Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
File: Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json)
Hash identifier: rXBl+znWY1BZqrek07vcmi9zWLVrAyeFK15dDwK6lco=
Subject key identifier: A8:60:FB:92:1E:82:AF:3B:0B:BF:77:BB:75:0C:DD:D6:E5:D6:D7:22
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Certificate issuer: /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial: 019A22F73A428E4A73DFA457EEFDD1D2D4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
Manifest number: 0B37
Signing time: Mon 27 Oct 2025 00:00:18 +0000
Manifest this update: Mon 27 Oct 2025 00:00:18 +0000
Manifest next update: Tue 28 Oct 2025 00:00:18 +0000
Files and hashes: 1: QnsXwvgDL1vpnE_nHW7cZ8l-yys.roa (hash: VNqFUdRBsRfrCU4DQ7mXN2LJBOfMOJgZg+HVbNE534A=)
2: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: g4an1IGt7wQbLzhbBzoWGt9hyKxYN2jcLvo7XV/ICs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:3a:42:8e:4a:73:df:a4:57:ee:fd:d1:d2:d4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Validity
Not Before: Oct 27 00:00:18 2025 GMT
Not After : Oct 28 00:00:18 2025 GMT
Subject: CN=a860fb921e82af3b0bbf77bb750cddd6e5d6d722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:a7:fe:ce:c8:9b:fb:48:81:2e:6b:d9:30:
3d:f5:59:52:8f:eb:d1:ca:af:21:22:ce:a6:94:df:
39:7f:aa:41:79:60:a3:c2:5d:00:3e:7e:2c:f2:20:
6d:c4:84:b3:3f:83:ce:7f:63:b5:ae:7d:34:b3:d4:
b8:80:e6:14:f3:0d:d4:9d:c5:08:d3:35:4b:bc:6b:
70:7e:e7:3f:b6:c4:37:1f:05:87:d7:d4:79:1e:9b:
69:58:a7:30:06:66:8a:4c:62:c1:65:51:3c:08:e3:
60:83:e8:d9:48:3a:17:f5:9b:26:d1:c8:95:5c:e1:
72:0e:61:fb:91:eb:25:9a:11:22:70:2b:de:95:f7:
4b:86:ae:aa:71:3d:26:38:a8:52:33:4a:4b:5a:20:
7c:ed:25:62:58:ab:28:c1:86:d1:d2:b1:86:74:9e:
f6:76:cc:1a:bf:6d:59:88:b9:c0:2c:73:25:fb:a0:
f8:bc:1d:ad:38:97:7b:df:fc:54:f7:de:40:a1:89:
9c:cb:8f:0d:0e:7b:83:99:ac:8b:79:71:c8:3e:ca:
e9:98:83:6e:6b:bf:d9:a8:01:06:cc:21:74:72:f0:
fd:31:9b:bf:cc:7b:1e:da:15:76:a0:f1:df:4b:c5:
77:74:15:20:e0:f5:38:13:cb:a5:5a:69:08:62:d0:
30:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:60:FB:92:1E:82:AF:3B:0B:BF:77:BB:75:0C:DD:D6:E5:D6:D7:22
X509v3 Authority Key Identifier:
keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:88:13:d7:13:9d:f3:cc:e5:7c:dc:88:26:57:7d:4a:6a:85:
e4:0c:53:6c:8b:97:1c:ca:61:bf:6d:73:ca:fd:39:e3:81:3f:
ef:bb:94:d6:04:ed:c6:da:73:d9:8a:61:c2:7f:b0:a1:01:47:
0b:cf:aa:c0:eb:e7:b6:56:89:e7:9d:d0:e9:04:d3:f9:87:af:
19:5b:a8:26:12:45:2e:6b:82:74:df:d1:ae:31:1f:f8:a0:d1:
62:3f:99:e9:71:79:e9:d5:ee:2e:59:1c:6e:bf:0e:97:15:2a:
cb:f5:06:4c:76:31:7e:74:8c:2e:8f:3e:8d:47:f9:58:0d:cb:
45:49:0f:e1:25:19:a6:10:52:21:50:a8:64:92:11:d8:32:ec:
9a:d1:2c:5b:54:7b:f6:b5:9f:40:da:2d:1d:ae:92:27:28:7f:
08:93:51:7d:43:79:56:ef:4f:6c:19:57:06:49:4e:c7:8f:40:
04:35:4f:b5:05:8b:3c:8f:0a:69:49:4b:a3:27:b2:df:e4:95:
3e:ab:99:d4:3f:8d:47:ea:0d:c2:e3:d2:3f:40:fe:f1:92:97:
d4:2c:c9:40:40:69:33:84:3f:27:80:77:28:72:6e:28:5a:6c:
44:3f:7d:53:d4:12:0c:e5:71:c5:3c:ba:20:2f:b7:c9:10:39:
17:39:b2:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoi9zpCjkpz36RX7v3R0tT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZWU5Mjg0NmZlMzhmZGU4ZTBmNjI5NDhjYTk4ODNjMWEy
OWI3NTUwHhcNMjUxMDI3MDAwMDE4WhcNMjUxMDI4MDAwMDE4WjAzMTEwLwYDVQQD
EyhhODYwZmI5MjFlODJhZjNiMGJiZjc3YmI3NTBjZGRkNmU1ZDZkNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVqn/s7Im/tIgS5r2TA99VlSj+vR
yq8hIs6mlN85f6pBeWCjwl0APn4s8iBtxISzP4POf2O1rn00s9S4gOYU8w3UncUI
0zVLvGtwfuc/tsQ3HwWH19R5HptpWKcwBmaKTGLBZVE8CONgg+jZSDoX9Zsm0ciV
XOFyDmH7keslmhEicCvelfdLhq6qcT0mOKhSM0pLWiB87SViWKsowYbR0rGGdJ72
dswav21ZiLnALHMl+6D4vB2tOJd73/xU995AoYmcy48NDnuDmayLeXHIPsrpmINu
a7/ZqAEGzCF0cvD9MZu/zHse2hV2oPHfS8V3dBUg4PU4E8ulWmkIYtAwewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhg+5Iegq87C793u3UM3dbl1tciMB8GA1UdIwQY
MBaAFFrukoRv44/ejg9ilIypiDwaKbdVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8xZGIwY2ItNzlmZC00ZDY5LTk1MTUt
NDJmY2ZiNzU1NzQ0LzEvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8xZGIwY2ItNzlmZC00ZDY5LTk1MTUtNDJmY2ZiNzU1NzQ0
LzEvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIgT1xOd
88zlfNyIJld9SmqF5AxTbIuXHMphv21zyv0544E/77uU1gTtxtpz2Yphwn+woQFH
C8+qwOvntlaJ553Q6QTT+YevGVuoJhJFLmuCdN/RrjEf+KDRYj+Z6XF56dXuLlkc
br8OlxUqy/UGTHYxfnSMLo8+jUf5WA3LRUkP4SUZphBSIVCoZJIR2DLsmtEsW1R7
9rWfQNotHa6SJyh/CJNRfUN5Vu9PbBlXBklOx49ABDVPtQWLPI8KaUlLoyey3+SV
PquZ1D+NR+oNwuPSP0D+8ZKX1CzJQEBpM4Q/J4B3KHJuKFpsRD99U9QSDOVxxTy6
IC+3yRA5FzmyVA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:45 2025 by rpki-client