Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier: bN2uX4rClFU/nqp6XLawIU/xSOOWpXpWODuW4iFwanA=
Subject key identifier: 1C:EC:91:C2:C7:00:AD:09:78:DA:08:E2:7C:DA:2E:45:43:00:4F:D5
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 019A72CA2BE55EAB56CC76F4B788D2D4241D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number: 0ACB
Signing time: Tue 11 Nov 2025 12:00:43 +0000
Manifest this update: Tue 11 Nov 2025 12:00:43 +0000
Manifest next update: Wed 12 Nov 2025 12:00:43 +0000
Files and hashes: 1: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: c/78U4EknhQhyg7BxmHxF2uU2e151fIuLKUA14UKhkI=)
2: gS4jeqALacaf51dl93Py-I7kfls.roa (hash: OBdPPMpWE3pFYQDOuw6u5rVnnXeeNEwg98LVQA2Wi/s=)
3: gfhu0UMjPTGrZruaeirhOo04QTw.roa (hash: HYAZtY2G7JxVkFUj22KQMYwy01JLPX5+ssTDK0gFTRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:2b:e5:5e:ab:56:cc:76:f4:b7:88:d2:d4:24:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Nov 11 12:00:43 2025 GMT
Not After : Nov 12 12:00:43 2025 GMT
Subject: CN=1cec91c2c700ad0978da08e27cda2e4543004fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:41:ee:2d:c4:1c:19:a3:4e:7a:8e:66:d1:
28:75:47:7e:56:4c:6a:00:a3:39:de:55:2c:16:7e:
59:17:cc:d6:93:db:45:18:f3:3c:54:8b:28:20:7a:
23:75:cc:8f:9d:39:64:74:31:38:70:62:2c:f2:d3:
c5:1f:6c:9c:25:22:95:df:3a:62:27:8a:92:e9:f4:
31:6e:4c:a5:c7:30:c7:07:cd:32:5d:8c:0b:4d:78:
d8:f3:a2:7c:52:3e:9f:48:eb:78:a5:b4:46:6b:7d:
05:4f:0c:e4:e6:a8:85:12:bc:bc:ba:50:81:9c:bb:
32:29:ed:51:e9:f2:a4:90:e6:32:ae:06:97:ab:dc:
d5:d5:b7:65:39:1f:d1:d6:ff:c7:68:6f:3d:99:2a:
e4:1a:53:6e:39:11:b9:70:87:a9:b3:06:6f:4b:5a:
f0:7e:b7:96:28:c2:b5:04:d1:8e:a6:cc:c1:e8:5b:
21:9c:fc:93:a7:2a:41:4b:54:db:0e:f5:52:27:67:
c5:c4:f3:68:4c:43:3e:68:3f:ab:f5:72:40:51:98:
46:91:9a:fd:92:60:79:76:b9:5f:99:d3:bc:80:1c:
94:04:31:ef:a0:29:bb:51:d9:2a:01:44:de:7d:e5:
29:74:00:53:82:87:32:70:0d:99:ea:45:17:69:84:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EC:91:C2:C7:00:AD:09:78:DA:08:E2:7C:DA:2E:45:43:00:4F:D5
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:50:c0:13:41:26:87:fa:ea:7a:4f:b7:28:1d:17:0e:7c:db:
1d:55:27:a5:6a:d8:36:06:e0:b6:c7:60:40:5d:73:13:b4:9e:
75:7c:a2:47:5d:3a:42:ba:fb:9c:8c:96:1e:fd:c4:26:3d:01:
61:72:d1:75:00:26:a5:34:4d:da:29:be:28:35:f3:50:e6:c1:
49:81:3c:01:ac:2d:65:39:81:dc:3e:db:71:e1:76:cb:0d:9a:
ee:ac:e9:bd:6f:b4:ab:8f:f6:c3:d7:68:6c:41:0a:c7:8a:e1:
7e:05:fa:2c:76:a7:fc:2e:f1:fa:78:88:ac:2b:eb:41:51:5e:
a6:95:d3:15:7d:25:eb:c4:b2:dc:fb:ac:f5:45:45:b5:09:43:
dc:1a:16:a8:1f:ac:bc:54:7d:91:8f:a1:be:92:9e:5a:06:75:
60:90:2e:cc:f4:34:56:04:c1:4c:37:06:b6:5f:0a:6f:45:bd:
b6:5b:30:01:5d:b3:62:8a:e9:c3:57:0c:f0:15:8e:66:7d:be:
66:7b:54:f3:d9:25:96:7b:64:93:e7:6d:55:33:9a:e5:a4:92:
d2:aa:19:82:8c:bd:ab:6e:70:60:e1:93:f3:78:b5:4b:c2:b5:
38:b7:b5:c6:b5:da:d8:5f:c2:78:e2:44:ac:67:b5:04:c7:aa:
5e:86:83:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyivlXqtWzHb0t4jS1CQdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGMzMjAyNzQ2NWEyOWZiODRmMmRkMDVmM2YwYmU4MDQy
N2IwYzkwHhcNMjUxMTExMTIwMDQzWhcNMjUxMTEyMTIwMDQzWjAzMTEwLwYDVQQD
EygxY2VjOTFjMmM3MDBhZDA5NzhkYTA4ZTI3Y2RhMmU0NTQzMDA0ZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIRB7i3EHBmjTnqOZtEodUd+Vkxq
AKM53lUsFn5ZF8zWk9tFGPM8VIsoIHojdcyPnTlkdDE4cGIs8tPFH2ycJSKV3zpi
J4qS6fQxbkylxzDHB80yXYwLTXjY86J8Uj6fSOt4pbRGa30FTwzk5qiFEry8ulCB
nLsyKe1R6fKkkOYyrgaXq9zV1bdlOR/R1v/HaG89mSrkGlNuORG5cIepswZvS1rw
freWKMK1BNGOpszB6FshnPyTpypBS1TbDvVSJ2fFxPNoTEM+aD+r9XJAUZhGkZr9
kmB5drlfmdO8gByUBDHvoCm7UdkqAUTefeUpdABTgocycA2Z6kUXaYRVIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzskcLHAK0JeNoI4nzaLkVDAE/VMB8GA1UdIwQY
MBaAFFiMMgJ0ZaKfuE8t0F8/C+gEJ7DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMt
OWE4MDNmNzM2YzRhLzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMtOWE4MDNmNzM2YzRh
LzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFDAE0Em
h/rqek+3KB0XDnzbHVUnpWrYNgbgtsdgQF1zE7SedXyiR106Qrr7nIyWHv3EJj0B
YXLRdQAmpTRN2im+KDXzUObBSYE8AawtZTmB3D7bceF2yw2a7qzpvW+0q4/2w9do
bEEKx4rhfgX6LHan/C7x+niIrCvrQVFeppXTFX0l68Sy3Pus9UVFtQlD3BoWqB+s
vFR9kY+hvpKeWgZ1YJAuzPQ0VgTBTDcGtl8Kb0W9tlswAV2zYorpw1cM8BWOZn2+
ZntU89kllntkk+dtVTOa5aSS0qoZgoy9q25wYOGT83i1S8K1OLe1xrXa2F/CeOJE
rGe1BMeqXoaDIA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:31 2025 by rpki-client