Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier: v/gaUAp/xYX02nS0JynQhgA0yWsMwwn06cYD3zDhh/U=
Subject key identifier: 0A:3F:8A:51:E6:C9:36:04:9C:C8:61:55:CF:B8:C6:5A:97:7C:9F:DC
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 019A0110D23D1A65657243A59832FD97D15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 10:01:10 +0000
Manifest this update: Mon 20 Oct 2025 10:01:10 +0000
Manifest next update: Tue 21 Oct 2025 10:01:10 +0000
Files and hashes: 1: 1-FQBZTT5afKyG6FIAOC0DP_Gyes.roa (hash: QUXwHR9U/j2PM2tc+oqu+jlOONy/4+OVBz6LYmOZ3uc=)
2: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: UP0WT4GuEKp0bbOnkcCHg3KnY09B12SBniQF2gDwUd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:d2:3d:1a:65:65:72:43:a5:98:32:fd:97:d1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: Oct 20 10:01:10 2025 GMT
Not After : Oct 21 10:01:10 2025 GMT
Subject: CN=0a3f8a51e6c936049cc86155cfb8c65a977c9fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:c6:b0:4b:b9:72:7a:8c:55:31:0c:52:71:
b1:e3:d4:5d:ee:1c:fc:52:22:43:d9:6b:a7:00:d8:
06:8f:13:ed:2a:47:0d:4b:92:8c:37:d4:e2:bc:0e:
b5:25:dd:d1:a7:56:fa:42:c3:f5:89:40:b2:a4:58:
e4:3f:bb:26:c0:88:8a:b6:a6:66:87:7b:92:19:d7:
e7:fb:a1:b5:92:1b:c4:9b:3b:15:6c:01:1d:8b:8b:
b3:d8:b6:80:cf:04:24:bd:c8:39:fa:55:19:fc:45:
5f:a5:75:be:29:b9:52:f5:de:5d:91:39:c5:73:bb:
fb:7d:a2:c9:e5:b9:c1:ab:1a:b2:23:87:76:73:1b:
10:f4:2c:3a:5c:77:5e:63:8a:f1:36:b2:37:52:c0:
ce:d1:4a:86:5a:46:65:23:06:fe:58:53:ea:f9:71:
0f:4c:1f:6a:51:ca:f3:9a:8f:80:3c:05:6b:5f:96:
dd:61:5d:51:9f:c4:5c:90:e6:86:e6:a2:93:a8:c5:
53:db:40:06:ea:44:25:17:61:04:e4:9b:e6:3b:64:
53:89:2c:90:be:a9:5d:3f:09:2f:f6:75:71:5d:36:
c4:c4:c9:89:90:da:33:a1:60:fd:17:ed:67:85:c7:
b0:fd:3d:47:9f:a5:9b:cd:78:fc:f3:8d:84:ba:a5:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3F:8A:51:E6:C9:36:04:9C:C8:61:55:CF:B8:C6:5A:97:7C:9F:DC
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ff:70:c8:1c:45:58:8b:56:2d:6b:62:c0:39:2c:b6:c1:20:
b9:f4:78:bb:8b:4d:bd:6e:2a:24:d5:b6:fd:32:c2:2e:32:25:
27:60:6a:91:2d:be:de:e0:1c:46:62:2c:de:e8:f2:f6:93:0a:
91:01:88:ca:e1:cd:46:99:46:8f:c1:d8:2d:f4:d3:1c:3e:c6:
dc:1e:6b:67:bc:9a:1e:30:3f:d3:5d:25:69:53:86:3e:aa:a2:
b1:27:2d:05:ef:e4:96:e4:4d:e1:5b:6c:41:f0:08:d2:46:a4:
41:ca:80:38:12:d2:d4:60:99:29:4f:38:ec:47:4d:ed:f2:5d:
51:b1:2f:5f:d1:90:c4:2b:29:44:a9:b4:63:4b:1b:9e:9d:b8:
1a:43:86:75:5a:d9:9e:4f:ab:3b:44:f8:3b:5e:eb:49:85:dd:
79:30:88:61:c3:72:75:a9:f9:c4:77:e9:a3:0e:e4:c1:0a:f1:
9a:5d:f8:b8:6e:58:7d:f4:f8:83:b6:4d:03:84:17:7a:3e:d4:
a2:de:e3:bc:02:62:7f:f5:f8:6e:7b:62:56:b6:41:92:b2:3b:
c9:1a:87:87:f5:61:f2:c9:cd:4c:c5:83:f6:3b:0b:89:72:5d:
1d:40:de:55:87:0f:97:c6:7e:d9:0e:b0:05:34:ee:c7:dd:f8:
65:58:24:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBENI9GmVlckOlmDL9l9FcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNDU2YzlmN2Y3OWI5ODcxOTZjNDY4NDAyMzk2YTE4N2Mx
NTZkN2MwHhcNMjUxMDIwMTAwMTEwWhcNMjUxMDIxMTAwMTEwWjAzMTEwLwYDVQQD
EygwYTNmOGE1MWU2YzkzNjA0OWNjODYxNTVjZmI4YzY1YTk3N2M5ZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pTGsEu5cnqMVTEMUnGx49Rd7hz8
UiJD2WunANgGjxPtKkcNS5KMN9TivA61Jd3Rp1b6QsP1iUCypFjkP7smwIiKtqZm
h3uSGdfn+6G1khvEmzsVbAEdi4uz2LaAzwQkvcg5+lUZ/EVfpXW+KblS9d5dkTnF
c7v7faLJ5bnBqxqyI4d2cxsQ9Cw6XHdeY4rxNrI3UsDO0UqGWkZlIwb+WFPq+XEP
TB9qUcrzmo+APAVrX5bdYV1Rn8RckOaG5qKTqMVT20AG6kQlF2EE5JvmO2RTiSyQ
vqldPwkv9nVxXTbExMmJkNozoWD9F+1nhcew/T1Hn6WbzXj8842EuqXogQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAo/ilHmyTYEnMhhVc+4xlqXfJ/cMB8GA1UdIwQY
MBaAFFtFbJ9/ebmHGWxGhAI5ahh8FW18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTIt
OWZlODZkZWE4NjJhLzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTItOWZlODZkZWE4NjJh
LzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/9wyBxF
WItWLWtiwDkstsEgufR4u4tNvW4qJNW2/TLCLjIlJ2BqkS2+3uAcRmIs3ujy9pMK
kQGIyuHNRplGj8HYLfTTHD7G3B5rZ7yaHjA/010laVOGPqqisSctBe/kluRN4Vts
QfAI0kakQcqAOBLS1GCZKU847EdN7fJdUbEvX9GQxCspRKm0Y0sbnp24GkOGdVrZ
nk+rO0T4O17rSYXdeTCIYcNydan5xHfpow7kwQrxml34uG5YffT4g7ZNA4QXej7U
ot7jvAJif/X4bntiVrZBkrI7yRqHh/Vh8snNTMWD9jsLiXJdHUDeVYcPl8Z+2Q6w
BTTux934ZVgkJQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:34:18 2025 by rpki-client