Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
File: WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft (raw, json)
Hash identifier: IKXywfN57UlfMDyrjHUOzLo+g2BQvQQ39S+Y3UVQ0dk=
Subject key identifier: FA:72:46:CE:D6:96:E8:8E:AF:EE:EF:F1:A2:5B:AA:DD:95:2D:32:26
Authority key identifier: 59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A
Certificate issuer: /CN=596d400faa5269099cc7b1c7a03ce69d8391f21a
Certificate serial: 019A71B900279A6BD2ACB946776C2153EDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
Manifest number: 0783
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl (hash: ldf72Un1DJeoGZ36rVUl/u6jPZX/0UQt9RS2yf6CRxU=)
2: s5QSQwev5CqksmjM0AaoSdiOZEY.roa (hash: r2aK748rLgMwkpT8AEvF91wvzX74j/vxHw/8YYI08JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:00:27:9a:6b:d2:ac:b9:46:77:6c:21:53:ed:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=596d400faa5269099cc7b1c7a03ce69d8391f21a
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=fa7246ced696e88eafeeeff1a25baadd952d3226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:54:09:7b:dd:cd:93:6d:11:c9:e9:d9:e8:
52:15:74:c1:57:26:43:1d:86:9f:c6:ac:7a:97:89:
27:32:ef:bc:ab:68:f0:a2:98:1c:2c:51:bd:94:e9:
15:24:78:55:1c:c1:96:9d:d5:7e:ee:31:7e:1c:4c:
bb:75:c9:34:e2:54:50:99:2b:71:13:ab:e2:c7:58:
7b:41:3b:cb:08:37:4f:aa:28:33:a0:8b:28:4a:ef:
60:77:11:c5:4f:b1:7e:05:f6:7f:46:09:d7:fb:09:
0f:7d:29:d2:fc:cd:e0:c2:fe:3a:83:01:b6:77:6f:
c7:65:fa:16:67:dd:27:40:26:17:9f:ff:0a:5e:49:
ac:05:0c:bb:03:c5:5f:d4:44:8b:82:3e:6a:62:c7:
9b:df:18:7a:46:cc:df:9b:5d:34:6a:62:5a:5b:62:
e1:d2:87:85:3f:5f:19:99:a9:3a:db:60:34:cb:0e:
3f:ea:2c:22:57:4d:a5:f1:d0:f8:73:00:b5:0a:ea:
d0:49:91:a6:c8:c6:88:f8:dc:f5:dd:a3:c6:0b:39:
b1:30:d8:26:ad:4c:dc:20:5a:0d:f6:ad:c9:71:79:
e4:68:2b:1d:85:ea:5d:c8:4c:4e:d7:e7:ba:5f:06:
fd:05:ed:21:30:e9:a1:4a:7f:e7:87:88:bc:2e:7e:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:72:46:CE:D6:96:E8:8E:AF:EE:EF:F1:A2:5B:AA:DD:95:2D:32:26
X509v3 Authority Key Identifier:
keyid:59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fb:69:75:78:7b:f6:26:13:39:39:bd:2a:df:4b:f3:28:4f:
da:fe:b4:c4:49:61:e8:5a:cf:d9:1c:65:8d:52:9c:ad:2d:ba:
bf:87:51:df:e3:fb:4e:8e:dc:c6:97:27:2a:aa:39:92:3a:a2:
c2:ed:12:13:63:6d:53:cd:a6:2e:09:3e:3b:4c:53:34:85:83:
2b:d3:28:90:9d:67:c8:99:1a:6e:2a:08:c3:f8:8d:3b:50:72:
3c:48:45:e4:c2:70:53:56:ae:0f:5b:da:f3:d9:ba:89:cf:d0:
b9:4d:10:e3:ba:67:5f:e3:bd:ba:b0:0f:fc:87:77:69:28:ba:
3f:58:f3:4b:6d:64:3a:6d:e1:8e:e8:f6:cc:56:76:9b:ca:6d:
a4:fe:b0:8b:d7:95:ef:43:66:29:21:5a:8d:a0:17:3d:df:ca:
da:a1:97:50:8d:f0:da:c5:4e:2f:e9:25:6c:10:9f:6d:4d:55:
50:4f:84:4f:dd:7b:42:43:96:4d:88:dc:10:c3:f3:68:e8:b7:
00:ba:89:8f:66:66:6e:f7:32:e8:71:3f:a6:cd:dc:a6:3e:da:
a6:f8:b6:22:98:78:b0:8a:6e:aa:62:8c:8d:d9:4d:70:62:8d:
31:fd:e4:d9:7b:b8:fe:59:bf:87:1b:b4:f4:8e:48:51:5c:45:
08:41:8f:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuQAnmmvSrLlGd2whU+23MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NmQ0MDBmYWE1MjY5MDk5Y2M3YjFjN2EwM2NlNjlkODM5
MWYyMWEwHhcNMjUxMTExMDcwMjIwWhcNMjUxMTEyMDcwMjIwWjAzMTEwLwYDVQQD
EyhmYTcyNDZjZWQ2OTZlODhlYWZlZWVmZjFhMjViYWFkZDk1MmQzMjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVRUCXvdzZNtEcnp2ehSFXTBVyZD
HYafxqx6l4knMu+8q2jwopgcLFG9lOkVJHhVHMGWndV+7jF+HEy7dck04lRQmStx
E6vix1h7QTvLCDdPqigzoIsoSu9gdxHFT7F+BfZ/RgnX+wkPfSnS/M3gwv46gwG2
d2/HZfoWZ90nQCYXn/8KXkmsBQy7A8Vf1ESLgj5qYseb3xh6Rszfm100amJaW2Lh
0oeFP18Zmak622A0yw4/6iwiV02l8dD4cwC1CurQSZGmyMaI+Nz13aPGCzmxMNgm
rUzcIFoN9q3JcXnkaCsdhepdyExO1+e6Xwb9Be0hMOmhSn/nh4i8Ln6YLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpyRs7WluiOr+7v8aJbqt2VLTImMB8GA1UdIwQY
MBaAFFltQA+qUmkJnMexx6A85p2DkfIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hZTI1MWItNTcyZC00MWM0LWFkMmUt
YzI4N2RiOTM0OTEyLzEvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hZTI1MWItNTcyZC00MWM0LWFkMmUtYzI4N2RiOTM0OTEy
LzEvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvtpdXh7
9iYTOTm9Kt9L8yhP2v60xElh6FrP2RxljVKcrS26v4dR3+P7To7cxpcnKqo5kjqi
wu0SE2NtU82mLgk+O0xTNIWDK9MokJ1nyJkabioIw/iNO1ByPEhF5MJwU1auD1va
89m6ic/QuU0Q47pnX+O9urAP/Id3aSi6P1jzS21kOm3hjuj2zFZ2m8ptpP6wi9eV
70NmKSFajaAXPd/K2qGXUI3w2sVOL+klbBCfbU1VUE+ET917QkOWTYjcEMPzaOi3
ALqJj2Zmbvcy6HE/ps3cpj7apvi2Iph4sIpuqmKMjdlNcGKNMf3k2Xu4/lm/hxu0
9I5IUVxFCEGPyw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:11 2025 by rpki-client