Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
File: wZXJC6JdDegZV1eMeMt7JOjJPsk.mft (raw, json)
Hash identifier: w4fSE3bwV+5d54xznFuvEo3gBqmZvMhrvQuaVghaVUk=
Subject key identifier: A1:29:AB:E2:E6:02:19:AF:57:D2:E8:89:D5:79:E5:04:89:1D:D1:4C
Authority key identifier: C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9
Certificate issuer: /CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9
Certificate serial: 019A71B885D99C8A968975525FE71501D5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
Manifest number: 023B
Signing time: Tue 11 Nov 2025 07:01:49 +0000
Manifest this update: Tue 11 Nov 2025 07:01:49 +0000
Manifest next update: Wed 12 Nov 2025 07:01:49 +0000
Files and hashes: 1: wZXJC6JdDegZV1eMeMt7JOjJPsk.crl (hash: WqfuCFpMdccQ9vUxsadUKkOsY5HbECsSXFsIE8eM45s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:85:d9:9c:8a:96:89:75:52:5f:e7:15:01:d5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9
Validity
Not Before: Nov 11 07:01:49 2025 GMT
Not After : Nov 12 07:01:49 2025 GMT
Subject: CN=a129abe2e60219af57d2e889d579e504891dd14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:85:b5:07:e9:76:c5:a8:57:7d:4a:a2:f0:
f3:ee:93:50:73:64:0a:25:c8:56:93:43:25:c8:35:
fe:d0:cf:f5:88:1c:2a:ce:da:2c:fa:ce:26:1a:f4:
94:4c:85:e2:d4:ea:ab:fd:54:2c:0a:d0:7b:4e:f6:
a6:f3:9c:f1:a6:dd:39:c3:47:83:10:ab:3d:75:56:
f1:bd:43:d9:c0:18:e5:69:61:cb:c9:ad:97:ea:8d:
02:6c:ba:a3:6c:cb:58:fb:e1:fe:ab:06:7e:17:c0:
f3:3b:3b:e5:60:95:df:d8:a7:67:1e:ef:c4:a7:48:
21:54:49:b5:ce:40:7f:ae:9a:12:21:a7:5e:04:fe:
29:38:dc:c9:ec:c0:94:c5:71:7c:a6:62:12:fb:e2:
15:86:9c:a2:84:fb:41:97:d5:69:a1:6c:85:db:82:
3a:7b:39:92:39:ca:e3:d2:e8:d4:c4:5a:51:ec:f5:
8c:14:b3:f3:d2:29:ab:fb:2f:40:6a:8d:23:02:c0:
b1:f0:1f:4a:8a:18:d9:42:a3:67:b4:45:f8:98:77:
fd:81:59:ba:29:7b:8d:02:f3:c4:71:d7:34:19:36:
b9:b0:02:ad:ab:09:44:ce:5e:12:8f:c5:9e:5a:91:
ae:7b:a0:a6:49:3f:46:47:aa:43:33:34:58:d4:b4:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:29:AB:E2:E6:02:19:AF:57:D2:E8:89:D5:79:E5:04:89:1D:D1:4C
X509v3 Authority Key Identifier:
keyid:C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:e8:e5:05:82:14:ff:ba:5c:9d:ed:92:f2:55:8a:10:97:4f:
e3:5d:7e:42:06:ee:37:06:bc:4b:7c:89:fa:9e:12:f5:7a:79:
35:dc:69:7c:fb:94:bb:20:83:14:55:b2:c3:8b:1f:ce:c3:af:
2e:a0:4d:b0:a2:b2:0d:35:ce:3f:5b:18:f4:d9:22:27:ef:90:
f5:2a:dc:36:43:c9:66:9f:31:94:2a:ea:3d:b2:6c:5f:22:4f:
c0:17:9f:1a:32:a2:ca:27:ca:96:f0:1d:f3:64:78:70:66:d0:
8a:c3:62:c1:f3:19:d2:ad:ac:46:50:67:c7:9f:25:54:25:b7:
81:35:a4:07:67:15:4b:a3:1f:9e:5a:f9:42:c8:00:a5:35:f0:
0b:3d:10:00:94:6f:07:a3:db:de:05:08:77:0f:47:b2:2e:1a:
07:b5:5d:c3:2f:ac:c3:0a:ed:e1:5f:29:77:d8:d5:ca:3c:23:
bc:3c:ae:70:0c:81:3f:71:ff:64:e7:85:79:2e:f4:37:16:c7:
17:97:85:ee:b9:88:cc:39:6f:3f:62:ed:4a:d4:28:db:48:7a:
41:c6:e2:47:33:74:e9:ff:22:27:07:ed:5d:ee:27:85:4f:1f:
da:b7:fb:dc:cf:bd:39:ec:83:16:92:bf:ce:e1:98:66:da:4b:
21:c1:8b:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuIXZnIqWiXVSX+cVAdXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOTVjOTBiYTI1ZDBkZTgxOTU3NTc4Yzc4Y2I3YjI0ZThj
OTNlYzkwHhcNMjUxMTExMDcwMTQ5WhcNMjUxMTEyMDcwMTQ5WjAzMTEwLwYDVQQD
EyhhMTI5YWJlMmU2MDIxOWFmNTdkMmU4ODlkNTc5ZTUwNDg5MWRkMTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk+FtQfpdsWoV31KovDz7pNQc2QK
JchWk0MlyDX+0M/1iBwqztos+s4mGvSUTIXi1Oqr/VQsCtB7Tvam85zxpt05w0eD
EKs9dVbxvUPZwBjlaWHLya2X6o0CbLqjbMtY++H+qwZ+F8DzOzvlYJXf2KdnHu/E
p0ghVEm1zkB/rpoSIadeBP4pONzJ7MCUxXF8pmIS++IVhpyihPtBl9VpoWyF24I6
ezmSOcrj0ujUxFpR7PWMFLPz0imr+y9Aao0jAsCx8B9KihjZQqNntEX4mHf9gVm6
KXuNAvPEcdc0GTa5sAKtqwlEzl4Sj8WeWpGue6CmST9GR6pDMzRY1LTpyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEpq+LmAhmvV9LoidV55QSJHdFMMB8GA1UdIwQY
MBaAFMGVyQuiXQ3oGVdXjHjLeyToyT7JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1pYSkM2SmREZWdaVjFlTWVNdDdKT2pKUHNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85YzY0ZTItNGI2NC00M2RhLWI5MDQt
MTBiOTA3ZmZkMDhmLzEvd1pYSkM2SmREZWdaVjFlTWVNdDdKT2pKUHNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85YzY0ZTItNGI2NC00M2RhLWI5MDQtMTBiOTA3ZmZkMDhm
LzEvd1pYSkM2SmREZWdaVjFlTWVNdDdKT2pKUHNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyejlBYIU
/7pcne2S8lWKEJdP411+QgbuNwa8S3yJ+p4S9Xp5NdxpfPuUuyCDFFWyw4sfzsOv
LqBNsKKyDTXOP1sY9NkiJ++Q9SrcNkPJZp8xlCrqPbJsXyJPwBefGjKiyifKlvAd
82R4cGbQisNiwfMZ0q2sRlBnx58lVCW3gTWkB2cVS6Mfnlr5QsgApTXwCz0QAJRv
B6Pb3gUIdw9Hsi4aB7Vdwy+swwrt4V8pd9jVyjwjvDyucAyBP3H/ZOeFeS70NxbH
F5eF7rmIzDlvP2LtStQo20h6QcbiRzN06f8iJwftXe4nhU8f2rf73M+9OeyDFpK/
zuGYZtpLIcGL3w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:22 2025 by rpki-client