Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier: aTkJ5dXOYJw7WeFjRB73oIutFpFglG5+lfcbA/EO4Cg=
Subject key identifier: 62:1E:AB:16:D2:60:C7:80:B4:12:86:83:58:E4:AB:95:08:D3:CE:5B
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 019A4E4F6FA8698C151E702CAEA55192908F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number: 064A
Signing time: Tue 04 Nov 2025 10:00:19 +0000
Manifest this update: Tue 04 Nov 2025 10:00:19 +0000
Manifest next update: Wed 05 Nov 2025 10:00:19 +0000
Files and hashes: 1: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: hnwzBnbi7qFzsisPGrvmO518Yd0sv2RW7qNNn+YmGYw=)
2: a6Ca0db6IRWqpeQUf-mkPOP5Y6E.roa (hash: +wI+O0cNbhPu/Y/iWm666e3mQkbcXkl04FBEwBpeXro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:6f:a8:69:8c:15:1e:70:2c:ae:a5:51:92:90:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Nov 4 10:00:19 2025 GMT
Not After : Nov 5 10:00:19 2025 GMT
Subject: CN=621eab16d260c780b412868358e4ab9508d3ce5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:43:2c:89:b1:a6:a3:f4:bf:51:89:9a:c7:e0:
2b:f0:91:1d:b6:be:cd:35:ab:a7:2d:e3:16:9f:39:
d8:46:78:15:27:d1:a4:22:05:46:ad:46:a1:2f:53:
52:0b:1b:49:95:a0:13:97:dc:99:4f:f8:d2:ae:8e:
de:ba:10:d1:54:ed:be:92:c9:8e:17:b2:91:b4:f5:
da:79:5b:34:be:67:01:28:67:81:eb:bd:5d:18:c4:
57:c4:65:f8:84:d1:1d:b5:8f:5b:3e:c3:03:53:9d:
15:2f:5b:56:49:f7:45:12:8b:44:bb:3a:b6:2f:8e:
64:11:c7:41:ec:b1:45:70:7f:08:12:4f:dd:8f:d6:
34:e4:d6:cb:50:d9:91:c3:fd:ff:3e:dd:59:f8:d1:
8e:40:e8:6b:4f:6c:2f:87:69:39:aa:1a:6b:a3:f3:
19:b9:0e:2b:40:99:01:35:ec:f4:26:7d:51:e3:eb:
42:d6:b0:75:07:63:6d:99:13:b9:e1:80:59:b2:d7:
88:76:e6:70:18:d1:c8:cb:2c:89:a4:b9:27:d8:e4:
b5:9e:ae:58:6b:0f:73:1f:0e:55:db:64:c9:48:c0:
f2:51:d3:32:17:e9:14:d4:ed:85:42:a5:91:34:49:
ec:31:2a:cc:e3:55:72:53:38:20:64:ea:1e:a5:92:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1E:AB:16:D2:60:C7:80:B4:12:86:83:58:E4:AB:95:08:D3:CE:5B
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:20:e4:fb:52:43:20:6a:c4:74:1e:e4:32:60:bb:1a:e8:4e:
27:7c:cf:31:c5:72:ef:01:4e:64:c0:c1:0a:a2:29:09:40:89:
e2:32:45:93:0e:ae:86:dd:e4:e2:da:01:7c:5d:37:e2:73:44:
70:70:73:ae:24:83:25:21:5a:70:76:46:01:bc:1e:df:b0:a8:
84:aa:30:65:b9:b6:c2:8b:33:49:7b:f0:6c:06:b4:d8:f0:15:
76:1e:d0:87:47:57:17:11:f5:b6:4e:df:26:3f:fc:98:03:0a:
0c:85:d3:8e:dc:b2:b5:6e:06:9b:4b:0c:d0:cb:ae:e9:9d:41:
2f:a3:cd:2a:cb:97:de:94:1e:47:e2:16:fc:85:0c:cb:56:6e:
7b:ac:c3:8b:5d:f2:e1:03:d3:95:6f:1c:91:ef:6c:0d:88:55:
6e:55:a7:f9:75:51:5e:23:bd:88:75:81:9b:d6:ca:8b:62:2e:
ee:31:0f:94:de:5f:8a:b6:a9:47:7f:4b:3c:b1:07:51:8a:23:
a5:be:57:f0:65:80:53:44:44:98:a6:be:0d:e0:f7:07:ac:bf:
e4:52:43:e2:8a:6f:a0:87:82:e6:50:52:86:42:7d:46:0f:6d:
d8:77:16:72:06:bf:ae:10:12:96:29:38:f8:70:bd:a2:76:0f:
96:d4:ba:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT2+oaYwVHnAsrqVRkpCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDExMTY1MTNjMjNkODdhYWNiZjViMWJiZWUzOTk4MWM3
NjMxYzEwHhcNMjUxMTA0MTAwMDE5WhcNMjUxMTA1MTAwMDE5WjAzMTEwLwYDVQQD
Eyg2MjFlYWIxNmQyNjBjNzgwYjQxMjg2ODM1OGU0YWI5NTA4ZDNjZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EMsibGmo/S/UYmax+Ar8JEdtr7N
NaunLeMWnznYRngVJ9GkIgVGrUahL1NSCxtJlaATl9yZT/jSro7euhDRVO2+ksmO
F7KRtPXaeVs0vmcBKGeB671dGMRXxGX4hNEdtY9bPsMDU50VL1tWSfdFEotEuzq2
L45kEcdB7LFFcH8IEk/dj9Y05NbLUNmRw/3/Pt1Z+NGOQOhrT2wvh2k5qhpro/MZ
uQ4rQJkBNez0Jn1R4+tC1rB1B2NtmRO54YBZsteIduZwGNHIyyyJpLkn2OS1nq5Y
aw9zHw5V22TJSMDyUdMyF+kU1O2FQqWRNEnsMSrM41VyUzggZOoepZKpkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIeqxbSYMeAtBKGg1jkq5UI085bMB8GA1UdIwQY
MBaAFFrREWUTwj2Hqsv1sbvuOZgcdjHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNjOGQtODgwOC00YzFlLTgxZjAt
MjNhYzk3OWQ0MWFkLzEvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMWNjOGQtODgwOC00YzFlLTgxZjAtMjNhYzk3OWQ0MWFk
LzEvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4yDk+1JD
IGrEdB7kMmC7GuhOJ3zPMcVy7wFOZMDBCqIpCUCJ4jJFkw6uht3k4toBfF034nNE
cHBzriSDJSFacHZGAbwe37CohKowZbm2woszSXvwbAa02PAVdh7Qh0dXFxH1tk7f
Jj/8mAMKDIXTjtyytW4Gm0sM0Muu6Z1BL6PNKsuX3pQeR+IW/IUMy1Zue6zDi13y
4QPTlW8cke9sDYhVblWn+XVRXiO9iHWBm9bKi2Iu7jEPlN5firapR39LPLEHUYoj
pb5X8GWAU0REmKa+DeD3B6y/5FJD4opvoIeC5lBShkJ9Rg9t2HcWcga/rhASlik4
+HC9onYPltS6GA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:39 2025 by rpki-client