Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: e1VktQnW0+7dh3Y/wjwrwtggbo9eVQVWolt+UYV7m1U=
Subject key identifier: 73:D2:CB:C4:CC:10:F2:A7:10:34:89:AF:AB:85:8A:7F:09:9B:3B:F7
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 0199C4200DDFEF053557A89838D464C194EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 14DF
Signing time: Wed 08 Oct 2025 14:00:58 +0000
Manifest this update: Wed 08 Oct 2025 14:00:58 +0000
Manifest next update: Thu 09 Oct 2025 14:00:58 +0000
Files and hashes: 1: 1FW1XbyYUs66xbKImXHkiZU-xAA.roa (hash: DA26l55wpmFxpEPwr1TEVKDAhIdZwBFIGz/j/ljF/kM=)
2: rQGBYURhHxIS2gUjxgxhWlf8G-M.roa (hash: d90EC3mny7b2jkfAqHp6/1/Pw4XbnGm5shftI7zAdH4=)
3: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: krFSLUFryVJtXuD334oFlckHhT1mQVhsG0hS16/2d+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:20:0d:df:ef:05:35:57:a8:98:38:d4:64:c1:94:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Oct 8 14:00:58 2025 GMT
Not After : Oct 9 14:00:58 2025 GMT
Subject: CN=73d2cbc4cc10f2a7103489afab858a7f099b3bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:09:8a:cf:e2:b6:6d:f7:22:a0:84:f3:9e:
1d:6d:b1:11:f2:26:8d:f0:7c:ab:78:af:f3:df:c0:
42:93:48:b1:d6:21:ec:a4:0d:ae:c5:74:94:e8:1d:
75:83:a7:ae:21:8f:79:64:46:6d:01:ed:e6:73:82:
bb:84:df:1c:47:35:42:f9:76:49:a1:f3:36:50:f2:
bb:03:b8:b0:f9:3f:9e:cc:b4:74:5f:19:91:4e:16:
3a:e6:17:96:a5:04:27:14:98:29:f1:70:f4:af:99:
75:12:d7:4e:82:d4:54:64:17:6d:e4:32:d3:d7:ce:
3a:b4:42:e6:d3:5a:03:cc:cd:4b:bb:69:a3:ae:3a:
e8:55:0a:71:c7:13:bb:3f:5e:16:ec:70:52:ba:4c:
36:51:71:29:7b:e2:b7:44:07:24:82:50:1e:1e:2a:
6e:01:c3:34:e3:31:3a:d2:d6:92:32:97:03:70:a5:
97:f1:f0:60:ec:79:24:8f:ce:f4:d2:1f:51:a6:63:
28:05:a7:09:2e:c6:a5:c6:1e:c8:b2:51:d4:c2:5a:
de:37:bc:66:f5:43:e4:23:bc:e2:3a:37:66:9b:d2:
11:de:56:08:43:89:af:c6:1e:e5:f1:6d:e9:fe:41:
5d:96:4d:28:10:65:3f:dc:ce:5b:f0:49:1a:2c:a1:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D2:CB:C4:CC:10:F2:A7:10:34:89:AF:AB:85:8A:7F:09:9B:3B:F7
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b3:34:4b:da:83:7e:b8:23:4d:70:03:ed:ea:13:a7:c9:ef:
b4:6f:40:f1:f2:31:88:f1:7f:a5:22:75:7d:72:66:bc:b9:4e:
e1:f5:2e:9a:be:4a:8c:02:96:30:d1:c0:9d:01:cf:7d:54:6a:
84:67:15:d4:4b:62:39:3c:0f:55:3e:b3:68:58:af:9d:93:0c:
50:4d:0b:45:37:b1:cb:3b:4e:69:bb:ef:ff:04:a7:b1:be:a4:
f0:35:d7:78:47:8f:4d:ad:83:45:6e:93:e3:58:03:78:d2:8d:
30:33:18:52:32:64:0c:55:72:2f:93:a7:ef:13:52:bf:a1:6a:
3c:7c:e9:32:0d:c4:58:85:a8:3b:72:73:76:c5:2d:5c:cd:74:
3c:3b:59:8b:38:55:6f:d8:1a:11:44:d4:a3:25:4e:a6:c6:c1:
08:f5:d6:2e:9b:03:6d:c4:01:e5:52:1f:dc:d6:65:f7:d2:db:
8a:d3:83:ba:92:74:b9:92:8a:d4:f0:43:c0:4c:82:70:a2:b6:
1c:f6:63:b8:7a:9c:d9:a0:9f:21:eb:db:d6:20:fe:15:d5:71:
f5:90:20:73:15:01:67:7d:57:c3:6d:9f:11:fd:18:1d:3b:81:
6a:74:2e:a3:83:84:80:7c:2b:bd:0b:cb:4c:e0:81:79:b8:a5:
7d:31:97:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEIA3f7wU1V6iYONRkwZTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzIwZmJjNDhmYTU5YTdkOGRlYTU3OTA4ZjM1MGExYjk3
NDU5ZGYwHhcNMjUxMDA4MTQwMDU4WhcNMjUxMDA5MTQwMDU4WjAzMTEwLwYDVQQD
Eyg3M2QyY2JjNGNjMTBmMmE3MTAzNDg5YWZhYjg1OGE3ZjA5OWIzYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprMJis/itm33IqCE854dbbER8iaN
8HyreK/z38BCk0ix1iHspA2uxXSU6B11g6euIY95ZEZtAe3mc4K7hN8cRzVC+XZJ
ofM2UPK7A7iw+T+ezLR0XxmRThY65heWpQQnFJgp8XD0r5l1EtdOgtRUZBdt5DLT
1846tELm01oDzM1Lu2mjrjroVQpxxxO7P14W7HBSukw2UXEpe+K3RAckglAeHipu
AcM04zE60taSMpcDcKWX8fBg7Hkkj8700h9RpmMoBacJLsalxh7IslHUwlreN7xm
9UPkI7ziOjdmm9IR3lYIQ4mvxh7l8W3p/kFdlk0oEGU/3M5b8EkaLKFXWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPSy8TMEPKnEDSJr6uFin8Jmzv3MB8GA1UdIwQY
MBaAFMHCD7xI+lmn2N6leQjzUKG5dFnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgt
MzAyY2UxYmM5OWMwLzEvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgtMzAyY2UxYmM5OWMw
LzEvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAurM0S9qD
frgjTXAD7eoTp8nvtG9A8fIxiPF/pSJ1fXJmvLlO4fUumr5KjAKWMNHAnQHPfVRq
hGcV1EtiOTwPVT6zaFivnZMMUE0LRTexyztOabvv/wSnsb6k8DXXeEePTa2DRW6T
41gDeNKNMDMYUjJkDFVyL5On7xNSv6FqPHzpMg3EWIWoO3JzdsUtXM10PDtZizhV
b9gaEUTUoyVOpsbBCPXWLpsDbcQB5VIf3NZl99LbitODupJ0uZKK1PBDwEyCcKK2
HPZjuHqc2aCfIevb1iD+FdVx9ZAgcxUBZ31Xw22fEf0YHTuBanQuo4OEgHwrvQvL
TOCBebilfTGX8A==
-----END CERTIFICATE-----
Generated at Wed Oct 8 15:47:29 2025 by rpki-client