Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File: wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier: 2+oNVcx3Yx1XP8LdwA+VBxqOJkYP6rljbLenubzEA4M=
Subject key identifier: 59:AB:34:9E:B9:D9:A6:DD:C3:B1:B6:7E:59:20:7D:B7:D3:C1:99:F2
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 0199FC58E825252A32C324DE2D85AC3B024C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number: 0B7F
Signing time: Sun 19 Oct 2025 12:01:48 +0000
Manifest this update: Sun 19 Oct 2025 12:01:48 +0000
Manifest next update: Mon 20 Oct 2025 12:01:48 +0000
Files and hashes: 1: ICJFcNTwvBoTxR73h6RFC09rjcE.roa (hash: xTLqPPxBhdwsAxy9x/9cuJE08DZBHQ351Kx0d+iQE1E=)
2: MyqYBnhuQWC6jBgr6LglN2EYGOA.roa (hash: Di9sEIDs+wFzdjcM3rM7YUWhcIoWp5vrG4QyfmG810k=)
3: XrIe3RxS0PfS1KQwk38a9UzdLbU.roa (hash: TAdXiNpnMI8M4W6FRb8OCRV5yipTVzRnXpEPH/f9GFs=)
4: eM9eBjal4_y1POkPGbCQnwiZoSY.roa (hash: K0YjjeAMEyPylhZxZo/IupUyAhS45lKcJpo4UDpKlMI=)
5: sxZhzxshG4iLVLbCSoDb6rUQtZY.roa (hash: R1ZlZu84C6XGwKU+59ocGLP/4NsYVwyR2vdR/42i2m0=)
6: te98bJGGUvJI2dvVEFniebRE2-Q.roa (hash: YFZNKLPi4G/NTA6BGaRrsOjmLUpnVxIljNwYkPRZo1o=)
7: vMfdW02jbLqHp-27brKBsBhbgHY.roa (hash: oHK3CDonAtcVu8dAAlZMcFQZnOMNxTDFalDW/2pvfts=)
8: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: mmmg7sZTtcvxvUvnUQCSLciXMhZo68meqFbLzlO2Hpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e8:25:25:2a:32:c3:24:de:2d:85:ac:3b:02:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Oct 19 12:01:48 2025 GMT
Not After : Oct 20 12:01:48 2025 GMT
Subject: CN=59ab349eb9d9a6ddc3b1b67e59207db7d3c199f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:23:f0:3b:a0:5c:0d:53:5c:54:54:6a:a0:
a1:3b:01:83:7a:73:52:56:9e:1d:99:da:52:eb:cb:
e5:22:5e:24:a5:6a:92:b7:d3:42:e4:e7:61:41:ac:
66:91:b2:41:71:f1:e0:99:8c:ce:6a:dd:ad:18:97:
80:e8:28:7f:2d:db:2b:0b:14:63:cd:1d:5f:d2:82:
1f:d3:fd:f2:d7:35:1f:46:f6:8e:96:03:3a:56:72:
c5:ab:a4:ac:29:67:1d:6f:50:89:5d:01:77:d6:cd:
7c:bf:6b:22:68:fe:d6:e1:48:5b:35:75:66:48:65:
0a:fb:00:47:ec:89:e6:61:55:6c:d8:77:1b:11:09:
ba:ab:9f:c3:83:50:cc:9d:b2:8a:e6:8b:e3:7d:a9:
20:0e:26:4f:23:7f:06:b8:fe:9e:21:73:cf:a2:fa:
f9:ac:38:7a:f7:b2:d6:ad:9f:a5:ba:5a:c8:7b:15:
8c:d7:88:87:0c:9c:48:ba:d9:d0:4c:57:b4:1f:2d:
49:bf:3d:73:07:66:fc:ca:e9:b4:a5:37:4f:46:21:
86:26:14:66:c1:5d:98:ce:a7:35:83:3b:c4:23:ad:
24:4c:c4:03:72:12:cb:32:d4:29:05:ed:1e:a6:84:
