a0:db:1c:4c:ce:0d:df:f4:fd:
ad:46:d5:47:28:d6:8a:c7:c7:c6:43:67:2e:99:0e:
b6:41:63:fe:41:f8:c9:09:ca:35:e9:2a:84:bc:45:
e4:dd:58:1f:48:77:26:6d:8c:70:de:6d:01:dc:16:
55:bc:b2:06:25:23:96:02:fc:4a:04:28:b7:6d:31:
95:59:43:c8:bb:60:52:d8:99:53:55:89:06:9d:b6:
e1:58:63:00:cb:c1:17:f0:30:a7:9c:59:60:70:fa:
13:39:d2:cc:2b:ea:91:07:ed:17:e7:fa:ab:e3:57:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:10:01:CC:4D:59:6D:85:95:C8:FC:91:57:35:1F:07:46:9E:CD:AF
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:66:15:d7:24:99:86:be:94:8f:e6:fd:c2:d9:a8:83:50:e0:
98:c1:e2:d6:93:f5:64:d3:33:0b:6d:a8:84:1a:f7:4f:4b:df:
4a:69:3a:b5:a4:bd:cf:68:61:ba:4f:1b:0a:11:a7:95:40:09:
e9:60:b1:47:82:27:ac:83:b5:22:c7:16:cc:49:9f:6b:16:08:
cc:ae:6c:ab:e2:61:55:1e:ac:35:3e:79:f8:37:af:18:6b:1a:
c9:b8:f6:53:db:a0:96:45:11:89:6a:75:05:d1:f7:95:da:9e:
8a:bd:a2:01:83:4f:a1:0b:23:7b:f1:43:31:8b:71:2c:00:e9:
e3:5c:dd:1e:37:0a:31:9b:d6:85:d5:a5:d7:6e:35:c4:51:82:
a6:cd:6b:7a:74:dd:cb:63:3f:0c:5b:5a:ae:1b:7d:cd:34:b8:
ed:11:92:ca:16:68:d5:1f:a4:0a:f6:ea:7f:6d:3a:e5:ff:98:
53:1b:c9:aa:9a:5e:cd:a4:dc:07:5b:9c:fb:4e:14:59:d1:e7:
bf:5b:b4:75:4c:b9:c1:a2:8a:ef:4e:98:d7:16:fe:c8:fe:b8:
6b:94:4b:19:7a:7c:2f:09:a0:c3:80:c6:03:63:2b:bf:0e:2b:
dd:a8:57:2b:4a:99:21:37:36:02:44:9d:e6:9b:0b:87:82:84:
cf:13:04:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSaKBz4GoygeroomPmSs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZTNmYTg3ZWIzMTY5YTdkMmRkNzQ0NTMyODMwMjFhMjcw
M2M3NjkwHhcNMjUxMTExMDUwMDQyWhcNMjUxMTEyMDUwMDQyWjAzMTEwLwYDVQQD
EygxZTEwMDFjYzRkNTk2ZDg1OTVjOGZjOTE1NzM1MWYwNzQ2OWVjZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCgPwhW0hyFxaaSUqvsJB/o/oQmf
XdNwmiU92kIEjHrSiaRWCHOGCi8cT8uxbFOnc8m8iYYGdZZcDhlBVSZqtr8dyg+n
x/1Bd1Z3w3D+SZ9Fj44XX9DFPnC+begzzR1kgP0uzTNBUbYXbNlZcoLjuiAmEWIo
CzNda5T68cA/9TtKKVVSlsL/7vE/83Kg2xxMzg3f9P2tRtVHKNaKx8fGQ2cumQ62
QWP+QfjJCco16SqEvEXk3VgfSHcmbYxw3m0B3BZVvLIGJSOWAvxKBCi3bTGVWUPI
u2BS2JlTVYkGnbbhWGMAy8EX8DCnnFlgcPoTOdLMK+qRB+0X5/qr41evZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4QAcxNWW2Flcj8kVc1HwdGns2vMB8GA1UdIwQY
MBaAFMLj+ofrMWmn0t10RTKDAhonA8dpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYt
ZGZlNTY2NDExMDE2LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYtZGZlNTY2NDExMDE2
LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWYV1ySZ
hr6Uj+b9wtmog1DgmMHi1pP1ZNMzC22ohBr3T0vfSmk6taS9z2hhuk8bChGnlUAJ
6WCxR4InrIO1IscWzEmfaxYIzK5sq+JhVR6sNT55+DevGGsaybj2U9uglkURiWp1
BdH3ldqeir2iAYNPoQsje/FDMYtxLADp41zdHjcKMZvWhdWl1241xFGCps1renTd
y2M/DFtarht9zTS47RGSyhZo1R+kCvbqf2065f+YUxvJqppezaTcB1uc+04UWdHn
v1u0dUy5waKK706Y1xb+yP64a5RLGXp8Lwmgw4DGA2Mrvw4r3ahXK0qZITc2AkSd
5psLh4KEzxMEFw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:48 2025 by rpki-client