Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
File: WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json)
Hash identifier: PWasLZcCz+iOXYt0RsrBJ+4yufOZM8ueFaTEGuAd++0=
Subject key identifier: C0:4D:89:94:86:C9:38:23:B6:82:BF:00:B4:A7:27:16:98:20:77:E5
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 019A50E29F772BBE6EDB2B311C12D4871E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
Manifest number: 1627
Signing time: Tue 04 Nov 2025 22:00:20 +0000
Manifest this update: Tue 04 Nov 2025 22:00:20 +0000
Manifest next update: Wed 05 Nov 2025 22:00:20 +0000
Files and hashes: 1: LYb-x1oBjYV986-WVWGm87nYs0w.roa (hash: Hdp26qwcmy9Rb38THuQbvn6WpSeZJ3xKyk1AFGilm9k=)
2: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: VnG32m6KhGNFR5fSGxLSmjSEaGaJwsWFvZM5BYZ2rkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:9f:77:2b:be:6e:db:2b:31:1c:12:d4:87:1e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: Nov 4 22:00:20 2025 GMT
Not After : Nov 5 22:00:20 2025 GMT
Subject: CN=c04d899486c93823b682bf00b4a72716982077e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:a2:f9:6a:58:63:1e:73:10:73:5b:52:53:
2c:b5:e8:ae:36:35:04:a1:71:8d:92:ab:17:78:af:
64:07:71:94:43:86:68:62:64:45:0c:fc:01:a7:1d:
99:7c:7c:af:94:79:3a:a3:f5:1c:f7:30:7e:81:77:
a5:92:fa:e7:63:3a:d8:86:c3:6a:bf:b9:d4:1f:5d:
cb:4c:e2:0a:28:11:91:d0:0b:6a:17:19:eb:ef:2b:
e6:ba:50:9e:62:94:25:7c:2e:5e:2d:c8:6b:92:94:
01:71:53:29:90:21:e8:c5:9f:5c:86:9e:2a:8a:80:
00:5b:b9:60:a2:d6:28:df:65:41:a9:27:79:50:90:
dd:26:31:ef:b5:61:8e:fc:94:74:02:63:fd:27:f2:
da:ec:f1:b2:fb:31:8c:b9:f3:d1:83:a9:19:a0:f7:
f9:a1:b3:52:3b:81:46:7d:ce:c5:a0:b0:81:a9:df:
7c:53:b3:62:12:76:67:2b:46:12:7e:b6:8f:eb:98:
4a:9c:fe:e0:25:d9:1e:a5:08:20:0c:71:59:ec:1e:
d8:e0:a0:90:27:8e:d5:db:79:eb:e7:0d:c7:c1:04:
a4:87:0c:9a:48:f6:80:e4:74:50:40:16:be:59:23:
3f:05:0c:9f:88:b2:4f:d5:ca:a2:3b:1b:dd:16:5f:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4D:89:94:86:C9:38:23:B6:82:BF:00:B4:A7:27:16:98:20:77:E5
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2e:40:62:58:8f:1f:a7:cf:47:7a:2e:27:b8:b8:a5:be:bb:
3a:8f:24:b8:79:61:bf:98:52:7c:8a:04:f9:91:01:23:69:71:
af:4c:64:a3:68:ce:e7:33:67:b7:60:d8:17:5e:2b:b5:64:76:
d5:4e:6a:b2:2a:d9:7f:41:82:d6:30:ae:5d:2d:38:3e:54:0e:
01:41:6b:c3:79:25:2b:1c:45:27:c3:42:e8:d7:4c:d3:1b:ba:
0a:29:e3:fc:6b:d6:fe:a7:cd:ef:61:34:ad:fe:0f:b8:d2:de:
78:a9:5a:57:62:ad:6d:7d:d8:ec:04:fb:9a:97:bb:bb:87:1d:
d8:b9:a2:ec:7c:b1:d6:24:b3:9a:3a:05:aa:0b:46:86:97:d5:
55:d9:4a:be:d9:67:7c:bb:ac:56:c1:1d:59:78:fc:3a:35:ef:
1e:aa:ef:4d:dd:87:c9:c5:85:ab:eb:f5:5e:57:45:5d:0e:ff:
e3:b5:ec:24:15:07:7e:1f:83:23:05:19:06:c1:32:d8:21:1e:
73:f3:f5:c7:6b:16:7c:fa:9d:93:27:f1:47:0d:cb:e0:d0:47:
aa:c3:e9:0b:87:be:21:1e:6c:51:95:45:5c:cf:56:df:76:77:
81:83:b8:5e:64:30:68:75:9b:03:d5:94:fe:33:3a:06:89:4e:
94:9e:e0:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4p93K75u2ysxHBLUhx6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZmFkMzg4YmVhNzFkYTJmNDNmMzlhNDVlMTAxNDFkNmYy
OWM0MjgwHhcNMjUxMTA0MjIwMDIwWhcNMjUxMTA1MjIwMDIwWjAzMTEwLwYDVQQD
EyhjMDRkODk5NDg2YzkzODIzYjY4MmJmMDBiNGE3MjcxNjk4MjA3N2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO+i+WpYYx5zEHNbUlMsteiuNjUE
oXGNkqsXeK9kB3GUQ4ZoYmRFDPwBpx2ZfHyvlHk6o/Uc9zB+gXelkvrnYzrYhsNq
v7nUH13LTOIKKBGR0AtqFxnr7yvmulCeYpQlfC5eLchrkpQBcVMpkCHoxZ9chp4q
ioAAW7lgotYo32VBqSd5UJDdJjHvtWGO/JR0AmP9J/La7PGy+zGMufPRg6kZoPf5
obNSO4FGfc7FoLCBqd98U7NiEnZnK0YSfraP65hKnP7gJdkepQggDHFZ7B7Y4KCQ
J47V23nr5w3HwQSkhwyaSPaA5HRQQBa+WSM/BQyfiLJP1cqiOxvdFl9K6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBNiZSGyTgjtoK/ALSnJxaYIHflMB8GA1UdIwQY
MBaAFFn604i+px2i9D85pF4QFB1vKcQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZyVGlMNm5IYUwwUHpta1hoQVVIVzhweENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80ZWE0ODEtYmE5Ny00Yjk0LWIwMDAt
MzViZDY1ZjFmMmE0LzEvV2ZyVGlMNm5IYUwwUHpta1hoQVVIVzhweENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80ZWE0ODEtYmE5Ny00Yjk0LWIwMDAtMzViZDY1ZjFmMmE0
LzEvV2ZyVGlMNm5IYUwwUHpta1hoQVVIVzhweENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARC5AYliP
H6fPR3ouJ7i4pb67Oo8kuHlhv5hSfIoE+ZEBI2lxr0xko2jO5zNnt2DYF14rtWR2
1U5qsirZf0GC1jCuXS04PlQOAUFrw3klKxxFJ8NC6NdM0xu6Cinj/GvW/qfN72E0
rf4PuNLeeKlaV2KtbX3Y7AT7mpe7u4cd2Lmi7Hyx1iSzmjoFqgtGhpfVVdlKvtln
fLusVsEdWXj8OjXvHqrvTd2HycWFq+v1XldFXQ7/47XsJBUHfh+DIwUZBsEy2CEe
c/P1x2sWfPqdkyfxRw3L4NBHqsPpC4e+IR5sUZVFXM9W33Z3gYO4XmQwaHWbA9WU
/jM6BolOlJ7gYQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:25:38 2025 by rpki-client