
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File: WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier: kM6+OcqkjUELUps3GS0DNIl+5LORdzbsxOc+7xuq1Kw=
Subject key identifier: 00:0A:EE:11:BB:EB:2A:AD:E7:4F:4E:2B:79:12:AB:E4:85:DC:0D:0B
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer: /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial: 0199FEB52264D5B0DF0F7713CDC8527D8879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number: 0243
Signing time: Sun 19 Oct 2025 23:01:47 +0000
Manifest this update: Sun 19 Oct 2025 23:01:47 +0000
Manifest next update: Mon 20 Oct 2025 23:01:47 +0000
Files and hashes: 1: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: MU0QqR9V42UAV0yOuycUo2uUFJeRWqXOmeoU03nnFuM=)
2: YyT2XNVLd1WyCxtwc8XjqhwP3s4.roa (hash: vmLIxrmSzRhBjR//CR1+0NyG35ecgKl2ei7ZqRd06oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:22:64:d5:b0:df:0f:77:13:cd:c8:52:7d:88:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Validity
Not Before: Oct 19 23:01:47 2025 GMT
Not After : Oct 20 23:01:47 2025 GMT
Subject: CN=000aee11bbeb2aade74f4e2b7912abe485dc0d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:0c:16:ff:7f:95:c5:ee:35:b7:aa:1d:f9:
4f:62:1d:57:40:ad:56:70:28:2f:fd:a0:72:86:3b:
39:e4:0e:6a:c3:0e:46:2d:7e:9d:0f:6d:a3:c8:1f:
74:cf:a5:6d:ff:97:b4:5c:c7:d2:04:7f:b3:0d:60:
0a:71:3d:69:17:52:b5:e5:d9:b0:99:f5:2d:10:69:
7c:a6:50:4f:9b:84:a6:c5:13:88:c5:1f:e4:98:5e:
2b:54:7a:05:e8:cf:0f:05:52:b3:17:34:fb:4a:1f:
be:6e:72:09:2b:86:49:74:42:b3:0e:5e:0f:8c:2c:
b0:57:61:cb:f1:0c:a3:90:49:a0:06:5c:ef:8f:84:
1a:81:ee:09:fb:ea:aa:6c:84:2a:71:d4:20:1e:ec:
ac:b3:47:b0:2e:44:3b:a6:d4:f5:19:3f:20:83:9a:
1a:a9:40:fa:01:08:4d:10:9b:9b:ff:0b:1a:89:e3:
d3:14:e2:d2:0e:41:06:81:05:79:fb:2a:37:b2:da:
f0:a7:2d:98:6b:67:e3:83:60:aa:18:d9:06:00:a5:
e8:16:04:65:bf:87:3c:8e:87:72:f9:95:25:aa:9c:
e9:ea:71:b0:a2:12:ba:6e:d7:1c:66:f4:72:03:0d:
1e:b1:08:d3:95:ee:96:dc:44:05:ce:77:59:44:38:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0A:EE:11:BB:EB:2A:AD:E7:4F:4E:2B:79:12:AB:E4:85:DC:0D:0B
X509v3 Authority Key Identifier:
keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9b:7a:cc:c0:5e:4b:b7:14:ba:2a:b6:db:e2:71:a1:3a:12:
df:a9:19:76:2a:bd:4d:d4:35:70:33:2f:c4:23:2c:4b:f6:d3:
a4:25:4a:07:93:de:1b:69:65:c0:80:3d:9f:3e:79:ae:87:8b:
d3:68:8e:fb:d1:1a:fa:e0:ac:60:32:c7:96:b1:20:b4:11:61:
45:95:b4:03:8c:10:4f:44:d6:f3:67:d6:72:fc:ed:44:80:a6:
22:b7:b8:36:70:35:e8:1b:0f:72:87:ed:de:be:af:9d:d4:2f:
0b:e2:e5:6a:97:b8:43:29:30:2b:e9:6b:e1:cd:3e:6e:7c:86:
1e:2b:bd:d2:90:f6:a5:a7:0c:fe:f9:65:d9:09:55:e3:7a:a7:
9b:a9:c3:95:9a:a5:f8:6f:01:61:78:59:d0:44:03:d1:f1:7f:
dc:24:7e:39:84:d0:24:a3:f8:fd:ec:e3:40:e1:97:05:4d:a1:
35:da:d5:a4:45:97:5d:52:1c:93:bd:e0:33:b1:49:f8:45:61:
0b:fa:6a:59:ad:02:43:b4:51:dc:b6:61:ca:5b:e9:cf:4c:9c:
4c:62:90:53:1e:ff:4a:e0:92:ea:0c:55:b6:57:02:65:f7:e0:
07:6c:8d:0b:bb:32:9d:0f:c6:12:c1:fe:87:7d:83:cc:90:44:
eb:42:2c:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tSJk1bDfD3cTzchSfYh5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTRkNDFjZmE5NDNkYTE5ZjI3NzhhMGQzNzNkZDJhNzc0
MWQwNmQwHhcNMjUxMDE5MjMwMTQ3WhcNMjUxMDIwMjMwMTQ3WjAzMTEwLwYDVQQD
EygwMDBhZWUxMWJiZWIyYWFkZTc0ZjRlMmI3OTEyYWJlNDg1ZGMwZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3cMFv9/lcXuNbeqHflPYh1XQK1W
cCgv/aByhjs55A5qww5GLX6dD22jyB90z6Vt/5e0XMfSBH+zDWAKcT1pF1K15dmw
mfUtEGl8plBPm4SmxROIxR/kmF4rVHoF6M8PBVKzFzT7Sh++bnIJK4ZJdEKzDl4P
jCywV2HL8QyjkEmgBlzvj4Qage4J++qqbIQqcdQgHuyss0ewLkQ7ptT1GT8gg5oa
qUD6AQhNEJub/wsaiePTFOLSDkEGgQV5+yo3strwpy2Ya2fjg2CqGNkGAKXoFgRl
v4c8jody+ZUlqpzp6nGwohK6btccZvRyAw0esQjTle6W3EQFzndZRDhS1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAK7hG76yqt509OK3kSq+SF3A0LMB8GA1UdIwQY
MBaAFFgU1Bz6lD2hnyd4oNNz3Sp3QdBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hNTBhYTQtZTA5Mi00ZDhjLTlkODMt
MGUwZGY2OGNkZTAzLzEvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9hNTBhYTQtZTA5Mi00ZDhjLTlkODMtMGUwZGY2OGNkZTAz
LzEvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpt6zMBe
S7cUuiq22+JxoToS36kZdiq9TdQ1cDMvxCMsS/bTpCVKB5PeG2llwIA9nz55roeL
02iO+9Ea+uCsYDLHlrEgtBFhRZW0A4wQT0TW82fWcvztRICmIre4NnA16BsPcoft
3r6vndQvC+Llape4QykwK+lr4c0+bnyGHiu90pD2pacM/vll2QlV43qnm6nDlZql
+G8BYXhZ0EQD0fF/3CR+OYTQJKP4/ezjQOGXBU2hNdrVpEWXXVIck73gM7FJ+EVh
C/pqWa0CQ7RR3LZhylvpz0ycTGKQUx7/SuCS6gxVtlcCZffgB2yNC7synQ/GEsH+
h32DzJBE60IsOg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:03:11 2025 by rpki-client