Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
File: wC4yPxvhY8TX-LiKrY2q--AQbW8.mft (raw, json)
Hash identifier: PwRcSaQ1sKN+QEHr8HVe0yWBiQekchBJSddVKYI+iPY=
Subject key identifier: 9D:B6:EC:54:B8:05:84:CA:DF:32:14:C8:4A:61:60:56:34:1B:65:47
Authority key identifier: C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
Certificate issuer: /CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Certificate serial: 0199FFC7CDDA916D9C1C845203977339904E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
Manifest number: 0202
Signing time: Mon 20 Oct 2025 04:01:48 +0000
Manifest this update: Mon 20 Oct 2025 04:01:48 +0000
Manifest next update: Tue 21 Oct 2025 04:01:48 +0000
Files and hashes: 1: wC4yPxvhY8TX-LiKrY2q--AQbW8.crl (hash: vKIjoH0v4wXzgKmVHoa+x4ClfTIZWe02wkWEjnppTQU=)
2: z4hyHniAgsjhip0WWSLXoanCOdQ.roa (hash: M3AlMbZsNGFOvYnoOV0xvC8E+XBvcvrqkI0jCnJgG2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:cd:da:91:6d:9c:1c:84:52:03:97:73:39:90:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Validity
Not Before: Oct 20 04:01:48 2025 GMT
Not After : Oct 21 04:01:48 2025 GMT
Subject: CN=9db6ec54b80584cadf3214c84a616056341b6547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:62:4c:06:ea:a1:c2:10:1a:45:1a:0d:8c:
eb:10:16:c8:87:7f:41:87:46:24:e5:69:29:13:24:
0c:0b:ef:cf:66:e5:ed:f8:91:99:bc:f6:e5:bb:7d:
b1:ea:ee:2c:99:70:10:64:66:7a:64:de:a7:c9:d3:
46:67:04:8b:e9:08:76:e9:a8:9e:17:42:40:64:ed:
0f:3f:6c:3d:62:c6:f8:16:b5:99:92:67:08:b5:0b:
38:4a:2d:e1:6b:aa:1d:5d:f7:56:28:df:c6:a9:07:
86:9f:5a:ad:dd:d6:52:bb:95:25:3b:8a:9b:ba:de:
e7:22:cb:3d:81:d4:d5:ab:dd:bd:02:6f:06:23:46:
49:b0:01:25:28:bc:e5:33:69:f7:d4:3f:15:bd:9f:
61:a8:cd:d9:a1:f6:25:6b:61:6e:9f:70:8e:df:53:
a7:cc:b5:96:40:7a:b1:37:61:e7:79:4f:b7:cf:61:
db:65:4e:23:fc:a7:ab:32:f6:f7:bb:71:db:54:c8:
af:f1:19:af:c6:e3:55:a2:7c:3b:ae:05:8e:3b:6b:
3b:84:ea:1c:d4:bd:f2:29:fd:80:dd:f8:dd:b7:32:
6a:68:bd:02:f4:74:af:ce:71:fa:40:bd:1d:7c:f2:
5a:95:1c:e0:a5:0f:be:8f:cf:0c:88:3e:41:6e:5b:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B6:EC:54:B8:05:84:CA:DF:32:14:C8:4A:61:60:56:34:1B:65:47
X509v3 Authority Key Identifier:
keyid:C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:17:d9:c9:47:58:9e:4b:97:d4:b2:50:93:b6:b1:e8:7b:25:
a7:70:3f:78:61:ad:a6:d6:5a:f0:c6:5f:70:75:d3:d4:7d:19:
