Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
File: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft (raw, json)
Hash identifier: +bJVSg2sl8hc9TxyssEx20i+znFml0BSo9GRcX9aMbQ=
Subject key identifier: 8B:9E:76:CB:C4:20:97:6A:29:93:9E:35:CD:8F:B1:38:1C:36:A4:26
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 0199FB463061D0527C338FED04E3A9B6AB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
Manifest number: 0FEF
Signing time: Sun 19 Oct 2025 07:01:45 +0000
Manifest this update: Sun 19 Oct 2025 07:01:45 +0000
Manifest next update: Mon 20 Oct 2025 07:01:45 +0000
Files and hashes: 1: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl (hash: Zhent2/U9lcZ4n8eozD/Ilo3geJDOGWnIpxzr7CTcXs=)
2: NHhXoxxdMNakey6qmBeac9wJBd4.roa (hash: +reJ5PfpdsvDjpTAS5jPNWl9ybmFWN+FQOCbnBXMIy8=)
3: iobCcR3UyoYrtXm2S8hRWxvM3zg.roa (hash: 3usXJWbHzs8K4G1qHJnvLDQutknaGmUnq2D6gx78C1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:30:61:d0:52:7c:33:8f:ed:04:e3:a9:b6:ab:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: Oct 19 07:01:45 2025 GMT
Not After : Oct 20 07:01:45 2025 GMT
Subject: CN=8b9e76cbc420976a29939e35cd8fb1381c36a426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0c:5f:97:9e:05:3e:c6:b0:cb:8b:47:d9:07:
48:bf:69:ff:df:b8:93:f7:96:c1:4e:f0:6f:67:46:
1a:e1:96:4b:83:fa:bd:d9:e0:ba:4d:e0:54:56:56:
a1:a0:b0:31:1d:b5:01:32:29:96:18:72:9a:38:3a:
32:f5:3c:55:9d:90:35:dc:7a:b8:c0:87:7e:b3:56:
d2:f0:61:27:2b:28:b8:49:a9:3a:37:8b:de:4f:49:
3f:74:d4:bd:10:36:88:1e:45:54:16:cf:37:8b:7a:
e1:f2:17:95:b2:59:cb:e0:63:9a:96:b9:af:b6:b3:
eb:d0:fa:31:01:33:be:dc:31:4b:7b:17:fe:71:94:
96:27:2f:19:1a:b5:75:a1:62:4e:84:62:bf:12:c8:
66:b8:61:25:6c:9e:06:31:06:ac:57:1d:bc:27:33:
d2:a6:77:3f:c8:cf:63:e7:f0:c2:a7:7e:51:29:62:
13:35:bd:c2:8c:73:f6:84:4d:0f:ad:3f:e1:c6:9f:
b5:aa:e7:c8:ea:a1:40:4a:b9:91:3d:68:45:a1:fb:
5c:4f:12:26:76:cc:30:04:56:04:8b:32:c0:a7:d2:
10:23:1e:16:92:b5:3b:8d:ef:f4:c0:9a:b5:97:be:
49:b0:51:53:31:34:0d:1e:07:3d:f4:b6:c9:35:e9:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9E:76:CB:C4:20:97:6A:29:93:9E:35:CD:8F:B1:38:1C:36:A4:26
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:42:52:fd:a4:65:de:d6:dd:e7:8b:c4:41:48:e5:62:43:ce:
ab:f2:b4:ec:e6:65:70:a5:cc:e5:21:e1:9d:e7:9a:5f:c5:1b:
12:5f:59:6c:10:9c:b9:fc:d1:9a:f5:dd:52:12:34:2a:c1:f8:
