Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
File: wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft (raw, json)
Hash identifier: f+TV/D3Q7DPiueiSbNnH6l6EI13FAFi22uZnC0/4l/8=
Subject key identifier: 93:B5:55:5B:93:5F:3A:DE:21:DD:A2:20:F4:15:55:B3:9F:C4:48:17
Authority key identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
Certificate issuer: /CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Certificate serial: 0199FC8F5A8B9FEA76939997FA5998370004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
Manifest number: 02A9
Signing time: Sun 19 Oct 2025 13:01:17 +0000
Manifest this update: Sun 19 Oct 2025 13:01:17 +0000
Manifest next update: Mon 20 Oct 2025 13:01:17 +0000
Files and hashes: 1: shq45UEehLHlmhOeyI4UV2c2u0c.roa (hash: m82S0LKa4u++R6z0pfw1er3BwvIyylTnAWkb4EmiNoE=)
2: wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl (hash: n9mhsmq7wo1+kth2hS9FxrTOC0tS8uaxe3sC8Pm/F3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5a:8b:9f:ea:76:93:99:97:fa:59:98:37:00:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Validity
Not Before: Oct 19 13:01:17 2025 GMT
Not After : Oct 20 13:01:17 2025 GMT
Subject: CN=93b5555b935f3ade21dda220f41555b39fc44817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:94:58:c7:44:e8:7d:8f:a3:c2:2a:a3:3e:
c8:0e:aa:92:2d:94:a5:df:1c:be:d8:c9:a1:74:84:
0c:a5:f2:a6:aa:ef:26:e2:18:aa:41:ab:82:1f:be:
d4:ed:0d:ca:36:de:60:a3:28:a1:a0:06:cb:7f:fe:
d7:d1:00:b5:b1:81:57:59:88:39:14:5f:33:b0:4a:
24:a4:6d:df:b3:88:24:70:14:e4:84:57:2b:8f:b0:
91:98:5d:11:fc:a0:36:c1:72:15:ea:a3:f1:38:5a:
87:4e:b4:87:6b:5f:f0:f3:cd:13:7d:d3:7c:94:e5:
5f:ac:f5:93:92:ea:7c:c7:12:f9:b1:64:05:8a:75:
a1:ed:c7:8d:72:b8:55:77:d2:0b:13:43:57:6d:15:
f4:89:3b:4e:51:a1:5a:6c:a8:e6:1b:32:1b:7b:e6:
6c:83:fc:fb:20:a9:17:e1:ac:26:5e:54:db:86:f9:
9e:61:c0:1a:21:e5:7f:af:c9:4c:1e:9a:cc:91:5e:
2c:5c:84:ee:0e:23:de:34:63:28:8c:d3:27:62:bc:
a1:37:51:05:3e:48:b1:9a:4d:52:7f:0a:21:d5:2d:
38:05:2c:88:53:21:a1:06:2d:a8:c9:0c:04:04:b9:
dd:60:25:34:90:62:51:72:e8:e5:87:55:10:40:fd:
2b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B5:55:5B:93:5F:3A:DE:21:DD:A2:20:F4:15:55:B3:9F:C4:48:17
X509v3 Authority Key Identifier:
keyid:C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c9:1e:82:46:c7:f3:31:de:14:b8:17:3a:58:7d:49:ae:94:
be:d7:aa:8a:35:73:14:a2:78:ee:e7:cf:7f:a5:5d:d3:9c:76:
0c:91:cb:82:d1:a7:cf:36:76:d6:91:be:e9:fb:ed:d9:4c:5c:
95:60:90:09:29:d8:e4:35:bb:68:23:67:8f:26:12:9d:b7:33:
66:f0:90:97:7d:b7:ab:84:f2:8e:f0:0e:cf:0e:28:a8:c9:93:
8f:15:44:a8:bd:32:ce:5d:01:44:21:63:47:91:ac:76:05:b0:
87:d7:16:ea:d9:a2:61:12:86:ec:7c:5a:08:c5:37:0f:07:87:
4a:0c:2e:d3:7c:3f:dd:1f:57:96:c8:f0:5e:e2:f3:35:a4:05:
d1:5e:bf:61:e3:df:0f:f1:86:e0:92:07:b5:57:11:cf:e8:8b:
88:35:80:9b:bd:79:3a:61:c1:d8:b0:e2:80:b4:e1:ac:13:d6:
41:ec:54:5c:64:fa:9d:4d:5e:85:ee:d4:00:e3:bb:0a:ac:2a:
6e:00:62:2d:09:3a:87:65:b2:a2:f4:36:a5:e7:62:a5:d7:e4:
1d:ef:65:71:17:eb:b0:e2:4e:15:56:81:d0:c3:21:07:06:ae:
43:d0:09:f0:d3:8f:62:19:8c:1c:42:fa:f8:e9:1e:fe:8b:e3:
e4:5d:3d:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j1qLn+p2k5mX+lmYNwAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYWM4ZjcwOTYxZDJkYzczZTJmZTNhNzk5MDgzMmU5M2Q0
OTU2MTEwHhcNMjUxMDE5MTMwMTE3WhcNMjUxMDIwMTMwMTE3WjAzMTEwLwYDVQQD
Eyg5M2I1NTU1YjkzNWYzYWRlMjFkZGEyMjBmNDE1NTViMzlmYzQ0ODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS6UWMdE6H2Po8Iqoz7IDqqSLZSl
3xy+2MmhdIQMpfKmqu8m4hiqQauCH77U7Q3KNt5goyihoAbLf/7X0QC1sYFXWYg5
FF8zsEokpG3fs4gkcBTkhFcrj7CRmF0R/KA2wXIV6qPxOFqHTrSHa1/w880TfdN8
lOVfrPWTkup8xxL5sWQFinWh7ceNcrhVd9ILE0NXbRX0iTtOUaFabKjmGzIbe+Zs
g/z7IKkX4awmXlTbhvmeYcAaIeV/r8lMHprMkV4sXITuDiPeNGMojNMnYryhN1EF
Pkixmk1Sfwoh1S04BSyIUyGhBi2oyQwEBLndYCU0kGJRcujlh1UQQP0rcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO1VVuTXzreId2iIPQVVbOfxEgXMB8GA1UdIwQY
MBaAFMKsj3CWHS3HPi/jp5kIMuk9SVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3F5UGNKWWRMY2MtTC1Pbm1RZ3k2VDFKVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NTZmZDItMGRkMy00ZDRmLThiMzct
YzZkODZhMWIwOGUwLzEvd3F5UGNKWWRMY2MtTC1Pbm1RZ3k2VDFKVmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85NTZmZDItMGRkMy00ZDRmLThiMzctYzZkODZhMWIwOGUw
LzEvd3F5UGNKWWRMY2MtTC1Pbm1RZ3k2VDFKVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHckegkbH
8zHeFLgXOlh9Sa6UvteqijVzFKJ47ufPf6Vd05x2DJHLgtGnzzZ21pG+6fvt2Uxc
lWCQCSnY5DW7aCNnjyYSnbczZvCQl323q4TyjvAOzw4oqMmTjxVEqL0yzl0BRCFj
R5GsdgWwh9cW6tmiYRKG7HxaCMU3DweHSgwu03w/3R9XlsjwXuLzNaQF0V6/YePf
D/GG4JIHtVcRz+iLiDWAm715OmHB2LDigLThrBPWQexUXGT6nU1ehe7UAOO7Cqwq
bgBiLQk6h2WyovQ2pedipdfkHe9lcRfrsOJOFVaB0MMhBwauQ9AJ8NOPYhmMHEL6
+Oke/ovj5F09xg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:52 2025 by rpki-client