af:4b:fb:43:34:03:e3:0a:d0:55:1d:d5:77:49:ec:bb:97:10:
03:a6:01:58:e2:78:00:3b:0b:f4:18:57:15:55:72:eb:30:87:
17:bc:10:70:25:7b:49:ba:fa:fa:c5:16:5f:59:a2:19:53:2d:
97:46:58:58:c0:ec:28:7f:ef:3d:21:ed:50:f2:f9:48:c6:9a:
6a:c3:11:ad:cc:9f:be:09:05:7a:06:7b:bd:4a:be:38:da:9d:
83:74:20:d6:b0:49:e1:c5:65:6c:1a:3e:d2:11:98:fd:77:aa:
9c:88:97:4a:9a:a2:eb:45:0f:f9:c2:0b:02:03:d4:f5:41:7a:
68:69:10:c8:be:d8:b9:05:3c:8e:6d:0c:ca:4b:8a:83:84:02:
a5:12:5e:8b:67:32:a7:51:18:a7:17:b1:84:78:3d:68:6d:1f:
24:4e:d3:48:25:e3:b2:84:cb:08:53:85:f7:a2:e8:1c:a8:87:
2c:2a:bd:4e:b4:1f:29:86:cc:4c:8b:ea:a3:42:e3:55:3e:e7:
19:c6:dd:3b:50:30:8b:e9:15:ab:c9:4f:c7:e4:74:3b:04:61:
bb:a1:60:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x83akW2cHIRSA5dzOZBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMmUzMjNmMWJlMTYzYzRkN2Y4Yjg4YWFkOGRhYWZiZTAx
MDZkNmYwHhcNMjUxMDIwMDQwMTQ4WhcNMjUxMDIxMDQwMTQ4WjAzMTEwLwYDVQQD
Eyg5ZGI2ZWM1NGI4MDU4NGNhZGYzMjE0Yzg0YTYxNjA1NjM0MWI2NTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GNiTAbqocIQGkUaDYzrEBbIh39B
h0Yk5WkpEyQMC+/PZuXt+JGZvPblu32x6u4smXAQZGZ6ZN6nydNGZwSL6Qh26aie
F0JAZO0PP2w9Ysb4FrWZkmcItQs4Si3ha6odXfdWKN/GqQeGn1qt3dZSu5UlO4qb
ut7nIss9gdTVq929Am8GI0ZJsAElKLzlM2n31D8VvZ9hqM3ZofYla2Fun3CO31On
zLWWQHqxN2HneU+3z2HbZU4j/KerMvb3u3HbVMiv8RmvxuNVonw7rgWOO2s7hOoc
1L3yKf2A3fjdtzJqaL0C9HSvznH6QL0dfPJalRzgpQ++j88MiD5BbludewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ227FS4BYTK3zIUyEphYFY0G2VHMB8GA1UdIwQY
MBaAFMAuMj8b4WPE1/i4iq2NqvvgEG1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0M0eVB4dmhZOFRYLUxpS3JZMnEtLUFRYlc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hYWVkNmItMTQzNC00N2M2LWE3NGQt
MWRmMWVjY2RkYzg3LzEvd0M0eVB4dmhZOFRYLUxpS3JZMnEtLUFRYlc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hYWVkNmItMTQzNC00N2M2LWE3NGQtMWRmMWVjY2RkYzg3
LzEvd0M0eVB4dmhZOFRYLUxpS3JZMnEtLUFRYlc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhfZyUdY
nkuX1LJQk7ax6Hslp3A/eGGtptZa8MZfcHXT1H0Zr0v7QzQD4wrQVR3Vd0nsu5cQ
A6YBWOJ4ADsL9BhXFVVy6zCHF7wQcCV7Sbr6+sUWX1miGVMtl0ZYWMDsKH/vPSHt
UPL5SMaaasMRrcyfvgkFegZ7vUq+ONqdg3Qg1rBJ4cVlbBo+0hGY/XeqnIiXSpqi
60UP+cILAgPU9UF6aGkQyL7YuQU8jm0MykuKg4QCpRJei2cyp1EYpxexhHg9aG0f
JE7TSCXjsoTLCFOF96LoHKiHLCq9TrQfKYbMTIvqo0LjVT7nGcbdO1Awi+kVq8lP
x+R0OwRhu6Fg+A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:10 2025 by rpki-client