Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File: WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier: CwIV03tlAMTNZbpXVwm1xgM3oFA/pRUmTQg0pZUaMS8=
Subject key identifier: 84:35:5E:62:D3:26:7B:D0:52:E1:58:37:23:8A:36:35:89:20:A2:21
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 0199FBEBAE5A217D77FB19BBEF0CE22DAE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: IDDHEmAkKJaWQYKCW6fOE9lEfxIoBdlw+Goa/GKFe+g=)
2: v9e6BQrrpkX4J49zO0X4mqGyYf8.roa (hash: BAka5v89zPoK2V8W4Aeck9ZsQ+ba33dD3QTkdH9ixgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ae:5a:21:7d:77:fb:19:bb:ef:0c:e2:2d:ae:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=84355e62d3267bd052e15837238a36358920a221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:88:98:9a:cb:fc:21:a5:68:b9:30:60:d0:
c8:49:d0:01:f3:73:09:47:24:49:4e:da:92:ec:99:
c3:b2:22:c4:02:88:41:0a:1d:16:67:88:af:e0:5b:
f8:d0:37:93:c5:91:3e:af:3d:75:98:27:8d:13:c1:
43:54:36:50:9f:cc:7a:e0:3c:21:0f:88:37:41:37:
f3:c1:3a:9e:35:4b:80:b2:af:7a:ae:97:7a:0a:f0:
67:6b:40:41:4b:dc:6d:7a:3c:96:ac:ff:b1:d7:c6:
32:4e:7c:34:5c:74:2b:9d:96:46:a6:42:e7:ad:91:
c5:dd:dc:e4:6e:9b:37:c5:c1:7d:83:c1:d8:47:b2:
94:61:1b:64:eb:63:45:b0:e2:41:c9:a9:25:7f:e6:
b2:4c:1f:57:26:48:6a:06:d2:82:48:b0:38:5e:60:
43:32:91:5c:0d:f1:e0:29:93:59:58:62:12:ac:06:
45:16:f4:b9:39:7f:18:17:72:ea:73:ae:9e:02:2a:
71:47:aa:61:33:cc:6e:12:df:32:d9:73:9d:d7:32:
93:da:d7:78:3b:e7:21:7f:92:46:6e:67:f7:43:30:
e4:4d:c6:af:b8:19:c8:5a:1d:d9:b7:22:46:bd:18:
38:6a:78:ca:22:bd:de:0f:bf:92:88:b4:2f:47:68:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:35:5E:62:D3:26:7B:D0:52:E1:58:37:23:8A:36:35:89:20:A2:21
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bc:01:29:64:fa:1f:fc:23:86:f8:bb:36:4f:e9:d4:b6:82:
c3:ff:c4:04:97:a9:c5:4c:92:e2:4a:76:3b:ea:95:3f:27:18:
0a:4a:c0:41:58:2d:52:d9:7c:0e:d8:b0:c0:17:f7:4d:7e:b8:
4f:51:1e:52:a7:16:1e:7b:ea:d2:33:1d:2d:9c:e8:c8:29:cc:
aa:c8:ac:e9:b9:df:b2:9d:31:1f:92:46:03:57:83:fa:cb:35:
32:51:4f:d1:24:f2:c0:a4:5a:77:ad:93:4a:57:8a:07:85:a1:
a1:02:cd:33:dd:53:a9:f0:5f:04:48:fc:bf:b6:fb:1c:bb:25:
8f:53:fa:2d:b2:39:30:75:ae:1e:7d:19:99:60:dc:6f:e6:2a:
ca:b2:14:f9:52:d9:00:ab:96:09:9e:12:e3:4c:f2:40:91:b2:
6e:0f:94:c1:34:b0:54:d8:4e:40:48:75:04:79:86:b9:b0:5b:
93:a4:9a:14:ac:09:9e:93:29:b4:52:80:51:c4:a7:6c:7b:13:
e3:3f:ee:65:78:95:d2:6b:f9:32:73:6e:01:15:ea:18:7c:20:
37:fe:b3:3e:1e:ef:62:f0:1a:60:c9:50:7f:1b:bc:31:c6:27:
a7:47:17:35:42:bb:4d:2e:6c:be:ec:1a:6c:a8:c1:c6:4f:43:
44:ac:8b:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7665aIX13+xm77wziLa6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhY2IzMDg5NDYxZTFmNWY4OTg0Yjc3NDJjODliYjY4ZjFi
ODhjMTIwHhcNMjUxMDE5MTAwMjMwWhcNMjUxMDIwMTAwMjMwWjAzMTEwLwYDVQQD
Eyg4NDM1NWU2MmQzMjY3YmQwNTJlMTU4MzcyMzhhMzYzNTg5MjBhMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY2ImJrL/CGlaLkwYNDISdAB83MJ
RyRJTtqS7JnDsiLEAohBCh0WZ4iv4Fv40DeTxZE+rz11mCeNE8FDVDZQn8x64Dwh
D4g3QTfzwTqeNUuAsq96rpd6CvBna0BBS9xtejyWrP+x18YyTnw0XHQrnZZGpkLn
rZHF3dzkbps3xcF9g8HYR7KUYRtk62NFsOJByaklf+ayTB9XJkhqBtKCSLA4XmBD
MpFcDfHgKZNZWGISrAZFFvS5OX8YF3Lqc66eAipxR6phM8xuEt8y2XOd1zKT2td4
O+chf5JGbmf3QzDkTcavuBnIWh3ZtyJGvRg4anjKIr3eD7+SiLQvR2iy9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ1XmLTJnvQUuFYNyOKNjWJIKIhMB8GA1UdIwQY
MBaAFFrLMIlGHh9fiYS3dCyJu2jxuIwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAt
YWM1MzZiMmFiNGY4LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAtYWM1MzZiMmFiNGY4
LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebwBKWT6
H/wjhvi7Nk/p1LaCw//EBJepxUyS4kp2O+qVPycYCkrAQVgtUtl8DtiwwBf3TX64
T1EeUqcWHnvq0jMdLZzoyCnMqsis6bnfsp0xH5JGA1eD+ss1MlFP0STywKRad62T
SleKB4WhoQLNM91TqfBfBEj8v7b7HLslj1P6LbI5MHWuHn0ZmWDcb+YqyrIU+VLZ
AKuWCZ4S40zyQJGybg+UwTSwVNhOQEh1BHmGubBbk6SaFKwJnpMptFKAUcSnbHsT
4z/uZXiV0mv5MnNuARXqGHwgN/6zPh7vYvAaYMlQfxu8McYnp0cXNUK7TS5svuwa
bKjBxk9DRKyLVg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:06 2025 by rpki-client