Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
File: wWD3u-jXY2d3YUisuMTKNflr6Vc.mft (raw, json)
Hash identifier: ZLSzh2cgUG10QnY2CdoGC1IQhPtTvQ5fR/knQADIjvI=
Subject key identifier: 64:C7:66:60:A0:D6:9C:3C:A0:CD:93:91:F9:0B:B8:0F:21:18:56:7E
Authority key identifier: C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57
Certificate issuer: /CN=c160f7bbe8d76367776148acb8c4ca35f96be957
Certificate serial: 019A71B79915FCE510D50A2B94B20CE54B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
Manifest number: 16F1
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: wWD3u-jXY2d3YUisuMTKNflr6Vc.crl (hash: qcx+bcJ8B/e8hVqLf9FSpcyK8XIKiejlyOCp2VP8n6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:99:15:fc:e5:10:d5:0a:2b:94:b2:0c:e5:4b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c160f7bbe8d76367776148acb8c4ca35f96be957
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=64c76660a0d69c3ca0cd9391f90bb80f2118567e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:d7:d0:00:42:7f:0b:5a:3a:dd:98:ec:01:
e0:97:84:80:d6:03:b4:14:f2:9d:71:96:6e:c2:29:
db:40:f5:4a:f7:aa:7b:2c:67:5b:bd:1f:da:30:94:
fd:2a:c6:53:77:6c:e1:9c:a0:41:7c:b7:67:70:a6:
14:73:38:7b:d6:5e:1b:1c:9d:cd:31:ed:b8:b3:bf:
d7:a9:a5:42:6c:8f:2a:2e:10:56:5f:e6:94:ed:98:
e6:12:0f:8e:93:c5:27:9b:55:b8:74:b8:d5:71:69:
ef:1b:7b:fe:18:9d:77:20:d5:5d:92:51:e4:0d:22:
ee:f4:c1:d6:87:bc:ce:06:cb:59:3c:cb:13:a4:7b:
55:4c:b4:ed:a2:09:bf:30:cf:d8:2b:31:33:48:d1:
f5:6d:f6:4b:ff:1d:2d:0d:f2:d7:75:b9:c5:94:1e:
ab:23:8e:22:06:5f:fb:4a:69:7d:26:0f:20:63:b5:
0a:df:6d:1d:a7:e8:1a:80:46:09:21:7f:b1:c4:a7:
4e:e2:66:0f:9c:ea:ca:6f:68:93:39:71:2e:b3:f8:
2f:b4:1f:e7:b1:92:00:45:ad:8d:a8:87:11:15:3b:
9e:ae:70:0a:55:d0:12:31:82:d7:07:2e:49:21:e1:
ea:6c:8a:70:c7:3a:de:87:77:a0:98:cd:2d:78:2d:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C7:66:60:A0:D6:9C:3C:A0:CD:93:91:F9:0B:B8:0F:21:18:56:7E
X509v3 Authority Key Identifier:
keyid:C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:75:d1:44:df:c5:66:13:c9:f1:01:a1:7e:6d:a6:81:59:25:
63:1b:be:9d:ec:29:b7:bf:2c:db:bb:67:51:53:ee:3c:0a:ab:
93:ed:38:42:34:27:b6:a7:f2:5e:2f:f3:85:82:26:a1:6a:96:
1e:9e:4c:f2:7c:96:7c:bd:a6:42:4e:f8:90:14:72:15:d5:e0:
4f:df:31:23:12:b8:54:31:7c:da:74:94:1e:d9:f6:34:fe:48:
2f:00:1c:63:45:49:aa:73:8f:fb:4e:6c:58:71:52:71:60:4c:
3e:2c:46:fe:43:0e:09:35:49:2a:bf:ed:5c:8c:b2:4b:32:ed:
a1:f2:47:e0:fe:a2:38:77:48:38:b0:ee:b1:f8:ee:d0:be:d2:
36:4c:5c:b1:c5:a4:96:a0:ea:e5:c6:23:ab:c4:fc:ec:13:6b:
9a:a9:a3:30:e8:6c:19:a4:68:db:25:96:91:3e:ff:46:12:0c:
97:d7:49:f8:41:f9:2b:66:98:d0:7d:7b:2f:1d:5e:34:41:27:
f6:03:82:4e:d9:7f:02:20:58:78:d6:53:92:8b:17:a4:ca:7a:
46:08:9b:7e:f3:2f:58:ce:73:e5:23:86:c6:34:22:49:7b:69:
6c:f3:03:7b:b9:09:84:f0:62:fe:9e:87:d0:69:02:cd:66:1b:
69:58:92:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt5kV/OUQ1QorlLIM5UubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNjBmN2JiZThkNzYzNjc3NzYxNDhhY2I4YzRjYTM1Zjk2
YmU5NTcwHhcNMjUxMTExMDcwMDQ4WhcNMjUxMTEyMDcwMDQ4WjAzMTEwLwYDVQQD
Eyg2NGM3NjY2MGEwZDY5YzNjYTBjZDkzOTFmOTBiYjgwZjIxMTg1NjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16rX0ABCfwtaOt2Y7AHgl4SA1gO0
FPKdcZZuwinbQPVK96p7LGdbvR/aMJT9KsZTd2zhnKBBfLdncKYUczh71l4bHJ3N
Me24s7/XqaVCbI8qLhBWX+aU7ZjmEg+Ok8Unm1W4dLjVcWnvG3v+GJ13INVdklHk
DSLu9MHWh7zOBstZPMsTpHtVTLTtogm/MM/YKzEzSNH1bfZL/x0tDfLXdbnFlB6r
I44iBl/7Sml9Jg8gY7UK320dp+gagEYJIX+xxKdO4mYPnOrKb2iTOXEus/gvtB/n
sZIARa2NqIcRFTuernAKVdASMYLXBy5JIeHqbIpwxzreh3egmM0teC10owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTHZmCg1pw8oM2TkfkLuA8hGFZ+MB8GA1UdIwQY
MBaAFMFg97vo12Nnd2FIrLjEyjX5a+lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80NjFhODMtODEwYy00M2FlLWFjMjUt
NjRlMmJkNjE5MzE4LzEvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80NjFhODMtODEwYy00M2FlLWFjMjUtNjRlMmJkNjE5MzE4
LzEvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonXRRN/F
ZhPJ8QGhfm2mgVklYxu+newpt78s27tnUVPuPAqrk+04QjQntqfyXi/zhYImoWqW
Hp5M8nyWfL2mQk74kBRyFdXgT98xIxK4VDF82nSUHtn2NP5ILwAcY0VJqnOP+05s
WHFScWBMPixG/kMOCTVJKr/tXIyySzLtofJH4P6iOHdIOLDusfju0L7SNkxcscWk
lqDq5cYjq8T87BNrmqmjMOhsGaRo2yWWkT7/RhIMl9dJ+EH5K2aY0H17Lx1eNEEn
9gOCTtl/AiBYeNZTkosXpMp6RgibfvMvWM5z5SOGxjQiSXtpbPMDe7kJhPBi/p6H
0GkCzWYbaViScQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:27 2025 by rpki-client