Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File: wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier: zZSeWMKEQyu2XyKsJnRBqALE1zKyql4LpSoCWvTH18E=
Subject key identifier: CE:2F:90:24:A4:07:83:21:55:83:EE:2A:7A:33:F5:81:1C:7B:A2:39
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer: /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial: 019A4E18D701D77AA066C20630DF3FAB46EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number: 06DD
Signing time: Tue 04 Nov 2025 09:00:41 +0000
Manifest this update: Tue 04 Nov 2025 09:00:41 +0000
Manifest next update: Wed 05 Nov 2025 09:00:41 +0000
Files and hashes: 1: RSjnM6zCvAOEItwpVtC0m6KUGtw.roa (hash: 63Mz4fOoq8b9mEgPpq4X77Rjr3X+uaQbsoHZFlRZzdY=)
2: b800M8UQE_ndSkfHQhV3cPUcjPM.roa (hash: MbkUQn3Ix8UmF2oKyZjDZOrZVxkNdqgLjfIY0GRvAPU=)
3: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: o9eQxxrcTWrRqh1iV86eiYUHhPEoPPfp5rtLlkxlZzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d7:01:d7:7a:a0:66:c2:06:30:df:3f:ab:46:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
Validity
Not Before: Nov 4 09:00:41 2025 GMT
Not After : Nov 5 09:00:41 2025 GMT
Subject: CN=ce2f9024a40783215583ee2a7a33f5811c7ba239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9a:99:b7:0b:fe:5b:ea:4e:b5:2b:e1:1a:fe:
a4:b1:85:be:d7:d8:12:8e:38:a8:11:b5:41:e8:47:
01:0a:e0:73:eb:d8:41:b7:6a:fa:8d:5b:ba:6c:da:
17:e3:ac:75:a3:d5:68:c9:8b:3e:6f:e0:95:bf:3c:
87:21:d9:46:77:7a:7e:9f:79:68:cb:24:56:b3:f7:
19:ab:22:81:08:3f:4b:52:bd:f9:de:41:15:e2:e2:
06:74:44:04:e4:35:e5:a1:18:32:66:90:dd:d5:68:
2e:76:a3:67:66:1e:2b:5f:4b:0c:03:08:8f:a8:0f:
f5:95:09:66:c0:0d:2a:e2:47:e7:9c:57:46:85:01:
43:9e:6a:75:23:96:b9:81:ed:c1:af:bc:45:d3:d2:
68:24:dd:43:ac:e0:71:2d:59:7f:98:d4:e6:16:c2:
4e:d6:17:76:b9:a4:8b:db:20:bd:1f:21:ed:c7:a9:
37:92:c8:86:9b:23:5d:18:f0:79:6e:5e:04:62:60:
a7:79:23:df:e6:2f:0b:5c:04:e0:3d:cf:f6:72:0f:
62:93:6a:92:9d:25:bf:9b:d4:7e:1a:fc:e8:2e:78:
6f:7a:57:c5:35:43:d8:14:63:24:f9:71:11:de:92:
06:05:46:07:61:39:ac:87:d0:61:5b:34:bd:08:e6:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2F:90:24:A4:07:83:21:55:83:EE:2A:7A:33:F5:81:1C:7B:A2:39
X509v3 Authority Key Identifier:
keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b0:3a:73:85:97:78:3d:a6:bb:4d:78:fa:62:0f:fb:81:fe:
06:3e:2b:73:3c:c0:79:29:2a:bc:c0:a1:75:0c:53:d0:98:6c:
e9:2b:5c:8c:3f:95:1c:35:08:31:7c:2c:b1:1e:43:8e:0f:37:
c1:73:15:ba:ba:c0:cb:51:30:e1:9a:9c:9f:11:73:83:a4:08:
8b:83:41:11:09:bf:c5:7e:c3:91:70:88:9d:f2:72:c3:c0:da:
06:94:cf:fb:fa:8d:3c:31:6f:4c:bc:24:fe:b4:ea:7e:91:4f:
de:29:1e:d2:63:d2:3c:89:b3:34:bc:95:75:f5:e0:db:74:1a:
e8:94:38:f4:32:b8:64:80:5b:45:79:37:8c:fb:d1:6d:52:56:
ac:53:80:12:3b:97:4d:7b:7e:0d:0b:46:53:4c:d5:5d:18:1d:
d3:c8:ac:45:d2:4f:b4:46:0a:3a:5c:bb:c4:bd:a3:95:59:17:
a1:56:69:7d:e9:02:1c:5f:e9:45:b8:84:1b:ad:31:d5:5e:5f:
58:d0:29:8a:a2:cf:e1:1b:f0:16:7b:e9:e2:f5:7a:b7:d4:48:
6e:22:d5:c5:9d:7a:ad:01:5d:04:4f:2f:dd:2d:71:f4:e9:d1:
21:68:e3:9a:48:2d:2b:e0:19:4f:03:17:8e:b4:11:41:d8:2c:
97:e9:85:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGNcB13qgZsIGMN8/q0brMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTE5MzM0YWQyYWQ1MzYxNmMzNGZlY2U5NmNlMjkyMzBm
ODYzNDkwHhcNMjUxMTA0MDkwMDQxWhcNMjUxMTA1MDkwMDQxWjAzMTEwLwYDVQQD
EyhjZTJmOTAyNGE0MDc4MzIxNTU4M2VlMmE3YTMzZjU4MTFjN2JhMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pqZtwv+W+pOtSvhGv6ksYW+19gS
jjioEbVB6EcBCuBz69hBt2r6jVu6bNoX46x1o9VoyYs+b+CVvzyHIdlGd3p+n3lo
yyRWs/cZqyKBCD9LUr353kEV4uIGdEQE5DXloRgyZpDd1WgudqNnZh4rX0sMAwiP
qA/1lQlmwA0q4kfnnFdGhQFDnmp1I5a5ge3Br7xF09JoJN1DrOBxLVl/mNTmFsJO
1hd2uaSL2yC9HyHtx6k3ksiGmyNdGPB5bl4EYmCneSPf5i8LXATgPc/2cg9ik2qS
nSW/m9R+GvzoLnhvelfFNUPYFGMk+XER3pIGBUYHYTmsh9BhWzS9COZ2IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4vkCSkB4MhVYPuKnoz9YEce6I5MB8GA1UdIwQY
MBaAFMKRkzStKtU2FsNP7Ols4pIw+GNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDIt
MTY1MzE4OGQ4MTI2LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDItMTY1MzE4OGQ4MTI2
LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbA6c4WX
eD2mu014+mIP+4H+Bj4rczzAeSkqvMChdQxT0Jhs6StcjD+VHDUIMXwssR5Djg83
wXMVurrAy1Ew4ZqcnxFzg6QIi4NBEQm/xX7DkXCInfJyw8DaBpTP+/qNPDFvTLwk
/rTqfpFP3ike0mPSPImzNLyVdfXg23Qa6JQ49DK4ZIBbRXk3jPvRbVJWrFOAEjuX
TXt+DQtGU0zVXRgd08isRdJPtEYKOly7xL2jlVkXoVZpfekCHF/pRbiEG60x1V5f
WNApiqLP4RvwFnvp4vV6t9RIbiLVxZ16rQFdBE8v3S1x9OnRIWjjmkgtK+AZTwMX
jrQRQdgsl+mFvg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:34 2025 by rpki-client