Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
File: WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft (raw, json)
Hash identifier: uuazwu4Srpx1EgKYy22/Bfi5q4YsaEWxMwOl4fWRNp0=
Subject key identifier: FF:1B:11:A4:D3:CC:DE:75:13:49:8B:15:0E:23:A2:12:9C:5A:F4:3D
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial: 019A03A423F13CDCC47393C8C2B32346B78A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
Manifest number: 1460
Signing time: Mon 20 Oct 2025 22:01:20 +0000
Manifest this update: Mon 20 Oct 2025 22:01:20 +0000
Manifest next update: Tue 21 Oct 2025 22:01:20 +0000
Files and hashes: 1: 0G2sdhjp5lZnzYHlHNnybNAXWaA.roa (hash: uK859gUUbnU60gGhJvTBc709jYBTwYoz8yDVwe5ASzQ=)
2: WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl (hash: 9SCt3CYNtHvyjqVx22iyctXE9CC80TbYjeQXVuAu9NU=)
3: YgQwuXy4fXHjt8yt23lzdNRUNeE.roa (hash: JYij/MqawhcXCZJhGzOCCeBPBmK0ZpHAFOooBbBrHTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:23:f1:3c:dc:c4:73:93:c8:c2:b3:23:46:b7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
Validity
Not Before: Oct 20 22:01:20 2025 GMT
Not After : Oct 21 22:01:20 2025 GMT
Subject: CN=ff1b11a4d3ccde7513498b150e23a2129c5af43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:88:e9:37:9a:76:93:39:db:d7:ad:a3:ad:
97:87:1a:e1:4f:a2:62:29:e7:70:24:7d:93:44:f8:
a3:10:e3:13:96:d5:ee:0f:26:6d:ac:05:74:6a:3b:
4f:19:66:ae:87:52:64:27:7a:68:f4:07:98:23:6a:
2f:7d:f3:29:e2:58:29:c2:fe:a9:43:93:6f:89:ce:
15:80:75:67:2b:dc:69:9d:8c:0f:59:bc:3c:7f:e2:
3c:7a:24:3d:17:4c:08:77:e7:2a:d9:b9:96:62:f9:
d9:f8:24:af:5b:db:0a:25:58:ac:a8:74:2f:6f:74:
9f:f7:4e:26:44:42:63:8a:c5:0d:ce:8f:90:83:a0:
cb:b2:7c:ad:0b:e6:7d:f5:33:a4:ae:82:4b:70:2e:
b0:cf:e8:ba:68:3b:8e:39:33:38:ba:ed:bc:c4:4d:
27:34:8c:ac:60:7f:3a:15:80:fa:3d:b1:26:10:9d:
59:d5:ab:54:b6:18:94:58:8b:9e:53:bf:25:e6:e5:
a9:75:6e:b3:d2:c4:49:33:1e:27:f0:b3:3d:eb:3b:
e2:23:de:f8:f2:62:7d:57:f8:1c:a5:27:e6:6d:2f:
aa:b2:19:f0:e2:e4:6a:6a:b2:e3:61:b6:5d:6a:1c:
a2:37:b0:4d:fc:a1:69:44:05:6d:4c:45:0c:2a:d6:
9b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1B:11:A4:D3:CC:DE:75:13:49:8B:15:0E:23:A2:12:9C:5A:F4:3D
X509v3 Authority Key Identifier:
keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ea:8f:99:7b:76:cf:4c:98:ef:7e:b5:a6:f8:a0:44:ea:f1:
9d:43:6e:2a:70:24:3e:17:b1:ee:66:c1:ec:b6:64:7d:6c:cc:
