Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
File: WqtKKPwphT3SPHa9Hi94zpmZoVo.mft (raw, json)
Hash identifier: 62nh8kblUhzvUPS5EDYqnp6CWUyVPTA3xKjPwvEwPNo=
Subject key identifier: 2E:1F:14:09:E9:A9:7F:27:4E:65:4A:7F:91:8B:AF:18:07:9A:29:7B
Authority key identifier: 5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
Certificate issuer: /CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Certificate serial: 0199FA6ABAFCA7AAF0ADCFBB8C4FDE41429D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
Manifest number: 69
Signing time: Sun 19 Oct 2025 03:02:02 +0000
Manifest this update: Sun 19 Oct 2025 03:02:02 +0000
Manifest next update: Mon 20 Oct 2025 03:02:02 +0000
Files and hashes: 1: WqtKKPwphT3SPHa9Hi94zpmZoVo.crl (hash: d1lEh5WOD57aR9+hUdM5Nw1ZfkYb+QXkJKmuMkS2L2s=)
2: n3BgyUulT02071hYFOzA1unhxoM.roa (hash: BPb0g/1bWdgtULRInakuHMpgQ/U61gydQ46sGmWxZGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:ba:fc:a7:aa:f0:ad:cf:bb:8c:4f:de:41:42:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Validity
Not Before: Oct 19 03:02:02 2025 GMT
Not After : Oct 20 03:02:02 2025 GMT
Subject: CN=2e1f1409e9a97f274e654a7f918baf18079a297b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:14:14:85:38:2c:71:f7:b2:05:09:83:80:
9a:1a:84:ff:17:4e:6c:2d:52:73:30:73:e5:32:7b:
62:af:ca:3a:6b:23:d1:3c:f0:ac:7c:af:95:ec:6f:
1f:f5:db:5a:36:18:1f:2a:7d:d8:a8:2a:5c:20:49:
f0:3a:f3:f5:6e:d2:38:7c:db:3c:0a:d2:bb:aa:bf:
dc:ad:85:00:15:d7:88:d5:db:fc:eb:87:ac:1e:c9:
53:a8:7c:da:f3:cf:58:64:21:2f:fa:cb:ee:20:87:
af:e7:5d:d6:8d:a3:ef:1e:11:72:b0:bf:75:d4:20:
7d:11:79:f3:9b:ec:40:7f:75:2c:28:41:95:57:53:
db:9b:1a:ab:1d:4c:cd:a0:b6:00:18:7a:f7:61:29:
3f:58:b7:bd:d5:2d:c6:a8:18:93:91:24:b4:8c:e7:
00:ff:45:75:f9:56:07:0f:f5:48:05:0f:31:d4:5c:
69:f2:8f:25:4f:38:6a:f3:22:04:86:c6:d1:4b:40:
df:f1:89:6c:59:72:ab:ac:05:e4:01:a5:24:a3:a5:
2a:a1:43:8d:6c:52:6a:86:ad:36:71:80:67:84:7b:
7c:ec:88:3e:f2:d2:18:66:33:0c:71:b7:fd:1d:6a:
b8:f1:2c:cd:d5:bd:2a:4b:01:96:a2:86:80:0b:56:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1F:14:09:E9:A9:7F:27:4E:65:4A:7F:91:8B:AF:18:07:9A:29:7B
X509v3 Authority Key Identifier:
keyid:5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:64:e6:ea:b4:30:86:77:fd:8e:32:83:d2:a8:b4:8e:89:27:
36:05:83:6a:aa:0f:3f:bb:ee:4f:06:7d:f3:a7:36:b5:b9:33:
3b:00:2f:bd:11:c5:32:dd:3f:ef:9e:33:d3:c0:e3:e7:cc:f6:
bf:1c:d4:76:83:f9:76:6e:8c:4f:6c:49:08:e9:9e:7c:e6:1d:
8f:ce:e6:4e:48:27:b8:b4:ce:89:dd:31:0e:9d:76:4a:4b:ca:
ad:e5:3b:5b:92:2a:e9:3d:42:2f:32:c0:0d:de:fc:5b:ca:fb:
b4:97:b0:3e:5e:ac:47:5a:31:90:8e:1b:8e:89:1a:d8:b3:ff:
e5:2f:2d:c3:66:d3:27:ac:8d:33:cd:6b:5a:72:32:55:c0:f6:
22:c5:73:3e:5c:d6:a7:a4:cc:f1:2f:1a:2f:b0:4f:ca:6e:b2:
f5:8d:dc:99:2f:ce:e9:8a:10:37:8c:cc:44:e7:7f:24:82:1f:
26:7e:82:83:9a:fe:3a:a5:bc:3f:1c:60:c7:f6:c1:f9:ce:66:
48:3a:9d:7d:6e:17:89:02:e6:e3:5b:c9:69:82:53:a5:64:f7:
5f:19:1c:bf:f9:ed:af:d8:15:43:b6:52:69:c1:d7:1d:93:3e:
05:de:25:00:5c:42:bb:45:37:76:60:51:3d:52:12:9f:86:ed:
ff:e0:ba:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6arr8p6rwrc+7jE/eQUKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYWI0YTI4ZmMyOTg1M2RkMjNjNzZiZDFlMmY3OGNlOTk5
OWExNWEwHhcNMjUxMDE5MDMwMjAyWhcNMjUxMDIwMDMwMjAyWjAzMTEwLwYDVQQD
EygyZTFmMTQwOWU5YTk3ZjI3NGU2NTRhN2Y5MThiYWYxODA3OWEyOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsAUFIU4LHH3sgUJg4CaGoT/F05s
LVJzMHPlMntir8o6ayPRPPCsfK+V7G8f9dtaNhgfKn3YqCpcIEnwOvP1btI4fNs8
CtK7qr/crYUAFdeI1dv864esHslTqHza889YZCEv+svuIIev513WjaPvHhFysL91
1CB9EXnzm+xAf3UsKEGVV1PbmxqrHUzNoLYAGHr3YSk/WLe91S3GqBiTkSS0jOcA
/0V1+VYHD/VIBQ8x1Fxp8o8lTzhq8yIEhsbRS0Df8YlsWXKrrAXkAaUko6UqoUON
bFJqhq02cYBnhHt87Ig+8tIYZjMMcbf9HWq48SzN1b0qSwGWooaAC1YcSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4fFAnpqX8nTmVKf5GLrxgHmil7MB8GA1UdIwQY
MBaAFFqrSij8KYU90jx2vR4veM6ZmaFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3F0S0tQd3BoVDNTUEhhOUhpOTR6cG1ab1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xZmYwMDEtMjZkYS00YmVmLWIxZmIt
ODNjYWM0YjIyMjMzLzEvV3F0S0tQd3BoVDNTUEhhOUhpOTR6cG1ab1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xZmYwMDEtMjZkYS00YmVmLWIxZmItODNjYWM0YjIyMjMz
LzEvV3F0S0tQd3BoVDNTUEhhOUhpOTR6cG1ab1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2Tm6rQw
hnf9jjKD0qi0joknNgWDaqoPP7vuTwZ986c2tbkzOwAvvRHFMt0/754z08Dj58z2
vxzUdoP5dm6MT2xJCOmefOYdj87mTkgnuLTOid0xDp12SkvKreU7W5Iq6T1CLzLA
Dd78W8r7tJewPl6sR1oxkI4bjoka2LP/5S8tw2bTJ6yNM81rWnIyVcD2IsVzPlzW
p6TM8S8aL7BPym6y9Y3cmS/O6YoQN4zMROd/JIIfJn6Cg5r+OqW8Pxxgx/bB+c5m
SDqdfW4XiQLm41vJaYJTpWT3Xxkcv/ntr9gVQ7ZSacHXHZM+Bd4lAFxCu0U3dmBR
PVISn4bt/+C6gQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:10 2025 by rpki-client