eb:81:06:75:16:33:8b:aa:a7:cb:53:7b:4b:47:c1:f4:2c:57:
c7:b7:9b:d0:8e:ee:c3:4d:8f:6a:8e:c3:07:75:11:cb:9c:b5:
51:13:4d:22:5d:b3:f9:32:8b:2a:1d:82:f3:c8:b1:9a:a1:ee:
a0:53:16:6b:bb:61:bb:cd:16:a3:6e:e6:36:5c:fc:5d:57:fe:
ea:c1:fd:1c:f2:d6:26:a3:0e:78:ef:df:e6:5c:5a:56:e5:9b:
b6:33:53:c8:e3:ce:e2:6c:9d:92:5f:23:ef:b1:00:d2:8a:29:
39:9d:60:e0:c8:00:66:21:28:d7:37:4b:b3:c3:8b:08:2d:f8:
e4:15:91:b0:66:36:ec:f6:a1:8c:15:9d:47:97:c2:6f:65:9c:
d1:93:bd:ba:90:7f:cb:fb:0e:66:53:44:98:ec:70:b6:66:06:
47:4e:fc:af:4a:80:6a:de:4f:1b:d7:e9:1d:ee:38:87:8e:d7:
fa:c0:c2:1b:67:7f:65:2a:55:7a:18:8a:1d:c9:a7:8f:df:8e:
5a:ed:e0:df
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn7RjBh0FJ8M4/tBOOptqt9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjI5Nzc1MjgzNzMzYTQ1YzQ1NGI4ZDdiZTVhNjZkZjBk
YjFhMTcwHhcNMjUxMDE5MDcwMTQ1WhcNMjUxMDIwMDcwMTQ1WjAzMTEwLwYDVQQD
Eyg4YjllNzZjYmM0MjA5NzZhMjk5MzllMzVjZDhmYjEzODFjMzZhNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQxfl54FPsawy4tH2QdIv2n/37iT
95bBTvBvZ0Ya4ZZLg/q92eC6TeBUVlahoLAxHbUBMimWGHKaODoy9TxVnZA13Hq4
wId+s1bS8GEnKyi4Sak6N4veT0k/dNS9EDaIHkVUFs83i3rh8heVslnL4GOalrmv
trPr0PoxATO+3DFLexf+cZSWJy8ZGrV1oWJOhGK/EshmuGElbJ4GMQasVx28JzPS
pnc/yM9j5/DCp35RKWITNb3CjHP2hE0PrT/hxp+1qufI6qFASrmRPWhFoftcTxIm
dswwBFYEizLAp9IQIx4WkrU7je/0wJq1l75JsFFTMTQNHgc99LbJNemuHQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIuedsvEIJdqKZOeNc2PsTgcNqQmMB8GA1UdIwQY
MBaAFPlil3UoNzOkXEVLjXvlpm3w2xoXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XS1hkU2czTTZSY1JVdU5lLVdtYmZEYkdoYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZWJmY2U2LTI4NTctNDA0Yi05Yjc0
LWIzMjRlMDI1YjkyOS8xLzEtV0tYZFNnM002UmNSVXVOZS1XbWJmRGJHaGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdkL2ViZmNlNi0yODU3LTQwNGItOWI3NC1iMzI0ZTAyNWI5
MjkvMS8xLVdLWGRTZzNNNlJjUlV1TmUtV21iZkRiR2hjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwEJS
/aRl3tbd54vEQUjlYkPOq/K07OZlcKXM5SHhneeaX8UbEl9ZbBCcufzRmvXdUhI0
KsH464EGdRYzi6qny1N7S0fB9CxXx7eb0I7uw02Pao7DB3URy5y1URNNIl2z+TKL
Kh2C88ixmqHuoFMWa7thu80Wo27mNlz8XVf+6sH9HPLWJqMOeO/f5lxaVuWbtjNT
yOPO4mydkl8j77EA0oopOZ1g4MgAZiEo1zdLs8OLCC345BWRsGY27PahjBWdR5fC
b2Wc0ZO9upB/y/sOZlNEmOxwtmYGR078r0qAat5PG9fpHe44h47X+sDCG2d/ZSpV
ehiKHcmnj9+OWu3g3w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:19 2025 by rpki-client