Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
File: wT40HB4U01p0ls54KOMFX4Y5Nc8.mft (raw, json)
Hash identifier: El0+mk1vo9Ldtoc0j1MY8jGWpPzWqyvuY47AvRjV5NQ=
Subject key identifier: AB:C1:D9:56:1D:77:50:01:F3:C5:E4:49:F2:F0:00:1A:78:90:D0:93
Authority key identifier: C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
Certificate issuer: /CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Certificate serial: 019A729328B1446B9F1D87EA87DF507C2B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 11:00:38 +0000
Manifest this update: Tue 11 Nov 2025 11:00:38 +0000
Manifest next update: Wed 12 Nov 2025 11:00:38 +0000
Files and hashes: 1: f1wBKCsXK0uC2nsel0GIe5b0KZk.roa (hash: G9RLd4HtWguPLDAL1JjtSWQmaqJ7AZGAeDkABfQH220=)
2: wT40HB4U01p0ls54KOMFX4Y5Nc8.crl (hash: dO1xUsJ9txQKUfSFBd3DyUQBxxbfHDBVHk0SrJSwLn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:28:b1:44:6b:9f:1d:87:ea:87:df:50:7c:2b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Validity
Not Before: Nov 11 11:00:38 2025 GMT
Not After : Nov 12 11:00:38 2025 GMT
Subject: CN=abc1d9561d775001f3c5e449f2f0001a7890d093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:48:52:23:f8:e3:91:27:43:ec:c0:b6:34:
4d:a7:5c:33:55:bc:8d:12:bc:18:28:4a:ea:55:b2:
7f:dd:7c:18:ed:7e:d8:10:25:83:8a:11:fb:0e:a0:
27:10:df:04:08:ca:88:6e:84:9b:af:57:dc:d5:cc:
0b:79:1d:24:92:f6:a6:f5:07:23:a3:87:98:ec:3c:
ff:a7:65:3f:f2:08:cc:4c:65:e0:3b:81:c7:bd:e7:
a5:e1:43:c5:94:f4:f0:33:59:03:11:fa:0f:b4:e3:
1b:bc:74:ce:1a:b0:a6:cd:06:4e:10:6a:b2:37:f3:
80:06:ab:d0:da:34:36:f4:93:99:58:a6:c1:26:1f:
1f:19:63:82:f1:8e:84:6e:49:3b:49:a1:2f:f3:9e:
fd:58:c9:c5:73:e8:1a:3f:4a:3c:9a:91:79:91:da:
40:b9:da:cf:45:05:03:a2:52:19:06:8a:e7:17:86:
dd:64:15:a2:70:c9:8c:ae:59:88:70:7b:90:d1:9c:
8c:2b:e5:db:0f:ae:fc:e8:85:ce:55:27:8a:6a:00:
a0:74:99:a4:7e:6c:48:95:83:f8:31:c3:f6:dc:c2:
85:71:ee:5e:e1:54:87:46:b8:1c:44:86:72:b2:fd:
cf:7e:8a:c9:f4:91:07:20:ef:58:c4:53:b7:1a:7a:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C1:D9:56:1D:77:50:01:F3:C5:E4:49:F2:F0:00:1A:78:90:D0:93
X509v3 Authority Key Identifier:
keyid:C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6b:7e:bf:07:10:08:a3:b2:86:34:45:0c:53:da:30:a9:76:
74:90:9d:e0:7d:e0:50:58:b5:8d:44:aa:4a:06:84:2a:bb:8b:
f3:84:70:17:80:77:41:c1:ab:90:6a:dd:33:14:69:a0:36:ae:
67:87:6e:5e:06:b6:f2:0b:f3:00:ac:8e:ca:8e:5d:b8:03:6a:
52:d9:58:b4:b2:56:53:c4:35:16:e0:72:76:07:a6:a9:a1:36:
ed:fa:b6:a8:2c:23:60:db:91:ef:08:73:48:14:22:c7:7b:1e:
ae:bc:56:09:cd:b6:1a:0a:b1:68:d1:32:e4:c3:fc:b4:98:c8:
fc:dd:6d:90:77:cb:af:96:58:3e:bd:39:16:cb:56:c9:1b:ab:
97:bf:9b:25:57:11:36:56:bd:b3:58:fa:09:19:86:e7:82:dd:
6b:39:0f:b6:3c:5c:05:46:2d:2e:a8:cb:5c:a8:65:4b:c4:1b:
cd:25:23:8b:9e:99:5d:75:db:48:19:ca:47:4a:0a:88:49:12:
80:79:f8:61:3c:16:b4:f0:99:61:b9:fa:63:bf:d7:c4:32:6e:
df:b2:ed:14:bd:70:4e:b0:be:13:5d:ea:f5:ea:cd:73:30:71:
0a:e9:d9:f7:0c:76:6e:ef:6e:5b:3e:bc:9c:7b:30:37:07:ac:
57:99:b9:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpykyixRGufHYfqh99QfCt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxM2UzNDFjMWUxNGQzNWE3NDk2Y2U3ODI4ZTMwNTVmODYz
OTM1Y2YwHhcNMjUxMTExMTEwMDM4WhcNMjUxMTEyMTEwMDM4WjAzMTEwLwYDVQQD
EyhhYmMxZDk1NjFkNzc1MDAxZjNjNWU0NDlmMmYwMDAxYTc4OTBkMDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApohIUiP445EnQ+zAtjRNp1wzVbyN
ErwYKErqVbJ/3XwY7X7YECWDihH7DqAnEN8ECMqIboSbr1fc1cwLeR0kkvam9Qcj
o4eY7Dz/p2U/8gjMTGXgO4HHveel4UPFlPTwM1kDEfoPtOMbvHTOGrCmzQZOEGqy
N/OABqvQ2jQ29JOZWKbBJh8fGWOC8Y6Ebkk7SaEv8579WMnFc+gaP0o8mpF5kdpA
udrPRQUDolIZBornF4bdZBWicMmMrlmIcHuQ0ZyMK+XbD6786IXOVSeKagCgdJmk
fmxIlYP4McP23MKFce5e4VSHRrgcRIZysv3PforJ9JEHIO9YxFO3GnrRQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvB2VYdd1AB88XkSfLwABp4kNCTMB8GA1UdIwQY
MBaAFME+NBweFNNadJbOeCjjBV+GOTXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Q0MEhCNFUwMXAwbHM1NEtPTUZYNFk1TmM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNGFiZjMtNGFmMy00MTgwLTgzNDAt
YjEzYTFmMjBkMTVmLzEvd1Q0MEhCNFUwMXAwbHM1NEtPTUZYNFk1TmM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hNGFiZjMtNGFmMy00MTgwLTgzNDAtYjEzYTFmMjBkMTVm
LzEvd1Q0MEhCNFUwMXAwbHM1NEtPTUZYNFk1TmM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGt+vwcQ
CKOyhjRFDFPaMKl2dJCd4H3gUFi1jUSqSgaEKruL84RwF4B3QcGrkGrdMxRpoDau
Z4duXga28gvzAKyOyo5duANqUtlYtLJWU8Q1FuBydgemqaE27fq2qCwjYNuR7whz
SBQix3serrxWCc22GgqxaNEy5MP8tJjI/N1tkHfLr5ZYPr05FstWyRurl7+bJVcR
Nla9s1j6CRmG54LdazkPtjxcBUYtLqjLXKhlS8QbzSUji56ZXXXbSBnKR0oKiEkS
gHn4YTwWtPCZYbn6Y7/XxDJu37LtFL1wTrC+E13q9erNczBxCunZ9wx2bu9uWz68
nHswNwesV5m5OA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:21 2025 by rpki-client