Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: WofVzsOEM2s2SVd68DOe4GrqDm6MOB/+ZgJEP0nGpMs=
Subject key identifier: 59:1B:59:0F:B1:14:76:04:28:41:91:4E:21:B7:F9:FE:51:3D:50:E2
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 019A006C727C2612ED5AFE3CD9C86FE359C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 04B6
Signing time: Mon 20 Oct 2025 07:01:38 +0000
Manifest this update: Mon 20 Oct 2025 07:01:38 +0000
Manifest next update: Tue 21 Oct 2025 07:01:38 +0000
Files and hashes: 1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=)
2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: QAfNphDoiguQTLGO5ONo98d9QLuDlEqFwE9HeFq0BtI=)
3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:72:7c:26:12:ed:5a:fe:3c:d9:c8:6f:e3:59:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Oct 20 07:01:38 2025 GMT
Not After : Oct 21 07:01:38 2025 GMT
Subject: CN=591b590fb11476042841914e21b7f9fe513d50e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3e:e8:c1:74:78:f6:9d:ac:51:f9:0c:a1:a3:
1d:6b:78:d9:67:41:a0:8c:18:e0:06:b2:f9:3a:61:
72:86:df:fc:36:b5:a9:fe:dd:96:07:0c:16:a3:95:
fa:fc:73:62:b7:0f:60:02:e1:ca:3d:74:7c:a4:a3:
17:68:b0:a7:f7:bb:8a:78:a5:42:3b:f4:23:d3:9f:
c2:19:5f:15:d2:73:f4:35:fc:c4:55:ac:06:94:bd:
fa:60:69:7f:99:7b:b0:43:26:9a:7b:31:d1:cd:e1:
47:5d:0c:73:fd:9a:2f:f9:e6:b5:ed:d6:88:bc:72:
c9:12:d2:ec:cf:f3:70:ae:b7:d7:15:1e:ba:0f:fb:
78:24:b4:2f:c1:f5:bd:1f:b8:b2:a9:db:b0:7a:5e:
7a:f7:95:4a:72:57:23:c4:f0:05:36:32:f2:d3:af:
97:3d:2d:c0:ab:4e:d5:55:4e:ac:76:0f:0a:10:a2:
76:df:94:7a:c4:cd:8c:77:d5:2e:ac:f3:db:48:2e:
fd:96:63:ef:9b:5c:63:ce:11:82:cc:59:55:76:85:
c2:96:eb:1e:1d:e6:f8:94:be:b3:18:80:d9:7b:4b:
ec:dd:71:65:f6:b4:44:92:d9:ef:68:5f:92:ef:96:
bc:e3:50:09:9d:4b:bc:1d:4b:89:d4:5f:87:ec:aa:
9a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1B:59:0F:B1:14:76:04:28:41:91:4E:21:B7:F9:FE:51:3D:50:E2
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0e:c8:62:60:a1:0f:98:9a:f2:6b:02:00:69:07:99:cb:55:
00:c2:3b:91:f3:61:3b:66:ab:eb:9e:dc:73:82:45:28:9e:25:
12:90:40:2b:5b:73:93:ed:ff:61:6a:22:2f:a5:db:5f:5b:39:
b7:19:a0:af:3b:31:80:55:97:20:c7:48:83:cc:ea:dc:c9:f2:
a9:b8:47:7e:6f:0b:78:02:1f:d0:cc:ab:d3:fe:ce:f8:39:cf:
6e:49:ab:51:71:d5:4d:67:84:26:b1:21:2b:18:9e:06:60:70:
67:d6:0c:99:b8:a2:89:1f:f8:fb:d2:04:f1:4a:e6:cb:5f:02:
51:7f:09:70:40:16:aa:64:46:80:66:e8:9f:1a:ac:e8:61:df:
07:e6:73:88:02:67:03:a8:c4:ed:5d:2d:17:ac:60:6a:ea:04:
f3:0b:31:b9:79:c0:e4:e5:1d:0a:8e:48:e9:39:8f:7f:ab:14:
f2:17:84:97:ac:a5:29:92:40:d3:cc:56:c4:70:50:fa:a7:6c:
59:bc:00:1d:5f:8f:82:80:42:d4:41:f2:49:92:6e:12:37:f1:
77:4b:e1:6c:d7:43:a1:c8:be:91:16:e6:a6:88:db:48:8f:a0:
90:b1:f8:50:b3:88:90:3c:47:4d:9f:46:67:1e:4c:c8:5e:d6:
83:7b:a0:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbHJ8JhLtWv482chv41nGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMjMyYWUzOGE5MjMzYWI3ZmMxYjQyOWE1MDI5MjIwYWZh
N2IyODgwHhcNMjUxMDIwMDcwMTM4WhcNMjUxMDIxMDcwMTM4WjAzMTEwLwYDVQQD
Eyg1OTFiNTkwZmIxMTQ3NjA0Mjg0MTkxNGUyMWI3ZjlmZTUxM2Q1MGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9D7owXR49p2sUfkMoaMda3jZZ0Gg
jBjgBrL5OmFyht/8NrWp/t2WBwwWo5X6/HNitw9gAuHKPXR8pKMXaLCn97uKeKVC
O/Qj05/CGV8V0nP0NfzEVawGlL36YGl/mXuwQyaaezHRzeFHXQxz/Zov+ea17daI
vHLJEtLsz/NwrrfXFR66D/t4JLQvwfW9H7iyqduwel5695VKclcjxPAFNjLy06+X
PS3Aq07VVU6sdg8KEKJ235R6xM2Md9UurPPbSC79lmPvm1xjzhGCzFlVdoXCluse
Heb4lL6zGIDZe0vs3XFl9rREktnvaF+S75a841AJnUu8HUuJ1F+H7KqazQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkbWQ+xFHYEKEGRTiG3+f5RPVDiMB8GA1UdIwQY
MBaAFFojKuOKkjOrf8G0KaUCkiCvp7KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2It
MTBhNDg1YzBiMGYyLzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2ItMTBhNDg1YzBiMGYy
LzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADw7IYmCh
D5ia8msCAGkHmctVAMI7kfNhO2ar657cc4JFKJ4lEpBAK1tzk+3/YWoiL6XbX1s5
txmgrzsxgFWXIMdIg8zq3MnyqbhHfm8LeAIf0Myr0/7O+DnPbkmrUXHVTWeEJrEh
KxieBmBwZ9YMmbiiiR/4+9IE8Urmy18CUX8JcEAWqmRGgGbonxqs6GHfB+ZziAJn
A6jE7V0tF6xgauoE8wsxuXnA5OUdCo5I6TmPf6sU8heEl6ylKZJA08xWxHBQ+qds
WbwAHV+PgoBC1EHySZJuEjfxd0vhbNdDoci+kRbmpojbSI+gkLH4ULOIkDxHTZ9G
Zx5MyF7Wg3ug0g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:42 2025 by rpki-client