Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
File: WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json)
Hash identifier: FqWQDoMYJsy/NzN9G8c1CiJTRahkv4XyewYHk7s4FpQ=
Subject key identifier: F2:32:B5:FC:25:D0:2C:EA:87:18:F4:42:96:CA:DF:14:81:D2:FE:F4
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial: 019A50E26E4A05A3F32B16A0DF135ADA2AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
Manifest number: 0691
Signing time: Tue 04 Nov 2025 22:00:07 +0000
Manifest this update: Tue 04 Nov 2025 22:00:07 +0000
Manifest next update: Wed 05 Nov 2025 22:00:07 +0000
Files and hashes: 1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: DWmik6OBXA6DOzmSOgSM0ldZl5zddP5AOut+fQSNbgc=)
2: ibsagXyULK6_yzLYa3pXOko3XKU.roa (hash: 03/iKlKS42XpS4t49YCxIL0w2I8iyQ6yxzMTAdH/Ztc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:6e:4a:05:a3:f3:2b:16:a0:df:13:5a:da:2a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Validity
Not Before: Nov 4 22:00:07 2025 GMT
Not After : Nov 5 22:00:07 2025 GMT
Subject: CN=f232b5fc25d02cea8718f44296cadf1481d2fef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:81:29:82:94:39:2d:34:08:ad:0c:23:43:
91:79:d0:d6:d1:49:a4:6d:c1:6e:cd:e3:03:56:39:
86:8c:bd:25:17:9a:7b:76:f3:95:02:b5:6e:c8:65:
54:66:ae:67:11:b7:bf:37:12:b6:fb:aa:c1:85:9e:
20:16:6f:90:8b:c1:a8:fd:66:b0:59:71:33:85:b0:
26:21:94:ae:8e:1e:29:4f:bd:b5:27:33:d1:39:a1:
5b:0a:98:b1:f2:77:d3:3c:0c:5e:5f:4f:f1:30:85:
36:6a:f6:57:82:69:43:e4:6f:f4:24:0d:68:68:0c:
2c:c1:ab:df:bf:dd:f8:77:13:ec:6b:06:99:4c:49:
4f:b2:60:f2:f0:e4:2f:4d:3f:f3:6c:12:07:70:17:
fe:b9:58:8f:16:8c:19:c8:2b:82:44:5f:8a:bf:33:
4d:5a:ca:b9:db:d1:e8:24:dd:cd:16:45:58:15:10:
76:ab:86:86:ba:b4:37:eb:49:8e:db:f6:91:62:5b:
2a:19:4f:12:88:9e:e5:38:88:75:c3:82:55:2b:d7:
4f:fd:7d:a2:d3:19:8f:ce:4d:dc:47:f1:bd:92:cd:
47:fa:1f:45:9d:56:69:c0:fb:c8:71:12:a6:c7:da:
f4:56:65:4c:5c:00:80:56:79:d0:d9:92:4e:65:71:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:32:B5:FC:25:D0:2C:EA:87:18:F4:42:96:CA:DF:14:81:D2:FE:F4
X509v3 Authority Key Identifier:
keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0e:ff:7f:63:c5:a8:6d:40:77:d1:13:29:75:68:53:f6:5d:
0d:a2:6d:d4:55:0a:a9:cf:76:99:ed:53:4b:7f:38:e3:67:a4:
84:77:97:c1:a2:1f:1f:9e:2d:25:bd:08:ca:d4:5b:fb:df:90:
25:0f:a5:29:22:91:03:36:10:fe:f1:de:b9:f6:ca:87:45:57:
35:4a:3a:64:85:e8:2f:cf:06:2e:d2:8f:6f:86:8d:d8:0f:55:
0b:a0:a3:33:a2:8a:2e:c1:15:0b:38:40:f8:c3:ce:86:33:50:
d6:63:a6:c4:06:8e:27:17:65:5f:52:2a:9a:cb:47:f9:29:31:
cc:08:06:53:8a:b0:7f:fc:3c:00:df:ac:0a:e0:71:5d:5f:20:
b8:c8:42:ef:c3:b9:f5:ce:28:3e:16:42:3d:23:db:18:2f:69:
ea:89:77:28:85:e8:4f:ab:d2:6a:6d:29:8e:3a:4b:97:d7:8a:
f1:30:70:cf:25:5c:b3:14:ae:4c:46:7f:6a:f1:ba:8b:e7:2d:
2f:9a:3d:b6:43:07:29:22:f4:27:3c:a3:7f:36:02:90:cb:70:
51:c3:74:7e:c8:fb:37:c4:ce:f1:49:6c:bf:36:6b:6d:e2:78:
61:5a:99:f9:d0:f1:24:d4:68:69:28:6d:38:28:5c:7a:43:fc:
d5:12:86:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4m5KBaPzKxag3xNa2iqqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YjYwMjA5OTBlYjEwYjA1M2Q1NmI0N2UyYzgzNGE1YTYy
NmI1ZDMwHhcNMjUxMTA0MjIwMDA3WhcNMjUxMTA1MjIwMDA3WjAzMTEwLwYDVQQD
EyhmMjMyYjVmYzI1ZDAyY2VhODcxOGY0NDI5NmNhZGYxNDgxZDJmZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe2BKYKUOS00CK0MI0ORedDW0Umk
bcFuzeMDVjmGjL0lF5p7dvOVArVuyGVUZq5nEbe/NxK2+6rBhZ4gFm+Qi8Go/Waw
WXEzhbAmIZSujh4pT721JzPROaFbCpix8nfTPAxeX0/xMIU2avZXgmlD5G/0JA1o
aAwswavfv934dxPsawaZTElPsmDy8OQvTT/zbBIHcBf+uViPFowZyCuCRF+KvzNN
Wsq529HoJN3NFkVYFRB2q4aGurQ360mO2/aRYlsqGU8SiJ7lOIh1w4JVK9dP/X2i
0xmPzk3cR/G9ks1H+h9FnVZpwPvIcRKmx9r0VmVMXACAVnnQ2ZJOZXGd/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIytfwl0Czqhxj0QpbK3xSB0v70MB8GA1UdIwQY
MBaAFFm2AgmQ6xCwU9VrR+LINKWmJrXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgt
OTgyM2I3ZWE0ZGIzLzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgtOTgyM2I3ZWE0ZGIz
LzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQ7/f2PF
qG1Ad9ETKXVoU/ZdDaJt1FUKqc92me1TS38442ekhHeXwaIfH54tJb0IytRb+9+Q
JQ+lKSKRAzYQ/vHeufbKh0VXNUo6ZIXoL88GLtKPb4aN2A9VC6CjM6KKLsEVCzhA
+MPOhjNQ1mOmxAaOJxdlX1IqmstH+SkxzAgGU4qwf/w8AN+sCuBxXV8guMhC78O5
9c4oPhZCPSPbGC9p6ol3KIXoT6vSam0pjjpLl9eK8TBwzyVcsxSuTEZ/avG6i+ct
L5o9tkMHKSL0JzyjfzYCkMtwUcN0fsj7N8TO8UlsvzZrbeJ4YVqZ+dDxJNRoaSht
OChcekP81RKGdA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:46 2025 by rpki-client