Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: 3JibyNSyAeAKFHh5f2adewkPQXQRiwctTUTw4fg0HtE=
Subject key identifier: F3:15:94:B4:14:4A:C6:CA:85:AF:9B:BC:8C:54:20:30:76:57:C3:63
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 019A1C87172B45DD959909BD7D3E9083E7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 0901
Signing time: Sat 25 Oct 2025 18:00:06 +0000
Manifest this update: Sat 25 Oct 2025 18:00:06 +0000
Manifest next update: Sun 26 Oct 2025 18:00:06 +0000
Files and hashes: 1: CrZg-KF8Q9A22OHJJHctF4UJ8vA.roa (hash: TgN9LzFg5B6mAl/H8RLYxQOgYmdpxQcOV4fT/DnUDn0=)
2: SQ2_vb8pZ2pKG_CAnGQ99aAzhXc.roa (hash: BeWy+dlaJycBkNeRNkXcy0pfdCOJIP2bN9zt/qAhbUY=)
3: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: llvsCXlUbPIfuUNB92JXYueDpwDvm2P3rfQA0sVwBU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:87:17:2b:45:dd:95:99:09:bd:7d:3e:90:83:e7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Oct 25 18:00:06 2025 GMT
Not After : Oct 26 18:00:06 2025 GMT
Subject: CN=f31594b4144ac6ca85af9bbc8c5420307657c363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:aa:1b:10:85:ac:30:4e:73:8d:74:97:a1:90:
3a:81:1f:26:76:c4:37:af:00:7a:fc:f4:52:4b:0f:
30:75:0f:c8:ea:c6:8f:d4:3e:c0:b3:25:df:30:ac:
60:3f:b9:70:7c:67:da:6d:33:fa:db:bb:83:4b:3e:
f1:a5:b6:e2:7a:ed:83:59:e8:2c:c6:7e:fb:11:a9:
b9:27:87:bf:1a:d1:f0:a7:ac:d1:35:78:97:d7:2e:
51:d3:9d:e0:8c:5e:37:fa:af:c9:f7:00:bd:6f:b0:
3c:06:78:fa:02:62:af:da:1d:4a:56:98:0b:cd:59:
d6:da:4c:d8:a1:11:66:f0:d5:5e:9b:49:53:f8:5a:
78:50:2b:1a:19:fd:c9:1f:5d:26:46:99:34:5b:88:
61:9d:76:b1:dc:27:a7:85:ef:78:9d:b3:65:dc:47:
4d:88:cf:33:b9:85:0e:97:3a:b5:21:80:0c:50:36:
dc:fa:ec:20:f0:cb:1f:51:9b:83:92:83:c7:5c:d2:
e2:87:56:91:ee:3f:ae:64:52:be:1b:08:37:e8:87:
32:7b:aa:fb:a0:79:22:0b:f2:d6:74:19:fb:25:d4:
d6:e8:37:0e:87:c2:f0:b6:2f:20:81:df:91:2f:66:
e6:9d:9e:3e:d9:06:77:71:b5:07:5b:4a:6d:47:03:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:15:94:B4:14:4A:C6:CA:85:AF:9B:BC:8C:54:20:30:76:57:C3:63
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c5:b6:64:b5:01:a8:f4:b3:2f:18:df:ad:5e:80:16:eb:b4:
3b:14:55:60:0c:4a:48:71:23:e1:24:0b:0b:b3:4b:bc:6f:59:
fa:80:d6:5b:72:6c:c4:85:45:1c:d5:9c:90:04:a2:9e:1c:5b:
51:e2:9c:4f:d1:37:0f:67:ef:ba:bb:ab:d1:1f:72:57:76:c0:
d8:5f:65:45:81:28:5c:6c:1f:ea:60:24:ea:8f:6f:08:b7:47:
53:24:a5:64:6f:09:a0:72:47:b6:2e:8d:b9:d5:c9:d4:d4:c7:
f0:54:d1:9d:58:82:64:41:7f:21:56:2f:e3:ec:db:9c:a7:d8:
35:39:08:fd:88:e7:4b:53:d0:8b:d2:7d:95:04:7c:45:77:63:
92:c7:16:12:d1:f0:f3:0e:70:11:15:1f:76:a7:68:ac:b2:08:
3d:e3:3c:2c:dc:4c:f0:c9:8d:d2:db:9a:f3:27:b7:bd:59:85:
7e:28:91:31:8e:d0:76:d4:f3:36:ff:99:65:66:02:f0:0b:2b:
37:e6:5e:3d:d8:94:34:60:b2:8b:0f:ab:70:35:ea:02:10:b8:
7b:80:d1:e9:d9:c6:48:38:49:fc:3a:fb:d7:5c:9b:60:6e:2d:
34:9e:5e:ba:88:49:da:9f:c8:b3:99:5b:02:a7:1b:63:ad:9f:
ed:fc:66:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZochxcrRd2VmQm9fT6Qg+e2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDk0M2E0MWNlMjdlN2I3YmNmZGZmNjlhODljM2UzMzdl
YTYzYjUwHhcNMjUxMDI1MTgwMDA2WhcNMjUxMDI2MTgwMDA2WjAzMTEwLwYDVQQD
EyhmMzE1OTRiNDE0NGFjNmNhODVhZjliYmM4YzU0MjAzMDc2NTdjMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqobEIWsME5zjXSXoZA6gR8mdsQ3
rwB6/PRSSw8wdQ/I6saP1D7AsyXfMKxgP7lwfGfabTP627uDSz7xpbbieu2DWegs
xn77Eam5J4e/GtHwp6zRNXiX1y5R053gjF43+q/J9wC9b7A8Bnj6AmKv2h1KVpgL
zVnW2kzYoRFm8NVem0lT+Fp4UCsaGf3JH10mRpk0W4hhnXax3Cenhe94nbNl3EdN
iM8zuYUOlzq1IYAMUDbc+uwg8MsfUZuDkoPHXNLih1aR7j+uZFK+Gwg36Icye6r7
oHkiC/LWdBn7JdTW6DcOh8Lwti8ggd+RL2bmnZ4+2QZ3cbUHW0ptRwM+IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMVlLQUSsbKha+bvIxUIDB2V8NjMB8GA1UdIwQY
MBaAFFrZQ6Qc4n57e8/f9pqJw+M36mO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQt
ODRmOTA1OTM5MTNjLzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQtODRmOTA1OTM5MTNj
LzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8W2ZLUB
qPSzLxjfrV6AFuu0OxRVYAxKSHEj4SQLC7NLvG9Z+oDWW3JsxIVFHNWckASinhxb
UeKcT9E3D2fvurur0R9yV3bA2F9lRYEoXGwf6mAk6o9vCLdHUySlZG8JoHJHti6N
udXJ1NTH8FTRnViCZEF/IVYv4+zbnKfYNTkI/YjnS1PQi9J9lQR8RXdjkscWEtHw
8w5wERUfdqdorLIIPeM8LNxM8MmN0tua8ye3vVmFfiiRMY7QdtTzNv+ZZWYC8Asr
N+ZePdiUNGCyiw+rcDXqAhC4e4DR6dnGSDhJ/Dr711ybYG4tNJ5euohJ2p/Is5lb
AqcbY62f7fxmmA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 20:06:18 2025 by rpki-client