Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
File: WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json)
Hash identifier: Oc/ugubiH6HcFkw025DalBnU9iORX2ujJa+uS1IR5i4=
Subject key identifier: 0B:A4:81:48:EB:BD:37:92:17:89:2C:C6:F0:61:5C:C5:E5:21:E0:EE
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Certificate issuer: /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial: 019A4F9993137481B6F0A3807D2898388FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
Manifest number: 0627
Signing time: Tue 04 Nov 2025 16:00:55 +0000
Manifest this update: Tue 04 Nov 2025 16:00:55 +0000
Manifest next update: Wed 05 Nov 2025 16:00:55 +0000
Files and hashes: 1: 0RROrS7EP_5CwYaWtOibTCuabhc.roa (hash: uwLvq6OyphLPb9DhsW74rLK9fPzz8lUuatzazhiEDUA=)
2: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: XVEKRYd0+RFub52DXLX9z0AjBLqsV5IK0cNOddG4MQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:93:13:74:81:b6:f0:a3:80:7d:28:98:38:8f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Validity
Not Before: Nov 4 16:00:55 2025 GMT
Not After : Nov 5 16:00:55 2025 GMT
Subject: CN=0ba48148ebbd379217892cc6f0615cc5e521e0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:fd:6a:87:2f:ad:57:23:61:d5:73:ea:3c:
ea:fa:05:16:dd:b0:cf:64:ea:a7:4a:96:20:75:88:
70:e9:15:b0:fc:76:22:93:3d:bb:73:5a:24:e4:8e:
8c:9c:99:6d:c2:41:e5:f1:bd:dd:ff:56:2c:d5:0c:
27:ac:60:25:7b:f5:d9:e4:15:42:67:1f:e0:3e:87:
fe:3a:f9:60:1b:bf:80:45:eb:2c:c5:4c:9c:ed:aa:
09:84:a5:e5:52:61:e2:32:b4:14:a7:a5:5e:1b:c8:
c2:d6:77:2c:03:d2:1d:a8:a2:51:04:85:a3:7f:ef:
f3:10:49:80:c0:5f:a0:f5:6e:d5:8e:6d:20:36:61:
3e:71:ca:3e:e6:d0:37:40:55:5a:8b:7e:0c:11:84:
6e:49:7a:5f:7d:ed:d1:ef:e0:8d:ba:e3:4a:0e:60:
af:6d:79:cd:69:c4:e0:86:4f:a7:94:c0:81:d0:05:
b6:b7:52:96:4a:cb:e9:ca:9c:8b:2c:04:9b:3a:2e:
70:d5:45:0f:93:16:09:7e:3a:47:a0:1f:43:23:82:
13:fd:25:f4:27:ff:d8:89:e0:29:45:55:a9:8c:0e:
98:11:50:bd:23:1d:09:b8:0f:c0:37:a4:98:0a:a6:
ae:64:a3:db:bc:6e:65:5b:0a:4e:f9:eb:98:0a:be:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:81:48:EB:BD:37:92:17:89:2C:C6:F0:61:5C:C5:E5:21:E0:EE
X509v3 Authority Key Identifier:
keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:96:80:b1:1f:c3:b1:c8:1a:55:13:fd:14:30:a8:4c:68:b9:
c1:37:43:9b:97:5b:5f:48:7e:a6:ef:47:3f:85:2e:e1:01:d7:
c9:ab:a2:c3:f7:8a:d6:98:07:76:83:b3:2c:fa:7c:07:cc:82:
ae:a2:dd:ba:50:b9:2c:90:23:47:f6:cf:d8:60:d1:c4:84:19:
5a:03:16:af:38:5e:66:a5:77:91:f1:87:d6:cb:07:f4:f9:1c:
70:c6:a2:e2:ed:7a:dd:4b:a7:02:2b:1f:b6:f5:c3:de:af:06:
09:a8:fb:a5:1f:6c:f2:b0:b1:7f:75:2d:fc:b8:b0:53:b7:20:
c8:38:62:8f:60:61:77:60:10:54:e1:15:27:40:92:24:8a:e0:
17:d5:90:30:1f:4c:7f:39:60:b2:f9:44:fe:c2:02:57:ad:9f:
c2:be:97:54:1d:bf:57:8e:b6:84:80:f3:c0:e5:52:67:53:c8:
f7:5d:6c:26:45:6d:ed:77:12:26:6b:37:d0:a2:02:74:01:1c:
db:15:4e:29:f3:27:9c:29:5e:7f:eb:26:64:08:95:51:bc:b1:
7f:68:f4:fe:a9:ba:dc:ab:b7:05:28:f5:51:c2:a9:d0:fe:17:
6c:fb:47:42:e7:e1:67:70:a1:e9:ad:89:62:36:02:83:20:86:
67:98:a0:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmZMTdIG28KOAfSiYOI/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTNlMjZkNzFhYzViNmE2MDExNTZkOTBjZTBkY2NlYzU5
ODYyNDMwHhcNMjUxMTA0MTYwMDU1WhcNMjUxMTA1MTYwMDU1WjAzMTEwLwYDVQQD
EygwYmE0ODE0OGViYmQzNzkyMTc4OTJjYzZmMDYxNWNjNWU1MjFlMGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUj9aocvrVcjYdVz6jzq+gUW3bDP
ZOqnSpYgdYhw6RWw/HYikz27c1ok5I6MnJltwkHl8b3d/1Ys1QwnrGAle/XZ5BVC
Zx/gPof+OvlgG7+ARessxUyc7aoJhKXlUmHiMrQUp6VeG8jC1ncsA9IdqKJRBIWj
f+/zEEmAwF+g9W7Vjm0gNmE+cco+5tA3QFVai34MEYRuSXpffe3R7+CNuuNKDmCv
bXnNacTghk+nlMCB0AW2t1KWSsvpypyLLASbOi5w1UUPkxYJfjpHoB9DI4IT/SX0
J//YieApRVWpjA6YEVC9Ix0JuA/AN6SYCqauZKPbvG5lWwpO+euYCr4CMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAukgUjrvTeSF4ksxvBhXMXlIeDuMB8GA1UdIwQY
MBaAFFgT4m1xrFtqYBFW2Qzg3M7FmGJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3Nzgt
MDZkZjFkYzAzMzY3LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3NzgtMDZkZjFkYzAzMzY3
LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpaAsR/D
scgaVRP9FDCoTGi5wTdDm5dbX0h+pu9HP4Uu4QHXyauiw/eK1pgHdoOzLPp8B8yC
rqLdulC5LJAjR/bP2GDRxIQZWgMWrzheZqV3kfGH1ssH9PkccMai4u163UunAisf
tvXD3q8GCaj7pR9s8rCxf3Ut/LiwU7cgyDhij2Bhd2AQVOEVJ0CSJIrgF9WQMB9M
fzlgsvlE/sICV62fwr6XVB2/V462hIDzwOVSZ1PI911sJkVt7XcSJms30KICdAEc
2xVOKfMnnClef+smZAiVUbyxf2j0/qm63Ku3BSj1UcKp0P4XbPtHQufhZ3Ch6a2J
YjYCgyCGZ5ig3w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:43:09 2025 by rpki-client