Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
File: WIOU45ENlKe_Cnig8wLQKumQcnM.mft (raw, json)
Hash identifier: oXBFP1dUqoZGJ3C8tbGiK6F++OcjLT0DYe1P98myGRg=
Subject key identifier: 9C:E5:46:85:FA:E5:BD:0F:DD:54:49:42:D3:5F:24:2D:35:54:60:50
Authority key identifier: 58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
Certificate issuer: /CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Certificate serial: 0199FE7DC98A11FB564790CA4E7D15DBF216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 22:01:20 +0000
Manifest this update: Sun 19 Oct 2025 22:01:20 +0000
Manifest next update: Mon 20 Oct 2025 22:01:20 +0000
Files and hashes: 1: WIOU45ENlKe_Cnig8wLQKumQcnM.crl (hash: 0myl5Mb4ff5K5SJG1ZDW4ijixhtU/R8iW7e7pE9ucW0=)
2: pkgQahpzHWh56tzgd9d98n8d-uM.roa (hash: YQurlMI/tTqNmD2eoDZiGf6050yJ+e+y29w7dKL/U9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:c9:8a:11:fb:56:47:90:ca:4e:7d:15:db:f2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Validity
Not Before: Oct 19 22:01:20 2025 GMT
Not After : Oct 20 22:01:20 2025 GMT
Subject: CN=9ce54685fae5bd0fdd544942d35f242d35546050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:53:fc:62:dc:f0:cd:0b:d8:86:c5:4b:df:
f4:ba:26:ff:c8:80:9c:0e:2c:2f:82:2d:c4:d4:90:
c5:ff:fa:b2:d1:af:f9:3b:53:7b:0e:28:68:1d:73:
3e:c7:9f:49:15:2b:bd:25:c1:b5:12:dc:13:e8:c7:
1a:29:29:04:33:c6:e4:1d:44:c3:50:27:c9:64:48:
20:83:4a:75:0d:a7:e8:e8:51:d2:bb:57:96:ff:61:
5e:ee:31:8d:e2:ff:fd:1e:2b:e6:2b:bb:ca:09:27:
51:3a:a9:06:9e:43:e8:1c:bb:20:bc:5f:12:be:bf:
fb:89:97:52:c3:1c:32:8d:a8:76:65:94:92:9a:15:
7e:bc:a6:43:54:7b:2d:88:c5:52:94:53:c1:24:43:
8b:c3:3f:b7:12:09:bb:fe:a3:29:6e:7f:c1:c6:92:
4a:68:73:91:ba:ea:52:1d:df:b7:72:14:fd:c5:36:
46:38:ea:a8:d2:c3:42:4e:23:6a:df:f5:35:84:40:
88:73:e8:24:cf:44:98:ae:1e:51:e2:3c:ca:b1:ca:
94:52:f3:b9:f6:ac:e9:2b:e4:51:76:82:a7:f6:88:
92:5a:be:3d:dd:bd:0a:40:75:dc:5b:cc:29:b7:92:
06:4a:d5:ca:dd:ef:f0:d9:20:41:82:fd:4d:43:af:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E5:46:85:FA:E5:BD:0F:DD:54:49:42:D3:5F:24:2D:35:54:60:50
X509v3 Authority Key Identifier:
keyid:58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b9:b3:07:5e:6d:cc:28:a9:2b:b8:89:04:e2:6d:11:fb:02:
55:81:aa:8a:bf:6b:c3:98:50:41:c4:1c:d5:60:70:65:a0:10:
4c:13:a1:73:02:9a:0b:ab:02:4b:4c:4e:19:7d:d6:c3:23:fa:
f1:61:d9:8c:49:cd:49:80:7f:03:16:87:0c:fe:83:a8:c1:ab:
1e:a0:b2:6b:17:4f:c9:8f:18:fa:41:21:84:3f:4d:8d:f4:62:
7d:31:c1:4d:9c:b2:05:7b:b5:e0:33:f0:49:53:f5:88:b6:09:
79:d0:cc:c5:a9:50:32:30:e6:aa:af:9b:b8:46:f7:37:7b:ae:
e2:51:fa:26:a6:20:d2:f6:5e:36:21:6d:5e:41:51:8c:ae:4e:
65:d7:b2:76:db:a3:bf:62:bd:54:05:46:b7:3a:3b:c9:fd:b3:
93:37:44:5b:69:c1:6c:b1:84:0c:13:11:47:14:64:2f:bd:bc:
d5:a0:c9:46:d5:95:d5:77:7f:1c:2a:7b:d8:a4:96:64:cd:e8:
89:96:5f:86:8c:7d:99:ec:24:07:d4:9a:47:66:d7:17:bf:ba:
30:0d:25:80:4b:16:c3:d1:52:85:29:55:99:3f:51:d0:75:07:
0c:9a:61:43:bf:0a:70:da:5a:c2:4e:59:f8:65:cc:52:1d:21:
69:49:e0:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fcmKEftWR5DKTn0V2/IWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODM5NGUzOTEwZDk0YTdiZjBhNzhhMGYzMDJkMDJhZTk5
MDcyNzMwHhcNMjUxMDE5MjIwMTIwWhcNMjUxMDIwMjIwMTIwWjAzMTEwLwYDVQQD
Eyg5Y2U1NDY4NWZhZTViZDBmZGQ1NDQ5NDJkMzVmMjQyZDM1NTQ2MDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYFT/GLc8M0L2IbFS9/0uib/yICc
Diwvgi3E1JDF//qy0a/5O1N7DihoHXM+x59JFSu9JcG1EtwT6McaKSkEM8bkHUTD
UCfJZEggg0p1Dafo6FHSu1eW/2Fe7jGN4v/9HivmK7vKCSdROqkGnkPoHLsgvF8S
vr/7iZdSwxwyjah2ZZSSmhV+vKZDVHstiMVSlFPBJEOLwz+3Egm7/qMpbn/BxpJK
aHORuupSHd+3chT9xTZGOOqo0sNCTiNq3/U1hECIc+gkz0SYrh5R4jzKscqUUvO5
9qzpK+RRdoKn9oiSWr493b0KQHXcW8wpt5IGStXK3e/w2SBBgv1NQ6+7iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzlRoX65b0P3VRJQtNfJC01VGBQMB8GA1UdIwQY
MBaAFFiDlOORDZSnvwp4oPMC0CrpkHJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lPVTQ1RU5sS2VfQ25pZzh3TFFLdW1RY25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83OGIxYTctOWZiZC00ZjZmLThlYjQt
N2I2MjJkZGY4NGY0LzEvV0lPVTQ1RU5sS2VfQ25pZzh3TFFLdW1RY25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83OGIxYTctOWZiZC00ZjZmLThlYjQtN2I2MjJkZGY4NGY0
LzEvV0lPVTQ1RU5sS2VfQ25pZzh3TFFLdW1RY25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7mzB15t
zCipK7iJBOJtEfsCVYGqir9rw5hQQcQc1WBwZaAQTBOhcwKaC6sCS0xOGX3WwyP6
8WHZjEnNSYB/AxaHDP6DqMGrHqCyaxdPyY8Y+kEhhD9NjfRifTHBTZyyBXu14DPw
SVP1iLYJedDMxalQMjDmqq+buEb3N3uu4lH6JqYg0vZeNiFtXkFRjK5OZdeydtuj
v2K9VAVGtzo7yf2zkzdEW2nBbLGEDBMRRxRkL7281aDJRtWV1Xd/HCp72KSWZM3o
iZZfhox9mewkB9SaR2bXF7+6MA0lgEsWw9FShSlVmT9R0HUHDJphQ78KcNpawk5Z
+GXMUh0haUngjg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:34 2025 by rpki-client