Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: H/yUjl8lTorFbZcJyIKN75IDH5pTSnySjnDpqEllG9U=
Subject key identifier: 10:27:11:F0:8B:3F:D5:92:26:EC:C1:C8:C8:34:C8:16:7F:A5:AD:A2
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 019A4E4FBD1BFC6EF7ACA5A157950CDDFB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 1726
Signing time: Tue 04 Nov 2025 10:00:39 +0000
Manifest this update: Tue 04 Nov 2025 10:00:39 +0000
Manifest next update: Wed 05 Nov 2025 10:00:39 +0000
Files and hashes: 1: HARnUvjlt2Ihiye5L31M1Ihsszo.roa (hash: R6szIcdOkXpk4Tvb4l6mExr2G3bKCj15fJUl212PxlA=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: TE5OjR7alXPzepHReqMIfucT3irR+8+7BY7AiTFrsr8=)
3: eZmwFy41-LIbouqrlW9zkimoU3M.roa (hash: zJU/IMiyEvSZt1AwTK7cRbJ+HAzHnx6LAKEgb7nLXYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:bd:1b:fc:6e:f7:ac:a5:a1:57:95:0c:dd:fb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Nov 4 10:00:39 2025 GMT
Not After : Nov 5 10:00:39 2025 GMT
Subject: CN=102711f08b3fd59226ecc1c8c834c8167fa5ada2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:da:0b:87:3d:0f:2b:eb:7e:dc:5b:09:b6:
f1:f4:be:24:8c:5f:4f:7a:8d:dd:22:20:18:0e:a4:
a5:a5:c6:ea:e4:ee:b5:e3:73:28:35:6f:06:57:33:
0a:13:bf:80:e2:78:da:16:0d:a4:eb:e6:49:a8:2e:
96:37:95:6e:15:af:46:f7:9c:89:c2:a6:ae:14:ea:
aa:35:27:de:37:4f:18:a4:44:3d:28:9e:87:e7:df:
50:0b:fd:34:31:2f:1b:d2:68:46:e8:6d:37:d9:02:
4b:7d:dd:4e:1c:42:99:94:c1:65:ba:6e:86:26:eb:
ca:ea:19:7a:f8:ac:78:08:29:f0:12:5d:65:da:b9:
d0:88:9f:31:29:6d:fa:13:a5:df:36:5a:94:91:8f:
93:39:c2:d5:07:38:b5:a5:13:fd:19:0e:e2:8c:17:
0d:1c:fa:37:ad:d9:90:80:87:09:85:75:dd:c9:52:
79:93:c0:9e:6a:49:26:ba:73:e7:72:70:63:cf:24:
b0:23:9d:df:b1:9c:f2:2e:d0:cd:61:b0:67:74:33:
78:09:02:6e:36:27:1c:e9:16:23:55:d2:02:ae:cf:
d6:af:5c:35:d0:07:73:da:3f:5d:e1:78:71:29:3b:
86:31:d4:e4:d3:7f:86:c0:0b:f9:f9:09:b8:31:5d:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:27:11:F0:8B:3F:D5:92:26:EC:C1:C8:C8:34:C8:16:7F:A5:AD:A2
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9f:77:1f:55:dc:25:85:ba:c1:df:f1:ca:1b:e6:82:53:23:
48:0e:e6:38:c1:78:a2:62:f3:fb:df:d9:75:13:82:2c:ea:cb:
f9:f3:a4:c7:cf:65:38:2d:07:29:74:9d:f9:aa:f1:31:1c:89:
e8:16:b5:22:6c:69:fa:f1:36:8c:4f:b7:98:4e:9f:e4:d9:57:
6a:a4:eb:70:4b:56:7a:1b:a6:bf:e0:2b:0f:7b:02:82:30:3c:
e4:5e:24:0b:c4:35:d5:ea:8e:85:80:9d:95:a6:ca:0b:b5:f9:
7b:03:7e:e9:28:36:f1:7e:26:5c:6c:c1:aa:f9:b3:9b:ca:d6:
45:5d:30:3e:d3:b3:01:e8:da:19:5f:0d:be:d7:1f:54:d7:47:
0b:ce:cd:65:4a:fc:7a:d6:a5:93:6c:18:a6:33:3f:58:36:32:
e2:34:07:01:f6:8c:f8:fc:9f:dd:d4:56:49:e8:0c:41:79:aa:
83:c8:28:64:2e:27:fd:78:94:bd:f4:01:d4:1a:68:24:b0:b2:
b1:7a:89:3c:ab:0c:da:21:ce:c0:fc:a9:2d:6a:a4:0e:aa:14:
96:31:d6:d2:e4:27:8b:14:12:ac:d1:09:29:0e:6e:9b:cf:81:
11:62:39:9b:36:6c:1c:58:83:2a:ab:29:b8:5a:0e:49:74:06:
fd:60:8e:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT70b/G73rKWhV5UM3fsRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx
YzRmZTIwHhcNMjUxMTA0MTAwMDM5WhcNMjUxMTA1MTAwMDM5WjAzMTEwLwYDVQQD
EygxMDI3MTFmMDhiM2ZkNTkyMjZlY2MxYzhjODM0YzgxNjdmYTVhZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp53aC4c9DyvrftxbCbbx9L4kjF9P
eo3dIiAYDqSlpcbq5O6143MoNW8GVzMKE7+A4njaFg2k6+ZJqC6WN5VuFa9G95yJ
wqauFOqqNSfeN08YpEQ9KJ6H599QC/00MS8b0mhG6G032QJLfd1OHEKZlMFlum6G
JuvK6hl6+Kx4CCnwEl1l2rnQiJ8xKW36E6XfNlqUkY+TOcLVBzi1pRP9GQ7ijBcN
HPo3rdmQgIcJhXXdyVJ5k8CeakkmunPncnBjzySwI53fsZzyLtDNYbBndDN4CQJu
Nicc6RYjVdICrs/Wr1w10Adz2j9d4XhxKTuGMdTk03+GwAv5+Qm4MV1M3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAnEfCLP9WSJuzByMg0yBZ/pa2iMB8GA1UdIwQY
MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt
NzA4N2UzZmUyYTVkLzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk
LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqp93H1Xc
JYW6wd/xyhvmglMjSA7mOMF4omLz+9/ZdROCLOrL+fOkx89lOC0HKXSd+arxMRyJ
6Ba1Imxp+vE2jE+3mE6f5NlXaqTrcEtWehumv+ArD3sCgjA85F4kC8Q11eqOhYCd
labKC7X5ewN+6Sg28X4mXGzBqvmzm8rWRV0wPtOzAejaGV8NvtcfVNdHC87NZUr8
etalk2wYpjM/WDYy4jQHAfaM+Pyf3dRWSegMQXmqg8goZC4n/XiUvfQB1BpoJLCy
sXqJPKsM2iHOwPypLWqkDqoUljHW0uQnixQSrNEJKQ5um8+BEWI5mzZsHFiDKqsp
uFoOSXQG/WCOqA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:25:56 2025 by rpki-client