Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
File: wY3k8q-McFDm5w4IoVJXPt1C5ng.mft (raw, json)
Hash identifier: v5LQ3iLmbOlCPaMVA5VhUwun8tL/qXuc0vlqxmdEQzA=
Subject key identifier: 43:F1:ED:43:4C:22:5F:2A:A6:F6:AD:22:EE:2E:9B:72:EA:CF:63:F3
Authority key identifier: C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
Certificate issuer: /CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Certificate serial: 0199FC58D032DE0C9C53BA5C1E9664CBDB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
Manifest number: 0A2B
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: pFur-kbIHPtMOLrHz0LwLOKyGnk.roa (hash: CYiRhFaTrF8IsFJyFUUUj+3+nsfcKz+NgibdViBzD0s=)
2: wY3k8q-McFDm5w4IoVJXPt1C5ng.crl (hash: ON6CDdH1Tbv67l/LQqUY6sJpvtJap26PmEtHDkI+H00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d0:32:de:0c:9c:53:ba:5c:1e:96:64:cb:db:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=43f1ed434c225f2aa6f6ad22ee2e9b72eacf63f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4c:46:1a:07:ff:50:90:ea:75:48:db:7a:9e:
87:6f:a3:2c:a2:df:1d:91:81:f8:00:b4:60:03:4b:
b1:21:f5:36:85:5a:e5:b0:cf:2f:15:90:11:e6:46:
02:5f:6f:d9:ec:a1:d3:b8:c0:34:ff:8f:04:85:23:
8b:9f:74:96:95:87:9a:e6:02:b7:a2:2b:f8:9c:7a:
9d:40:b1:5f:52:0b:f7:9d:58:a2:f3:a3:33:62:23:
4e:30:18:4f:4d:28:8b:66:03:4c:1b:6c:be:22:1e:
b1:80:81:ba:62:31:f6:15:36:01:ea:9e:df:58:c9:
33:5a:ef:e7:3e:73:83:df:a8:f2:10:33:ef:39:69:
8d:89:b6:5b:39:59:e0:29:52:1a:6a:4b:b4:05:76:
25:af:fa:67:b7:80:6b:77:c3:3e:a1:f3:66:62:1e:
85:84:e9:93:ad:2b:00:43:be:a3:ab:74:22:2a:63:
4f:aa:a9:59:3d:d7:84:a5:f7:31:7e:a4:c8:e8:d8:
b5:2c:2b:d7:6d:ec:b7:68:a2:22:53:16:63:7a:b4:
62:69:4d:57:f7:2d:b6:7c:5d:10:8a:7b:45:1d:ba:
f1:17:ea:e3:58:16:ad:33:9d:ac:5f:9d:e9:8f:05:
f4:13:27:8e:a9:54:c4:7b:53:62:ec:c9:eb:f1:09:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F1:ED:43:4C:22:5F:2A:A6:F6:AD:22:EE:2E:9B:72:EA:CF:63:F3
X509v3 Authority Key Identifier:
keyid:C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c1:f1:cc:1f:c9:e3:53:13:82:5b:90:b9:c0:8c:0c:66:d6:
97:41:ab:80:ae:cc:7a:5e:9d:ca:3e:c8:7e:3c:7d:8d:d3:de:
1d:aa:bf:c3:89:db:2a:c4:b1:82:88:e4:37:cc:a1:f8:41:67:
0a:95:27:c8:6d:95:e7:4e:35:c7:28:e7:5b:5d:69:8f:b1:8f:
52:4c:d1:89:23:c7:3b:df:88:f5:1b:18:18:2e:87:68:1e:56:
ae:fd:0d:d4:40:ac:69:1e:5b:bf:64:15:b9:1b:b4:c4:08:fb:
b6:53:b7:b0:9a:33:31:69:1e:17:26:95:6b:16:5d:25:02:d1:
39:c8:f8:b6:a6:84:2a:f7:95:ba:be:3a:ce:23:76:63:37:c6:
1a:d3:44:3d:44:d1:bf:7f:cb:fb:15:d1:f8:87:02:f6:5f:a3:
eb:bb:40:1a:b3:81:7f:44:da:16:b0:05:9b:8e:67:4b:2a:06:
25:ca:7f:48:a4:4a:75:72:bc:5b:3e:af:63:ce:87:c5:96:2a:
e3:b0:e1:17:56:20:d7:6e:53:67:8a:5c:11:a6:91:48:14:c3:
82:34:6b:8d:9e:2d:c6:c8:f5:14:49:be:9d:69:79:32:c9:e8:
60:e9:7d:b5:e3:38:f4:de:4e:c0:17:2b:b8:13:45:70:20:80:
ca:4c:b9:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNAy3gycU7pcHpZky9tHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOGRlNGYyYWY4YzcwNTBlNmU3MGUwOGExNTI1NzNlZGQ0
MmU2NzgwHhcNMjUxMDE5MTIwMTQyWhcNMjUxMDIwMTIwMTQyWjAzMTEwLwYDVQQD
Eyg0M2YxZWQ0MzRjMjI1ZjJhYTZmNmFkMjJlZTJlOWI3MmVhY2Y2M2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50xGGgf/UJDqdUjbep6Hb6Msot8d
kYH4ALRgA0uxIfU2hVrlsM8vFZAR5kYCX2/Z7KHTuMA0/48EhSOLn3SWlYea5gK3
oiv4nHqdQLFfUgv3nVii86MzYiNOMBhPTSiLZgNMG2y+Ih6xgIG6YjH2FTYB6p7f
WMkzWu/nPnOD36jyEDPvOWmNibZbOVngKVIaaku0BXYlr/pnt4Brd8M+ofNmYh6F
hOmTrSsAQ76jq3QiKmNPqqlZPdeEpfcxfqTI6Ni1LCvXbey3aKIiUxZjerRiaU1X
9y22fF0QintFHbrxF+rjWBatM52sX53pjwX0EyeOqVTEe1Ni7Mnr8Qn6dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPx7UNMIl8qpvatIu4um3Lqz2PzMB8GA1UdIwQY
MBaAFMGN5PKvjHBQ5ucOCKFSVz7dQuZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80YWY3YzEtNTBjYi00NzlkLWEzNzct
MDA3YjQ0N2Q0YjM5LzEvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80YWY3YzEtNTBjYi00NzlkLWEzNzctMDA3YjQ0N2Q0YjM5
LzEvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsHxzB/J
41MTgluQucCMDGbWl0GrgK7Mel6dyj7Ifjx9jdPeHaq/w4nbKsSxgojkN8yh+EFn
CpUnyG2V5041xyjnW11pj7GPUkzRiSPHO9+I9RsYGC6HaB5Wrv0N1ECsaR5bv2QV
uRu0xAj7tlO3sJozMWkeFyaVaxZdJQLROcj4tqaEKveVur46ziN2YzfGGtNEPUTR
v3/L+xXR+IcC9l+j67tAGrOBf0TaFrAFm45nSyoGJcp/SKRKdXK8Wz6vY86HxZYq
47DhF1Yg125TZ4pcEaaRSBTDgjRrjZ4txsj1FEm+nWl5MsnoYOl9teM49N5OwBcr
uBNFcCCAyky5uw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:14 2025 by rpki-client