Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
File: WN0QF8U0V6ipIUGWh73oqLjrVhE.mft (raw, json)
Hash identifier: SSFQ+q7P7dclGVix1C5BjfFnJfYhoZTMqb09d2lHZS8=
Subject key identifier: A6:EF:96:76:C2:14:84:CF:5F:8B:9E:0A:3A:2B:17:3F:DE:FA:F6:A8
Authority key identifier: 58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
Certificate issuer: /CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Certificate serial: 019A03DA8E5F3A258DF2D7D9F5F384793F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
Manifest number: 0D89
Signing time: Mon 20 Oct 2025 23:00:45 +0000
Manifest this update: Mon 20 Oct 2025 23:00:45 +0000
Manifest next update: Tue 21 Oct 2025 23:00:45 +0000
Files and hashes: 1: WN0QF8U0V6ipIUGWh73oqLjrVhE.crl (hash: kaL5FQ9YPRJSLRwYXI0ldr76Uy489mWI9a4F1bnEQT8=)
2: jywZ9UYkMiz97kwCY4FM3q95-aY.roa (hash: u66se+BAVSb1YHlBvMoU6Y/uC6cRzOafh9TsvAog2jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:8e:5f:3a:25:8d:f2:d7:d9:f5:f3:84:79:3f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Validity
Not Before: Oct 20 23:00:45 2025 GMT
Not After : Oct 21 23:00:45 2025 GMT
Subject: CN=a6ef9676c21484cf5f8b9e0a3a2b173fdefaf6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:0f:45:99:e4:25:3d:00:20:28:a4:a6:89:
85:75:fa:d1:ea:19:ad:e0:d8:68:f0:4c:f1:70:d7:
6d:00:19:71:f6:a2:92:eb:2d:1e:10:91:aa:b5:cd:
6f:35:86:cf:16:b3:2f:47:76:08:1a:5b:b3:c1:a4:
ab:a9:e0:02:83:ab:d0:e2:e4:7c:8f:1f:6f:4d:d2:
87:ab:8e:e3:28:6b:b4:00:97:14:62:71:b6:44:23:
b3:44:88:fc:05:8a:a7:47:c7:e9:55:ff:8b:45:03:
c5:07:b5:26:12:42:c9:08:99:30:c7:db:4c:90:17:
01:ce:b8:0c:5b:08:8c:f8:0f:d3:78:aa:74:a8:98:
cf:36:c5:4f:4b:50:71:89:c1:bd:9c:ce:86:65:71:
c7:b9:8a:5e:a3:b7:35:dc:0a:c6:f3:86:b6:22:97:
2c:28:cb:86:1c:2e:2b:ce:20:aa:f9:0f:b4:e0:de:
2e:b7:9a:44:18:0d:73:af:32:34:af:d2:c4:73:5c:
06:a7:01:1c:79:69:cb:fe:e9:ba:03:23:67:58:ad:
f4:53:26:9d:7d:e7:b1:0b:3c:c3:d5:29:59:68:6d:
d7:6e:bf:10:bd:49:b3:97:0a:a4:69:05:18:68:61:
0f:17:c6:a0:73:fa:cc:02:86:41:0e:cc:7d:b2:0d:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EF:96:76:C2:14:84:CF:5F:8B:9E:0A:3A:2B:17:3F:DE:FA:F6:A8
X509v3 Authority Key Identifier:
keyid:58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:99:63:e5:44:7a:44:ba:30:44:78:3d:1d:36:4a:b1:a7:5a:
94:b8:a4:01:50:b7:57:52:6e:9a:ff:43:7a:b6:fc:5b:e6:09:
52:c6:79:57:5d:97:b0:af:95:84:6c:ea:51:c1:8b:e5:d2:31:
15:c0:62:2d:d5:68:9d:ef:35:22:97:db:3e:63:09:e9:2c:bc:
7c:23:b3:18:96:88:8f:f7:c2:d7:1a:f2:9b:d4:c9:d5:a2:6d:
03:53:a1:f7:24:37:76:47:25:78:6e:14:2f:e5:c7:b8:b1:cf:
a2:21:3d:77:01:b9:e6:3c:97:c8:81:eb:90:6f:9c:87:00:30:
c5:ab:e0:a1:19:f3:34:97:db:67:0d:e0:b1:81:2a:b7:12:17:
ea:ce:65:a6:92:12:b0:9a:63:df:1b:03:2e:04:af:31:c0:55:
01:aa:06:81:79:a1:c9:91:16:e6:f0:12:32:5e:1e:0d:b2:9f:
63:9e:37:13:2b:8a:ac:76:7f:e7:a9:85:53:c0:07:86:c1:4a:
fb:12:6f:19:77:3b:f0:e1:d3:b4:5e:03:7e:62:67:da:55:f4:
e6:50:fe:e4:71:c9:e2:ed:95:14:6e:06:f0:f9:ad:e1:92:bd:
b4:f1:27:4d:2f:bf:c4:87:73:f1:7b:1d:09:4e:e1:2a:87:5a:
14:b9:b4:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoD2o5fOiWN8tfZ9fOEeT8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZGQxMDE3YzUzNDU3YThhOTIxNDE5Njg3YmRlOGE4Yjhl
YjU2MTEwHhcNMjUxMDIwMjMwMDQ1WhcNMjUxMDIxMjMwMDQ1WjAzMTEwLwYDVQQD
EyhhNmVmOTY3NmMyMTQ4NGNmNWY4YjllMGEzYTJiMTczZmRlZmFmNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpwPRZnkJT0AICikpomFdfrR6hmt
4Nho8EzxcNdtABlx9qKS6y0eEJGqtc1vNYbPFrMvR3YIGluzwaSrqeACg6vQ4uR8
jx9vTdKHq47jKGu0AJcUYnG2RCOzRIj8BYqnR8fpVf+LRQPFB7UmEkLJCJkwx9tM
kBcBzrgMWwiM+A/TeKp0qJjPNsVPS1BxicG9nM6GZXHHuYpeo7c13ArG84a2Ipcs
KMuGHC4rziCq+Q+04N4ut5pEGA1zrzI0r9LEc1wGpwEceWnL/um6AyNnWK30Uyad
feexCzzD1SlZaG3Xbr8QvUmzlwqkaQUYaGEPF8agc/rMAoZBDsx9sg2IcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbvlnbCFITPX4ueCjorFz/e+vaoMB8GA1UdIwQY
MBaAFFjdEBfFNFeoqSFBloe96Ki461YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MDZkZGUtZmM1MS00NTZlLWI1ZjEt
ZGNhZjdlZjdhZTNhLzEvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MDZkZGUtZmM1MS00NTZlLWI1ZjEtZGNhZjdlZjdhZTNh
LzEvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMplj5UR6
RLowRHg9HTZKsadalLikAVC3V1Jumv9Derb8W+YJUsZ5V12XsK+VhGzqUcGL5dIx
FcBiLdVone81IpfbPmMJ6Sy8fCOzGJaIj/fC1xrym9TJ1aJtA1Oh9yQ3dkcleG4U
L+XHuLHPoiE9dwG55jyXyIHrkG+chwAwxavgoRnzNJfbZw3gsYEqtxIX6s5lppIS
sJpj3xsDLgSvMcBVAaoGgXmhyZEW5vASMl4eDbKfY543EyuKrHZ/56mFU8AHhsFK
+xJvGXc78OHTtF4DfmJn2lX05lD+5HHJ4u2VFG4G8Pmt4ZK9tPEnTS+/xIdz8Xsd
CU7hKodaFLm0eA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:47:08 2025 by rpki-client