Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
File: 85-Wwg4Q928D7UeBW3pqXv2-A9U.mft (raw, json)
Hash identifier: 7N1YmByzCcnTQYqhocq5dgHmAPTwt8G2uoVPVHvvvU4=
Subject key identifier: A0:CC:8B:31:B7:EF:8C:23:75:82:AA:E8:2B:92:3E:0D:BB:18:A8:9D
Authority key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5
Certificate issuer: /CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
Certificate serial: 019A72259316FDCF8C9794F7276F768F06D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
Manifest number: 1249
Signing time: Tue 11 Nov 2025 09:00:56 +0000
Manifest this update: Tue 11 Nov 2025 09:00:56 +0000
Manifest next update: Wed 12 Nov 2025 09:00:56 +0000
Files and hashes: 1: 85-Wwg4Q928D7UeBW3pqXv2-A9U.crl (hash: Ljbw5PTbaUR+xuWCIvpLPWKGkctGCcJqDF1VCHB93xA=)
2: mG96Y715wDIwvEKSq5Z-71rWs6M.roa (hash: Y3E3/3Utv7uEbR1MqLWFqsWoMU44kmtfUjplzEpgK2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:93:16:fd:cf:8c:97:94:f7:27:6f:76:8f:06:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
Validity
Not Before: Nov 11 09:00:56 2025 GMT
Not After : Nov 12 09:00:56 2025 GMT
Subject: CN=a0cc8b31b7ef8c237582aae82b923e0dbb18a89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fc:1b:d0:6e:b7:6a:97:05:48:58:bc:ae:cb:
92:92:5d:29:16:1b:7b:ef:8c:7c:4e:0b:18:fa:ac:
f6:72:91:94:e9:9c:45:33:19:31:1f:27:f3:cb:32:
f4:f8:e0:ac:1b:27:f6:62:f3:3e:43:22:cb:76:a7:
b1:80:6c:82:26:92:01:07:d2:c7:fe:b6:75:ac:15:
83:76:dd:0f:37:80:b8:c0:0a:e0:61:d3:e6:fb:84:
de:30:70:3d:df:a9:eb:0d:d6:58:9a:02:98:60:8c:
75:8c:9b:4b:43:ad:d1:f1:19:40:35:69:19:54:e0:
94:12:cc:40:1a:92:16:0a:0c:67:4b:4d:ac:ae:fd:
e9:35:a5:1d:62:c8:55:3b:09:f9:9b:8a:1c:59:58:
04:16:1c:f5:a9:3e:cb:34:d3:9d:e5:af:06:be:8d:
49:1e:50:d9:0d:4e:11:61:2f:86:94:3d:ac:81:51:
fa:f5:f0:68:c2:b2:a2:2f:c6:f6:84:ab:d9:96:9e:
8e:02:91:f0:36:e8:09:4e:82:d3:72:7c:3d:d0:da:
ea:8d:c1:92:41:07:15:93:fe:ba:73:34:33:65:73:
79:83:c7:b6:6d:8f:1e:cb:99:af:37:f2:02:a1:6a:
13:15:fc:fa:51:87:2a:46:bb:20:3b:5f:08:d9:de:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CC:8B:31:B7:EF:8C:23:75:82:AA:E8:2B:92:3E:0D:BB:18:A8:9D
X509v3 Authority Key Identifier:
keyid:F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:24:48:30:46:b0:37:6e:99:e9:cd:07:78:e2:dd:87:49:d1:
e0:f1:60:69:de:8e:ea:05:5f:14:00:d9:5e:ac:8d:a2:14:e8:
40:7b:38:fe:06:bc:33:36:e7:c3:7a:87:f7:53:03:30:52:62:
37:0b:e6:76:ba:18:75:43:d2:a5:6f:dd:b4:ac:cb:6e:79:60:
9d:2d:a9:eb:a9:ad:a0:af:ba:13:54:ae:bf:a8:1a:51:bb:fe:
77:7b:c6:2c:5a:e2:32:0f:9b:79:a7:6f:63:fa:ea:73:06:32:
80:17:7b:d5:1e:09:eb:84:c2:96:07:c2:08:30:59:31:25:e8:
50:ed:75:9d:56:7b:0a:0c:5b:7d:03:5e:8e:6f:dc:11:00:58:
f6:4e:c4:e3:ce:e7:1e:0d:e6:d9:46:6f:48:3b:3b:ec:ff:18:
97:ae:e0:a2:e5:7d:a0:31:97:3e:47:10:fc:94:07:92:3e:14:
ff:8f:88:d8:4a:d5:82:f2:92:3e:0b:f1:3f:38:36:d4:ec:64:
9d:cd:a0:9a:23:cb:20:e9:b2:4a:28:0e:bb:98:73:6b:e2:42:
d4:58:68:ca:0c:de:8d:e8:64:e1:32:91:14:e1:dc:1b:87:18:
b4:8f:18:75:5e:22:e9:3f:a3:01:4b:a1:86:92:44:21:85:08:
76:1b:22:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJZMW/c+Ml5T3J292jwbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzOWY5NmMyMGUxMGY3NmYwM2VkNDc4MTViN2E2YTVlZmRi
ZTAzZDUwHhcNMjUxMTExMDkwMDU2WhcNMjUxMTEyMDkwMDU2WjAzMTEwLwYDVQQD
EyhhMGNjOGIzMWI3ZWY4YzIzNzU4MmFhZTgyYjkyM2UwZGJiMThhODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fwb0G63apcFSFi8rsuSkl0pFht7
74x8TgsY+qz2cpGU6ZxFMxkxHyfzyzL0+OCsGyf2YvM+QyLLdqexgGyCJpIBB9LH
/rZ1rBWDdt0PN4C4wArgYdPm+4TeMHA936nrDdZYmgKYYIx1jJtLQ63R8RlANWkZ
VOCUEsxAGpIWCgxnS02srv3pNaUdYshVOwn5m4ocWVgEFhz1qT7LNNOd5a8Gvo1J
HlDZDU4RYS+GlD2sgVH69fBowrKiL8b2hKvZlp6OApHwNugJToLTcnw90NrqjcGS
QQcVk/66czQzZXN5g8e2bY8ey5mvN/ICoWoTFfz6UYcqRrsgO18I2d77XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDMizG374wjdYKq6CuSPg27GKidMB8GA1UdIwQY
MBaAFPOflsIOEPdvA+1HgVt6al79vgPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjkt
ZmI5MDgxYTE2MTM5LzEvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjktZmI5MDgxYTE2MTM5
LzEvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciRIMEaw
N26Z6c0HeOLdh0nR4PFgad6O6gVfFADZXqyNohToQHs4/ga8Mzbnw3qH91MDMFJi
NwvmdroYdUPSpW/dtKzLbnlgnS2p66mtoK+6E1Suv6gaUbv+d3vGLFriMg+beadv
Y/rqcwYygBd71R4J64TClgfCCDBZMSXoUO11nVZ7CgxbfQNejm/cEQBY9k7E487n
Hg3m2UZvSDs77P8Yl67gouV9oDGXPkcQ/JQHkj4U/4+I2ErVgvKSPgvxPzg21Oxk
nc2gmiPLIOmySigOu5hza+JC1Fhoygzejehk4TKRFOHcG4cYtI8YdV4i6T+jAUuh
hpJEIYUIdhsi5g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:13 2025 by rpki-client