Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
File: WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft (raw, json)
Hash identifier: GO52oNX4kEOiBIuVa4ozr4L2hjrr2aSnyBcoMs4GlCc=
Subject key identifier: 1A:BD:3A:82:DA:41:A3:2A:C1:95:A7:E4:4C:8D:BF:58:8D:78:11:1F
Authority key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
Certificate issuer: /CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Certificate serial: 019A552D2515E1CC00F7634686317188CD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
Manifest number: 0CF0
Signing time: Wed 05 Nov 2025 18:00:12 +0000
Manifest this update: Wed 05 Nov 2025 18:00:12 +0000
Manifest next update: Thu 06 Nov 2025 18:00:12 +0000
Files and hashes: 1: D1M0sjr1PH8Yys4-1MS43KjOpQM.roa (hash: 2Q7ZkQbIGE2fBfzNEEGOF12hD07hA4SM+mHj72HM/gU=)
2: WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl (hash: C1pBOh+GUr11BxycHclBnHXNN8c0FzisY9KlIAo/GfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:25:15:e1:cc:00:f7:63:46:86:31:71:88:cd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Validity
Not Before: Nov 5 18:00:12 2025 GMT
Not After : Nov 6 18:00:12 2025 GMT
Subject: CN=1abd3a82da41a32ac195a7e44c8dbf588d78111f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b6:fa:e9:79:aa:84:a8:49:26:93:2a:ac:97:
be:26:e5:6e:46:94:d4:a6:ee:56:22:70:8a:5a:91:
7d:19:34:cd:74:c5:dd:89:a0:53:af:91:42:44:45:
aa:62:58:a2:9f:42:d9:23:a5:0e:ac:91:7b:fa:b3:
58:2e:ae:61:5c:77:37:43:f0:24:51:06:e6:9d:03:
74:8e:8f:13:62:d0:74:a9:aa:77:cb:bb:7f:69:5a:
a0:23:a4:47:f7:0c:66:41:be:5b:4b:c3:4b:07:ce:
f5:78:23:22:81:39:fb:56:da:e0:23:00:c0:2b:a5:
28:c4:58:13:38:48:1a:a2:6a:71:2a:99:f5:b9:9c:
40:36:a1:fd:92:ca:79:f6:35:b4:27:92:07:46:fc:
0c:30:3d:29:0f:13:00:a5:31:a6:e6:eb:2d:e7:83:
52:db:eb:dc:94:9a:90:be:cf:0d:85:f5:61:78:6a:
eb:da:e8:08:4a:db:46:f4:87:12:ff:b7:ba:e6:36:
49:3b:ab:a8:c4:4c:90:9a:98:83:6d:f9:26:67:17:
6b:2b:d5:4f:09:5c:d6:37:32:03:86:90:0b:37:7c:
ea:3e:0a:15:09:f8:6a:de:9f:4e:9d:67:23:15:ec:
86:f2:6e:b5:5f:99:98:bd:b0:49:95:ee:cc:35:f2:
8e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BD:3A:82:DA:41:A3:2A:C1:95:A7:E4:4C:8D:BF:58:8D:78:11:1F
X509v3 Authority Key Identifier:
keyid:58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c1:8e:67:de:e6:e4:f2:f0:a9:1f:f8:86:36:61:51:d2:3b:
f2:30:40:ca:4f:1f:a3:a8:cd:9e:43:7f:44:3a:2d:19:aa:b5:
b3:cb:20:cb:b5:f0:71:b6:8a:fc:01:5a:51:a7:93:98:69:86:
12:20:27:e9:b3:1f:0f:65:30:45:af:e0:5f:76:1d:98:53:b0:
60:19:1a:5d:bc:b6:02:67:0a:68:f9:37:ed:1b:40:09:79:b8:
40:4e:54:b8:60:71:2f:b6:85:ed:9e:64:4e:ee:f5:ff:ce:08:
cf:bc:fc:0c:b0:37:86:05:99:ec:93:e3:18:7d:b6:01:35:82:
67:83:66:ed:9b:98:4d:d1:61:cb:bf:aa:79:dd:0e:ae:4e:93:
a9:43:11:d3:0a:4f:89:7c:9b:08:c1:ec:90:2b:3c:c5:74:9c:
6b:37:da:f6:2b:6e:9d:7a:a9:03:21:27:cb:14:8a:ce:67:7e:
5e:6d:63:90:d5:b3:b0:d2:19:dd:ad:da:58:17:52:83:37:9a:
bf:07:42:eb:b3:41:58:54:11:ee:fb:a6:6f:51:02:4a:99:e1:
65:2a:ac:5c:2d:b5:4f:c3:7f:58:09:bf:a1:de:51:28:34:93:
cc:1f:48:07:5a:15:d0:0d:73:15:92:14:7e:91:ed:be:2f:f1:
66:f3:01:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVLSUV4cwA92NGhjFxiM1zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2VlM2MyZWM0YTE5MDI1YzAzOTJhZDFlZTZhNDY0MWJj
ZGQwYzgwHhcNMjUxMTA1MTgwMDEyWhcNMjUxMTA2MTgwMDEyWjAzMTEwLwYDVQQD
EygxYWJkM2E4MmRhNDFhMzJhYzE5NWE3ZTQ0YzhkYmY1ODhkNzgxMTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rb66XmqhKhJJpMqrJe+JuVuRpTU
pu5WInCKWpF9GTTNdMXdiaBTr5FCREWqYliin0LZI6UOrJF7+rNYLq5hXHc3Q/Ak
UQbmnQN0jo8TYtB0qap3y7t/aVqgI6RH9wxmQb5bS8NLB871eCMigTn7VtrgIwDA
K6UoxFgTOEgaompxKpn1uZxANqH9ksp59jW0J5IHRvwMMD0pDxMApTGm5ust54NS
2+vclJqQvs8NhfVheGrr2ugISttG9IcS/7e65jZJO6uoxEyQmpiDbfkmZxdrK9VP
CVzWNzIDhpALN3zqPgoVCfhq3p9OnWcjFeyG8m61X5mYvbBJle7MNfKOxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBq9OoLaQaMqwZWn5EyNv1iNeBEfMB8GA1UdIwQY
MBaAFFg+48LsShkCXAOSrR7mpGQbzdDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNzNiMGItN2MwYy00NDhhLThiY2Mt
MzVjYzIxNGRlYTgxLzEvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNzNiMGItN2MwYy00NDhhLThiY2MtMzVjYzIxNGRlYTgx
LzEvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcGOZ97m
5PLwqR/4hjZhUdI78jBAyk8fo6jNnkN/RDotGaq1s8sgy7XwcbaK/AFaUaeTmGmG
EiAn6bMfD2UwRa/gX3YdmFOwYBkaXby2AmcKaPk37RtACXm4QE5UuGBxL7aF7Z5k
Tu71/84Iz7z8DLA3hgWZ7JPjGH22ATWCZ4Nm7ZuYTdFhy7+qed0Ork6TqUMR0wpP
iXybCMHskCs8xXScazfa9itunXqpAyEnyxSKzmd+Xm1jkNWzsNIZ3a3aWBdSgzea
vwdC67NBWFQR7vumb1ECSpnhZSqsXC21T8N/WAm/od5RKDSTzB9IB1oV0A1zFZIU
fpHtvi/xZvMBzw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:49 2025 by rpki-client