Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
File: WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft (raw, json)
Hash identifier: DA+VOOokYkIR6vUligRXyzM4dMjohGGE64TG6WG1bqc=
Subject key identifier: BE:CD:2D:21:12:F6:21:66:1B:8E:12:73:86:6A:F0:11:3D:25:3E:86
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial: 019A4EF486C258D5A55529C6CCEB0A7475F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
Manifest number: 1487
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: 0G2sdhjp5lZnzYHlHNnybNAXWaA.roa (hash: uK859gUUbnU60gGhJvTBc709jYBTwYoz8yDVwe5ASzQ=)
2: WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl (hash: DW0ptprRQ/fD86ygLFw5f2K2Fr3ULGE8xcpNNrjr4Yg=)
3: YgQwuXy4fXHjt8yt23lzdNRUNeE.roa (hash: JYij/MqawhcXCZJhGzOCCeBPBmK0ZpHAFOooBbBrHTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:86:c2:58:d5:a5:55:29:c6:cc:eb:0a:74:75:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=becd2d2112f621661b8e1273866af0113d253e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:96:dd:c1:c8:76:d6:5c:fd:b5:f1:dd:8e:
11:fa:7e:08:cc:da:c9:7e:e9:02:5a:6f:50:ba:b5:
fa:1e:7c:aa:a5:8d:48:a1:d1:7e:f5:5b:1a:3e:bd:
13:ec:a8:33:cf:56:ef:7b:4b:11:d7:25:24:7a:56:
f1:03:c8:53:35:99:bf:49:08:b1:80:c2:0d:40:93:
d0:e7:b5:78:b2:36:4c:4a:e2:c8:6d:45:8e:bb:f4:
0e:f4:26:52:9f:4e:7b:fb:1a:2e:dc:ca:b2:85:72:
07:eb:fd:c9:08:0e:fd:23:ed:d9:00:54:69:78:7f:
f3:ec:a3:c5:a5:61:61:a1:25:8b:a1:c6:7d:2a:57:
88:58:c3:99:c5:90:96:9f:57:0c:b3:9e:1c:84:f5:
c3:71:c9:1c:88:38:fa:9f:ad:76:59:97:89:6d:2a:
46:c0:7b:73:e2:40:93:a8:2d:60:72:d5:be:7b:e5:
1c:7f:f9:17:7d:17:b4:d4:f0:fa:4b:df:49:43:66:
e5:ec:42:56:40:a3:db:67:63:b4:9f:35:d8:54:43:
65:0b:d0:2e:53:06:cc:29:be:7a:3a:35:70:c5:12:
e9:2d:ba:16:a7:d6:0e:61:3f:2e:bd:b2:3e:72:27:
ae:27:3f:72:9a:02:b8:50:b7:d1:39:c5:ff:25:3a:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CD:2D:21:12:F6:21:66:1B:8E:12:73:86:6A:F0:11:3D:25:3E:86
X509v3 Authority Key Identifier:
keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d4:4b:64:61:8c:93:c5:92:60:b0:e8:84:47:ee:8b:49:31:
43:71:d3:66:b0:5a:fd:46:a5:b3:5b:09:09:4f:83:87:ab:88:
6c:96:3c:ad:0c:8c:f1:21:cc:6c:69:d4:2c:17:06:b6:e6:2f:
5a:5f:2c:d1:9e:c5:64:2f:e0:b5:e1:c9:56:ff:e0:59:79:ef:
de:4b:c8:23:26:22:db:c2:de:a3:3f:d8:9d:74:4a:e2:67:58:
1c:37:f6:f1:34:36:7a:68:f7:f2:bd:41:1b:aa:34:3e:3a:f1:
99:f3:53:5e:d1:6c:4e:89:55:9e:ad:11:29:e1:31:fa:d2:ea:
29:b5:f7:23:ac:d7:7b:b2:30:10:ab:cb:d6:d3:5a:a4:ae:b6:
17:d0:3f:b7:cb:92:d7:8d:b5:aa:bb:99:ff:ed:02:95:9e:ba:
91:2f:46:bb:39:6e:31:6c:83:17:32:0e:5e:ac:61:1c:cf:5d:
ae:75:d2:39:98:8f:72:31:bf:da:38:94:e1:91:89:0a:07:82:
08:7d:9e:9a:ff:bb:be:fe:b4:58:5a:47:48:4d:ac:d6:d6:65:
9f:f9:3e:e1:0a:d2:03:b9:ac:45:26:af:87:b4:fb:fb:2f:39:
4e:18:78:80:52:96:53:f5:d6:2d:b5:5e:30:4d:74:ba:5a:75:
55:52:38:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9IbCWNWlVSnGzOsKdHXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OTBjMTU1Mzc2MmFjOWFmNTdkZjliNThkOWRjNTBhZjQw
OWM1NjYwHhcNMjUxMTA0MTMwMDM5WhcNMjUxMTA1MTMwMDM5WjAzMTEwLwYDVQQD
EyhiZWNkMmQyMTEyZjYyMTY2MWI4ZTEyNzM4NjZhZjAxMTNkMjUzZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneqW3cHIdtZc/bXx3Y4R+n4IzNrJ
fukCWm9QurX6HnyqpY1IodF+9VsaPr0T7Kgzz1bve0sR1yUkelbxA8hTNZm/SQix
gMINQJPQ57V4sjZMSuLIbUWOu/QO9CZSn057+xou3MqyhXIH6/3JCA79I+3ZAFRp
eH/z7KPFpWFhoSWLocZ9KleIWMOZxZCWn1cMs54chPXDcckciDj6n612WZeJbSpG
wHtz4kCTqC1gctW+e+Ucf/kXfRe01PD6S99JQ2bl7EJWQKPbZ2O0nzXYVENlC9Au
UwbMKb56OjVwxRLpLboWp9YOYT8uvbI+cieuJz9ymgK4ULfROcX/JTrEBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7NLSES9iFmG44Sc4Zq8BE9JT6GMB8GA1UdIwQY
MBaAFFmQwVU3Yqya9X35tY2dxQr0CcVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1pEQlZUZGlySnIxZmZtMWpaM0ZDdlFKeFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hOGY4ZTEtZGNlMi00N2VmLTgyNGUt
YmVmMTAzNGVkYmU1LzEvV1pEQlZUZGlySnIxZmZtMWpaM0ZDdlFKeFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hOGY4ZTEtZGNlMi00N2VmLTgyNGUtYmVmMTAzNGVkYmU1
LzEvV1pEQlZUZGlySnIxZmZtMWpaM0ZDdlFKeFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9RLZGGM
k8WSYLDohEfui0kxQ3HTZrBa/Uals1sJCU+Dh6uIbJY8rQyM8SHMbGnULBcGtuYv
Wl8s0Z7FZC/gteHJVv/gWXnv3kvIIyYi28Leoz/YnXRK4mdYHDf28TQ2emj38r1B
G6o0PjrxmfNTXtFsTolVnq0RKeEx+tLqKbX3I6zXe7IwEKvL1tNapK62F9A/t8uS
1421qruZ/+0ClZ66kS9GuzluMWyDFzIOXqxhHM9drnXSOZiPcjG/2jiU4ZGJCgeC
CH2emv+7vv60WFpHSE2s1tZln/k+4QrSA7msRSavh7T7+y85Thh4gFKWU/XWLbVe
ME10ulp1VVI4Cg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:00 2025 by rpki-client