Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
File: wmsHYHZubMcjnCdVotDTn74U7Xg.mft (raw, json)
Hash identifier: TGNzFTwGGcpagAinUniXG3sKL6lc+AGSYBYyAcBWk2U=
Subject key identifier: C7:06:48:AB:E5:7E:DA:D4:40:C1:0D:5F:E5:47:76:89:7E:5D:A9:81
Authority key identifier: C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78
Certificate issuer: /CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
Certificate serial: 0199FFC8CDEBF27E12BD1437024A37274CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
Manifest number: 0A9E
Signing time: Mon 20 Oct 2025 04:02:53 +0000
Manifest this update: Mon 20 Oct 2025 04:02:53 +0000
Manifest next update: Tue 21 Oct 2025 04:02:53 +0000
Files and hashes: 1: wmsHYHZubMcjnCdVotDTn74U7Xg.crl (hash: keSM0PzAUMLsB6A14rm/hbyc8l0SBTAHZjpUwf9KP68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:cd:eb:f2:7e:12:bd:14:37:02:4a:37:27:4c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
Validity
Not Before: Oct 20 04:02:53 2025 GMT
Not After : Oct 21 04:02:53 2025 GMT
Subject: CN=c70648abe57edad440c10d5fe54776897e5da981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:15:4a:d3:50:d7:f5:8d:01:ae:d6:98:6b:
af:b8:3c:4c:8a:72:3c:c2:a0:5c:3f:2d:36:af:e1:
9f:68:86:6f:f7:41:28:f0:cc:30:10:42:2d:45:59:
99:64:27:1c:e4:46:df:74:ec:41:d5:80:7b:19:71:
13:2e:71:df:05:ab:34:e4:1b:82:e9:d0:24:97:53:
11:dc:6a:db:4e:95:b9:b0:ba:40:24:4b:27:14:88:
68:d3:f0:69:c9:0b:6e:d2:18:32:22:d1:14:e6:0a:
7b:f3:b0:32:6d:04:c4:34:e2:97:8e:0e:7d:42:8f:
78:48:99:87:69:57:ac:87:c3:39:88:c0:95:89:86:
3f:9c:ab:1b:ab:a1:d3:bc:fa:70:99:66:1b:b2:8d:
75:b1:22:ce:27:be:e6:51:dd:ef:69:b2:19:1b:6e:
76:10:ff:0c:c3:85:67:00:30:5b:b8:64:0f:00:7a:
5b:59:0b:3e:c9:da:95:f0:f7:c6:23:b2:0a:77:47:
1d:88:76:c6:67:85:cb:e0:38:9d:f3:1d:36:34:4a:
7c:87:e2:61:bb:0f:b9:a0:32:26:d5:06:c5:e4:4e:
4d:22:7a:0b:8b:e1:f6:08:c2:32:b0:ab:17:9b:1f:
0c:24:02:d6:8d:1b:ee:d7:56:7b:94:60:85:00:a1:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:06:48:AB:E5:7E:DA:D4:40:C1:0D:5F:E5:47:76:89:7E:5D:A9:81
X509v3 Authority Key Identifier:
keyid:C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1c:ad:3c:4c:20:41:d6:95:48:e0:d0:94:e2:69:76:f1:96:
73:7c:2e:b0:56:6d:6e:54:9e:7e:ae:f8:4e:ea:49:92:99:33:
2d:c9:18:be:8f:e1:26:31:ce:8b:24:27:6a:69:6d:e9:fe:da:
5d:ca:f6:0d:8a:8a:db:fe:00:89:bf:bf:4d:87:a5:73:82:f5:
df:47:58:5f:de:83:8d:03:84:96:f0:35:3f:df:b6:61:30:eb:
9c:19:34:e5:eb:45:36:81:68:da:c3:b6:b6:ca:c5:77:1d:5a:
a2:25:9a:b8:3e:e2:ea:01:99:5c:ff:82:0d:35:52:57:0d:11:
82:58:ce:a4:32:e6:28:66:9f:29:f0:38:81:e1:4a:18:73:cc:
3b:71:8a:0f:eb:ae:43:50:92:9f:fa:8b:44:da:b4:07:e2:a0:
24:ab:f0:e5:cb:55:56:1f:03:f2:01:6b:02:f1:56:46:c8:cf:
8f:b7:61:a1:83:1b:19:72:0c:89:07:45:99:1a:f2:68:61:a4:
32:ab:e8:b6:e7:46:f6:67:c7:20:e4:44:43:61:9c:ea:44:6a:
44:a2:bf:d3:7b:2c:4b:b4:97:59:3e:49:b7:a8:62:b3:59:b4:
d4:dd:b0:23:15:82:42:71:37:d6:92:2f:2b:74:bf:d2:74:d0:
b2:de:43:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yM3r8n4SvRQ3Ako3J0ynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNmIwNzYwNzY2ZTZjYzcyMzljMjc1NWEyZDBkMzlmYmUx
NGVkNzgwHhcNMjUxMDIwMDQwMjUzWhcNMjUxMDIxMDQwMjUzWjAzMTEwLwYDVQQD
EyhjNzA2NDhhYmU1N2VkYWQ0NDBjMTBkNWZlNTQ3NzY4OTdlNWRhOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWkVStNQ1/WNAa7WmGuvuDxMinI8
wqBcPy02r+GfaIZv90Eo8MwwEEItRVmZZCcc5EbfdOxB1YB7GXETLnHfBas05BuC
6dAkl1MR3GrbTpW5sLpAJEsnFIho0/BpyQtu0hgyItEU5gp787AybQTENOKXjg59
Qo94SJmHaVesh8M5iMCViYY/nKsbq6HTvPpwmWYbso11sSLOJ77mUd3vabIZG252
EP8Mw4VnADBbuGQPAHpbWQs+ydqV8PfGI7IKd0cdiHbGZ4XL4Did8x02NEp8h+Jh
uw+5oDIm1QbF5E5NInoLi+H2CMIysKsXmx8MJALWjRvu11Z7lGCFAKGVIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcGSKvlftrUQMENX+VHdol+XamBMB8GA1UdIwQY
MBaAFMJrB2B2bmzHI5wnVaLQ05++FO14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd21zSFlIWnViTWNqbkNkVm90RFRuNzRVN1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zNWI2MzgtNzI4Ni00M2QwLWE3YzAt
OWFiMTliMjY2ZTk2LzEvd21zSFlIWnViTWNqbkNkVm90RFRuNzRVN1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zNWI2MzgtNzI4Ni00M2QwLWE3YzAtOWFiMTliMjY2ZTk2
LzEvd21zSFlIWnViTWNqbkNkVm90RFRuNzRVN1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxytPEwg
QdaVSODQlOJpdvGWc3wusFZtblSefq74TupJkpkzLckYvo/hJjHOiyQnamlt6f7a
Xcr2DYqK2/4Aib+/TYelc4L130dYX96DjQOElvA1P9+2YTDrnBk05etFNoFo2sO2
tsrFdx1aoiWauD7i6gGZXP+CDTVSVw0RgljOpDLmKGafKfA4geFKGHPMO3GKD+uu
Q1CSn/qLRNq0B+KgJKvw5ctVVh8D8gFrAvFWRsjPj7dhoYMbGXIMiQdFmRryaGGk
MqvotudG9mfHIOREQ2Gc6kRqRKK/03ssS7SXWT5Jt6his1m01N2wIxWCQnE31pIv
K3S/0nTQst5Dpg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:44:05 2025 by rpki-client