98:9f:2b:61:76:43:56:d9:51:34:9f:16:b1:c5:92:ca:14:34:
4a:ee:8d:a8:82:1a:c7:59:16:b6:77:40:8d:d0:18:de:55:c3:
b4:80:89:ab:5a:91:b1:ab:31:c9:2d:d9:33:3b:58:71:9d:2d:
5a:64:d5:72:d6:45:43:f5:7a:cc:4e:3b:06:ac:6f:8e:f6:5a:
69:c6:d1:77:dc:7e:68:46:dd:a7:b4:f8:39:e7:80:db:4a:08:
0e:fc:75:83:68:d2:a7:88:9e:a6:47:aa:11:72:74:cb:d0:f9:
d8:6f:ab:8c:cd:da:04:7f:40:fe:80:14:61:3d:5b:d6:88:bd:
63:67:ad:57:ce:a5:ff:71:05:b9:8d:17:dd:d2:7f:11:bd:08:
79:86:4b:63:d4:fe:d1:2c:3c:9a:14:ed:89:9c:46:ee:04:b1:
e2:c8:a1:94:52:6d:af:5d:8b:31:3e:e5:08:f9:52:d1:82:fc:
43:31:af:0e:6c:f2:25:f5:cd:71:5f:51:45:b3:29:f9:83:be:
3d:68:6f:e1:f8:ea:8d:06:5b:70:d8:e9:70:20:a4:e8:89:48:
67:f6:bc:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDpCPxPNzEc5PIwrMjRreKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OTBjMTU1Mzc2MmFjOWFmNTdkZjliNThkOWRjNTBhZjQw
OWM1NjYwHhcNMjUxMDIwMjIwMTIwWhcNMjUxMDIxMjIwMTIwWjAzMTEwLwYDVQQD
EyhmZjFiMTFhNGQzY2NkZTc1MTM0OThiMTUwZTIzYTIxMjljNWFmNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi6I6TeadpM529eto62XhxrhT6Ji
KedwJH2TRPijEOMTltXuDyZtrAV0ajtPGWauh1JkJ3po9AeYI2ovffMp4lgpwv6p
Q5Nvic4VgHVnK9xpnYwPWbw8f+I8eiQ9F0wId+cq2bmWYvnZ+CSvW9sKJVisqHQv
b3Sf904mREJjisUNzo+Qg6DLsnytC+Z99TOkroJLcC6wz+i6aDuOOTM4uu28xE0n
NIysYH86FYD6PbEmEJ1Z1atUthiUWIueU78l5uWpdW6z0sRJMx4n8LM96zviI974
8mJ9V/gcpSfmbS+qshnw4uRqarLjYbZdahyiN7BN/KFpRAVtTEUMKtabawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8bEaTTzN51E0mLFQ4johKcWvQ9MB8GA1UdIwQY
MBaAFFmQwVU3Yqya9X35tY2dxQr0CcVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1pEQlZUZGlySnIxZmZtMWpaM0ZDdlFKeFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hOGY4ZTEtZGNlMi00N2VmLTgyNGUt
YmVmMTAzNGVkYmU1LzEvV1pEQlZUZGlySnIxZmZtMWpaM0ZDdlFKeFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hOGY4ZTEtZGNlMi00N2VmLTgyNGUtYmVmMTAzNGVkYmU1
LzEvV1pEQlZUZGlySnIxZmZtMWpaM0ZDdlFKeFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmeqPmXt2
z0yY7361pvigROrxnUNuKnAkPhex7mbB7LZkfWzMmJ8rYXZDVtlRNJ8WscWSyhQ0
Su6NqIIax1kWtndAjdAY3lXDtICJq1qRsasxyS3ZMztYcZ0tWmTVctZFQ/V6zE47
BqxvjvZaacbRd9x+aEbdp7T4OeeA20oIDvx1g2jSp4iepkeqEXJ0y9D52G+rjM3a
BH9A/oAUYT1b1oi9Y2etV86l/3EFuY0X3dJ/Eb0IeYZLY9T+0Sw8mhTtiZxG7gSx
4sihlFJtr12LMT7lCPlS0YL8QzGvDmzyJfXNcV9RRbMp+YO+PWhv4fjqjQZbcNjp
cCCk6IlIZ/a8DQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:42:08 2025 by rpki-client