Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
File: wWz7mmhJxB5fEXBbj9cWCF1chUk.mft (raw, json)
Hash identifier: djaeixtT18fUPPKZDlLa82PHN5bNMtGug83lk0cQH/g=
Subject key identifier: 25:5D:31:DE:FD:C7:02:DB:00:17:0C:FF:DB:EA:98:DF:90:F7:16:AF
Authority key identifier: C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
Certificate issuer: /CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Certificate serial: 0199FB7CE7EA00B846CBED18C028AAD1F2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
Manifest number: 05BF
Signing time: Sun 19 Oct 2025 08:01:30 +0000
Manifest this update: Sun 19 Oct 2025 08:01:30 +0000
Manifest next update: Mon 20 Oct 2025 08:01:30 +0000
Files and hashes: 1: j9CtwOJGnVKS-HP6AHjaP4QX-mE.roa (hash: IQH0ZG03X6EDOf/JP581Nh+0AIMYOTDDiB4SyvCG/2A=)
2: wWz7mmhJxB5fEXBbj9cWCF1chUk.crl (hash: 2J8aPV9XagCgITJ4NtKcCC1pO5t/GhoDaVss/Eth/Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e7:ea:00:b8:46:cb:ed:18:c0:28:aa:d1:f2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Validity
Not Before: Oct 19 08:01:30 2025 GMT
Not After : Oct 20 08:01:30 2025 GMT
Subject: CN=255d31defdc702db00170cffdbea98df90f716af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:f1:c7:4b:ae:7f:e0:b5:25:c9:d9:72:a6:
57:01:85:3b:a7:17:67:cb:59:ef:a6:1d:0e:db:26:
1a:72:1c:f7:89:cb:af:02:38:a2:96:2d:30:3c:75:
78:15:06:e4:be:06:a4:2c:67:64:cb:f2:ae:dd:5a:
59:44:fd:62:f4:26:f0:e0:8b:0b:53:b0:be:71:25:
03:f4:96:a5:e5:8e:03:23:41:b7:af:bc:67:d5:80:
98:87:16:b8:1d:a8:c2:bf:ec:b6:1d:24:2a:af:7e:
44:59:a0:d3:c9:df:b6:59:a9:9d:fc:09:42:ba:01:
0f:46:72:6d:79:e9:52:3c:5e:a7:22:ca:5c:15:9b:
0b:ca:32:a6:20:61:39:57:74:c9:86:59:33:8e:3d:
1f:52:bd:9c:78:a8:aa:e3:9e:43:5d:49:de:12:b0:
6d:63:a8:72:3b:cb:71:c5:4f:13:c0:eb:91:cc:7c:
a8:b6:b2:52:9a:41:06:60:3e:97:d1:df:24:3b:97:
a0:11:06:f4:f4:c1:aa:09:a8:5f:f7:2b:9c:85:5e:
e4:e4:6c:11:c3:9d:73:2d:2f:ea:2d:c7:a9:4b:0c:
40:53:1a:81:d5:66:eb:65:9d:bd:27:a7:92:57:67:
fb:71:3e:23:4a:f5:38:68:64:d7:6a:f1:d7:cc:56:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5D:31:DE:FD:C7:02:DB:00:17:0C:FF:DB:EA:98:DF:90:F7:16:AF
X509v3 Authority Key Identifier:
keyid:C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:30:d4:b2:86:96:df:08:5e:97:92:a9:8f:ea:1d:08:4f:49:
8d:0b:a9:dd:5b:09:e1:c7:97:ea:c1:47:fa:cc:4e:67:f8:59:
