Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: p/0iLK6mkclzyGBemVMAekw9xXF1QzZtnupn9+uuAxk=
Subject key identifier: DF:AC:15:A9:31:4B:7B:6E:F1:1E:9D:5B:C1:FF:73:5E:5F:AF:ED:EF
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 0199FD341B39A65FA9452B434518CBEE93EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: V-65NroNLvpJ9Twbo3fHxbLWAEE.roa (hash: NtuVubfew3le+olU13mvFJqg5qy010/3pkiRpLBMMVI=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: UcJT37wlnB9ZsGoSfwxV4j6En0VTPGiB2PdVhkfHW7g=)
3: k0eS8GbpTFpaVPi3K9_CZDFOaPU.roa (hash: Ej4uiaS/aPM289NUT10w3nroNfgE/+kc/Uq0qTQREqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1b:39:a6:5f:a9:45:2b:43:45:18:cb:ee:93:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=dfac15a9314b7b6ef11e9d5bc1ff735e5fafedef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:f9:0f:f2:4c:a7:93:33:ee:a1:5e:57:f6:
f8:b9:07:f9:6c:cb:40:9b:40:1b:cd:ea:d0:cf:0e:
03:d7:4c:dd:da:74:42:e6:fa:ae:2a:2f:6c:8f:63:
6f:20:92:aa:79:9d:1b:27:2b:cd:04:a6:0c:8d:60:
9a:5a:92:75:35:3d:73:0e:82:f9:36:80:3a:f0:ad:
e0:53:1e:73:c7:06:6a:12:ae:96:75:fb:29:84:66:
b0:ad:d3:df:87:4f:96:09:1e:94:72:b3:cf:c9:94:
2e:8e:53:e6:e6:03:4b:8b:da:01:3f:d9:38:b1:e1:
bc:ef:e0:45:be:18:a2:07:2a:26:87:10:a5:91:ff:
46:97:cf:c6:0e:1d:34:88:fb:e6:77:d7:c2:3b:99:
73:86:4d:ea:53:11:e1:c3:bd:6d:bd:36:3c:3d:ad:
28:2e:00:17:23:a8:65:db:c7:c1:9d:51:cc:42:1c:
e6:ef:8b:2e:99:00:3a:73:85:b4:a6:25:d9:ed:35:
24:7e:ae:98:95:b9:30:4f:35:aa:3d:be:ce:11:52:
19:5b:65:0a:85:dd:6d:bf:9f:64:9a:d0:39:75:e3:
58:6b:b6:bd:67:cd:85:e6:05:de:48:59:b0:40:bb:
57:81:9e:66:ff:03:4b:15:e7:d4:c4:22:2f:5f:b5:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AC:15:A9:31:4B:7B:6E:F1:1E:9D:5B:C1:FF:73:5E:5F:AF:ED:EF
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:65:b8:12:29:56:2f:0d:fa:e6:5e:c6:4f:90:ff:c1:03:71:
c4:03:0c:c8:a2:5a:0b:bb:99:aa:99:69:d3:67:78:ac:2a:bc:
b0:bc:47:92:06:04:0f:9a:80:05:1e:02:84:67:dd:24:23:6c:
0f:8e:cf:7b:3a:75:03:3e:e0:fa:ca:98:be:f4:5e:46:4d:ca:
03:82:69:2e:e3:39:20:92:40:c7:37:22:fe:d1:2f:8f:01:49:
b5:ee:cc:2f:9c:c8:00:89:7f:c5:5e:5c:ef:ae:9a:97:40:1f:
ba:5c:78:b1:e1:83:1c:9a:9d:87:d4:ad:91:bb:57:8c:29:d3:
dc:d9:23:47:42:67:19:49:db:d0:c0:83:9d:a2:62:29:3b:99:
6a:9d:8e:b0:13:c7:62:3e:81:4d:5a:11:1e:4c:3a:0e:ab:e8:
ad:83:57:71:9c:ea:a6:bb:68:97:5c:f5:d6:c8:2c:6e:17:df:
05:80:4c:c3:3d:fa:bf:db:44:b9:ec:73:57:29:af:34:60:bd:
fd:05:81:a0:7c:04:3d:bb:1f:bc:34:c8:26:72:a6:a6:04:d0:
35:c9:97:39:3c:3e:93:d3:47:c7:bd:7e:28:cf:c1:c3:0e:5d:
ea:c3:a0:13:e1:0e:a7:c4:24:34:be:3e:b8:97:64:60:4f:04:
f7:bd:19:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NBs5pl+pRStDRRjL7pPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YzNjYzk5ODk5MzczYzg1OTc0ZjAxYzljZDdhYTA1N2Fi
OTdmYWIwHhcNMjUxMDE5MTYwMTE0WhcNMjUxMDIwMTYwMTE0WjAzMTEwLwYDVQQD
EyhkZmFjMTVhOTMxNGI3YjZlZjExZTlkNWJjMWZmNzM1ZTVmYWZlZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIL5D/JMp5Mz7qFeV/b4uQf5bMtA
m0AbzerQzw4D10zd2nRC5vquKi9sj2NvIJKqeZ0bJyvNBKYMjWCaWpJ1NT1zDoL5
NoA68K3gUx5zxwZqEq6WdfsphGawrdPfh0+WCR6UcrPPyZQujlPm5gNLi9oBP9k4
seG87+BFvhiiByomhxClkf9Gl8/GDh00iPvmd9fCO5lzhk3qUxHhw71tvTY8Pa0o
LgAXI6hl28fBnVHMQhzm74sumQA6c4W0piXZ7TUkfq6YlbkwTzWqPb7OEVIZW2UK
hd1tv59kmtA5deNYa7a9Z82F5gXeSFmwQLtXgZ5m/wNLFefUxCIvX7URMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+sFakxS3tu8R6dW8H/c15fr+3vMB8GA1UdIwQY
MBaAFFnDzJmJk3PIWXTwHJzXqgV6uX+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NWYwNTEtNWUxZC00ZDM2LWE1OTMt
MWE1ZWI1MDg4NWFlLzEvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny85NWYwNTEtNWUxZC00ZDM2LWE1OTMtMWE1ZWI1MDg4NWFl
LzEvV2NQTW1ZbVRjOGhaZFBBY25OZXFCWHE1ZjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2W4EilW
Lw365l7GT5D/wQNxxAMMyKJaC7uZqplp02d4rCq8sLxHkgYED5qABR4ChGfdJCNs
D47Pezp1Az7g+sqYvvReRk3KA4JpLuM5IJJAxzci/tEvjwFJte7ML5zIAIl/xV5c
766al0Afulx4seGDHJqdh9StkbtXjCnT3NkjR0JnGUnb0MCDnaJiKTuZap2OsBPH
Yj6BTVoRHkw6DqvorYNXcZzqprtol1z11sgsbhffBYBMwz36v9tEuexzVymvNGC9
/QWBoHwEPbsfvDTIJnKmpgTQNcmXOTw+k9NHx71+KM/Bww5d6sOgE+EOp8QkNL4+
uJdkYE8E970ZYA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:45 2025 by rpki-client