Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
File: W2-maQmXQS5xZhbIHk98CHX_2XY.mft (raw, json)
Hash identifier: rdLbiyy8OtuKHATn4bCXgF6XPWDqUy6EYvTZD6pHsY0=
Subject key identifier: 9F:E0:04:4A:41:80:88:34:26:EC:F2:B9:65:66:EE:93:FF:5E:35:FD
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial: 019A03A4C874CDEA06B07A0160BF25D5E82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 22:02:02 +0000
Manifest this update: Mon 20 Oct 2025 22:02:02 +0000
Manifest next update: Tue 21 Oct 2025 22:02:02 +0000
Files and hashes: 1: W2-maQmXQS5xZhbIHk98CHX_2XY.crl (hash: YPHy81uaLwJir6LivkAxmuTGbUofIY/9a+cR86AeJgU=)
2: XBhVypX2lGM6_x0NsP1fksWNFzA.roa (hash: Zaq2cSOdsGQcDop6nFC8bWSLTheqL3BkExxlTIu5yQY=)
3: Xgr5P1UaBLoKB0nFSdLdMnYEAcA.roa (hash: xFI+ynIKk4Nft8+Xpcr+WB8ws9nItuL+8WRyzYu3/Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:c8:74:cd:ea:06:b0:7a:01:60:bf:25:d5:e8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Validity
Not Before: Oct 20 22:02:02 2025 GMT
Not After : Oct 21 22:02:02 2025 GMT
Subject: CN=9fe0044a4180883426ecf2b96566ee93ff5e35fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:3f:73:7b:94:c7:d8:53:3a:98:85:66:5a:
5f:e4:3c:17:2c:80:30:b1:09:66:e3:18:90:e5:f8:
66:2a:ff:69:6d:dc:6b:73:0d:5d:1f:e2:0d:0c:6f:
ac:43:bd:3d:83:13:53:35:32:d3:af:7b:d3:ba:82:
22:9c:d1:ca:ea:01:c5:25:fe:65:ed:71:00:9c:7c:
a3:9f:4a:3d:4d:d6:d3:61:9d:90:96:fa:3f:f1:8b:
87:f8:e6:e7:2f:d5:97:4b:bd:d6:c0:c4:ae:b9:22:
ba:56:7c:1b:67:69:f8:9a:8f:59:8c:a6:3d:f6:74:
fe:d6:52:e8:8a:d6:b4:d6:56:ff:21:cc:51:55:db:
5b:8f:5e:66:1f:7d:3e:87:71:c5:6c:89:24:7f:7a:
d2:48:40:b2:bc:4a:30:37:3d:01:4d:f8:35:db:6f:
7d:a8:5f:81:ab:14:e1:a5:aa:af:f3:db:2f:11:44:
9c:3f:f8:7f:50:e2:05:58:96:58:29:9c:d2:92:1d:
61:0a:66:2e:41:8a:86:a1:f1:94:8c:58:17:83:96:
26:fa:99:b5:7e:a6:0f:94:f2:4a:e0:8b:83:a6:0d:
4a:2b:2e:d2:55:fd:d1:fb:02:ac:9c:49:67:f4:a9:
ad:6f:18:da:3e:49:80:47:3b:fa:ca:bc:0d:07:01:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E0:04:4A:41:80:88:34:26:EC:F2:B9:65:66:EE:93:FF:5E:35:FD
X509v3 Authority Key Identifier:
keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:97:89:b2:4c:89:ed:0e:40:6a:35:a5:4e:28:8c:4a:1c:de:
bf:ea:af:71:10:f5:be:9b:ff:4d:26:ea:86:42:19:8c:71:41:
0b:bd:ef:9a:31:09:ca:6b:6c:21:d2:b2:33:31:4d:5a:b6:1d:
96:82:8c:7b:e1:45:7e:b7:f4:58:61:06:b2:f3:44:df:d4:c2:
66:20:1a:c2:97:e0:b8:67:02:10:3a:4f:ac:b7:4a:e3:ed:89:
be:28:ed:0c:82:00:fa:c8:65:e1:9a:1a:07:00:c6:8c:2c:6f:
97:63:af:3b:a0:94:a8:65:c7:2b:96:ac:09:eb:be:37:34:c7:
2a:db:cf:06:e8:bf:d5:8c:1b:5a:3e:84:75:8a:ab:f3:d9:fc:
08:fd:5f:71:e2:15:f8:07:07:7c:68:fb:94:44:7b:78:7a:d4:
61:47:70:75:18:6d:53:9c:47:29:40:bb:8a:5d:85:d5:82:6f:
09:93:3b:a6:10:22:63:b4:11:9d:21:d0:38:fa:fc:ef:f0:ec:
70:8d:0a:09:71:8e:b9:c7:44:7e:10:50:00:32:f9:57:0c:9e:
a4:db:2f:20:f9:9f:90:72:09:5c:d1:3d:62:14:a5:64:d9:ea:
01:f0:b7:1d:d0:e2:09:f1:70:7e:62:64:b1:f0:ba:d3:b2:2b:
59:02:ef:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDpMh0zeoGsHoBYL8l1egrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNmZhNjY5MDk5NzQxMmU3MTY2MTZjODFlNGY3YzA4NzVm
ZmQ5NzYwHhcNMjUxMDIwMjIwMjAyWhcNMjUxMDIxMjIwMjAyWjAzMTEwLwYDVQQD
Eyg5ZmUwMDQ0YTQxODA4ODM0MjZlY2YyYjk2NTY2ZWU5M2ZmNWUzNWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/s/c3uUx9hTOpiFZlpf5DwXLIAw
sQlm4xiQ5fhmKv9pbdxrcw1dH+INDG+sQ709gxNTNTLTr3vTuoIinNHK6gHFJf5l
7XEAnHyjn0o9TdbTYZ2Qlvo/8YuH+ObnL9WXS73WwMSuuSK6VnwbZ2n4mo9ZjKY9
9nT+1lLoita01lb/IcxRVdtbj15mH30+h3HFbIkkf3rSSECyvEowNz0BTfg12299
qF+BqxThpaqv89svEUScP/h/UOIFWJZYKZzSkh1hCmYuQYqGofGUjFgXg5Ym+pm1
fqYPlPJK4IuDpg1KKy7SVf3R+wKsnEln9KmtbxjaPkmARzv6yrwNBwFMCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/gBEpBgIg0JuzyuWVm7pP/XjX9MB8GA1UdIwQY
MBaAFFtvpmkJl0EucWYWyB5PfAh1/9l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yOTRjNGUtNWEyYi00YmVlLWJjNTct
MTJhZDE0NjY1NWNlLzEvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yOTRjNGUtNWEyYi00YmVlLWJjNTctMTJhZDE0NjY1NWNl
LzEvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpeJskyJ
7Q5AajWlTiiMShzev+qvcRD1vpv/TSbqhkIZjHFBC73vmjEJymtsIdKyMzFNWrYd
loKMe+FFfrf0WGEGsvNE39TCZiAawpfguGcCEDpPrLdK4+2JvijtDIIA+shl4Zoa
BwDGjCxvl2OvO6CUqGXHK5asCeu+NzTHKtvPBui/1YwbWj6EdYqr89n8CP1fceIV
+AcHfGj7lER7eHrUYUdwdRhtU5xHKUC7il2F1YJvCZM7phAiY7QRnSHQOPr87/Ds
cI0KCXGOucdEfhBQADL5VwyepNsvIPmfkHIJXNE9YhSlZNnqAfC3HdDiCfFwfmJk
sfC607IrWQLvjw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:02:03 2025 by rpki-client