Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier: vpBZQiB/sb7blulWRDTLCtBGguiFUn3JxxRM9CJAaII=
Subject key identifier: BB:A6:87:50:1A:C9:64:C3:37:B8:D3:17:96:1E:93:6D:A6:34:1C:49
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 019A4F9917B0084095414836958D1CCABAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number: 118E
Signing time: Tue 04 Nov 2025 16:00:24 +0000
Manifest this update: Tue 04 Nov 2025 16:00:24 +0000
Manifest next update: Wed 05 Nov 2025 16:00:24 +0000
Files and hashes: 1: 4jM0JVjRqyqNZv5MXvbIPvqtPak.roa (hash: esLYhdOdh3leFG/PbeUzrVs3Llk7R0kG4kYUF7ITJVs=)
2: Fk-RTc_x_EZ5p-h1OUyJsVVtDV0.roa (hash: oolZPOnT9pMIdCNLzjvt7CZ7qXkkFGvNdRAoF9kj0Tw=)
3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: LuNS+ufqfhDKF7zhhKxyOPgiDWpXSgUIuc6RdrIQCBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:17:b0:08:40:95:41:48:36:95:8d:1c:ca:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Nov 4 16:00:24 2025 GMT
Not After : Nov 5 16:00:24 2025 GMT
Subject: CN=bba687501ac964c337b8d317961e936da6341c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:ea:03:7e:83:d5:b3:3a:1e:ad:a7:72:c8:
e9:8e:4c:7e:9d:86:62:35:f6:f9:86:5f:7b:68:47:
b3:74:18:47:c0:c3:59:a4:aa:31:5a:56:83:5b:ae:
91:36:c7:83:20:6a:a4:b4:24:b6:b9:03:07:8b:2b:
a7:28:cb:a2:61:a6:46:3e:e0:d0:80:9b:86:18:33:
08:c5:62:67:8e:35:b2:57:46:85:50:0c:33:13:9d:
e7:17:08:84:6b:ec:a4:64:da:26:b9:b5:aa:13:f6:
e2:83:ac:c4:8a:5e:71:59:66:d8:6f:9f:5c:99:23:
33:d1:c6:08:5b:30:fa:1c:c5:31:72:49:0e:e8:24:
ea:e2:5a:fb:7b:dc:d2:8e:81:e7:23:56:90:25:ea:
3c:0d:50:b5:88:19:3d:88:48:24:38:dc:df:85:74:
16:5f:c6:a4:76:3b:f3:34:3c:12:32:fe:16:90:43:
f7:d9:3a:cb:b3:1a:60:ed:1f:99:95:ee:0e:8d:78:
57:bc:05:96:b3:cb:5f:04:97:a2:85:48:80:c0:51:
12:96:2c:88:33:98:42:2b:2c:2c:b9:ec:5b:25:5d:
d5:34:8c:62:99:ba:27:38:9e:99:c7:97:4b:15:25:
f2:cf:c1:e8:69:96:6e:82:cf:62:dc:ea:8e:c5:6e:
e3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A6:87:50:1A:C9:64:C3:37:B8:D3:17:96:1E:93:6D:A6:34:1C:49
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:87:98:32:dd:76:32:fe:5a:bf:58:d4:88:55:09:70:28:3a:
a0:05:7d:9b:11:d6:f7:30:e6:75:65:46:81:7a:13:16:2e:9f:
57:9c:c2:de:8c:f4:9e:9d:32:6d:53:df:25:e6:0b:43:8d:35:
c9:84:2d:33:53:74:1e:af:32:8c:42:fe:21:77:cd:cd:4e:bc:
14:34:13:42:ac:5e:58:a9:d3:6d:0a:77:8a:1f:bb:b0:1b:a1:
54:17:5a:c6:de:4f:f4:b1:61:28:0a:f8:13:f8:23:7b:f2:9d:
85:92:d3:ee:17:3e:b5:c6:03:16:a4:f6:21:e2:42:f6:e8:35:
d1:7d:6b:08:cb:e4:02:6c:43:8f:54:ea:64:d4:b5:96:af:57:
5e:4a:7f:d5:39:43:12:0b:41:a0:a5:8f:32:f8:b9:88:89:b6:
a6:fb:a5:ce:49:78:09:5f:b4:28:96:49:c5:ec:ab:ec:c4:2b:
37:16:ea:15:61:ef:8e:66:43:de:ec:3c:bd:88:d9:c1:f0:ad:
87:5a:c6:41:ae:01:dd:65:7e:86:24:20:0b:c6:33:20:43:97:
6b:35:4a:32:84:0f:f3:4a:b2:10:7f:11:31:85:62:d7:65:c8:
57:97:8d:3b:06:76:b5:2b:5f:e2:7b:f2:de:d1:e6:4d:ea:6c:
22:6d:d6:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmRewCECVQUg2lY0cyrrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm
NmM5YzUwHhcNMjUxMTA0MTYwMDI0WhcNMjUxMTA1MTYwMDI0WjAzMTEwLwYDVQQD
EyhiYmE2ODc1MDFhYzk2NGMzMzdiOGQzMTc5NjFlOTM2ZGE2MzQxYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKPqA36D1bM6Hq2ncsjpjkx+nYZi
Nfb5hl97aEezdBhHwMNZpKoxWlaDW66RNseDIGqktCS2uQMHiyunKMuiYaZGPuDQ
gJuGGDMIxWJnjjWyV0aFUAwzE53nFwiEa+ykZNomubWqE/big6zEil5xWWbYb59c
mSMz0cYIWzD6HMUxckkO6CTq4lr7e9zSjoHnI1aQJeo8DVC1iBk9iEgkONzfhXQW
X8akdjvzNDwSMv4WkEP32TrLsxpg7R+Zle4OjXhXvAWWs8tfBJeihUiAwFESliyI
M5hCKywsuexbJV3VNIximbonOJ6Zx5dLFSXyz8HoaZZugs9i3OqOxW7jrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLumh1AayWTDN7jTF5Yek22mNBxJMB8GA1UdIwQY
MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt
NTY2MjhhNDZkZjQwLzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw
LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoeYMt12
Mv5av1jUiFUJcCg6oAV9mxHW9zDmdWVGgXoTFi6fV5zC3oz0np0ybVPfJeYLQ401
yYQtM1N0Hq8yjEL+IXfNzU68FDQTQqxeWKnTbQp3ih+7sBuhVBdaxt5P9LFhKAr4
E/gje/KdhZLT7hc+tcYDFqT2IeJC9ug10X1rCMvkAmxDj1TqZNS1lq9XXkp/1TlD
EgtBoKWPMvi5iIm2pvulzkl4CV+0KJZJxeyr7MQrNxbqFWHvjmZD3uw8vYjZwfCt
h1rGQa4B3WV+hiQgC8YzIEOXazVKMoQP80qyEH8RMYVi12XIV5eNOwZ2tStf4nvy
3tHmTepsIm3Wkg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:52 2025 by rpki-client