Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json)
Hash identifier: NeJ+KVPebIJb8mBvVivLDhutMqBW4Akk4ShZPSGyLE8=
Subject key identifier: 06:A0:CA:5D:D4:4B:D9:A9:9F:91:3A:B5:3D:9C:DB:EC:32:5C:49:95
Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Certificate serial: 019A4E18A0570907D24007CE83CAD027FAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:28 +0000
Manifest this update: Tue 04 Nov 2025 09:00:28 +0000
Manifest next update: Wed 05 Nov 2025 09:00:28 +0000
Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: MHXOMVRQumVNOtCnPq4yNysd1TyOq5Hd6PaQdRjv1yY=)
2: g4DPD_TlI2jk4YtUIO3nppJCypo.roa (hash: 1cUob6Ttj1c9mZCdpqGoW3x2UVNqUiWBsqfqlcDpGkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a0:57:09:07:d2:40:07:ce:83:ca:d0:27:fa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Validity
Not Before: Nov 4 09:00:28 2025 GMT
Not After : Nov 5 09:00:28 2025 GMT
Subject: CN=06a0ca5dd44bd9a99f913ab53d9cdbec325c4995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:4e:bb:97:2b:a5:05:af:7a:c6:b8:27:04:
49:b6:59:de:6a:b8:ba:dc:65:06:d5:bb:38:a4:0a:
62:d1:d3:49:1e:9d:12:c0:e2:d6:2b:49:c8:4b:36:
b0:0a:c7:71:56:82:58:d6:25:80:18:04:b8:03:02:
9c:dc:f2:d1:19:9c:c2:87:50:25:2f:13:46:84:c7:
dd:c2:3e:1a:8c:d3:93:59:d9:3b:2a:9c:06:b7:8f:
dd:b7:01:f6:84:03:d2:bc:1e:78:fd:10:ab:fc:97:
73:2e:d4:12:35:3f:b7:12:39:a7:a3:9d:88:d1:6b:
2e:3a:c6:d5:90:40:dd:fd:aa:2f:ed:97:44:c3:3b:
99:00:be:41:42:28:6e:0f:60:ed:58:40:0f:0f:56:
53:ab:26:83:7d:49:e7:4a:9d:af:0f:41:a4:4a:8d:
a2:f4:5e:87:95:47:37:a8:b1:01:58:93:a2:3a:e9:
20:5b:2b:b0:14:fa:5d:a7:6a:41:70:92:a1:b5:36:
cc:9f:20:66:e9:67:75:20:42:84:fb:71:3a:31:a1:
b9:c9:86:2f:42:57:45:0f:bc:10:00:44:bb:32:e6:
ae:f3:cb:b1:9c:3e:f3:29:6e:b8:a3:f3:e9:80:49:
02:56:51:fc:2b:85:23:fb:ba:ca:42:6f:60:2b:ec:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A0:CA:5D:D4:4B:D9:A9:9F:91:3A:B5:3D:9C:DB:EC:32:5C:49:95
X509v3 Authority Key Identifier:
keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:19:0e:c3:ad:c0:49:d7:71:85:2d:7b:d7:e0:30:67:4f:31:
1a:8c:f6:dd:fd:14:aa:a6:e9:dd:ee:b6:fe:ec:22:e7:e2:72:
e6:56:d2:6c:c7:29:0a:37:c1:07:60:3d:78:20:34:d8:0e:bf:
64:a3:3e:3a:dd:13:ed:57:7f:9b:4e:56:e6:55:d7:43:ab:4d:
f3:22:cb:8b:7b:93:35:57:77:3b:57:15:15:82:0b:c2:0b:94:
df:41:dd:90:2d:96:cf:b0:9c:1c:68:f8:36:2f:28:4b:21:fe:
01:68:ef:8d:08:5b:74:54:bf:9c:75:c1:ac:dd:5e:0e:90:6e:
99:44:ea:8c:14:93:96:dc:5c:2c:53:b3:e4:82:41:29:3a:65:
ab:34:d4:f4:c9:2b:19:b0:8c:67:43:b3:9c:0f:40:a3:5b:c7:
10:4f:e4:af:d0:e2:f3:2c:0e:57:08:46:2c:fe:1b:35:d5:9c:
7c:59:3f:58:2b:90:f8:eb:1d:0f:a5:7c:2f:5a:68:c0:62:07:
ef:57:10:58:14:5a:73:2a:a6:d9:cf:93:8a:f3:aa:f1:d2:e8:
fb:1f:0f:f1:26:5e:c5:6e:c6:d2:ed:0d:9c:d0:f1:bc:a4:dc:
97:1a:d6:4f:93:0e:79:fd:23:6f:4c:16:bc:aa:6b:86:cf:0d:
3e:d5:69:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGKBXCQfSQAfOg8rQJ/ruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDJhMzU2YTU0NzgxNTViZWFhOGJjNjI1NmE4NmY2ZDVi
M2Y3M2MwHhcNMjUxMTA0MDkwMDI4WhcNMjUxMTA1MDkwMDI4WjAzMTEwLwYDVQQD
EygwNmEwY2E1ZGQ0NGJkOWE5OWY5MTNhYjUzZDljZGJlYzMyNWM0OTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04FOu5crpQWvesa4JwRJtlneari6
3GUG1bs4pApi0dNJHp0SwOLWK0nISzawCsdxVoJY1iWAGAS4AwKc3PLRGZzCh1Al
LxNGhMfdwj4ajNOTWdk7KpwGt4/dtwH2hAPSvB54/RCr/JdzLtQSNT+3Ejmno52I
0WsuOsbVkEDd/aov7ZdEwzuZAL5BQihuD2DtWEAPD1ZTqyaDfUnnSp2vD0GkSo2i
9F6HlUc3qLEBWJOiOukgWyuwFPpdp2pBcJKhtTbMnyBm6Wd1IEKE+3E6MaG5yYYv
QldFD7wQAES7Muau88uxnD7zKW64o/PpgEkCVlH8K4Uj+7rKQm9gK+wEuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAagyl3US9mpn5E6tT2c2+wyXEmVMB8GA1UdIwQY
MBaAFFjSo1alR4FVvqqLxiVqhvbVs/c8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQt
OTA1MzA1NGE1Y2FiLzEvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQtOTA1MzA1NGE1Y2Fi
LzEvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhkOw63A
SddxhS171+AwZ08xGoz23f0Uqqbp3e62/uwi5+Jy5lbSbMcpCjfBB2A9eCA02A6/
ZKM+Ot0T7Vd/m05W5lXXQ6tN8yLLi3uTNVd3O1cVFYILwguU30HdkC2Wz7CcHGj4
Ni8oSyH+AWjvjQhbdFS/nHXBrN1eDpBumUTqjBSTltxcLFOz5IJBKTplqzTU9Mkr
GbCMZ0OznA9Ao1vHEE/kr9Di8ywOVwhGLP4bNdWcfFk/WCuQ+OsdD6V8L1powGIH
71cQWBRacyqm2c+TivOq8dLo+x8P8SZexW7G0u0NnNDxvKTclxrWT5MOef0jb0wW
vKprhs8NPtVp+A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:35 2025 by rpki-client