Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
File: wpN7lGGj0mbpNYNOUEehgiODYsg.mft (raw, json)
Hash identifier: gX5Z5t2iP1IKcTrsLRNICGGIaSeYM3AMgYZUCwmfRdU=
Subject key identifier: 66:8E:4D:53:BC:21:79:D8:1A:E2:A2:08:46:01:66:90:87:70:F9:BE
Authority key identifier: C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
Certificate issuer: /CN=c2937b9461a3d266e935834e5047a182238362c8
Certificate serial: 0199FFFEAB5CC8AF215E09ED6F77DD1F7A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 05:01:43 +0000
Manifest this update: Mon 20 Oct 2025 05:01:43 +0000
Manifest next update: Tue 21 Oct 2025 05:01:43 +0000
Files and hashes: 1: kDT6d1olq2g9PhBud1lpevtgwMM.roa (hash: GVT4b+j1f9W7ipFuYf2UE8OPchdOvhrHWTWGtiol0Gg=)
2: wpN7lGGj0mbpNYNOUEehgiODYsg.crl (hash: OhXVcEzJmbOxwYp7QT8gN3yr/NFuWPm9bo+f0FmI5rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:ab:5c:c8:af:21:5e:09:ed:6f:77:dd:1f:7a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2937b9461a3d266e935834e5047a182238362c8
Validity
Not Before: Oct 20 05:01:43 2025 GMT
Not After : Oct 21 05:01:43 2025 GMT
Subject: CN=668e4d53bc2179d81ae2a208460166908770f9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:56:cf:35:e0:5c:b4:67:93:b2:9e:99:83:
99:ac:db:17:40:10:dd:17:7e:ef:a6:56:5e:2f:48:
ea:05:94:3e:81:81:9e:56:57:f6:47:fd:3c:b9:52:
2b:cc:51:23:90:b9:0a:8e:3e:6f:dc:25:f4:f9:53:
f7:fb:db:c5:13:21:cf:c7:e4:da:6a:53:9c:08:ad:
90:24:35:9a:7e:df:50:ad:27:55:95:53:2d:84:c3:
e8:4d:f8:79:22:d9:bf:6b:de:54:5b:c8:e9:02:34:
71:dd:ee:e1:8a:37:d1:91:d4:5e:52:c2:91:bb:b7:
c8:10:88:f2:4b:41:25:dd:cb:51:11:03:6b:5c:29:
77:fe:2e:6a:20:47:74:9d:8a:df:4d:09:86:20:ac:
2d:bb:63:3d:f9:f4:b8:61:02:c6:4e:30:1c:d1:47:
05:f3:73:46:e1:32:2a:08:0a:39:2f:08:20:c2:27:
9d:f7:a7:f7:26:21:db:17:20:0a:79:4c:61:51:ca:
8b:34:bf:9a:77:19:ad:74:fd:9f:f3:54:34:da:00:
29:ae:1f:72:23:69:b2:f6:b3:a3:98:c8:b8:cf:ca:
29:91:bc:ba:73:be:e0:86:2c:d0:cb:4b:26:30:8e:
89:6f:a2:ae:9f:90:5c:da:1a:6a:fb:d6:fb:27:1f:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8E:4D:53:BC:21:79:D8:1A:E2:A2:08:46:01:66:90:87:70:F9:BE
X509v3 Authority Key Identifier:
keyid:C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:87:3f:69:89:79:c6:b7:c7:db:63:c1:a5:36:55:de:2c:06:
8a:2b:33:b3:4d:c1:67:42:b3:b6:f8:9a:79:91:af:95:e3:8f:
02:07:46:f0:8b:80:4f:94:ca:bf:33:c1:83:22:38:0b:5b:63:
9a:0e:7b:73:7c:37:3e:3d:8d:09:d4:f9:a8:77:c4:b3:38:82:
88:24:3b:1b:35:bd:03:ca:02:75:8c:eb:b6:48:43:75:46:bb:
63:6f:ec:a8:d3:fa:71:9a:c2:e2:c8:1c:42:b2:28:2a:00:ff:
55:b1:e4:20:b2:01:06:dc:58:14:04:2e:b4:ba:c4:5f:5d:2f:
61:ce:e3:2c:c5:5b:8b:b6:07:dd:2a:ce:73:f0:78:bb:f0:c2:
66:16:dd:b9:41:9b:41:44:b2:26:37:3f:d6:7e:42:ce:9f:a5:
a1:2c:ec:58:ef:7b:3a:42:51:8c:1d:d1:8d:5c:62:28:92:75:
4f:31:0b:ae:2a:5f:85:fb:b1:05:65:cc:a9:8a:9e:0e:c0:49:
ec:08:02:00:7b:9a:9b:c5:c4:75:b7:68:2e:27:99:c5:91:e7:
26:c7:3e:e5:57:38:bd:2a:c1:aa:71:04:d1:2a:83:88:70:da:
5e:b4:fd:16:80:59:17:f6:cf:13:d0:d5:56:bd:dc:2a:26:8b:
26:af:cf:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//qtcyK8hXgntb3fdH3oxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTM3Yjk0NjFhM2QyNjZlOTM1ODM0ZTUwNDdhMTgyMjM4
MzYyYzgwHhcNMjUxMDIwMDUwMTQzWhcNMjUxMDIxMDUwMTQzWjAzMTEwLwYDVQQD
Eyg2NjhlNGQ1M2JjMjE3OWQ4MWFlMmEyMDg0NjAxNjY5MDg3NzBmOWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx1WzzXgXLRnk7KemYOZrNsXQBDd
F37vplZeL0jqBZQ+gYGeVlf2R/08uVIrzFEjkLkKjj5v3CX0+VP3+9vFEyHPx+Ta
alOcCK2QJDWaft9QrSdVlVMthMPoTfh5Itm/a95UW8jpAjRx3e7hijfRkdReUsKR
u7fIEIjyS0El3ctREQNrXCl3/i5qIEd0nYrfTQmGIKwtu2M9+fS4YQLGTjAc0UcF
83NG4TIqCAo5Lwggwied96f3JiHbFyAKeUxhUcqLNL+adxmtdP2f81Q02gAprh9y
I2my9rOjmMi4z8opkby6c77ghizQy0smMI6Jb6Kun5Bc2hpq+9b7Jx9YXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaOTVO8IXnYGuKiCEYBZpCHcPm+MB8GA1UdIwQY
MBaAFMKTe5Rho9Jm6TWDTlBHoYIjg2LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZGVkMmUtMzk3My00YmNmLTk1NjIt
Mzc3NDg4MWU3ZTFlLzEvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZGVkMmUtMzk3My00YmNmLTk1NjItMzc3NDg4MWU3ZTFl
LzEvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYc/aYl5
xrfH22PBpTZV3iwGiiszs03BZ0KztviaeZGvleOPAgdG8IuAT5TKvzPBgyI4C1tj
mg57c3w3Pj2NCdT5qHfEsziCiCQ7GzW9A8oCdYzrtkhDdUa7Y2/sqNP6cZrC4sgc
QrIoKgD/VbHkILIBBtxYFAQutLrEX10vYc7jLMVbi7YH3SrOc/B4u/DCZhbduUGb
QUSyJjc/1n5Czp+loSzsWO97OkJRjB3RjVxiKJJ1TzELripfhfuxBWXMqYqeDsBJ
7AgCAHuam8XEdbdoLieZxZHnJsc+5Vc4vSrBqnEE0SqDiHDaXrT9FoBZF/bPE9DV
Vr3cKiaLJq/Prw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:11:07 2025 by rpki-client