Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
File: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json)
Hash identifier: rzdmL9RFttQyTaXLu+64Qt4E4bFjizyN5tOaqgvxavM=
Subject key identifier: 07:55:1E:7F:99:D2:05:51:14:BE:70:3D:C6:8F:5E:D3:84:C7:3D:25
Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
Certificate issuer: /CN=f966238becd356df87d0c630248123f8f219e18c
Certificate serial: 019A70A527DB1E8442ABDF788F2C2E2ECD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
Manifest number: 065C
Signing time: Tue 11 Nov 2025 02:01:02 +0000
Manifest this update: Tue 11 Nov 2025 02:01:02 +0000
Manifest next update: Wed 12 Nov 2025 02:01:02 +0000
Files and hashes: 1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: MduOOpGAOPrVjA/ZL+xMMHeDhZKdTWstKrbd88Ul748=)
2: qVNInsbhBFyRmIgRlhSK_CcLPjM.roa (hash: laAyeRcD8/2Z20+NXh12zW1wGOZiDGkQ810we5zegYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:27:db:1e:84:42:ab:df:78:8f:2c:2e:2e:cd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f966238becd356df87d0c630248123f8f219e18c
Validity
Not Before: Nov 11 02:01:02 2025 GMT
Not After : Nov 12 02:01:02 2025 GMT
Subject: CN=07551e7f99d2055114be703dc68f5ed384c73d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:d4:62:4c:0e:6e:61:18:80:8e:4e:a4:36:
88:fb:5e:db:13:88:88:e3:c0:ff:94:55:96:7c:04:
76:8d:16:35:dc:e3:ce:87:65:03:02:7d:b5:f6:65:
2e:93:34:6c:37:63:7e:a7:91:22:03:7f:10:62:5f:
ae:60:06:7c:43:17:18:b5:0f:d8:43:23:5f:63:5b:
ce:be:40:00:5d:98:b6:6b:3e:d4:a8:4d:dc:99:76:
06:fb:87:57:6a:50:e5:3a:72:70:c9:6d:79:01:f2:
c3:7c:61:32:0c:09:20:de:b4:c8:5e:85:79:a9:76:
81:40:6b:dc:69:56:58:a2:8b:00:af:e0:ae:6d:68:
2d:39:6c:8a:19:67:fc:77:b7:d0:2f:5e:23:68:b6:
93:8e:ea:9b:a3:fa:ea:22:12:1c:bb:9b:87:a1:35:
41:65:f7:30:bd:3e:a0:c3:17:d8:4a:8b:7c:a4:56:
08:c6:5a:1b:92:66:18:b6:49:a2:b2:e6:b9:76:16:
45:b8:13:72:a6:bf:71:68:25:7d:8f:71:e7:04:28:
b2:c6:f8:e3:27:6a:46:0c:3c:f6:33:26:50:3f:67:
b6:31:95:b0:12:cd:e0:65:65:9a:44:08:79:11:0f:
e0:3e:3d:d2:d5:7e:cb:0e:ee:6b:32:a7:20:46:06:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:55:1E:7F:99:D2:05:51:14:BE:70:3D:C6:8F:5E:D3:84:C7:3D:25
X509v3 Authority Key Identifier:
keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:95:23:b9:d2:58:0c:1c:a5:9b:8b:5a:78:cb:f5:06:a4:f7:
d5:32:be:dd:73:e8:25:5b:17:2d:ef:80:ab:18:fd:a2:a9:38:
