Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File: WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier: /9eK+UJbgFOhoqq3obGpBbmG3qyTceyqdsUQaomFcOs=
Subject key identifier: 85:B7:B6:30:83:37:30:CE:62:E6:29:94:02:A3:AD:E2:2F:4F:36:A2
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial: 019A725C77E51612007C22D41ADE00650EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:53 +0000
Manifest this update: Tue 11 Nov 2025 10:00:53 +0000
Manifest next update: Wed 12 Nov 2025 10:00:53 +0000
Files and hashes: 1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: jywTrM39Om84YnHaVSE7Qll+wvxw2xamVhIF75qn+VM=)
2: p2E40VAywU1E-b5C3yq5INQnhfY.roa (hash: +wh8lIkPmW8LdXYFPZaG+wiXZeTnTUYIdRcRymup/Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:77:e5:16:12:00:7c:22:d4:1a:de:00:65:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Validity
Not Before: Nov 11 10:00:53 2025 GMT
Not After : Nov 12 10:00:53 2025 GMT
Subject: CN=85b7b630833730ce62e6299402a3ade22f4f36a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:9b:d0:53:c5:90:99:07:7b:ad:05:ff:39:
fe:07:c1:ba:42:99:97:b1:c3:ae:dd:64:8b:c2:96:
ee:42:80:b8:12:e3:39:f9:bf:d5:0b:c8:e5:81:4e:
ef:d6:3d:11:dc:61:2a:7c:d5:b9:92:21:c5:70:e9:
2f:12:50:a5:d8:f9:c7:ec:86:9a:05:ef:1a:8d:0d:
a7:f3:15:47:b9:47:bb:10:f2:6e:f2:e5:55:c7:57:
eb:0c:e1:ef:5a:19:46:a2:1a:a5:e9:d3:9b:46:ab:
d5:61:2d:09:9c:90:04:ef:00:46:39:2a:6f:be:db:
f2:3e:e7:28:2a:e1:87:9a:c2:15:7c:c3:40:9e:31:
76:63:69:ad:39:d4:58:bb:36:16:a7:61:3c:c1:c0:
ed:77:06:8e:59:be:bd:9a:52:17:6e:0d:60:01:08:
a2:8e:d3:65:2b:20:10:c6:05:78:c5:d1:be:8a:98:
d6:3a:a4:b3:8a:dc:a0:ca:a9:ef:35:99:23:2e:64:
e5:f0:3e:f0:19:d1:aa:07:d7:13:13:b3:bf:c4:3c:
5c:34:76:5d:74:f4:21:09:cc:57:30:dc:0c:18:12:
f0:b7:27:fb:0f:3e:3e:1d:13:33:6a:89:3b:a0:2a:
e1:bd:da:f4:9c:6a:1a:7d:9f:15:e5:07:44:03:5e:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B7:B6:30:83:37:30:CE:62:E6:29:94:02:A3:AD:E2:2F:4F:36:A2
X509v3 Authority Key Identifier:
keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:37:47:b3:b2:48:92:a2:8a:d5:79:af:56:a3:a6:b7:cc:5c:
51:9c:17:8f:a2:f6:ec:01:30:7f:9d:af:29:4f:b2:08:67:e4:
97:25:7f:41:c1:7c:f9:37:a8:11:20:52:13:53:e8:90:ba:5b:
e9:5f:c1:03:26:0f:6c:3c:e7:ad:de:fd:40:18:80:d5:75:49:
d6:a7:eb:c6:d4:5a:4b:cf:a5:a0:11:8c:6b:24:13:4a:7c:b6:
2c:c8:49:06:d4:ce:6f:a5:7a:99:55:04:de:08:e1:fe:69:1c:
76:3d:b2:8d:fe:9c:c4:da:a3:51:4e:56:52:e5:03:ef:25:27:
99:9f:43:d5:db:27:5b:03:de:14:fa:8f:d2:57:6e:4c:79:19:
05:b2:06:59:f9:5c:8a:e4:d5:6d:59:65:8f:7c:f8:09:3a:54:
a7:22:2a:e4:13:c9:08:1d:26:5d:0d:0d:98:85:f6:eb:10:b7:
70:d8:31:5c:85:42:18:6c:72:9d:19:69:05:ba:5a:55:37:da:
94:ab:03:e5:6d:5b:f9:91:5d:d4:e1:9c:8b:60:50:7a:4d:5b:
ef:d9:1e:f0:35:3c:df:2c:2a:26:1c:33:f6:03:7b:29:24:ca:
bd:96:c5:26:02:97:05:09:4a:98:e3:fe:33:c7:7a:15:cf:11:
49:89:e5:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXHflFhIAfCLUGt4AZQ75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MDRhYmViMGVkNGZmODY2YzA2NWZlMzZjMmM2Mjg0ZTI1
MjBiNDIwHhcNMjUxMTExMTAwMDUzWhcNMjUxMTEyMTAwMDUzWjAzMTEwLwYDVQQD
Eyg4NWI3YjYzMDgzMzczMGNlNjJlNjI5OTQwMmEzYWRlMjJmNGYzNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrGb0FPFkJkHe60F/zn+B8G6QpmX
scOu3WSLwpbuQoC4EuM5+b/VC8jlgU7v1j0R3GEqfNW5kiHFcOkvElCl2PnH7Iaa
Be8ajQ2n8xVHuUe7EPJu8uVVx1frDOHvWhlGohql6dObRqvVYS0JnJAE7wBGOSpv
vtvyPucoKuGHmsIVfMNAnjF2Y2mtOdRYuzYWp2E8wcDtdwaOWb69mlIXbg1gAQii
jtNlKyAQxgV4xdG+ipjWOqSzitygyqnvNZkjLmTl8D7wGdGqB9cTE7O/xDxcNHZd
dPQhCcxXMNwMGBLwtyf7Dz4+HRMzaok7oCrhvdr0nGoafZ8V5QdEA15h/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW3tjCDNzDOYuYplAKjreIvTzaiMB8GA1UdIwQY
MBaAFFkEq+sO1P+GbAZf42wsYoTiUgtCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lYTQxZTAtN2I1MS00OTBmLThkMWYt
NzdkNjVlZjMwNWIwLzEvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lYTQxZTAtN2I1MS00OTBmLThkMWYtNzdkNjVlZjMwNWIw
LzEvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTdHs7JI
kqKK1XmvVqOmt8xcUZwXj6L27AEwf52vKU+yCGfklyV/QcF8+TeoESBSE1PokLpb
6V/BAyYPbDznrd79QBiA1XVJ1qfrxtRaS8+loBGMayQTSny2LMhJBtTOb6V6mVUE
3gjh/mkcdj2yjf6cxNqjUU5WUuUD7yUnmZ9D1dsnWwPeFPqP0lduTHkZBbIGWflc
iuTVbVllj3z4CTpUpyIq5BPJCB0mXQ0NmIX26xC3cNgxXIVCGGxynRlpBbpaVTfa
lKsD5W1b+ZFd1OGci2BQek1b79ke8DU83ywqJhwz9gN7KSTKvZbFJgKXBQlKmOP+
M8d6Fc8RSYnlZA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:09 2025 by rpki-client