Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
File: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft (raw, json)
Hash identifier: IupluphSkcOLV3UY8MnIVFNgE6NaPeBXjfgwsD/clOg=
Subject key identifier: 4A:8D:A3:63:24:17:D8:61:5B:D2:46:1B:9B:37:A2:93:2B:06:66:11
Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
Certificate issuer: /CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Certificate serial: 0199FFC7308FEE069F37DB450469BE4821A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
Manifest number: 16B8
Signing time: Mon 20 Oct 2025 04:01:08 +0000
Manifest this update: Mon 20 Oct 2025 04:01:08 +0000
Manifest next update: Tue 21 Oct 2025 04:01:08 +0000
Files and hashes: 1: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl (hash: ar1Zgt2r+0zoF14kIrV0UHuJPY9AMNH5b9f1MyVOKnA=)
2: RE9prd7FLL4SwOjjJYHPgR-KjRA.roa (hash: Sw7bEXCnPMRdQGTTvTVklNLKC4QRIicMav6wH2FfRDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:30:8f:ee:06:9f:37:db:45:04:69:be:48:21:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Validity
Not Before: Oct 20 04:01:08 2025 GMT
Not After : Oct 21 04:01:08 2025 GMT
Subject: CN=4a8da3632417d8615bd2461b9b37a2932b066611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:45:84:da:cd:ff:9d:e8:7a:bd:8f:4a:ee:
da:78:ad:06:d3:3e:d2:43:6f:70:bf:ef:ca:56:90:
a8:b3:df:6d:40:e8:df:ca:a4:8b:f2:a9:80:20:b0:
2b:4d:cb:93:59:c4:1d:b7:95:77:cf:07:cc:61:d7:
8e:f6:b1:7b:5c:f9:d0:98:b7:eb:35:2a:f6:79:ff:
ef:7b:bb:0c:47:88:65:1f:d2:6d:d6:dd:20:31:40:
92:2d:e5:bd:93:1f:e6:20:9f:ea:a3:0c:24:2d:ff:
f6:3f:59:0e:4f:88:e7:c6:3c:b4:08:13:72:0b:eb:
9b:5a:7c:94:a3:c1:19:23:c9:52:77:88:01:28:95:
b5:83:78:47:d0:ff:d6:3e:8b:89:9a:a4:cf:98:8e:
8f:df:a6:43:82:00:b4:58:9d:bd:99:d7:1c:c7:8f:
b5:d6:a6:de:e7:a1:a6:d7:df:89:98:d6:7e:13:11:
3a:ef:ec:07:7b:c7:fd:e3:64:53:81:d5:a0:e5:72:
10:a7:25:51:1e:bf:8d:08:3c:58:41:6c:48:1e:fe:
b7:99:35:06:ca:10:41:95:87:7f:95:05:3b:2f:3a:
ef:60:ad:f4:23:a5:bf:ee:55:fc:5b:1b:f9:cd:e4:
cf:97:51:7a:b3:67:ff:eb:ea:a7:dc:5b:32:b9:5b:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8D:A3:63:24:17:D8:61:5B:D2:46:1B:9B:37:A2:93:2B:06:66:11
X509v3 Authority Key Identifier:
keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ad:d6:ec:c8:35:ea:f3:43:22:01:45:7f:ee:64:87:7f:b9:
5c:2b:7b:ed:68:81:b5:66:84:32:68:95:1f:a3:6a:63:ae:8f:
