Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier: 89WH4k85MXwz9WBvj/pZCV+MTsqQVPQs8bEeD0Chaxc=
Subject key identifier: D3:2A:F5:9E:41:D4:B9:6E:2E:DD:3A:FD:6B:96:B0:0E:F5:1C:A1:50
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial: 0199FB7CE5926DF8AED93D90E1E71632EE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number: 062B
Signing time: Sun 19 Oct 2025 08:01:30 +0000
Manifest this update: Sun 19 Oct 2025 08:01:30 +0000
Manifest next update: Mon 20 Oct 2025 08:01:30 +0000
Files and hashes: 1: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (hash: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=)
2: nPjV6lYXInJfXl86tbhvs9WXUa4.roa (hash: asKBhySwit3PBxbedsUA8HTRnekoYKrc5tk7Wn5QFGc=)
3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: A6bP+Z9IZCdw7dN4NMKLu/VZeVaAQTyy3dilGKL7Ji8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e5:92:6d:f8:ae:d9:3d:90:e1:e7:16:32:ee:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Validity
Not Before: Oct 19 08:01:30 2025 GMT
Not After : Oct 20 08:01:30 2025 GMT
Subject: CN=d32af59e41d4b96e2edd3afd6b96b00ef51ca150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:41:b1:0f:13:af:78:70:9c:59:21:dc:29:
a1:ee:d1:32:0a:74:99:36:11:24:28:a5:d3:44:ff:
a7:98:c3:7a:fe:d5:37:41:47:81:53:64:c6:24:ed:
b6:41:d2:e1:9f:68:ef:d2:97:ed:f4:f6:c8:53:f6:
93:d3:4b:6f:39:75:84:f6:39:8d:74:3b:54:00:9a:
4e:5b:ff:6f:84:3c:63:d7:33:76:44:79:4f:0d:73:
ac:21:25:4f:c3:f0:ad:73:d2:6f:58:f8:16:15:85:
0d:76:e1:76:8d:17:0f:2d:33:b4:79:56:97:f1:d6:
0a:f1:22:c6:c3:96:13:3b:24:3f:e8:f4:49:db:c6:
75:3c:63:d0:3f:cd:d9:18:a1:3a:2b:a4:0e:71:e3:
25:cc:3c:51:76:83:38:e1:42:b4:65:fe:40:92:83:
7f:6e:29:d9:66:8b:8c:6d:33:23:aa:7e:42:e0:94:
b8:c0:cf:89:84:47:03:6b:89:d4:fb:c8:84:ff:91:
b7:57:63:38:40:b4:c2:20:8e:4a:fe:ab:96:70:0a:
1f:1e:a7:e1:1f:81:c6:47:67:0e:02:8d:fa:b9:3b:
02:4c:72:37:5b:ba:5c:f2:2e:8f:b7:7e:88:da:a6:
44:78:36:40:31:51:62:24:ba:65:bb:b2:e9:17:86:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2A:F5:9E:41:D4:B9:6E:2E:DD:3A:FD:6B:96:B0:0E:F5:1C:A1:50
X509v3 Authority Key Identifier:
keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:58:a8:d2:7d:15:95:c7:42:75:dd:e2:ed:b7:32:77:91:5c:
bb:00:4e:be:84:ab:be:bd:79:2e:15:72:bc:ae:2e:1f:d3:86:
8e:92:d3:3c:fe:c5:5f:30:e3:e7:55:8c:78:18:e0:33:2d:47:
df:da:d2:1f:b6:8d:7a:62:ee:22:88:58:92:4d:81:23:cd:df:
b6:b9:28:da:8e:31:35:fd:6d:10:d9:c7:50:73:04:93:40:a8:
f5:85:87:e0:e0:1b:b1:9c:25:ce:4b:99:ec:ee:f8:2c:e7:31:
6d:a6:ad:36:0a:f0:56:22:ad:19:4d:77:2b:cf:65:af:69:9b:
3c:5e:74:d0:d8:c2:35:70:64:29:c7:6d:3b:06:2d:89:fa:39:
8c:b0:81:97:96:af:cc:1f:54:5d:58:16:c8:60:d3:d5:19:04:
a3:90:44:da:b2:a4:c8:d8:89:e3:2a:d7:29:53:86:bd:af:17:
60:e5:34:2d:52:0e:77:d4:e1:ba:8a:2c:26:9c:fc:2e:a5:0d:
3d:08:22:96:51:9b:26:49:1c:0c:31:10:f4:8e:14:ce:1b:bc:
fd:27:08:3a:6e:c1:32:98:ac:3b:87:be:01:1c:a2:0c:4a:f1:
ae:48:9b:3f:aa:bc:cd:00:d8:4a:99:a5:8b:87:35:d8:2f:09:
d4:96:50:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fOWSbfiu2T2Q4ecWMu6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjRiNjllZDRhMjNiN2IzZTA2NzRhM2Y5OTQ2MDFkNzNi
N2JhZmYwHhcNMjUxMDE5MDgwMTMwWhcNMjUxMDIwMDgwMTMwWjAzMTEwLwYDVQQD
EyhkMzJhZjU5ZTQxZDRiOTZlMmVkZDNhZmQ2Yjk2YjAwZWY1MWNhMTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqixBsQ8Tr3hwnFkh3Cmh7tEyCnSZ
NhEkKKXTRP+nmMN6/tU3QUeBU2TGJO22QdLhn2jv0pft9PbIU/aT00tvOXWE9jmN
dDtUAJpOW/9vhDxj1zN2RHlPDXOsISVPw/Ctc9JvWPgWFYUNduF2jRcPLTO0eVaX
8dYK8SLGw5YTOyQ/6PRJ28Z1PGPQP83ZGKE6K6QOceMlzDxRdoM44UK0Zf5AkoN/
binZZouMbTMjqn5C4JS4wM+JhEcDa4nU+8iE/5G3V2M4QLTCII5K/quWcAofHqfh
H4HGR2cOAo36uTsCTHI3W7pc8i6Pt36I2qZEeDZAMVFiJLplu7LpF4Z8dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMq9Z5B1LluLt06/WuWsA71HKFQMB8GA1UdIwQY
MBaAFMIktp7Uojt7PgZ0o/mUYB1zt7r/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgt
MTViOTQ0NTc3Yzg2LzEvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgtMTViOTQ0NTc3Yzg2
LzEvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlio0n0V
lcdCdd3i7bcyd5FcuwBOvoSrvr15LhVyvK4uH9OGjpLTPP7FXzDj51WMeBjgMy1H
39rSH7aNemLuIohYkk2BI83ftrko2o4xNf1tENnHUHMEk0Co9YWH4OAbsZwlzkuZ
7O74LOcxbaatNgrwViKtGU13K89lr2mbPF500NjCNXBkKcdtOwYtifo5jLCBl5av
zB9UXVgWyGDT1RkEo5BE2rKkyNiJ4yrXKVOGva8XYOU0LVIOd9ThuoosJpz8LqUN
PQgillGbJkkcDDEQ9I4Uzhu8/ScIOm7BMpisO4e+ARyiDErxrkibP6q8zQDYSpml
i4c12C8J1JZQ9Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:32 2025 by rpki-client