Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier: yg1c+UTlX9fwAAevjVuiznMKHBFxq38sZD7uDtl/FZw=
Subject key identifier: 39:D1:AD:DB:F5:AF:C7:33:D4:56:24:55:29:60:E0:18:57:C8:40:C8
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 019A533F384FA138C1EB1051F1F18D91ED80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number: 171F
Signing time: Wed 05 Nov 2025 09:00:43 +0000
Manifest this update: Wed 05 Nov 2025 09:00:43 +0000
Manifest next update: Thu 06 Nov 2025 09:00:43 +0000
Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=)
2: WAFcyNofG780PiarII34uyb9U64.crl (hash: bnF72fkwzA1LJpOVO92ib68+145qtXVxVln2oT/W3PA=)
3: m3VZjdzwzA2piVdwr0jRtcRx0nU.roa (hash: P1WYR9PHlhqL+0w0ThuMbIIaq+c1NvgD6JAgzrBxv9k=)
4: re1d3zENTmY783i31gdyUHSlGtY.roa (hash: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:38:4f:a1:38:c1:eb:10:51:f1:f1:8d:91:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Nov 5 09:00:43 2025 GMT
Not After : Nov 6 09:00:43 2025 GMT
Subject: CN=39d1addbf5afc733d45624552960e01857c840c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:ab:1e:3e:d8:26:8b:87:ce:4e:e0:6c:26:
ef:b5:69:16:01:5a:ab:a6:6c:70:86:aa:de:34:28:
2e:85:d6:f6:4c:22:7f:bd:f7:89:9c:0f:d8:27:ae:
c0:90:b7:0c:8b:60:a0:78:15:c0:15:66:80:99:72:
67:e0:91:d8:ae:5c:36:d7:f5:62:3e:65:09:ea:a3:
fd:1f:3e:3d:9b:b7:4a:ea:00:f5:a2:78:f1:d7:2b:
1f:89:47:bf:21:8d:63:44:1c:46:a2:0a:4b:96:8c:
8a:63:f7:ac:f0:46:96:7f:0d:c0:1f:2f:c9:36:83:
ac:df:c9:34:1d:fc:2c:c5:45:da:3d:77:00:1b:2a:
72:52:27:56:6f:90:98:93:10:0e:ba:a8:1a:a6:e3:
4a:96:b4:e4:e4:13:4f:77:3f:b9:a4:60:83:9e:f8:
81:e5:30:20:90:29:65:7c:60:f0:a1:a4:2a:63:6b:
70:13:9e:e0:79:a3:40:26:3b:7b:d5:d3:59:33:8b:
55:52:7d:e5:e5:43:36:99:f6:8e:64:5a:82:f4:55:
4a:ed:07:72:ce:bb:dd:44:12:ac:88:76:67:d2:21:
e0:0e:15:e9:6b:6b:3c:7b:b1:e2:c9:b4:ce:1a:d9:
20:5d:b5:78:62:4a:b2:19:c3:54:a7:d7:84:db:b7:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D1:AD:DB:F5:AF:C7:33:D4:56:24:55:29:60:E0:18:57:C8:40:C8
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:36:0e:db:1e:e2:02:4b:05:22:05:a4:a8:83:70:59:77:cf:
7a:74:b3:0d:42:f4:b1:c2:7f:d8:2d:41:d7:96:5c:eb:2a:38:
91:7f:51:ec:df:18:2f:2e:4d:f5:ed:76:ee:ed:34:35:d3:db:
40:b6:bf:38:68:fa:77:40:94:25:9c:35:1a:c5:f6:b3:ef:4d:
fa:d6:80:51:1a:15:93:8e:10:e0:b4:87:e1:eb:fc:ba:89:9c:
b9:7a:30:cf:d4:ad:80:e8:93:a0:95:32:19:6c:ed:1d:a5:6e:
90:20:1d:52:07:68:01:ff:21:0f:22:c9:9d:a4:79:ae:b4:eb:
d3:ce:26:2e:ed:05:f2:f9:36:98:ed:81:67:23:6d:54:56:ee:
45:0e:d2:2c:5a:dc:fa:63:2b:79:49:5e:ff:b9:44:a4:55:87:
c8:46:72:11:bd:86:1f:90:0d:cb:f3:4f:af:b9:6a:1b:d6:c4:
f4:6d:a7:c7:c1:af:06:25:71:d3:bf:47:d3:19:ee:1c:05:d0:
27:12:df:33:4f:78:e2:74:30:52:d9:93:f1:16:7a:10:30:10:
13:b4:14:e3:1a:3a:a8:68:aa:ae:84:16:f4:d8:0f:44:6d:0b:
90:60:75:72:5f:bb:a9:05:a9:b8:cb:7c:08:39:9d:86:b2:44:
f9:43:43:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPzhPoTjB6xBR8fGNke2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDE1Y2M4ZGExZjFiYmYzNDNlMjZhYjIwOGRmOGJiMjZm
ZDUzYWUwHhcNMjUxMTA1MDkwMDQzWhcNMjUxMTA2MDkwMDQzWjAzMTEwLwYDVQQD
EygzOWQxYWRkYmY1YWZjNzMzZDQ1NjI0NTUyOTYwZTAxODU3Yzg0MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHSrHj7YJouHzk7gbCbvtWkWAVqr
pmxwhqreNCguhdb2TCJ/vfeJnA/YJ67AkLcMi2CgeBXAFWaAmXJn4JHYrlw21/Vi
PmUJ6qP9Hz49m7dK6gD1onjx1ysfiUe/IY1jRBxGogpLloyKY/es8EaWfw3AHy/J
NoOs38k0HfwsxUXaPXcAGypyUidWb5CYkxAOuqgapuNKlrTk5BNPdz+5pGCDnviB
5TAgkCllfGDwoaQqY2twE57geaNAJjt71dNZM4tVUn3l5UM2mfaOZFqC9FVK7Qdy
zrvdRBKsiHZn0iHgDhXpa2s8e7HiybTOGtkgXbV4YkqyGcNUp9eE27cUFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnRrdv1r8cz1FYkVSlg4BhXyEDIMB8GA1UdIwQY
MBaAFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYt
OGVlMjFiNzRkZDU2LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYtOGVlMjFiNzRkZDU2
LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzYO2x7i
AksFIgWkqINwWXfPenSzDUL0scJ/2C1B15Zc6yo4kX9R7N8YLy5N9e127u00NdPb
QLa/OGj6d0CUJZw1GsX2s+9N+taAURoVk44Q4LSH4ev8uomcuXowz9StgOiToJUy
GWztHaVukCAdUgdoAf8hDyLJnaR5rrTr084mLu0F8vk2mO2BZyNtVFbuRQ7SLFrc
+mMreUle/7lEpFWHyEZyEb2GH5ANy/NPr7lqG9bE9G2nx8GvBiVx079H0xnuHAXQ
JxLfM0944nQwUtmT8RZ6EDAQE7QU4xo6qGiqroQW9NgPRG0LkGB1cl+7qQWpuMt8
CDmdhrJE+UNDHA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:21:58 2025 by rpki-client