6a:08:2c:69:21:1a:6d:df:e1:a9:85:e1:2e:88:3a:8e:ee:4a:
35:d5:2f:56:5f:75:82:35:c2:38:33:ea:50:23:72:b1:75:91:
17:4f:09:1c:37:ac:fd:eb:f8:0f:ff:74:0e:b5:74:1c:25:39:
76:35:4c:cf:cd:8c:24:55:d4:1a:93:5d:9b:80:95:13:50:b1:
a2:d7:6b:fa:50:81:c1:ff:47:4f:8b:a6:0a:15:17:22:75:a2:
03:40:da:07:e3:ee:f3:ca:06:34:dc:06:c7:43:3f:e1:e6:62:
4c:9b:c5:d5:9c:b6:c5:bf:17:03:c4:78:90:c4:44:ed:98:b8:
9a:ba:a8:48:b0:cc:43:84:2b:f7:a5:03:2d:74:a2:b9:fe:c1:
aa:bd:8c:55:d7:a5:c3:44:69:52:fc:f8:3b:86:ff:37:ae:06:
13:ad:55:7c:ec:5b:7d:f5:52:e7:22:60:11:f0:5e:de:e9:d5:
33:ed:ea:2f:2e:73:b6:dc:d0:2e:94:e1:ee:60:ed:01:80:27:
a8:ba:c5:2c:41:0c:29:ad:31:a0:34:61:a0:59:39:eb:9c:fd:
71:3e:5b:73
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn/xzCP7gafN9tFBGm+SCGnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NmE2YTIwMzJmOTZkNzAyMzcyMjIzOWM5ZmE1ZWRkNTU5
NmY4NjMwHhcNMjUxMDIwMDQwMTA4WhcNMjUxMDIxMDQwMTA4WjAzMTEwLwYDVQQD
Eyg0YThkYTM2MzI0MTdkODYxNWJkMjQ2MWI5YjM3YTI5MzJiMDY2NjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVpFhNrN/53oer2PSu7aeK0G0z7S
Q29wv+/KVpCos99tQOjfyqSL8qmAILArTcuTWcQdt5V3zwfMYdeO9rF7XPnQmLfr
NSr2ef/ve7sMR4hlH9Jt1t0gMUCSLeW9kx/mIJ/qowwkLf/2P1kOT4jnxjy0CBNy
C+ubWnyUo8EZI8lSd4gBKJW1g3hH0P/WPouJmqTPmI6P36ZDggC0WJ29mdccx4+1
1qbe56Gm19+JmNZ+ExE67+wHe8f942RTgdWg5XIQpyVRHr+NCDxYQWxIHv63mTUG
yhBBlYd/lQU7LzrvYK30I6W/7lX8Wxv5zeTPl1F6s2f/6+qn3FsyuVs+eQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEqNo2MkF9hhW9JGG5s3opMrBmYRMB8GA1UdIwQY
MBaAFPlqaiAy+W1wI3IiOcn6Xt1VlvhjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XcHFJREw1YlhBamNpSTV5ZnBlM1ZXVy1HTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvMzc2ZTFmLTk2YjEtNGZlMS04Yjdh
LTEzZmY2YTBhZDQ0MS8xLzEtV3BxSURMNWJYQWpjaUk1eWZwZTNWV1ctR00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE2LzM3NmUxZi05NmIxLTRmZTEtOGI3YS0xM2ZmNmEwYWQ0
NDEvMS8xLVdwcUlETDViWEFqY2lJNXlmcGUzVldXLUdNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhK3W
7Mg16vNDIgFFf+5kh3+5XCt77WiBtWaEMmiVH6NqY66PaggsaSEabd/hqYXhLog6
ju5KNdUvVl91gjXCODPqUCNysXWRF08JHDes/ev4D/90DrV0HCU5djVMz82MJFXU
GpNdm4CVE1Cxotdr+lCBwf9HT4umChUXInWiA0DaB+Pu88oGNNwGx0M/4eZiTJvF
1Zy2xb8XA8R4kMRE7Zi4mrqoSLDMQ4Qr96UDLXSiuf7Bqr2MVdelw0RpUvz4O4b/
N64GE61VfOxbffVS5yJgEfBe3unVM+3qLy5zttzQLpTh7mDtAYAnqLrFLEEMKa0x
oDRhoFk565z9cT5bcw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:42 2025 by rpki-client