Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
File: wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft (raw, json)
Hash identifier: gD1nYPtiHSZ3u37Sm10zmcP/22ksyP3dvOqBKeJRwzg=
Subject key identifier: D6:1A:2B:33:89:EA:14:16:C4:91:F3:7D:2B:53:D3:12:F0:5F:3C:97
Authority key identifier: C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0
Certificate issuer: /CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
Certificate serial: 019A7149E8BC0105E8CEFF95226C6DA5B952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
Manifest number: 02B1
Signing time: Tue 11 Nov 2025 05:01:00 +0000
Manifest this update: Tue 11 Nov 2025 05:01:00 +0000
Manifest next update: Wed 12 Nov 2025 05:01:00 +0000
Files and hashes: 1: wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl (hash: MXu8pI+8SXG6babE7rd6fe6YFaUSalrv2JvZY2GJ3Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e8:bc:01:05:e8:ce:ff:95:22:6c:6d:a5:b9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
Validity
Not Before: Nov 11 05:01:00 2025 GMT
Not After : Nov 12 05:01:00 2025 GMT
Subject: CN=d61a2b3389ea1416c491f37d2b53d312f05f3c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:a7:2f:13:fd:1b:5a:1d:70:1f:b5:ac:91:
f1:33:46:4a:1a:46:6e:2b:cf:06:82:8d:e5:5a:cf:
fc:42:30:91:0d:d9:df:21:e1:2f:49:56:c5:98:48:
21:74:1f:e9:4b:5b:5c:a4:ee:38:c0:75:94:b4:9e:
24:23:64:7a:19:94:d5:03:d6:8e:71:31:1b:8c:fe:
ad:63:12:44:bd:6c:2d:17:52:04:7f:cd:9d:25:cb:
7b:9a:7a:17:80:9a:de:ff:ea:d2:23:f1:b2:d9:8e:
ed:11:29:f4:2d:af:72:2e:81:a8:90:22:f7:f0:03:
01:37:b4:cf:6f:dd:71:15:f2:db:f7:17:59:34:6b:
38:a2:56:d8:77:f3:87:ef:e7:dc:df:27:57:79:a5:
c5:72:c6:c1:5b:1e:33:20:4d:b5:ae:e6:55:90:e5:
e0:ce:95:d2:52:b6:98:4f:03:d0:71:48:b8:31:60:
2e:a2:c7:b4:65:b5:ab:b0:0b:f1:a6:e8:c5:cd:34:
04:30:21:5c:77:74:aa:55:1d:d0:90:07:e5:f8:8e:
b8:93:61:54:08:f8:87:78:13:bf:2b:8e:67:d0:a7:
6d:cb:66:82:9c:d2:a0:65:62:fe:16:0d:d7:8c:6b:
fa:bb:ac:70:d9:4c:3c:46:41:98:1b:3a:93:0f:c8:
72:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1A:2B:33:89:EA:14:16:C4:91:F3:7D:2B:53:D3:12:F0:5F:3C:97
X509v3 Authority Key Identifier:
keyid:C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:31:0b:16:c8:27:65:ec:9f:3a:a6:7b:d6:ab:09:49:42:75:
f7:f6:87:65:61:ee:b1:cd:90:23:bb:26:12:e6:d2:52:0c:41:
01:42:97:ba:d4:51:84:53:3c:f4:a4:64:e0:4b:d5:91:75:0e:
3e:42:cd:44:a1:7b:ff:c1:e7:52:8c:7e:d8:46:bc:cf:7b:cd:
6c:f2:10:2d:fe:b2:37:9a:9d:17:19:5e:b9:fc:2b:81:b7:a1:
02:93:b1:1b:bf:51:b1:43:6d:4f:8d:30:f6:3a:ad:94:71:68:
b7:98:16:b0:4b:ce:24:7b:ac:4f:45:ea:04:d5:73:17:7b:e8:
aa:08:d8:9b:f5:b0:71:e0:64:42:9b:55:d4:d2:2e:60:5a:9b:
2d:b8:57:68:9d:b7:74:81:35:4d:a7:90:47:f3:70:d7:0d:79:
a8:e7:b0:27:e4:5d:a0:7d:e5:3a:c7:6c:22:14:a4:5b:3f:09:
a9:78:1b:a3:30:56:d2:32:2a:64:f8:ca:82:ea:61:f4:d7:80:
07:81:87:9c:c3:78:1a:31:68:64:e0:51:80:15:40:98:68:7a:
af:55:16:c7:e1:9a:07:21:71:ed:33:1d:aa:e8:98:74:4a:db:
f9:96:1c:bc:33:05:86:ef:c8:08:5e:09:83:47:47:61:c4:92:
67:f7:49:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSei8AQXozv+VImxtpblSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYWQ0OTdiODA0MTYzOWM0YjNkMjIxMDc4MmNiNWQxOTgx
NGM0ZTAwHhcNMjUxMTExMDUwMTAwWhcNMjUxMTEyMDUwMTAwWjAzMTEwLwYDVQQD
EyhkNjFhMmIzMzg5ZWExNDE2YzQ5MWYzN2QyYjUzZDMxMmYwNWYzYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16KnLxP9G1odcB+1rJHxM0ZKGkZu
K88Ggo3lWs/8QjCRDdnfIeEvSVbFmEghdB/pS1tcpO44wHWUtJ4kI2R6GZTVA9aO
cTEbjP6tYxJEvWwtF1IEf82dJct7mnoXgJre/+rSI/Gy2Y7tESn0La9yLoGokCL3
8AMBN7TPb91xFfLb9xdZNGs4olbYd/OH7+fc3ydXeaXFcsbBWx4zIE21ruZVkOXg
zpXSUraYTwPQcUi4MWAuose0ZbWrsAvxpujFzTQEMCFcd3SqVR3QkAfl+I64k2FU
CPiHeBO/K45n0Kdty2aCnNKgZWL+Fg3XjGv6u6xw2Uw8RkGYGzqTD8hytwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYaKzOJ6hQWxJHzfStT0xLwXzyXMB8GA1UdIwQY
MBaAFMCtSXuAQWOcSz0iEHgstdGYFMTgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0sxSmU0QkJZNXhMUFNJUWVDeTEwWmdVeE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lYWUxZjMtODg0Zi00OGY5LTg4Yzgt
ZWRjMzI1YWU3YjE4LzEvd0sxSmU0QkJZNXhMUFNJUWVDeTEwWmdVeE9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lYWUxZjMtODg0Zi00OGY5LTg4YzgtZWRjMzI1YWU3YjE4
LzEvd0sxSmU0QkJZNXhMUFNJUWVDeTEwWmdVeE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjELFsgn
ZeyfOqZ71qsJSUJ19/aHZWHusc2QI7smEubSUgxBAUKXutRRhFM89KRk4EvVkXUO
PkLNRKF7/8HnUox+2Ea8z3vNbPIQLf6yN5qdFxleufwrgbehApOxG79RsUNtT40w
9jqtlHFot5gWsEvOJHusT0XqBNVzF3voqgjYm/WwceBkQptV1NIuYFqbLbhXaJ23
dIE1TaeQR/Nw1w15qOewJ+RdoH3lOsdsIhSkWz8JqXgbozBW0jIqZPjKguph9NeA
B4GHnMN4GjFoZOBRgBVAmGh6r1UWx+GaByFx7TMdquiYdErb+ZYcvDMFhu/ICF4J
g0dHYcSSZ/dJQw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:22 2025 by rpki-client