Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
File: WAFhHoC63kAvvWDnhvNPtxctIlo.mft (raw, json)
Hash identifier: vlRV9ld6QgNCvBfVyjjGnYEn1Mk5OVpZ+t5JbqO4+Uc=
Subject key identifier: 15:E3:23:35:CC:0A:D9:34:A4:F6:2F:17:01:C5:50:B6:54:F7:B2:D4
Authority key identifier: 58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
Certificate issuer: /CN=5801611e80bade402fbd60e786f34fb7172d225a
Certificate serial: 019A4FCFD0524E1052E0D10F365F79E91962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
Manifest number: 146D
Signing time: Tue 04 Nov 2025 17:00:10 +0000
Manifest this update: Tue 04 Nov 2025 17:00:10 +0000
Manifest next update: Wed 05 Nov 2025 17:00:10 +0000
Files and hashes: 1: WAFhHoC63kAvvWDnhvNPtxctIlo.crl (hash: 5MlJ3s/6uUfZ9eOtjVKUZuePDaLQ3dDN+2M9sk9N2IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d0:52:4e:10:52:e0:d1:0f:36:5f:79:e9:19:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5801611e80bade402fbd60e786f34fb7172d225a
Validity
Not Before: Nov 4 17:00:10 2025 GMT
Not After : Nov 5 17:00:10 2025 GMT
Subject: CN=15e32335cc0ad934a4f62f1701c550b654f7b2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:cc:cc:19:66:c5:7b:ea:be:2b:27:b5:11:
e0:2b:ac:f9:55:ab:68:39:dc:29:41:5c:c6:d0:b5:
c4:07:30:6b:91:ce:60:78:ac:2a:c2:3a:1e:f4:f5:
10:f6:0f:df:57:18:a7:8c:00:62:8e:d8:c9:8d:60:
45:4a:13:46:f8:96:63:ce:70:58:8e:02:87:4a:cc:
de:c1:6f:1b:85:4b:97:72:db:65:91:47:8a:a7:68:
5d:f8:db:04:34:b7:a1:31:fc:cb:01:4b:cd:f3:30:
a3:7c:e3:be:00:34:6a:17:56:c2:c8:68:ce:4c:1d:
fc:f9:24:53:ed:60:76:43:18:87:e5:6d:e1:04:3a:
6c:10:9e:d4:8c:74:cd:eb:f5:4c:c3:06:76:b9:be:
8d:aa:c9:c9:65:5a:4e:cf:f7:ab:d3:56:7c:89:54:
3a:11:44:af:63:6d:ae:10:e2:07:bb:74:56:9d:e5:
06:6d:4c:f1:d7:ff:56:4a:0a:de:97:a0:01:8b:a8:
a8:40:17:36:db:5a:f4:84:e6:90:68:21:2c:37:3e:
c9:ac:75:cb:69:61:09:50:cd:62:39:a0:fb:f4:77:
21:c3:4f:79:b0:e4:96:dc:09:c6:ed:86:a5:a4:07:
51:23:37:5f:54:90:92:14:80:43:4d:e8:57:37:c0:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E3:23:35:CC:0A:D9:34:A4:F6:2F:17:01:C5:50:B6:54:F7:B2:D4
X509v3 Authority Key Identifier:
keyid:58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:ed:9c:30:9b:c7:56:07:9f:96:23:bf:33:9a:2b:32:9b:ef:
56:98:5e:91:21:ad:85:01:51:e1:34:33:bc:d6:cd:b7:8a:c9:
f6:70:83:05:d1:db:23:9b:0b:42:07:18:71:da:e3:f6:78:3d:
bd:fa:6c:6c:7c:32:b8:9b:61:f0:85:d3:f9:6a:25:f6:6a:e7:
2c:49:93:a3:ef:8b:19:a5:c2:17:c7:aa:59:76:02:6b:f8:14:
8f:cf:0b:48:a0:dd:69:e3:8f:64:89:7d:06:39:fd:c5:c1:fb:
fc:6f:55:25:d7:f8:e6:65:94:66:a9:6f:85:71:fd:d3:97:86:
56:97:e1:d2:34:e6:bd:c3:aa:06:a7:3a:56:d5:03:1a:15:35:
ef:e9:6a:47:b4:af:93:42:e9:3e:03:53:e6:30:f3:d9:2b:45:
87:48:02:fb:92:fa:2e:80:37:2e:b1:4b:0a:7c:08:12:18:b1:
64:6d:ec:09:3d:32:60:62:5f:d7:99:6f:55:ff:0a:bc:f7:42:
ad:ff:56:f3:3f:23:dd:6a:91:9a:52:c5:e3:cb:36:74:09:2d:
fd:98:5b:c0:98:ea:85:1e:57:39:63:20:a8:e2:3f:ac:f3:51:
49:76:a5:54:8d:48:76:8f:d0:bc:c3:9e:4f:76:22:b2:5c:6b:
3e:85:b4:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz9BSThBS4NEPNl956RliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDE2MTFlODBiYWRlNDAyZmJkNjBlNzg2ZjM0ZmI3MTcy
ZDIyNWEwHhcNMjUxMTA0MTcwMDEwWhcNMjUxMTA1MTcwMDEwWjAzMTEwLwYDVQQD
EygxNWUzMjMzNWNjMGFkOTM0YTRmNjJmMTcwMWM1NTBiNjU0ZjdiMmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNnMzBlmxXvqvisntRHgK6z5Vato
OdwpQVzG0LXEBzBrkc5geKwqwjoe9PUQ9g/fVxinjABijtjJjWBFShNG+JZjznBY
jgKHSszewW8bhUuXcttlkUeKp2hd+NsENLehMfzLAUvN8zCjfOO+ADRqF1bCyGjO
TB38+SRT7WB2QxiH5W3hBDpsEJ7UjHTN6/VMwwZ2ub6NqsnJZVpOz/er01Z8iVQ6
EUSvY22uEOIHu3RWneUGbUzx1/9WSgrel6ABi6ioQBc221r0hOaQaCEsNz7JrHXL
aWEJUM1iOaD79Hchw095sOSW3AnG7YalpAdRIzdfVJCSFIBDTehXN8DWewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXjIzXMCtk0pPYvFwHFULZU97LUMB8GA1UdIwQY
MBaAFFgBYR6Aut5AL71g54bzT7cXLSJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FGaEhvQzYza0F2dldEbmh2TlB0eGN0SWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZmRjNjktNjRjMi00YjQ3LWE0Zjgt
YWIzOWJlNjU2MDU3LzEvV0FGaEhvQzYza0F2dldEbmh2TlB0eGN0SWxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81ZmRjNjktNjRjMi00YjQ3LWE0ZjgtYWIzOWJlNjU2MDU3
LzEvV0FGaEhvQzYza0F2dldEbmh2TlB0eGN0SWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6+2cMJvH
VgefliO/M5orMpvvVphekSGthQFR4TQzvNbNt4rJ9nCDBdHbI5sLQgcYcdrj9ng9
vfpsbHwyuJth8IXT+Wol9mrnLEmTo++LGaXCF8eqWXYCa/gUj88LSKDdaeOPZIl9
Bjn9xcH7/G9VJdf45mWUZqlvhXH905eGVpfh0jTmvcOqBqc6VtUDGhU17+lqR7Sv
k0LpPgNT5jDz2StFh0gC+5L6LoA3LrFLCnwIEhixZG3sCT0yYGJf15lvVf8KvPdC
rf9W8z8j3WqRmlLF48s2dAkt/ZhbwJjqhR5XOWMgqOI/rPNRSXalVI1Ido/QvMOe
T3YislxrPoW0uw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:41 2025 by rpki-client