Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: zvHg6VV1o5ZRwxO9qoxTKDJenAGQhnjIoknFGqMvqw4=
Subject key identifier: E7:B3:78:DC:3C:48:30:BF:62:B1:7A:3D:08:D0:92:DE:58:C4:73:46
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 0199FD3479A721720259A827FB547EFEBAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 16FC
Signing time: Sun 19 Oct 2025 16:01:38 +0000
Manifest this update: Sun 19 Oct 2025 16:01:38 +0000
Manifest next update: Mon 20 Oct 2025 16:01:38 +0000
Files and hashes: 1: HARnUvjlt2Ihiye5L31M1Ihsszo.roa (hash: R6szIcdOkXpk4Tvb4l6mExr2G3bKCj15fJUl212PxlA=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: fFtw1WcnuDLzfJmDvJJxHAPvskNHujbvvQgfUr9QH5M=)
3: eZmwFy41-LIbouqrlW9zkimoU3M.roa (hash: zJU/IMiyEvSZt1AwTK7cRbJ+HAzHnx6LAKEgb7nLXYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:79:a7:21:72:02:59:a8:27:fb:54:7e:fe:ba:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Oct 19 16:01:38 2025 GMT
Not After : Oct 20 16:01:38 2025 GMT
Subject: CN=e7b378dc3c4830bf62b17a3d08d092de58c47346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:2d:b9:7b:6f:7a:74:3d:f8:40:4d:91:0b:
44:63:8a:c6:32:af:f9:54:7d:8d:04:17:df:cd:8c:
e9:56:c8:f1:c2:fe:c6:24:74:4f:55:4a:d0:79:d0:
94:0a:8c:9b:57:9e:ff:1f:31:4e:22:d7:36:f0:29:
dd:bf:fe:5a:cb:81:c8:14:05:8c:2c:4e:ef:90:32:
8d:dd:58:bb:22:b8:84:4a:c3:c3:e1:de:18:e1:12:
0c:66:89:64:96:c7:7c:62:51:32:b7:4c:7c:95:fb:
ec:b7:76:92:65:b1:2e:cd:52:bc:26:00:f0:4f:c6:
ef:ad:8c:ee:e0:2b:6c:6e:ae:a2:9a:43:f0:53:28:
de:2d:6b:65:73:d0:80:9c:17:74:0f:7d:a8:23:c6:
8c:a8:2d:f2:3e:a2:94:70:c8:3a:1f:f3:e5:c8:cf:
5f:f9:e3:a7:87:3e:b7:6f:dc:2a:e7:c4:84:9d:4f:
8a:87:51:10:ca:76:5c:e1:ce:96:07:a4:46:d2:5a:
9e:61:89:48:c9:49:d5:a7:2e:f9:0a:5a:34:ad:aa:
f0:06:54:cf:84:8b:71:42:35:99:cb:a7:48:21:b5:
1d:f1:00:eb:b0:4b:a6:fc:63:eb:44:8f:9b:15:a9:
15:43:a8:07:42:31:6a:f8:56:41:67:1a:df:52:e3:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B3:78:DC:3C:48:30:BF:62:B1:7A:3D:08:D0:92:DE:58:C4:73:46
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c4:a1:b1:53:1f:b8:03:2b:9f:21:30:35:77:d3:a6:c7:6c:
37:b2:03:9f:02:6d:cf:71:e2:3c:72:cd:12:96:ff:78:ba:27:
16:d8:8d:3d:9b:ca:b0:92:86:e0:63:8a:56:99:d8:e0:50:33:
ad:e9:5a:04:17:63:e9:17:86:97:dc:0a:be:a1:2b:dd:ce:46:
c9:01:11:4d:0f:be:1c:a9:24:0e:55:ad:a8:4b:c7:b2:10:c5:
85:b6:8d:46:35:e9:7e:78:ab:e0:99:8f:f0:58:35:0b:12:01:
6d:1a:93:57:c5:89:2f:5c:1b:b6:95:ab:6f:03:38:77:af:ce:
fb:0c:73:ba:80:2e:ca:1f:c7:4a:4e:f9:02:32:b5:be:64:42:
77:75:5f:9f:16:e5:a7:59:c4:10:03:0c:c1:e3:29:d2:2c:b8:
86:4f:3a:1c:21:f9:c5:58:07:31:55:b0:a2:6c:59:dd:df:64:
b8:84:8c:9e:87:00:0c:7d:8c:3d:75:d5:72:38:ee:c0:28:11:
79:8e:3d:59:4d:90:c3:69:37:e8:8e:1e:15:0a:86:88:3b:d3:
63:f1:de:76:55:1d:68:26:e6:67:67:73:11:43:42:6d:2d:f1:
74:eb:e1:37:4b:8b:20:fd:b7:f3:d8:97:6f:40:8d:d9:33:45:
0f:79:f2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NHmnIXICWagn+1R+/rqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx
YzRmZTIwHhcNMjUxMDE5MTYwMTM4WhcNMjUxMDIwMTYwMTM4WjAzMTEwLwYDVQQD
EyhlN2IzNzhkYzNjNDgzMGJmNjJiMTdhM2QwOGQwOTJkZTU4YzQ3MzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/ItuXtvenQ9+EBNkQtEY4rGMq/5
VH2NBBffzYzpVsjxwv7GJHRPVUrQedCUCoybV57/HzFOItc28Cndv/5ay4HIFAWM
LE7vkDKN3Vi7IriESsPD4d4Y4RIMZolklsd8YlEyt0x8lfvst3aSZbEuzVK8JgDw
T8bvrYzu4Ctsbq6imkPwUyjeLWtlc9CAnBd0D32oI8aMqC3yPqKUcMg6H/PlyM9f
+eOnhz63b9wq58SEnU+Kh1EQynZc4c6WB6RG0lqeYYlIyUnVpy75Clo0rarwBlTP
hItxQjWZy6dIIbUd8QDrsEum/GPrRI+bFakVQ6gHQjFq+FZBZxrfUuN81QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOezeNw8SDC/YrF6PQjQkt5YxHNGMB8GA1UdIwQY
MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt
NzA4N2UzZmUyYTVkLzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk
LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMShsVMf
uAMrnyEwNXfTpsdsN7IDnwJtz3HiPHLNEpb/eLonFtiNPZvKsJKG4GOKVpnY4FAz
relaBBdj6ReGl9wKvqEr3c5GyQERTQ++HKkkDlWtqEvHshDFhbaNRjXpfnir4JmP
8Fg1CxIBbRqTV8WJL1wbtpWrbwM4d6/O+wxzuoAuyh/HSk75AjK1vmRCd3Vfnxbl
p1nEEAMMweMp0iy4hk86HCH5xVgHMVWwomxZ3d9kuISMnocADH2MPXXVcjjuwCgR
eY49WU2Qw2k36I4eFQqGiDvTY/HedlUdaCbmZ2dzEUNCbS3xdOvhN0uLIP2389iX
b0CN2TNFD3nyGQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:00:31 2025 by rpki-client