55:ad:ba:13:23:59:85:f5:ba:78:be:ce:51:bf:a0:4a:9d:02:
b5:ab:d8:30:a7:5b:e8:ed:2e:cb:16:ea:ac:70:24:f3:45:01:
36:b6:78:91:5b:5c:37:5c:2f:de:a8:ca:13:73:71:e9:e2:74:
da:c4:01:f8:b1:67:af:1d:6c:c4:70:e5:b3:c1:64:1c:62:e7:
72:11:8a:d7:9a:01:76:be:32:0c:69:b6:3c:ec:2c:05:a6:51:
b6:ea:6c:ce:c8:1b:2f:39:43:82:1a:69:53:ad:b3:d1:fc:53:
1a:c2:f5:af:e7:a6:be:e4:02:11:21:04:c5:0b:9f:df:cf:01:
f7:7d:ab:0e:76:e0:12:30:8a:47:63:5a:3b:39:ff:83:61:35:
0d:ae:6f:fe:83:ae:8f:5a:44:94:2f:c8:41:d5:67:2b:cf:58:
db:78:17:19:e4:59:3d:74:be:21:b7:d5:9a:80:88:86:77:4a:
f5:e4:0d:70:00:38:95:a5:e5:ce:45:e6:77:a8:87:78:87:38:
2e:f5:51:bb:93:51:d5:8b:08:b3:f8:c9:84:b5:b1:dd:47:d3:
01:11:d2:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fOfqALhGy+0YwCiq0fLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNmNmYjlhNjg0OWM0MWU1ZjExNzA1YjhmZDcxNjA4NWQ1
Yzg1NDkwHhcNMjUxMDE5MDgwMTMwWhcNMjUxMDIwMDgwMTMwWjAzMTEwLwYDVQQD
EygyNTVkMzFkZWZkYzcwMmRiMDAxNzBjZmZkYmVhOThkZjkwZjcxNmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY7xx0uuf+C1JcnZcqZXAYU7pxdn
y1nvph0O2yYachz3icuvAjiili0wPHV4FQbkvgakLGdky/Ku3VpZRP1i9Cbw4IsL
U7C+cSUD9Jal5Y4DI0G3r7xn1YCYhxa4HajCv+y2HSQqr35EWaDTyd+2Wamd/AlC
ugEPRnJteelSPF6nIspcFZsLyjKmIGE5V3TJhlkzjj0fUr2ceKiq455DXUneErBt
Y6hyO8txxU8TwOuRzHyotrJSmkEGYD6X0d8kO5egEQb09MGqCahf9yuchV7k5GwR
w51zLS/qLcepSwxAUxqB1WbrZZ29J6eSV2f7cT4jSvU4aGTXavHXzFbEIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVdMd79xwLbABcM/9vqmN+Q9xavMB8GA1UdIwQY
MBaAFMFs+5poScQeXxFwW4/XFghdXIVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1d6N21taEp4QjVmRVhCYmo5Y1dDRjFjaFVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mMzU0MjQtOTQ0Zi00MDY0LWFmYzAt
MTEyM2NjOWRkY2NjLzEvd1d6N21taEp4QjVmRVhCYmo5Y1dDRjFjaFVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mMzU0MjQtOTQ0Zi00MDY0LWFmYzAtMTEyM2NjOWRkY2Nj
LzEvd1d6N21taEp4QjVmRVhCYmo5Y1dDRjFjaFVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzDUsoaW
3whel5Kpj+odCE9JjQup3VsJ4ceX6sFH+sxOZ/hZVa26EyNZhfW6eL7OUb+gSp0C
tavYMKdb6O0uyxbqrHAk80UBNrZ4kVtcN1wv3qjKE3Nx6eJ02sQB+LFnrx1sxHDl
s8FkHGLnchGK15oBdr4yDGm2POwsBaZRtupszsgbLzlDghppU62z0fxTGsL1r+em
vuQCESEExQuf388B932rDnbgEjCKR2NaOzn/g2E1Da5v/oOuj1pElC/IQdVnK89Y
23gXGeRZPXS+IbfVmoCIhndK9eQNcAA4laXlzkXmd6iHeIc4LvVRu5NR1YsIs/jJ
hLWx3UfTARHSYg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:01 2025 by rpki-client