Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: gXG4iIfO6ky3lxzRsxlLKLXXYD69n8gl3N+xOcMCzAY=
Subject key identifier: 12:D6:77:C9:0D:9E:C2:79:33:D1:A1:EE:ED:C1:7D:7A:E0:CA:4D:C6
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 0199FBEBD9F95F0264D3B27899E399DB17BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 0F10
Signing time: Sun 19 Oct 2025 10:02:41 +0000
Manifest this update: Sun 19 Oct 2025 10:02:41 +0000
Manifest next update: Mon 20 Oct 2025 10:02:41 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: MCg1QTY+9ZDoMAf2HUKghffrmcUTUvsU9l2BR8B6zQM=)
2: gRqe05O7FJ-3whaf6RiaMKovVHw.roa (hash: Amo4rFyICByEK7RCP/ax/RVJMXu+W6BkFpTvi0xsm7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d9:f9:5f:02:64:d3:b2:78:99:e3:99:db:17:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Oct 19 10:02:41 2025 GMT
Not After : Oct 20 10:02:41 2025 GMT
Subject: CN=12d677c90d9ec27933d1a1eeedc17d7ae0ca4dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:8a:a8:71:6b:2c:b1:7d:64:81:66:6e:08:
72:0d:79:d9:07:d6:74:59:c0:eb:e5:7f:c5:db:30:
94:9e:78:7c:19:8c:75:06:3b:a0:d2:1c:41:b4:ab:
9b:c2:e0:03:f2:61:d3:ff:1f:4d:c6:94:e9:73:06:
f4:a9:7c:48:07:52:dc:14:d1:f7:98:f0:4a:02:3b:
80:70:cd:96:d5:bb:36:fd:95:89:4c:dd:a1:88:cb:
cc:5f:17:75:03:0e:90:72:98:b6:6d:b0:de:af:e6:
61:ba:0f:a4:08:23:aa:7d:cc:01:40:71:49:f2:20:
c0:46:95:07:82:46:6f:f4:a4:c6:eb:bc:d4:24:c0:
61:c4:12:ea:20:30:41:3f:39:7c:25:c8:1b:94:49:
bd:3c:49:22:fa:39:e7:28:f7:92:65:b1:f4:d3:23:
06:c8:7f:e1:ac:0b:2e:a5:29:e0:05:7b:70:5d:75:
c3:e3:33:fe:56:67:02:d1:e5:50:05:9b:f5:92:98:
fe:21:77:5f:34:70:1c:8f:80:73:16:02:75:d3:68:
de:b8:e2:20:58:e6:22:6f:fc:cc:16:ea:f1:76:36:
7f:74:65:02:94:2b:50:02:7e:f1:e8:b2:d0:82:11:
3e:17:9b:f1:60:b7:d2:38:ea:94:2a:9e:79:62:d5:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D6:77:C9:0D:9E:C2:79:33:D1:A1:EE:ED:C1:7D:7A:E0:CA:4D:C6
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2e:5d:81:b5:f3:ab:41:8e:04:27:ee:81:37:50:06:56:2c:
51:77:ca:1e:07:3a:22:60:d8:45:65:40:b0:00:8a:04:0e:0c:
69:ab:d1:2b:97:b8:ec:56:6a:09:a6:37:3e:fe:43:f4:d9:d8:
e9:34:46:a2:34:d9:8f:6f:1c:d4:3e:5b:15:26:88:bf:c2:04:
de:5b:8f:93:80:08:a0:15:17:41:14:c5:77:df:f0:26:50:22:
5e:58:33:dd:84:6a:df:6f:0d:c8:29:c1:2b:8e:e8:0d:f6:4a:
15:44:f8:63:b3:f4:1b:6b:13:3d:ae:2a:98:b2:3a:13:7a:06:
8a:2a:7f:68:45:db:0a:a7:2c:82:c7:61:de:52:9e:3f:63:f2:
bf:4e:12:43:5e:18:09:97:16:a3:b7:50:39:11:cd:90:ef:6d:
54:82:37:37:a6:7e:61:cf:72:84:98:70:2d:d3:ee:ff:bf:ad:
cd:0d:9f:78:ca:71:5d:2c:c9:b8:06:6a:43:dc:cd:eb:ee:a7:
0a:fd:de:ae:c3:a2:92:35:84:bb:a7:7a:b1:47:91:d5:8d:8e:
42:9e:c7:03:40:cb:71:a5:4b:ab:e2:27:4b:31:79:77:91:0f:
bc:60:59:9d:8a:9e:74:43:08:af:97:22:c3:1c:62:d0:9a:55:
d0:8d:2a:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn769n5XwJk07J4meOZ2xe7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViODYyZTIzMWZjYmQ1MzkxYmQ0NzZjNmFiOWFiMmI3MjEw
YTg3YTQwHhcNMjUxMDE5MTAwMjQxWhcNMjUxMDIwMTAwMjQxWjAzMTEwLwYDVQQD
EygxMmQ2NzdjOTBkOWVjMjc5MzNkMWExZWVlZGMxN2Q3YWUwY2E0ZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAmKqHFrLLF9ZIFmbghyDXnZB9Z0
WcDr5X/F2zCUnnh8GYx1Bjug0hxBtKubwuAD8mHT/x9NxpTpcwb0qXxIB1LcFNH3
mPBKAjuAcM2W1bs2/ZWJTN2hiMvMXxd1Aw6Qcpi2bbDer+Zhug+kCCOqfcwBQHFJ
8iDARpUHgkZv9KTG67zUJMBhxBLqIDBBPzl8JcgblEm9PEki+jnnKPeSZbH00yMG
yH/hrAsupSngBXtwXXXD4zP+VmcC0eVQBZv1kpj+IXdfNHAcj4BzFgJ102jeuOIg
WOYib/zMFurxdjZ/dGUClCtQAn7x6LLQghE+F5vxYLfSOOqUKp55YtXDWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLWd8kNnsJ5M9Gh7u3BfXrgyk3GMB8GA1UdIwQY
MBaAFFuGLiMfy9U5G9R2xquasrchCoekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTkt
OWJhNmRhNzBmYWRiLzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTktOWJhNmRhNzBmYWRi
LzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQS5dgbXz
q0GOBCfugTdQBlYsUXfKHgc6ImDYRWVAsACKBA4MaavRK5e47FZqCaY3Pv5D9NnY
6TRGojTZj28c1D5bFSaIv8IE3luPk4AIoBUXQRTFd9/wJlAiXlgz3YRq328NyCnB
K47oDfZKFUT4Y7P0G2sTPa4qmLI6E3oGiip/aEXbCqcsgsdh3lKeP2Pyv04SQ14Y
CZcWo7dQORHNkO9tVII3N6Z+Yc9yhJhwLdPu/7+tzQ2feMpxXSzJuAZqQ9zN6+6n
Cv3ersOikjWEu6d6sUeR1Y2OQp7HA0DLcaVLq+InSzF5d5EPvGBZnYqedEMIr5ci
wxxi0JpV0I0q5Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:26 2025 by rpki-client