Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File: WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier: BPiPZVRr/p8z7KMqqzjYl6163BWy68xlMkC/17bwCR4=
Subject key identifier: C4:F7:8A:64:5A:EE:D5:1C:48:F6:8E:1C:B4:38:CD:4C:9E:93:72:1A
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer: /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial: 019A5263650430A9F76C703B77D9F093CFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number: 0268
Signing time: Wed 05 Nov 2025 05:00:36 +0000
Manifest this update: Wed 05 Nov 2025 05:00:36 +0000
Manifest next update: Thu 06 Nov 2025 05:00:36 +0000
Files and hashes: 1: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: QES4lG9KP1GTaM7VMWLVCRqoJr4mKIxh52lXLhWkChc=)
2: _sGWnEAm6H3GQnFAjvcpfjYmmpU.roa (hash: e0wmcRqP7ldHP1lF0Smi9FCBdi4Vz7I53Q9ZET+MPRw=)
3: dJzDSPenGFs61jrjvaTekpH7lb0.roa (hash: kpJ+1xwnPbkQC6dTg5VdbKW3vchd3ul1f6drVPMIJlo=)
4: o4GoVj1IVmnPHBj-vP4PnBTlkD4.roa (hash: HjBekZUZeHTCiqwh5UX3k0G+u1uy5Ap+OteoXrFlzT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:65:04:30:a9:f7:6c:70:3b:77:d9:f0:93:cf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Validity
Not Before: Nov 5 05:00:36 2025 GMT
Not After : Nov 6 05:00:36 2025 GMT
Subject: CN=c4f78a645aeed51c48f68e1cb438cd4c9e93721a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3b:d2:a1:1c:ab:b4:d5:0e:cd:d9:db:27:33:
c3:35:85:03:64:a7:1f:06:45:b8:4e:01:7b:77:09:
90:25:b6:46:af:3d:66:90:2f:8d:0a:37:05:3b:59:
64:76:b3:61:e3:28:e2:6a:c2:14:bf:e0:47:9e:bc:
27:97:6c:9f:76:1f:bb:62:20:84:82:96:28:69:19:
d0:fb:e8:72:bf:b4:4c:84:43:28:ce:2a:65:9c:15:
83:91:00:92:0b:de:b9:b3:23:19:76:1d:f4:8f:80:
26:79:a2:b8:a2:0f:7e:bf:bc:18:5d:66:50:4a:7c:
5f:3c:73:5e:7b:c7:a4:f2:58:ec:a4:a6:53:0a:39:
8f:f8:9c:96:05:07:fd:fd:b0:b5:7e:ad:b7:ab:80:
bf:62:a1:e3:3d:ab:11:5a:f3:08:f4:22:d3:fb:3d:
26:1d:50:40:6d:bd:2b:c0:93:84:4b:79:4e:76:34:
0d:27:b5:36:be:a6:5e:6e:47:08:05:01:61:19:ec:
ab:4a:08:ed:b1:d7:e7:73:ad:3f:90:5e:7f:67:a5:
45:71:a7:5c:0b:d0:f7:f1:52:18:98:1c:b9:2b:ad:
f6:9f:fc:08:36:5e:27:cb:1a:79:dd:86:4d:f0:49:
cd:9e:85:60:49:7b:65:93:cb:64:a2:15:32:8b:9b:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F7:8A:64:5A:EE:D5:1C:48:F6:8E:1C:B4:38:CD:4C:9E:93:72:1A
X509v3 Authority Key Identifier:
keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:93:8e:a1:a5:a2:fc:07:a9:18:b2:ed:c6:56:3b:bb:b1:52:
cd:d9:ed:2e:5c:3d:99:34:b7:0c:a8:9e:57:21:6a:3e:a7:fb:
20:e8:73:46:a1:7d:58:26:ed:5f:2b:e4:f1:a6:73:0b:3b:b8:
8a:6f:07:2c:71:16:b0:de:6d:8a:78:76:aa:af:3a:cc:94:a1:
8b:38:87:a4:2c:5f:2a:5c:45:19:25:77:0a:31:0c:be:27:5c:
46:5a:1c:9e:3c:51:f4:41:b0:90:a0:3c:ea:0c:75:cf:0b:7d:
10:d8:fa:2d:f6:79:9a:a0:5d:76:a5:4c:ac:f4:84:c9:3e:8f:
02:1c:70:11:1b:1f:13:00:1a:eb:7c:6c:b9:df:9a:21:c6:c6:
60:36:5c:0a:59:aa:5a:3c:ca:b4:e4:0e:0a:f2:86:ee:2c:ec:
a3:d2:d0:0f:da:c6:0b:3e:fd:f0:51:d5:95:39:74:2c:da:63:
77:f7:c2:0f:77:f9:82:64:15:51:76:88:2b:92:95:01:8a:25:
7f:9f:3c:7a:55:9c:44:64:41:40:61:7f:2d:91:75:2d:88:bf:
48:02:16:12:b1:09:4f:b6:fc:80:b7:63:59:a6:d6:46:5c:65:
06:7b:6e:36:58:70:db:b5:bd:58:1f:88:8d:e2:44:7c:4d:05:
74:7b:c7:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY2UEMKn3bHA7d9nwk8+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Y2Q1NjNhMmFlNjUyOWM5ZjQzZmU0YjVjNjdkYjcwZTc3
OWEwOWIwHhcNMjUxMTA1MDUwMDM2WhcNMjUxMTA2MDUwMDM2WjAzMTEwLwYDVQQD
EyhjNGY3OGE2NDVhZWVkNTFjNDhmNjhlMWNiNDM4Y2Q0YzllOTM3MjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TvSoRyrtNUOzdnbJzPDNYUDZKcf
BkW4TgF7dwmQJbZGrz1mkC+NCjcFO1lkdrNh4yjiasIUv+BHnrwnl2yfdh+7YiCE
gpYoaRnQ++hyv7RMhEMoziplnBWDkQCSC965syMZdh30j4AmeaK4og9+v7wYXWZQ
SnxfPHNee8ek8ljspKZTCjmP+JyWBQf9/bC1fq23q4C/YqHjPasRWvMI9CLT+z0m
HVBAbb0rwJOES3lOdjQNJ7U2vqZebkcIBQFhGeyrSgjtsdfnc60/kF5/Z6VFcadc
C9D38VIYmBy5K632n/wINl4nyxp53YZN8EnNnoVgSXtlk8tkohUyi5sdBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMT3imRa7tUcSPaOHLQ4zUyek3IaMB8GA1UdIwQY
MBaAFFjNVjoq5lKcn0P+S1xn23DneaCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80ODA2YTUtNmZhMy00ODMyLWI3NDAt
NDdhNWY0ODFlNmY1LzEvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80ODA2YTUtNmZhMy00ODMyLWI3NDAtNDdhNWY0ODFlNmY1
LzEvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJOOoaWi
/AepGLLtxlY7u7FSzdntLlw9mTS3DKieVyFqPqf7IOhzRqF9WCbtXyvk8aZzCzu4
im8HLHEWsN5tinh2qq86zJShiziHpCxfKlxFGSV3CjEMvidcRlocnjxR9EGwkKA8
6gx1zwt9ENj6LfZ5mqBddqVMrPSEyT6PAhxwERsfEwAa63xsud+aIcbGYDZcClmq
WjzKtOQOCvKG7izso9LQD9rGCz798FHVlTl0LNpjd/fCD3f5gmQVUXaIK5KVAYol
f588elWcRGRBQGF/LZF1LYi/SAIWErEJT7b8gLdjWabWRlxlBntuNlhw27W9WB+I
jeJEfE0FdHvHZA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:56:28 2025 by rpki-client