Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
File: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft (raw, json)
Hash identifier: gdrr23/V8gBjJbEvGP+7Wq1irfxBYi1hJtpVymgkrj0=
Subject key identifier: EF:07:BE:16:9D:D9:DF:AD:BC:42:A0:28:EC:28:6C:D9:CC:32:45:8F
Authority key identifier: 5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
Certificate issuer: /CN=5a0e488bb09d2873d662e2846a2288a425ded946
Certificate serial: 0199FBEAC0013CB67F807275D5CEE3F365A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
Manifest number: 02F8
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl (hash: ffj3kezePnzRdUpABRvuhoJJJU0mN7ALVpi9r0TnwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c0:01:3c:b6:7f:80:72:75:d5:ce:e3:f3:65:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0e488bb09d2873d662e2846a2288a425ded946
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=ef07be169dd9dfadbc42a028ec286cd9cc32458f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a9:8c:d0:d3:c3:c3:7c:f9:73:f0:d4:bd:90:
ae:3b:be:6c:ab:40:e5:53:8a:72:d3:a0:33:3d:a9:
0b:93:91:04:48:77:3f:3f:38:75:73:56:b2:a1:35:
e6:9e:43:e9:0a:3e:ff:d2:20:1b:ef:50:7a:65:6e:
dc:d7:1e:29:3b:fd:5a:57:04:9f:8f:07:16:3b:f7:
29:21:6f:6a:17:6b:e5:84:a7:76:40:89:db:91:66:
bc:34:e9:fa:47:9f:63:9e:e8:c5:75:a2:10:11:0b:
b0:b0:4e:9b:09:7e:4a:ae:ca:80:be:9a:60:19:c9:
d5:bb:ac:a1:db:86:51:0c:1d:2c:4c:26:20:fe:b8:
ce:8a:a8:00:a7:83:58:0a:6e:d8:35:c9:ab:7a:8c:
1b:b5:68:19:d9:a8:11:e7:c1:c9:d9:ad:80:cb:5f:
c3:8e:52:c9:e4:77:49:6d:34:a8:bc:f1:dd:96:91:
01:31:55:2b:bc:e5:fc:61:cb:4d:52:a7:97:0a:05:
b8:39:8a:f7:bb:2c:b0:71:fb:88:ad:20:5c:58:8c:
13:3c:61:f7:0d:18:96:26:03:b7:30:48:15:f8:b0:
39:cf:cd:4f:90:ab:07:f4:61:b4:43:48:7c:3d:c9:
7b:ef:6c:69:3c:1c:54:38:78:69:c7:dd:1f:69:b9:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:07:BE:16:9D:D9:DF:AD:BC:42:A0:28:EC:28:6C:D9:CC:32:45:8F
X509v3 Authority Key Identifier:
keyid:5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f3:00:db:60:5e:8a:bd:52:bc:0a:61:be:b0:73:1e:7d:9d:
6f:43:c4:74:bf:b7:be:e1:64:c7:4d:61:ff:e9:71:b2:a3:7c:
cb:84:2d:71:63:43:aa:67:01:17:54:ff:a4:ff:40:b6:fe:8a:
0d:2c:e6:70:b5:c7:35:8e:eb:67:c9:05:1c:a3:e4:da:12:03:
53:df:11:81:c9:c6:5d:df:58:74:5a:e9:25:47:44:d6:5b:88:
cd:e5:b7:d2:32:98:df:27:1c:fb:a6:43:99:15:5a:ac:03:d0:
63:e1:bf:ea:0d:4a:f9:0d:63:b0:7f:e3:7f:be:3d:6c:93:2e:
29:2a:4b:b9:d7:fb:a8:c0:35:c8:d6:7b:31:69:e3:ed:02:69:
a7:84:23:86:c7:97:80:c8:bf:e2:29:29:b9:b4:7c:af:04:96:
f1:bc:31:7e:04:15:41:f3:4a:0f:1b:45:19:49:08:32:4c:9e:
8e:3b:20:24:d9:34:da:69:93:c4:6e:b7:46:48:bc:32:21:61:
c5:93:36:d1:d1:70:ae:59:0b:25:09:fb:97:b1:cb:eb:92:63:
f1:88:26:af:55:be:cc:b8:d4:82:a3:de:31:17:ae:b9:36:f5:
95:b0:15:0f:90:7f:68:8b:68:d5:b3:78:a4:c1:80:26:d2:8f:
0c:29:9e:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76sABPLZ/gHJ11c7j82WpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMGU0ODhiYjA5ZDI4NzNkNjYyZTI4NDZhMjI4OGE0MjVk
ZWQ5NDYwHhcNMjUxMDE5MTAwMTI5WhcNMjUxMDIwMTAwMTI5WjAzMTEwLwYDVQQD
EyhlZjA3YmUxNjlkZDlkZmFkYmM0MmEwMjhlYzI4NmNkOWNjMzI0NThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6amM0NPDw3z5c/DUvZCuO75sq0Dl
U4py06AzPakLk5EESHc/Pzh1c1ayoTXmnkPpCj7/0iAb71B6ZW7c1x4pO/1aVwSf
jwcWO/cpIW9qF2vlhKd2QInbkWa8NOn6R59jnujFdaIQEQuwsE6bCX5KrsqAvppg
GcnVu6yh24ZRDB0sTCYg/rjOiqgAp4NYCm7YNcmreowbtWgZ2agR58HJ2a2Ay1/D
jlLJ5HdJbTSovPHdlpEBMVUrvOX8YctNUqeXCgW4OYr3uyywcfuIrSBcWIwTPGH3
DRiWJgO3MEgV+LA5z81PkKsH9GG0Q0h8Pcl772xpPBxUOHhpx90fabl2fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8Hvhad2d+tvEKgKOwobNnMMkWPMB8GA1UdIwQY
MBaAFFoOSIuwnShz1mLihGoiiKQl3tlGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMWNjMmEtYWQ2Ni00ZDJhLTllMzAt
MWY1OWJjNzI4N2NkLzEvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xMWNjMmEtYWQ2Ni00ZDJhLTllMzAtMWY1OWJjNzI4N2Nk
LzEvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/MA22Be
ir1SvAphvrBzHn2db0PEdL+3vuFkx01h/+lxsqN8y4QtcWNDqmcBF1T/pP9Atv6K
DSzmcLXHNY7rZ8kFHKPk2hIDU98RgcnGXd9YdFrpJUdE1luIzeW30jKY3ycc+6ZD
mRVarAPQY+G/6g1K+Q1jsH/jf749bJMuKSpLudf7qMA1yNZ7MWnj7QJpp4QjhseX
gMi/4ikpubR8rwSW8bwxfgQVQfNKDxtFGUkIMkyejjsgJNk02mmTxG63Rki8MiFh
xZM20dFwrlkLJQn7l7HL65Jj8Ygmr1W+zLjUgqPeMReuuTb1lbAVD5B/aIto1bN4
pMGAJtKPDCmeoA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:53 2025 by rpki-client