Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
File: WdWQ4swUythErvFa1fLUZ96KN_4.mft (raw, json)
Hash identifier: yir9abu0xTm+Ei8Njlw4k0fXhn5TfHJuZnHos5Wsn2g=
Subject key identifier: 24:CD:C8:E0:3A:42:BD:65:5F:75:F6:64:A3:97:06:6B:E9:D4:E0:A6
Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Certificate issuer: /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Certificate serial: 019A70DC809D8DF94B80D54CDA20B1293FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 03:01:30 +0000
Manifest this update: Tue 11 Nov 2025 03:01:30 +0000
Manifest next update: Wed 12 Nov 2025 03:01:30 +0000
Files and hashes: 1: JH4Pw6k9bW-EXpipE2GyaPmXdT0.roa (hash: nYPTNfn16VpyVNgK62YL/AjqeUMOonTZwALbyhAMma0=)
2: WdWQ4swUythErvFa1fLUZ96KN_4.crl (hash: G9lMMrx+XAeW6tXtlZ/EqZGmNH7DFld67fUxO8mMcb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:80:9d:8d:f9:4b:80:d5:4c:da:20:b1:29:3f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Validity
Not Before: Nov 11 03:01:30 2025 GMT
Not After : Nov 12 03:01:30 2025 GMT
Subject: CN=24cdc8e03a42bd655f75f664a397066be9d4e0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:73:fa:3d:77:ce:bb:94:68:31:aa:d8:20:
6a:86:16:1c:03:c0:aa:eb:36:a1:84:ba:c2:c7:3e:
4a:c7:59:26:9e:7f:f9:de:cb:39:09:5d:a5:cd:08:
b0:9f:c9:bc:80:30:2e:23:1a:31:e8:99:e3:6c:71:
aa:0e:73:3e:44:08:f0:c6:14:82:29:48:d2:b5:aa:
82:1a:1b:e5:44:df:ab:ca:10:90:f0:2c:2c:8a:ea:
65:e3:0b:d3:95:d6:f2:18:71:c5:97:a7:6b:41:57:
3a:5d:e2:4c:ce:ef:1d:f8:c6:75:63:a3:88:cc:0d:
75:58:5f:68:bd:7b:30:5d:98:82:bd:86:ef:a9:72:
8e:7c:16:e0:62:60:8b:ca:cb:5a:c4:28:9c:e5:73:
c2:3d:be:40:5e:13:07:03:bc:bb:99:52:35:c4:72:
56:06:23:af:36:da:eb:fb:3b:6b:21:48:3a:82:b2:
19:6b:d8:d4:b2:dd:a5:88:9d:da:75:d1:b9:9a:e0:
15:77:6c:e9:fc:2c:1f:c5:aa:4d:d4:d2:c5:9b:63:
46:06:19:28:7f:51:21:ee:0e:20:91:f4:87:f4:35:
6c:a0:f2:fe:73:32:58:aa:a5:e7:73:ec:f3:90:60:
28:c7:5f:69:11:06:bd:ff:92:05:b6:55:34:4f:e1:
d3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CD:C8:E0:3A:42:BD:65:5F:75:F6:64:A3:97:06:6B:E9:D4:E0:A6
X509v3 Authority Key Identifier:
keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:28:dd:9c:ef:9e:5e:45:8a:e0:2b:ef:61:ec:23:81:ef:57:
fa:f6:a0:c9:e7:37:27:95:c1:16:ba:91:74:5d:0e:c8:12:00:
a8:21:b4:24:9a:9e:30:06:01:7e:65:31:8a:65:64:f5:f2:ec:
32:92:80:47:5e:47:25:5b:3b:28:ae:df:cb:51:3d:55:e3:b6:
fd:de:93:0e:c2:99:76:a7:80:1c:4a:3c:ae:10:38:a5:8b:87:
c6:80:54:6c:04:64:28:11:cb:09:2e:17:4f:1a:94:ab:56:c0:
07:bd:90:38:3e:c2:f3:55:ef:9f:68:a7:89:c7:a2:57:ad:ac:
bb:28:cb:34:6b:9d:10:6f:4a:26:16:74:59:48:1d:12:c9:f1:
b0:ec:32:32:02:41:03:17:38:b2:dd:c7:60:f7:f4:e6:1a:ff:
41:81:bb:0b:9b:84:8c:67:5e:0f:2f:01:b2:48:09:a4:18:dd:
9c:fb:0f:8b:58:36:09:88:9f:5d:6e:6d:1a:84:cc:e0:78:94:
e0:90:38:53:45:7f:99:52:2f:ed:ea:5a:3e:0a:71:31:69:9a:
ce:a1:a9:41:97:72:08:cd:6c:69:d3:81:99:f2:c2:cd:40:af:
b6:ed:25:09:0b:f6:e5:66:0e:e8:84:90:2a:21:4b:69:c1:08:
3d:e9:72:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3ICdjflLgNVM2iCxKT/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZDU5MGUyY2MxNGNhZDg0NGFlZjE1YWQ1ZjJkNDY3ZGU4
YTM3ZmUwHhcNMjUxMTExMDMwMTMwWhcNMjUxMTEyMDMwMTMwWjAzMTEwLwYDVQQD
EygyNGNkYzhlMDNhNDJiZDY1NWY3NWY2NjRhMzk3MDY2YmU5ZDRlMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5J5z+j13zruUaDGq2CBqhhYcA8Cq
6zahhLrCxz5Kx1kmnn/53ss5CV2lzQiwn8m8gDAuIxox6JnjbHGqDnM+RAjwxhSC
KUjStaqCGhvlRN+ryhCQ8Cwsiupl4wvTldbyGHHFl6drQVc6XeJMzu8d+MZ1Y6OI
zA11WF9ovXswXZiCvYbvqXKOfBbgYmCLystaxCic5XPCPb5AXhMHA7y7mVI1xHJW
BiOvNtrr+ztrIUg6grIZa9jUst2liJ3addG5muAVd2zp/CwfxapN1NLFm2NGBhko
f1Eh7g4gkfSH9DVsoPL+czJYqqXnc+zzkGAox19pEQa9/5IFtlU0T+HT1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTNyOA6Qr1lX3X2ZKOXBmvp1OCmMB8GA1UdIwQY
MBaAFFnVkOLMFMrYRK7xWtXy1Gfeijf+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yZmE3MDctZGFkNi00Zjk1LWI1ZGUt
ZmM5OWQzM2QzMzQ0LzEvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yZmE3MDctZGFkNi00Zjk1LWI1ZGUtZmM5OWQzM2QzMzQ0
LzEvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyjdnO+e
XkWK4CvvYewjge9X+vagyec3J5XBFrqRdF0OyBIAqCG0JJqeMAYBfmUximVk9fLs
MpKAR15HJVs7KK7fy1E9VeO2/d6TDsKZdqeAHEo8rhA4pYuHxoBUbARkKBHLCS4X
TxqUq1bAB72QOD7C81Xvn2iniceiV62suyjLNGudEG9KJhZ0WUgdEsnxsOwyMgJB
Axc4st3HYPf05hr/QYG7C5uEjGdeDy8BskgJpBjdnPsPi1g2CYifXW5tGoTM4HiU
4JA4U0V/mVIv7epaPgpxMWmazqGpQZdyCM1sadOBmfLCzUCvtu0lCQv25WYO6ISQ
KiFLacEIPelytw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:11 2025 by rpki-client