Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: uig/IWBtdMM6Psy5iy/YmgtS57NnQX3tL043eeW40R0=
Subject key identifier: E2:B1:EB:2B:7D:66:6E:B9:3F:24:A2:53:66:23:C1:B5:FD:4D:88:95
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 0199FBEB1CB3AF8F2A19E00E3E52C93EF9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 15E1
Signing time: Sun 19 Oct 2025 10:01:53 +0000
Manifest this update: Sun 19 Oct 2025 10:01:53 +0000
Manifest next update: Mon 20 Oct 2025 10:01:53 +0000
Files and hashes: 1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=)
2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: ix5MQOBZY09+PTZu0rxCOs6TEsKYy1pGGWaRazuEZTM=)
3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1c:b3:af:8f:2a:19:e0:0e:3e:52:c9:3e:f9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Oct 19 10:01:53 2025 GMT
Not After : Oct 20 10:01:53 2025 GMT
Subject: CN=e2b1eb2b7d666eb93f24a2536623c1b5fd4d8895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:29:54:fa:36:46:3b:c7:59:43:64:1d:3c:
94:5e:53:e3:46:7b:81:fa:7f:be:ca:a2:64:7c:5c:
60:40:23:9d:30:7f:02:a8:6a:38:6a:38:8c:ab:a1:
50:b3:3d:cd:3e:08:02:56:bf:ae:1d:85:27:c1:ab:
2b:a0:2e:04:f7:26:64:25:9c:b9:19:9d:3e:be:4e:
7d:b1:14:a1:14:96:b9:fa:ed:fa:3a:1b:1d:32:b7:
5d:a2:f1:98:63:69:d6:82:7a:45:24:63:a3:9c:ac:
38:ad:4b:13:fa:3b:8b:ec:ce:d5:21:fa:f4:62:1c:
fd:97:da:a0:b8:f5:4b:05:79:f5:5c:e2:c2:6b:8b:
89:e8:f6:d4:bf:ad:f3:7d:8f:ee:52:0f:4a:bb:82:
ee:b2:51:df:33:fe:29:68:e4:14:33:01:92:7f:3b:
af:03:59:82:a5:a8:f7:11:5e:cc:c3:b5:20:c1:60:
25:a0:b5:8c:3e:12:67:09:96:65:f2:9d:cc:47:a9:
80:48:41:55:7c:bf:fe:25:4f:89:32:3e:59:78:22:
34:e8:f2:ed:86:38:7d:8e:4d:4b:62:4d:41:50:74:
58:d4:01:c4:b5:42:f4:db:00:63:42:a4:ca:3d:88:
80:bc:c7:9f:d4:fc:9c:1c:85:9e:d8:97:a7:b7:1d:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B1:EB:2B:7D:66:6E:B9:3F:24:A2:53:66:23:C1:B5:FD:4D:88:95
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:30:c9:f5:c3:cd:80:23:14:32:b9:d1:c8:a0:ff:54:85:0d:
48:3d:45:54:f2:1f:3d:c2:c8:60:75:28:22:ed:ac:8c:d0:8f:
86:1e:d6:6b:4d:c7:80:f7:6e:ca:a3:ae:61:1b:80:c9:44:d7:
db:3b:0b:b5:5f:10:f8:71:ac:83:d5:aa:dd:1c:9b:3a:bc:13:
82:33:01:12:47:84:19:67:4f:72:0e:73:c5:7a:94:df:cd:ab:
c8:c3:41:7e:f7:f3:3a:e8:b7:03:6c:70:0e:35:35:84:49:c7:
66:19:5b:50:a8:8e:47:6f:b6:e9:ec:0a:78:04:22:57:4c:42:
10:b3:53:c2:7c:5d:53:29:ac:32:fd:58:c7:b4:cc:11:68:02:
32:61:e8:13:60:fa:b3:ce:53:c7:45:77:b2:fa:90:56:39:56:
27:b9:fd:96:df:fd:f0:f7:a3:d5:b4:68:07:e9:87:da:d8:eb:
68:fe:3a:46:ff:bd:c5:75:43:3a:59:ab:26:48:ec:b4:72:6b:
b6:8a:08:e1:b9:f6:c1:9c:42:59:1d:a7:c3:41:9d:1a:4a:25:
26:30:16:1e:20:d0:68:d9:68:2f:41:33:e4:ef:67:33:61:9c:
90:31:8c:e7:b6:32:35:97:0a:dd:1a:c0:be:40:56:1a:1a:9a:
bc:19:0e:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76xyzr48qGeAOPlLJPvm3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViN2E5MDVlMjVhNGQ1Y2NjYjJlZWJlNGUyZDVjMzkyMDgx
OTc1OGUwHhcNMjUxMDE5MTAwMTUzWhcNMjUxMDIwMTAwMTUzWjAzMTEwLwYDVQQD
EyhlMmIxZWIyYjdkNjY2ZWI5M2YyNGEyNTM2NjIzYzFiNWZkNGQ4ODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/kpVPo2RjvHWUNkHTyUXlPjRnuB
+n++yqJkfFxgQCOdMH8CqGo4ajiMq6FQsz3NPggCVr+uHYUnwasroC4E9yZkJZy5
GZ0+vk59sRShFJa5+u36OhsdMrddovGYY2nWgnpFJGOjnKw4rUsT+juL7M7VIfr0
Yhz9l9qguPVLBXn1XOLCa4uJ6PbUv63zfY/uUg9Ku4LuslHfM/4paOQUMwGSfzuv
A1mCpaj3EV7Mw7UgwWAloLWMPhJnCZZl8p3MR6mASEFVfL/+JU+JMj5ZeCI06PLt
hjh9jk1LYk1BUHRY1AHEtUL02wBjQqTKPYiAvMef1PycHIWe2Jentx14FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKx6yt9Zm65PySiU2YjwbX9TYiVMB8GA1UdIwQY
MBaAFFt6kF4lpNXMyy7r5OLVw5IIGXWOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzNxUVhpV2sxY3pMTHV2azR0WERrZ2daZFk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jMTIzOTUtYzBmOC00ZTA1LThjYjEt
NzNhM2QwN2QyYzMxLzEvVzNxUVhpV2sxY3pMTHV2azR0WERrZ2daZFk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jMTIzOTUtYzBmOC00ZTA1LThjYjEtNzNhM2QwN2QyYzMx
LzEvVzNxUVhpV2sxY3pMTHV2azR0WERrZ2daZFk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTDJ9cPN
gCMUMrnRyKD/VIUNSD1FVPIfPcLIYHUoIu2sjNCPhh7Wa03HgPduyqOuYRuAyUTX
2zsLtV8Q+HGsg9Wq3RybOrwTgjMBEkeEGWdPcg5zxXqU382ryMNBfvfzOui3A2xw
DjU1hEnHZhlbUKiOR2+26ewKeAQiV0xCELNTwnxdUymsMv1Yx7TMEWgCMmHoE2D6
s85Tx0V3svqQVjlWJ7n9lt/98Pej1bRoB+mH2tjraP46Rv+9xXVDOlmrJkjstHJr
tooI4bn2wZxCWR2nw0GdGkolJjAWHiDQaNloL0Ez5O9nM2GckDGM57YyNZcK3RrA
vkBWGhqavBkOsA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:15 2025 by rpki-client