Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
File: WPde8NYw4dCGeQygt45-744qz7s.mft (raw, json)
Hash identifier: ulyUqR+03DsWcjxRXB1OiARUssCrXIHUlUmRT8cZ9ck=
Subject key identifier: 34:4C:87:A3:2A:AA:FE:34:9F:B4:DE:38:BB:89:0E:EA:54:CF:57:3C
Authority key identifier: 58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
Certificate issuer: /CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Certificate serial: 0199FEEBF40D4397D7CA1F477621890ECAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 00:01:40 +0000
Manifest this update: Mon 20 Oct 2025 00:01:40 +0000
Manifest next update: Tue 21 Oct 2025 00:01:40 +0000
Files and hashes: 1: WPde8NYw4dCGeQygt45-744qz7s.crl (hash: MNF8f3PGPit6Ys4/y43YiKs6k7wvX+3Zn2kE9Zq0EVc=)
2: x5rquIVhJ13GXmSiEvGgLAga1-w.roa (hash: 89X00FnyaHqizMTzCA2kNKHXqUvFiwqZlo80Pxfjk08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f4:0d:43:97:d7:ca:1f:47:76:21:89:0e:ca:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Validity
Not Before: Oct 20 00:01:40 2025 GMT
Not After : Oct 21 00:01:40 2025 GMT
Subject: CN=344c87a32aaafe349fb4de38bb890eea54cf573c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:1b:5a:f7:86:a8:51:b4:b2:07:2a:91:ed:
5a:5d:cc:4a:48:96:7a:97:88:fa:fd:2b:18:b7:e0:
a8:e3:5c:57:58:76:24:50:1c:3b:5c:b4:bc:95:8b:
4c:b5:f8:ae:10:4f:15:2c:bf:10:7d:e8:0e:ea:ae:
f1:fe:69:b6:3a:97:ba:f9:21:dc:ba:31:a7:6e:52:
b2:6d:da:a3:73:67:0c:11:88:76:ce:f6:dd:5c:e3:
7a:2b:b8:8a:70:1b:3f:fd:b9:a9:d6:53:48:88:34:
8b:c8:19:a1:a4:b3:ca:8e:d9:6b:76:65:1a:ee:5d:
1b:6d:99:7d:f2:6f:df:6e:32:fd:70:56:2d:33:47:
6c:be:55:9f:1b:a3:0f:c9:48:84:94:22:3c:4b:aa:
cb:85:f7:65:6e:75:3f:2a:a9:46:22:9b:87:fd:7a:
03:c2:c0:0a:3c:95:98:1a:7b:52:ee:d9:a7:3c:36:
0a:5b:49:3b:17:13:8f:1a:0f:98:b9:ef:d1:76:b3:
ed:c0:33:70:0a:f2:00:3a:6f:22:81:7b:5d:78:be:
89:fd:20:b8:e3:f9:e9:26:6e:71:ca:67:3b:b1:1a:
95:91:98:e4:c4:b4:d3:68:48:cf:94:86:9e:d5:44:
2e:12:25:75:96:20:84:9a:6d:8a:8b:a5:79:c3:f2:
cd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4C:87:A3:2A:AA:FE:34:9F:B4:DE:38:BB:89:0E:EA:54:CF:57:3C
X509v3 Authority Key Identifier:
keyid:58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1c:de:c3:6f:7c:00:80:f8:d6:69:db:ed:fb:2c:da:6d:9c:
6b:38:5d:e8:c8:ec:2f:6f:4d:39:a3:6b:fb:cd:00:87:d9:e1:
a7:37:35:fa:0f:3f:17:fb:7c:cb:07:d6:3e:67:0c:6b:18:7a:
72:c0:b8:d6:63:76:12:2b:ab:37:c6:2b:c1:4a:0d:c9:99:88:
01:da:ae:a7:1b:0c:7f:e9:e5:03:f9:7b:66:95:e2:c8:5c:25:
61:3c:8c:f8:0c:52:cc:4b:89:b2:4e:32:94:e6:34:24:27:c4:
32:db:b1:11:96:67:60:6a:9e:01:65:ab:d0:a3:0b:ce:3b:60:
5e:dd:d5:ec:9b:6f:3b:aa:7e:34:41:f8:08:81:0b:43:59:83:
a4:0a:43:0a:38:62:be:65:11:bc:55:db:3a:dc:00:b5:2e:d1:
c8:91:8b:b0:22:91:3d:d7:6f:76:81:4e:1d:8e:d9:a1:ef:b1:
6e:7e:1c:3b:3f:a8:8e:10:ac:ea:c4:e7:94:24:f4:a3:71:b2:
52:c5:e4:bf:60:dc:e0:ee:f8:38:3b:37:1c:a7:54:75:4f:80:
c6:6d:26:34:f0:b1:3b:4c:4a:d1:5a:10:06:9b:39:97:0d:95:
89:c5:9b:94:b8:7d:fe:96:d4:22:4c:87:3f:4c:01:6f:da:e0:
d1:51:3c:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+6/QNQ5fXyh9HdiGJDsrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Zjc1ZWYwZDYzMGUxZDA4Njc5MGNhMGI3OGU3ZWVmOGUy
YWNmYmIwHhcNMjUxMDIwMDAwMTQwWhcNMjUxMDIxMDAwMTQwWjAzMTEwLwYDVQQD
EygzNDRjODdhMzJhYWFmZTM0OWZiNGRlMzhiYjg5MGVlYTU0Y2Y1NzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LQbWveGqFG0sgcqke1aXcxKSJZ6
l4j6/SsYt+Co41xXWHYkUBw7XLS8lYtMtfiuEE8VLL8QfegO6q7x/mm2Ope6+SHc
ujGnblKybdqjc2cMEYh2zvbdXON6K7iKcBs//bmp1lNIiDSLyBmhpLPKjtlrdmUa
7l0bbZl98m/fbjL9cFYtM0dsvlWfG6MPyUiElCI8S6rLhfdlbnU/KqlGIpuH/XoD
wsAKPJWYGntS7tmnPDYKW0k7FxOPGg+Yue/RdrPtwDNwCvIAOm8igXtdeL6J/SC4
4/npJm5xymc7sRqVkZjkxLTTaEjPlIae1UQuEiV1liCEmm2Ki6V5w/LN0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRMh6Mqqv40n7TeOLuJDupUz1c8MB8GA1UdIwQY
MBaAFFj3XvDWMOHQhnkMoLeOfu+OKs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zNGJkNmUtNzlhNy00MTI2LThhMzIt
MmZkMjgwZTBkNTRhLzEvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8zNGJkNmUtNzlhNy00MTI2LThhMzItMmZkMjgwZTBkNTRh
LzEvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChzew298
AID41mnb7fss2m2cazhd6MjsL29NOaNr+80Ah9nhpzc1+g8/F/t8ywfWPmcMaxh6
csC41mN2EiurN8YrwUoNyZmIAdqupxsMf+nlA/l7ZpXiyFwlYTyM+AxSzEuJsk4y
lOY0JCfEMtuxEZZnYGqeAWWr0KMLzjtgXt3V7JtvO6p+NEH4CIELQ1mDpApDCjhi
vmURvFXbOtwAtS7RyJGLsCKRPddvdoFOHY7Zoe+xbn4cOz+ojhCs6sTnlCT0o3Gy
UsXkv2Dc4O74ODs3HKdUdU+Axm0mNPCxO0xK0VoQBps5lw2VicWblLh9/pbUIkyH
P0wBb9rg0VE8SA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:52:08 2025 by rpki-client