e9:f7:95:9f:33:e1:77:8f:4e:8e:bd:77:db:78:bd:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AB:34:9E:B9:D9:A6:DD:C3:B1:B6:7E:59:20:7D:B7:D3:C1:99:F2
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d3:30:2f:fa:1b:2b:13:39:52:2c:3b:a9:43:0c:f3:94:3c:
92:90:5b:66:e0:71:a8:84:18:53:17:26:0d:cb:63:8b:bd:e0:
99:a0:03:e1:ed:7f:90:d5:5e:77:ce:5d:f2:14:1c:cc:a5:cf:
7b:19:4e:00:02:f4:b4:fc:88:c3:ec:e6:57:0c:32:14:1b:78:
76:90:cd:18:73:2d:63:f0:2c:c6:0b:4d:02:29:92:4a:61:8d:
d8:5a:76:14:f5:e8:b7:e8:d4:f5:c3:59:9f:de:5e:c1:31:c9:
96:ca:fd:fc:6c:ee:17:f3:0d:1d:55:92:27:df:c5:3f:59:bc:
d3:01:24:40:90:0f:d2:83:35:ce:85:c8:46:87:16:f0:8f:86:
66:7d:78:a0:0c:47:6c:78:65:ba:88:ab:a6:30:2b:45:76:b5:
aa:52:ac:0e:03:89:ee:bb:af:af:ce:2f:82:ec:73:96:27:e2:
f1:07:83:2b:54:63:4b:9d:6c:fc:0e:2d:20:90:aa:da:45:7d:
56:11:87:4c:40:ef:c8:13:0a:b3:ec:c8:50:55:06:fe:aa:9b:
cd:ce:98:e2:ee:f6:41:db:ad:86:6e:ce:40:8b:16:80:6a:3c:
d4:ee:d2:da:4b:1a:cf:8c:50:84:7b:9c:c4:8e:61:c1:91:e0:
0c:b7:c0:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WOglJSoywyTeLYWsOwJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk
NzY2Y2UwHhcNMjUxMDE5MTIwMTQ4WhcNMjUxMDIwMTIwMTQ4WjAzMTEwLwYDVQQD
Eyg1OWFiMzQ5ZWI5ZDlhNmRkYzNiMWI2N2U1OTIwN2RiN2QzYzE5OWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmMj8DugXA1TXFRUaqChOwGDenNS
Vp4dmdpS68vlIl4kpWqSt9NC5OdhQaxmkbJBcfHgmYzOat2tGJeA6Ch/LdsrCxRj
zR1f0oIf0/3y1zUfRvaOlgM6VnLFq6SsKWcdb1CJXQF31s18v2siaP7W4UhbNXVm
SGUK+wBH7InmYVVs2HcbEQm6q5/Dg1DMnbKK5ovjfakgDiZPI38GuP6eIXPPovr5
rDh697LWrZ+lulrIexWM14iHDJxIutnQTFe0Hy1Jvz1zB2b8yum0pTdPRiGGJhRm
wV2Yzqc1gzvEI60kTMQDchLLMtQpBe0epoTp95WfM+F3j06OvXfbeL370wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmrNJ652abdw7G2flkgfbfTwZnyMB8GA1UdIwQY
MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt
NTE1ODQ1ZTZjMzE3LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODktNTE1ODQ1ZTZjMzE3
LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdMwL/ob
KxM5Uiw7qUMM85Q8kpBbZuBxqIQYUxcmDctji73gmaAD4e1/kNVed85d8hQczKXP
exlOAAL0tPyIw+zmVwwyFBt4dpDNGHMtY/AsxgtNAimSSmGN2Fp2FPXot+jU9cNZ
n95ewTHJlsr9/GzuF/MNHVWSJ9/FP1m80wEkQJAP0oM1zoXIRocW8I+GZn14oAxH
bHhluoirpjArRXa1qlKsDgOJ7ruvr84vguxzlifi8QeDK1RjS51s/A4tIJCq2kV9
VhGHTEDvyBMKs+zIUFUG/qqbzc6Y4u72Qduthm7OQIsWgGo81O7S2ksaz4xQhHuc
xI5hwZHgDLfAlA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:33 2025 by rpki-client