f4:30:88:8a:97:96:6b:68:48:ec:44:99:e2:ba:28:dd:dc:51:
42:e9:9d:f8:da:13:df:8c:b8:8a:bf:8f:35:d1:c0:1b:8e:a2:
71:8f:5d:ed:d5:fa:3e:e2:fd:9d:74:90:7f:ca:cc:ba:cb:bf:
79:50:5f:99:db:9d:cf:c4:fb:37:f9:47:74:c4:c4:d7:ab:fe:
da:48:20:d6:c8:5b:d7:ca:78:26:ba:ce:65:03:51:85:08:e6:
59:42:c4:96:52:87:45:cc:56:13:ec:40:9c:c6:b2:d4:6a:32:
86:fe:77:11:fb:70:a1:42:d8:92:d1:ad:eb:61:9b:ae:59:82:
87:f1:82:16:70:75:ad:3b:e3:3f:1a:54:9b:d8:e1:53:7a:6e:
81:a2:cd:80:60:0d:6a:25:3a:e7:01:c8:95:b0:03:7a:70:f3:
e2:6b:27:15:47:92:f7:10:25:59:a5:bc:5c:7c:28:54:2d:ae:
63:38:3a:51:ad:31:06:4e:d2:7c:71:68:26:c2:86:56:6b:ad:
e8:57:54:08:42:cc:9a:d5:fb:a6:08:48:52:55:48:ec:f9:f3:
ff:a7:d1:45
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpwpSfbHoRCq994jywuLs1mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjYyMzhiZWNkMzU2ZGY4N2QwYzYzMDI0ODEyM2Y4ZjIx
OWUxOGMwHhcNMjUxMTExMDIwMTAyWhcNMjUxMTEyMDIwMTAyWjAzMTEwLwYDVQQD
EygwNzU1MWU3Zjk5ZDIwNTUxMTRiZTcwM2RjNjhmNWVkMzg0YzczZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3snUYkwObmEYgI5OpDaI+17bE4iI
48D/lFWWfAR2jRY13OPOh2UDAn219mUukzRsN2N+p5EiA38QYl+uYAZ8QxcYtQ/Y
QyNfY1vOvkAAXZi2az7UqE3cmXYG+4dXalDlOnJwyW15AfLDfGEyDAkg3rTIXoV5
qXaBQGvcaVZYoosAr+CubWgtOWyKGWf8d7fQL14jaLaTjuqbo/rqIhIcu5uHoTVB
ZfcwvT6gwxfYSot8pFYIxlobkmYYtkmisua5dhZFuBNypr9xaCV9j3HnBCiyxvjj
J2pGDDz2MyZQP2e2MZWwEs3gZWWaRAh5EQ/gPj3S1X7LDu5rMqcgRgZSvQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAdVHn+Z0gVRFL5wPcaPXtOExz0lMB8GA1UdIwQY
MBaAFPlmI4vs01bfh9DGMCSBI/jyGeGMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XWWppLXpUVnQtSDBNWXdKSUVqLVBJWjRZdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvYThlY2U3LTJiNmMtNDQ1MS04YjNk
LTMzMmRiZDlhNjBhZi8xLzEtV1lqaS16VFZ0LUgwTVl3SklFai1QSVo0WXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I3L2E4ZWNlNy0yYjZjLTQ0NTEtOGIzZC0zMzJkYmQ5YTYw
YWYvMS8xLVdZamktelRWdC1IME1Zd0pJRWotUElaNFl3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJUj
udJYDBylm4taeMv1BqT31TK+3XPoJVsXLe+Aqxj9oqk49DCIipeWa2hI7ESZ4roo
3dxRQumd+NoT34y4ir+PNdHAG46icY9d7dX6PuL9nXSQf8rMusu/eVBfmdudz8T7
N/lHdMTE16v+2kgg1shb18p4JrrOZQNRhQjmWULEllKHRcxWE+xAnMay1Goyhv53
EftwoULYktGt62GbrlmCh/GCFnB1rTvjPxpUm9jhU3pugaLNgGANaiU65wHIlbAD
enDz4msnFUeS9xAlWaW8XHwoVC2uYzg6Ua0xBk7SfHFoJsKGVmut6FdUCELMmtX7
pghIUlVI7Pnz/6fRRQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:25 2025 by rpki-client