Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
File: w6nl9TVmI-HCjy22k-BfxtYEzIE.mft (raw, json)
Hash identifier: S6yrOQMuzbNe/P8foUWbscxTb8pASaHVLCV5qG8tWx8=
Subject key identifier: C9:91:CC:F1:B9:C8:2B:5B:5C:88:1E:8B:BA:85:3C:5F:45:98:2B:64
Authority key identifier: C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81
Certificate issuer: /CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81
Certificate serial: 0199FDD9C7BEEE175B5D8C196BA7947F144A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
Manifest number: 0170
Signing time: Sun 19 Oct 2025 19:02:11 +0000
Manifest this update: Sun 19 Oct 2025 19:02:11 +0000
Manifest next update: Mon 20 Oct 2025 19:02:11 +0000
Files and hashes: 1: w6nl9TVmI-HCjy22k-BfxtYEzIE.crl (hash: upIix1ucUGJlpb54LO4wpMlzZtvo3rt6kR3D2mGS67g=)
2: yOFLOKqrASqCbG9H8LDQX86pKIw.roa (hash: XxA6ziYUOm/wMTbCGGt/j2IVpWOap4P3oBr16w5IzVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:c7:be:ee:17:5b:5d:8c:19:6b:a7:94:7f:14:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81
Validity
Not Before: Oct 19 19:02:11 2025 GMT
Not After : Oct 20 19:02:11 2025 GMT
Subject: CN=c991ccf1b9c82b5b5c881e8bba853c5f45982b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:a6:a5:39:e1:fc:cf:80:a3:38:1a:97:43:
75:14:84:58:8e:7b:40:9a:be:f4:c8:f5:30:31:db:
00:f3:21:33:8b:60:fb:2a:96:d8:94:22:52:02:f7:
79:34:99:4d:d6:8b:c4:c2:d7:2f:e6:36:b8:0e:5f:
09:c7:22:8c:df:75:a2:08:e4:a5:be:39:a6:ed:78:
66:de:c7:90:8a:de:62:86:06:b3:79:38:a5:f9:e9:
eb:04:5e:ee:bf:8f:13:f9:fb:68:b0:84:a5:fd:d6:
f7:71:ce:f5:b6:4d:08:67:19:aa:9b:19:9e:1c:d1:
ee:54:01:d6:b1:5b:2e:84:0e:8d:a7:b3:9f:a4:99:
23:02:ac:f3:bf:ae:93:b2:93:aa:68:f7:9d:60:5f:
6e:92:be:95:dc:52:1a:37:85:22:81:cf:09:ed:fa:
bd:b3:4a:7d:a7:09:f5:d1:28:97:ce:72:ad:a7:8d:
69:e1:cf:9b:5f:dd:ef:cf:14:da:46:84:43:d7:4c:
f9:35:0e:31:61:97:14:fb:7d:07:80:1f:e3:70:19:
b9:4f:da:53:18:3a:b4:c0:dd:17:01:24:b4:f3:fc:
f4:5f:eb:55:24:ef:26:f7:d8:df:34:94:68:a6:87:
34:36:1a:7f:6c:5c:31:3f:df:8e:90:ab:58:48:aa:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:CC:F1:B9:C8:2B:5B:5C:88:1E:8B:BA:85:3C:5F:45:98:2B:64
X509v3 Authority Key Identifier:
keyid:C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f1:85:32:0e:7a:2c:62:5b:bb:f5:8f:04:9c:74:b6:0a:45:
1d:4a:c0:1c:06:04:d3:0c:09:0f:f7:28:6a:77:e1:15:66:a6:
de:49:80:4c:a0:b1:41:b6:64:e2:f5:df:2a:fc:31:67:08:f8:
19:4d:2b:7a:74:b0:c2:f7:2b:02:72:4b:a5:f6:ca:e5:c2:0a:
65:59:6e:f8:bf:95:23:dd:6f:89:4c:eb:0e:fd:bf:75:c9:22:
80:61:df:49:ae:84:3d:8c:0a:1e:08:27:89:9d:9e:a1:f1:fd:
68:0e:25:6e:6a:5c:e1:c0:23:e7:e4:21:4b:17:e0:f0:4e:e6:
16:e3:c2:64:59:21:a1:16:c0:75:02:40:a3:65:80:11:c8:ec:
9a:40:a4:d6:fc:57:a0:bb:7d:fa:87:4a:1b:17:53:a4:6f:1d:
17:0b:62:38:58:6f:7a:88:85:ac:52:bb:f3:4a:d6:20:28:cf:
72:23:cb:b3:c0:04:79:df:67:5f:4c:de:97:c4:fd:85:25:ac:
0e:66:f3:ff:ab:94:63:90:ef:f1:7f:8a:68:11:57:9b:ba:51:
d0:61:25:01:4e:b6:d2:5f:44:87:85:0a:55:88:3e:8e:c1:07:
60:d9:a5:78:e4:74:39:58:1e:7a:ca:0f:d7:45:45:1e:98:73:
e5:6e:3d:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92ce+7hdbXYwZa6eUfxRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTllNWY1MzU2NjIzZTFjMjhmMmRiNjkzZTA1ZmM2ZDYw
NGNjODEwHhcNMjUxMDE5MTkwMjExWhcNMjUxMDIwMTkwMjExWjAzMTEwLwYDVQQD
EyhjOTkxY2NmMWI5YzgyYjViNWM4ODFlOGJiYTg1M2M1ZjQ1OTgyYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf+mpTnh/M+Aozgal0N1FIRYjntA
mr70yPUwMdsA8yEzi2D7KpbYlCJSAvd5NJlN1ovEwtcv5ja4Dl8JxyKM33WiCOSl
vjmm7Xhm3seQit5ihgazeTil+enrBF7uv48T+ftosISl/db3cc71tk0IZxmqmxme
HNHuVAHWsVsuhA6Np7OfpJkjAqzzv66TspOqaPedYF9ukr6V3FIaN4Uigc8J7fq9
s0p9pwn10SiXznKtp41p4c+bX93vzxTaRoRD10z5NQ4xYZcU+30HgB/jcBm5T9pT
GDq0wN0XASS08/z0X+tVJO8m99jfNJRopoc0Nhp/bFwxP9+OkKtYSKrwbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmRzPG5yCtbXIgei7qFPF9FmCtkMB8GA1UdIwQY
MBaAFMOp5fU1ZiPhwo8ttpPgX8bWBMyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mNWI2M2ItZDBlMC00NjBjLTkzMDgt
N2NlZjEwYWRlOGRmLzEvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9mNWI2M2ItZDBlMC00NjBjLTkzMDgtN2NlZjEwYWRlOGRm
LzEvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvGFMg56
LGJbu/WPBJx0tgpFHUrAHAYE0wwJD/coanfhFWam3kmATKCxQbZk4vXfKvwxZwj4
GU0renSwwvcrAnJLpfbK5cIKZVlu+L+VI91viUzrDv2/dckigGHfSa6EPYwKHggn
iZ2eofH9aA4lbmpc4cAj5+QhSxfg8E7mFuPCZFkhoRbAdQJAo2WAEcjsmkCk1vxX
oLt9+odKGxdTpG8dFwtiOFhveoiFrFK780rWICjPciPLs8AEed9nX0zel8T9hSWs
Dmbz/6uUY5Dv8X+KaBFXm7pR0GElAU620l9Eh4UKVYg+jsEHYNmleOR0OVgeesoP
10VFHphz5W496g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:13 2025 by rpki-client