Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
File: WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json)
Hash identifier: bGKU/lxezh7Efh2kN4b4U8rGt28JESoCGDZaLk7rk8M=
Subject key identifier: 3D:89:0F:C5:B9:10:A6:30:05:E7:63:7D:74:2C:57:FD:7B:C4:53:4C
Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
Certificate issuer: /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Certificate serial: 019A4DE17E9038B02040AE0F883067817D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
Manifest number: 0F7B
Signing time: Tue 04 Nov 2025 08:00:14 +0000
Manifest this update: Tue 04 Nov 2025 08:00:14 +0000
Manifest next update: Wed 05 Nov 2025 08:00:14 +0000
Files and hashes: 1: D9VtpqQ5QcOE8_3AAGv6AbSncPk.roa (hash: 45VJpPEdefwyDmmpbMXwZdBXiJtpSM2szrEhn6hGnnw=)
2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: xkbDVJORV8FqMIuOXwiGyumnrPV+DQ3FPO3ZfQUxBHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:7e:90:38:b0:20:40:ae:0f:88:30:67:81:7d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Validity
Not Before: Nov 4 08:00:14 2025 GMT
Not After : Nov 5 08:00:14 2025 GMT
Subject: CN=3d890fc5b910a63005e7637d742c57fd7bc4534c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:5f:1a:55:a8:53:7e:ca:80:ad:d1:5e:d9:
10:7d:ea:d0:94:c9:9a:95:de:7e:4b:df:83:1d:cd:
92:da:a2:af:64:ac:8a:72:ee:a6:13:26:93:fb:b5:
52:1c:6d:d3:a2:fc:1e:50:f6:75:20:7c:1f:ec:09:
60:ae:dc:14:23:ef:1d:5d:6e:e4:83:b1:09:72:fd:
5e:1c:65:1d:29:ef:22:26:63:11:b0:48:0c:c4:c9:
10:1e:3b:52:75:f2:38:b9:be:42:ea:58:af:92:69:
c6:12:b4:ef:df:34:fd:96:e5:97:1d:41:24:9d:8f:
b2:04:a0:83:83:df:10:4a:7f:4c:75:10:c4:a1:70:
2a:2d:ed:c8:7d:0a:90:e7:ce:6a:12:7c:8d:66:7c:
65:c6:85:3e:77:f8:ad:9e:34:08:9a:fd:29:98:03:
52:f3:df:4d:79:ea:ed:67:19:2a:8e:c9:9c:4b:68:
12:e6:13:4d:27:54:76:5b:03:3b:04:c9:fe:2c:8b:
dc:22:ce:65:89:2f:e6:9f:e6:5a:a9:ff:c5:db:34:
50:0f:83:3a:0c:17:da:93:4c:4a:0b:17:2c:b9:eb:
ac:d3:15:db:85:91:84:5d:72:50:ea:da:a1:72:52:
77:83:b8:c6:23:ec:da:48:dc:1d:2e:45:e6:f3:a0:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:89:0F:C5:B9:10:A6:30:05:E7:63:7D:74:2C:57:FD:7B:C4:53:4C
X509v3 Authority Key Identifier:
keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9b:70:e6:8c:44:b6:79:00:ca:af:50:6a:c2:4d:22:d0:2e:
d7:d7:ba:86:1c:e0:7c:6f:db:2a:a0:93:85:1d:de:1e:f8:91:
7f:bc:ca:ac:1e:49:23:96:d8:69:5f:54:49:e8:06:49:6d:c1:
c4:d6:48:fd:24:49:47:f5:ab:4d:29:f4:b8:66:71:7a:db:5c:
6e:3d:19:3b:a7:89:87:f3:29:4c:d5:e9:ad:37:0f:c2:d4:5c:
4e:fd:c5:7a:16:00:c4:6a:11:03:be:e6:3c:76:61:a2:cb:d6:
bb:54:bb:a1:02:3d:66:ba:66:ce:55:2e:68:b2:11:db:a1:15:
b6:c1:53:cf:5d:b0:4d:cf:24:cf:c1:b7:6b:ea:33:74:bf:32:
35:7f:e0:ab:80:bd:02:6f:44:71:69:08:18:1d:3f:3b:8d:1a:
52:98:17:68:87:b5:f5:54:4f:04:cf:d5:16:69:42:4f:79:43:
6b:14:2f:ce:a3:7d:04:08:ba:09:73:b7:fa:25:4a:4c:57:fe:
75:9c:17:cc:1c:59:d0:c2:2c:38:5c:89:39:a5:8a:47:a4:9c:
b9:b3:e4:8b:01:f4:7f:46:02:2a:ae:f0:d8:81:7c:5f:c0:68:
14:fe:fa:3a:63:9e:ce:b1:ac:97:2f:a6:89:08:b9:d7:a8:7d:
04:4d:f2:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4X6QOLAgQK4PiDBngX0gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMGFhOTY4MmM2ODNhOWMxYjk1Y2U5Njc2ZDUxYjIwZDM5
ZmQyYWUwHhcNMjUxMTA0MDgwMDE0WhcNMjUxMTA1MDgwMDE0WjAzMTEwLwYDVQQD
EygzZDg5MGZjNWI5MTBhNjMwMDVlNzYzN2Q3NDJjNTdmZDdiYzQ1MzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDJfGlWoU37KgK3RXtkQferQlMma
ld5+S9+DHc2S2qKvZKyKcu6mEyaT+7VSHG3TovweUPZ1IHwf7AlgrtwUI+8dXW7k
g7EJcv1eHGUdKe8iJmMRsEgMxMkQHjtSdfI4ub5C6livkmnGErTv3zT9luWXHUEk
nY+yBKCDg98QSn9MdRDEoXAqLe3IfQqQ585qEnyNZnxlxoU+d/itnjQImv0pmANS
899NeertZxkqjsmcS2gS5hNNJ1R2WwM7BMn+LIvcIs5liS/mn+Zaqf/F2zRQD4M6
DBfak0xKCxcsueus0xXbhZGEXXJQ6tqhclJ3g7jGI+zaSNwdLkXm86CvRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2JD8W5EKYwBedjfXQsV/17xFNMMB8GA1UdIwQY
MBaAFFoKqWgsaDqcG5XOlnbVGyDTn9KuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNDkxYTAtYjY2Ni00ZTlmLWIwZjkt
NmVlZDUyOTY4YjFjLzEvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mNDkxYTAtYjY2Ni00ZTlmLWIwZjktNmVlZDUyOTY4YjFj
LzEvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVptw5oxE
tnkAyq9QasJNItAu19e6hhzgfG/bKqCThR3eHviRf7zKrB5JI5bYaV9USegGSW3B
xNZI/SRJR/WrTSn0uGZxettcbj0ZO6eJh/MpTNXprTcPwtRcTv3FehYAxGoRA77m
PHZhosvWu1S7oQI9ZrpmzlUuaLIR26EVtsFTz12wTc8kz8G3a+ozdL8yNX/gq4C9
Am9EcWkIGB0/O40aUpgXaIe19VRPBM/VFmlCT3lDaxQvzqN9BAi6CXO3+iVKTFf+
dZwXzBxZ0MIsOFyJOaWKR6ScubPkiwH0f0YCKq7w2IF8X8BoFP76OmOezrGsly+m
iQi516h9BE3yfA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:04 2025 by rpki-client