Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft
File: Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft (raw, json)
Hash identifier: +jJy26XZeJ2YKfBmdr31rBmONA/aWkv//fY49vwPRyw=
Subject key identifier: B3:3F:82:17:2F:71:8E:69:F5:0C:B3:6C:00:B6:5C:D3:BA:8B:9D:2A
Authority key identifier: 59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE
Certificate issuer: /CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
Certificate serial: 019A4EF58B2B2EDF56F5D9CAD17ECE432462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft
Manifest number: 0EC3
Signing time: Tue 04 Nov 2025 13:01:45 +0000
Manifest this update: Tue 04 Nov 2025 13:01:45 +0000
Manifest next update: Wed 05 Nov 2025 13:01:45 +0000
Files and hashes: 1: EBOIj8lPqb1xDaW8RBbB1Ok6-LE.roa (hash: QTASo2dR9S0FHaEMTzsEAOKw6oKeRRFkI+5ogAhRzoY=)
2: Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl (hash: +mz4Y4ccBiUh3BzrWWk5xJu3FTQERMfR5D4QWo/D7IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8b:2b:2e:df:56:f5:d9:ca:d1:7e:ce:43:24:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
Validity
Not Before: Nov 4 13:01:45 2025 GMT
Not After : Nov 5 13:01:45 2025 GMT
Subject: CN=b33f82172f718e69f50cb36c00b65cd3ba8b9d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:de:e5:29:a4:1c:eb:02:98:fc:25:fa:4f:
55:d4:1f:49:1f:ea:4b:d1:74:76:19:da:e3:da:f5:
78:2e:16:c4:68:dc:2b:ad:55:2b:43:35:66:12:3a:
79:0c:4a:ed:14:94:24:22:3f:70:08:cc:f4:7a:9e:
f7:d9:57:2a:44:e0:16:02:82:a5:fe:c6:37:f8:d8:
78:eb:46:f2:10:79:d2:7c:b4:f5:45:04:a1:56:6f:
e6:0b:25:ef:d0:6c:40:6a:6b:6f:e2:cf:55:48:e7:
2e:b4:ef:bc:ac:2b:68:53:46:98:e5:37:af:0d:a3:
a7:a1:9c:b8:b7:eb:6c:cd:a3:83:10:1e:d3:6c:ef:
e2:21:eb:55:5f:f4:97:35:f3:e3:3a:55:3c:5b:5c:
b5:06:f7:73:9c:41:ba:a3:97:9e:b9:f9:57:12:a9:
77:44:34:15:57:a1:ab:dd:3d:13:93:cc:28:0e:df:
70:35:71:71:cf:07:d8:96:43:f8:78:f4:69:a4:75:
b9:5c:88:f0:e0:53:b5:d5:ea:0f:e1:37:0c:b4:94:
d5:2e:5f:6e:bd:80:13:6a:68:ad:33:ad:ab:23:db:
fb:76:1e:49:8c:02:e4:0f:89:26:e3:b3:2a:43:b3:
fd:14:ef:d3:c4:d2:fd:aa:59:f2:c5:86:b5:7b:66:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3F:82:17:2F:71:8E:69:F5:0C:B3:6C:00:B6:5C:D3:BA:8B:9D:2A
X509v3 Authority Key Identifier:
keyid:59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:29:d0:a2:08:da:00:5d:40:c7:55:6b:f4:e3:db:66:1d:4e:
70:99:b8:fe:c6:d6:ae:92:81:28:bb:76:2a:2f:79:31:bc:7e:
b6:2b:2a:27:24:e8:d9:85:72:66:cc:be:5a:2b:7d:90:c0:48:
6a:a1:25:9b:f1:22:3d:ca:14:07:7b:84:de:32:53:3e:61:2c:
3a:e8:bd:24:21:a4:59:fa:4b:a7:df:89:51:13:0a:18:14:d9:
76:cb:4d:e4:e5:07:68:1c:fc:d8:70:51:a5:4d:3c:97:8e:d8:
d2:47:a7:97:8f:85:8a:03:f5:1d:66:b7:6f:bf:49:d0:2e:69:
0d:e9:61:ce:b3:0d:48:05:18:fe:39:45:05:da:a8:67:54:c8:
4d:f9:3c:4e:c5:d2:c6:28:a7:a3:16:b7:bd:84:15:7c:e3:c6:
88:af:d9:fa:e5:a7:40:95:e4:63:b4:86:5f:38:af:40:e5:8f:
8f:d3:49:4f:e3:d5:68:7c:2a:54:5c:42:c9:34:95:95:5c:31:
4a:59:01:c1:7b:9b:82:72:3f:e8:9a:c1:c3:b2:70:e9:a5:85:
63:2c:97:78:80:56:39:a6:53:60:04:76:20:b9:33:02:42:c9:
fd:43:43:ad:f3:62:f6:dc:ec:49:d0:b5:2a:ee:69:80:24:c9:
23:4f:34:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9YsrLt9W9dnK0X7OQyRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YTllOWY4ZWE0NzQ4NmQ4MGM5ZDZkY2ZkNTY4ZjY1NGQ0
ZjA3ZWUwHhcNMjUxMTA0MTMwMTQ1WhcNMjUxMTA1MTMwMTQ1WjAzMTEwLwYDVQQD
EyhiMzNmODIxNzJmNzE4ZTY5ZjUwY2IzNmMwMGI2NWNkM2JhOGI5ZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw07e5SmkHOsCmPwl+k9V1B9JH+pL
0XR2Gdrj2vV4LhbEaNwrrVUrQzVmEjp5DErtFJQkIj9wCMz0ep732VcqROAWAoKl
/sY3+Nh460byEHnSfLT1RQShVm/mCyXv0GxAamtv4s9VSOcutO+8rCtoU0aY5Tev
DaOnoZy4t+tszaODEB7TbO/iIetVX/SXNfPjOlU8W1y1BvdznEG6o5eeuflXEql3
RDQVV6Gr3T0Tk8woDt9wNXFxzwfYlkP4ePRppHW5XIjw4FO11eoP4TcMtJTVLl9u
vYATamitM62rI9v7dh5JjALkD4km47MqQ7P9FO/TxNL9qlnyxYa1e2aOHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLM/ghcvcY5p9QyzbAC2XNO6i50qMB8GA1UdIwQY
MBaAFFmp6fjqR0htgMnW3P1Wj2VNTwfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81M2FkMmItMzU5Yi00MzZhLWEyZWIt
YWZlODRlMThkNTZmLzEvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81M2FkMmItMzU5Yi00MzZhLWEyZWItYWZlODRlMThkNTZm
LzEvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCnQogja
AF1Ax1Vr9OPbZh1OcJm4/sbWrpKBKLt2Ki95Mbx+tisqJyTo2YVyZsy+Wit9kMBI
aqElm/EiPcoUB3uE3jJTPmEsOui9JCGkWfpLp9+JURMKGBTZdstN5OUHaBz82HBR
pU08l47Y0kenl4+FigP1HWa3b79J0C5pDelhzrMNSAUY/jlFBdqoZ1TITfk8TsXS
xiinoxa3vYQVfOPGiK/Z+uWnQJXkY7SGXzivQOWPj9NJT+PVaHwqVFxCyTSVlVwx
SlkBwXubgnI/6JrBw7Jw6aWFYyyXeIBWOaZTYAR2ILkzAkLJ/UNDrfNi9tzsSdC1
Ku5pgCTJI080bg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:46 2025 by rpki-client