Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
File: w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json)
Hash identifier: 6gxuc1T+hfMbOM4EQfCbHs5rzdZmk0GVk0WLhb8kmUw=
Subject key identifier: E4:20:D5:12:80:98:AA:9A:6F:F8:8F:65:42:17:EB:3B:2C:58:85:00
Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
Certificate issuer: /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Certificate serial: 0199FC588FE282801103AEFFBE7DABCDAA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
Manifest number: 0AA1
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: JXn11nJ90d5TiYF9GBYXGMgzBVU.roa (hash: xKanBKZfDLhsfcdAIiMFoN3EiNJRNn6FGvW7wSns+Xk=)
2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: YlnrMX912OJH9J6zAUK8zpkf/cV0IZjwj6CJ+hnAQjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8f:e2:82:80:11:03:ae:ff:be:7d:ab:cd:aa:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=e420d5128098aa9a6ff88f654217eb3b2c588500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:5e:16:5b:99:b4:60:9c:af:1d:dd:ea:1b:
df:fd:d5:eb:5a:f8:8e:57:bf:b5:af:93:48:59:bf:
ab:7e:e3:39:06:c9:fd:d2:96:a0:4a:de:d6:1d:bd:
75:bb:8f:a8:0a:3f:3a:5e:69:a9:7f:2a:de:53:66:
ea:c6:43:0e:6d:fc:96:cf:39:3e:b8:91:4f:06:ab:
41:23:ff:56:f3:cf:03:66:9b:92:d8:6f:cd:69:90:
5e:9f:fc:06:ba:e0:b2:51:f2:fc:49:1a:0a:74:9c:
0a:c1:38:2f:a5:e0:6a:3c:03:a3:84:ce:cf:11:23:
d5:84:86:7c:28:b1:04:2d:55:30:8c:82:2c:e8:7f:
41:c4:26:e7:74:cb:26:65:40:90:37:62:cb:c9:53:
e0:79:18:a3:74:0b:2e:d9:58:48:5d:e5:bb:83:25:
62:4d:04:3f:e1:e4:30:d5:58:80:e6:e1:f1:67:71:
dd:61:2d:68:c3:85:70:74:f3:e9:a1:8e:b6:91:fb:
5a:67:c8:df:c2:2a:4e:aa:7f:70:fc:57:bd:8c:e4:
68:e9:ce:20:90:53:83:84:ec:4d:e9:29:e8:e2:28:
96:46:5e:6d:ac:67:0b:96:0b:00:0e:68:a1:e7:00:
d7:a6:1f:9d:08:30:d2:40:72:bc:01:2f:ec:97:ad:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:20:D5:12:80:98:AA:9A:6F:F8:8F:65:42:17:EB:3B:2C:58:85:00
X509v3 Authority Key Identifier:
keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:aa:96:a7:0c:05:b2:1c:d6:82:44:ee:7f:e4:41:2b:91:4d:
2c:06:19:d1:9d:4a:2c:7b:ce:61:92:ab:d9:8a:c2:4b:04:d3:
53:17:a5:b6:c0:55:74:de:fb:bc:2d:27:5c:d6:70:c3:a0:75:
4b:8a:31:27:1c:5b:b0:bc:8b:47:85:52:06:02:f0:aa:31:01:
6c:34:6b:9d:d4:cd:4c:9f:cb:b3:5e:1d:13:98:87:ab:0e:0a:
38:55:fc:8e:bb:bb:97:ac:28:d5:b4:17:5d:3b:dd:21:06:d1:
f2:fb:28:e5:cb:30:f9:53:d0:da:fc:66:6f:4f:49:d9:70:be:
9d:d1:4f:f6:5a:42:aa:47:df:fa:bf:55:6a:72:73:f4:9e:a5:
b1:a6:4e:c8:b8:52:eb:3f:55:d4:ca:6b:6a:3f:7b:87:8f:7a:
87:38:9f:fa:04:ae:41:9b:8f:d3:13:66:c0:8c:cb:17:d9:14:
c6:20:18:6b:f4:d4:8c:f6:0b:fd:c3:01:52:ef:26:0a:b6:bb:
ed:30:db:61:50:ca:a1:64:ef:3d:5a:5f:a2:1f:79:cd:1c:d1:
57:a7:92:f6:b3:f7:38:91:50:83:bf:b1:64:43:32:b5:6f:bd:
d2:a2:5d:c7:26:82:19:17:82:79:c5:6a:47:f9:1c:d8:66:3d:
56:ce:fa:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WI/igoARA67/vn2rzapzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZmIwMGIyMjBlYTc4NGEwNDY4MzA1NGZjYmY0ZTRiNDg5
ZWI0MjAwHhcNMjUxMDE5MTIwMTI2WhcNMjUxMDIwMTIwMTI2WjAzMTEwLwYDVQQD
EyhlNDIwZDUxMjgwOThhYTlhNmZmODhmNjU0MjE3ZWIzYjJjNTg4NTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFZeFluZtGCcrx3d6hvf/dXrWviO
V7+1r5NIWb+rfuM5Bsn90pagSt7WHb11u4+oCj86XmmpfyreU2bqxkMObfyWzzk+
uJFPBqtBI/9W888DZpuS2G/NaZBen/wGuuCyUfL8SRoKdJwKwTgvpeBqPAOjhM7P
ESPVhIZ8KLEELVUwjIIs6H9BxCbndMsmZUCQN2LLyVPgeRijdAsu2VhIXeW7gyVi
TQQ/4eQw1ViA5uHxZ3HdYS1ow4VwdPPpoY62kftaZ8jfwipOqn9w/Fe9jORo6c4g
kFODhOxN6Sno4iiWRl5trGcLlgsADmih5wDXph+dCDDSQHK8AS/sl63uGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQg1RKAmKqab/iPZUIX6zssWIUAMB8GA1UdIwQY
MBaAFMP7ALIg6nhKBGgwVPy/TktInrQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd19zQXNpRHFlRW9FYURCVV9MOU9TMGlldENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yMTAyMTEtZmZlYS00N2VlLTg5YmEt
NmNjY2JhOTk3NGVjLzEvd19zQXNpRHFlRW9FYURCVV9MOU9TMGlldENBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yMTAyMTEtZmZlYS00N2VlLTg5YmEtNmNjY2JhOTk3NGVj
LzEvd19zQXNpRHFlRW9FYURCVV9MOU9TMGlldENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqqWpwwF
shzWgkTuf+RBK5FNLAYZ0Z1KLHvOYZKr2YrCSwTTUxeltsBVdN77vC0nXNZww6B1
S4oxJxxbsLyLR4VSBgLwqjEBbDRrndTNTJ/Ls14dE5iHqw4KOFX8jru7l6wo1bQX
XTvdIQbR8vso5csw+VPQ2vxmb09J2XC+ndFP9lpCqkff+r9VanJz9J6lsaZOyLhS
6z9V1Mpraj97h496hzif+gSuQZuP0xNmwIzLF9kUxiAYa/TUjPYL/cMBUu8mCra7
7TDbYVDKoWTvPVpfoh95zRzRV6eS9rP3OJFQg7+xZEMytW+90qJdxyaCGReCecVq
R/kc2GY9Vs76RA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:04 2025 by rpki-client