Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
File: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft (raw, json)
Hash identifier: a946WQgovpDSyT+9DbNoETIKRSQ8AmdM5NHVBloIdXc=
Subject key identifier: 5C:90:FE:E8:41:43:20:98:01:B4:5F:7B:60:95:A3:18:22:52:0E:C3
Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
Certificate issuer: /CN=586329f307b98285b71d22c7197ec19b701ded67
Certificate serial: 0199FD344DD7CB9BBEFE6A2DDCB9F54E4EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 16:01:27 +0000
Manifest this update: Sun 19 Oct 2025 16:01:27 +0000
Manifest next update: Mon 20 Oct 2025 16:01:27 +0000
Files and hashes: 1: PiqBBXAA6we4MoLDl4MdjTFczpk.roa (hash: UmY/XV+HwWVcLuYg16r45R+AHciaE7tJGWzQzK3TX58=)
2: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl (hash: 7kQ5IM/TJNy/TfWvAg0fTw76zZiH1AlNGan3thbFMfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4d:d7:cb:9b:be:fe:6a:2d:dc:b9:f5:4e:4e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67
Validity
Not Before: Oct 19 16:01:27 2025 GMT
Not After : Oct 20 16:01:27 2025 GMT
Subject: CN=5c90fee84143209801b45f7b6095a31822520ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:6b:2c:43:75:b2:fe:da:f7:18:e5:73:f3:
a0:63:5d:6a:d3:be:2d:c0:1f:55:cb:8b:66:97:8b:
62:41:7f:a4:5a:4b:c1:0d:a0:61:c7:08:9e:21:da:
6f:dc:f0:a8:3d:a7:c6:db:f6:b6:0f:f7:72:b2:52:
21:a1:ae:f1:74:90:09:15:42:86:db:cf:02:b9:ee:
5b:11:67:5d:4d:6a:a3:95:6b:85:01:45:5d:12:65:
f1:f6:33:68:8b:2a:81:9c:8e:fe:1e:76:53:30:b3:
12:6d:ea:8b:34:86:ab:52:01:83:7f:79:d1:8e:82:
8c:de:86:27:ca:0e:0c:56:13:a8:e5:13:5f:d5:90:
9a:0c:63:77:17:67:72:dc:73:6d:99:dd:14:1c:14:
a6:78:ec:0e:6f:aa:5f:c4:db:26:3e:6a:b8:31:af:
c2:60:2a:24:43:d1:d6:84:2b:19:b3:0a:7d:50:0d:
ca:b2:ea:6c:69:7b:ca:2c:9c:a7:61:ed:fb:e7:5b:
31:af:36:bf:2d:f1:e0:01:9c:dc:5e:ac:de:72:71:
a8:7f:9e:88:f3:8d:16:f6:aa:7c:73:b9:38:e1:09:
eb:32:e3:1e:79:96:6d:e0:df:d3:c5:a7:ca:ab:7f:
85:06:d6:11:da:2d:51:10:f9:18:0f:83:58:58:fb:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:90:FE:E8:41:43:20:98:01:B4:5F:7B:60:95:A3:18:22:52:0E:C3
X509v3 Authority Key Identifier:
keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a5:ae:e4:b6:cb:fd:6e:c5:ba:2c:99:ee:02:b0:29:5c:81:
64:30:15:a4:fa:aa:dc:e4:bb:f8:95:04:1f:39:c9:70:e8:78:
de:e7:4e:8e:28:5e:12:7f:b8:39:3d:30:2f:e3:63:8f:99:97:
7c:63:84:df:a1:f3:59:4b:8e:cb:58:08:dd:b7:68:71:8c:6c:
83:95:4e:29:65:77:d6:de:74:c7:6f:71:56:e9:2e:a6:6f:aa:
ae:e2:06:5e:f4:7a:51:2c:da:72:a6:fc:e8:2c:cb:74:0f:8f:
cf:0d:ee:6f:56:ab:7c:4b:f7:57:3c:cd:25:36:1d:8e:85:94:
d0:44:4d:5d:ef:50:43:01:f2:0d:29:09:b0:9f:0c:74:4f:a0:
8d:98:54:6d:8a:ad:4d:fe:b2:90:42:c7:02:47:3b:e2:d5:b9:
63:fe:49:73:a9:29:6e:09:8e:52:2f:c0:13:1e:55:ca:38:29:
c5:07:e8:35:53:2e:2c:bc:16:2b:11:70:91:95:e2:0e:3f:48:
a6:4d:c3:8f:9c:87:76:15:ff:1d:96:6b:67:bb:68:b4:8b:6a:
f3:c6:20:0e:e8:e5:1c:2d:02:74:ca:21:11:55:86:a6:16:2f:
2b:cc:dd:cd:8d:36:46:ac:70:37:b2:5c:ed:a6:19:94:94:8a:
28:e1:16:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NE3Xy5u+/mot3Ln1Tk6/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NjMyOWYzMDdiOTgyODViNzFkMjJjNzE5N2VjMTliNzAx
ZGVkNjcwHhcNMjUxMDE5MTYwMTI3WhcNMjUxMDIwMTYwMTI3WjAzMTEwLwYDVQQD
Eyg1YzkwZmVlODQxNDMyMDk4MDFiNDVmN2I2MDk1YTMxODIyNTIwZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAFrLEN1sv7a9xjlc/OgY11q074t
wB9Vy4tml4tiQX+kWkvBDaBhxwieIdpv3PCoPafG2/a2D/dyslIhoa7xdJAJFUKG
288Cue5bEWddTWqjlWuFAUVdEmXx9jNoiyqBnI7+HnZTMLMSbeqLNIarUgGDf3nR
joKM3oYnyg4MVhOo5RNf1ZCaDGN3F2dy3HNtmd0UHBSmeOwOb6pfxNsmPmq4Ma/C
YCokQ9HWhCsZswp9UA3KsupsaXvKLJynYe3751sxrza/LfHgAZzcXqzecnGof56I
840W9qp8c7k44QnrMuMeeZZt4N/TxafKq3+FBtYR2i1REPkYD4NYWPthjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyQ/uhBQyCYAbRfe2CVoxgiUg7DMB8GA1UdIwQY
MBaAFFhjKfMHuYKFtx0ixxl+wZtwHe1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dNcDh3ZTVnb1czSFNMSEdYN0JtM0FkN1djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZWUyYWItMDdkOS00YTgxLWFiZjAt
ZTBlNGJlNjY5NmY5LzEvV0dNcDh3ZTVnb1czSFNMSEdYN0JtM0FkN1djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZWUyYWItMDdkOS00YTgxLWFiZjAtZTBlNGJlNjY5NmY5
LzEvV0dNcDh3ZTVnb1czSFNMSEdYN0JtM0FkN1djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaWu5LbL
/W7FuiyZ7gKwKVyBZDAVpPqq3OS7+JUEHznJcOh43udOjiheEn+4OT0wL+Njj5mX
fGOE36HzWUuOy1gI3bdocYxsg5VOKWV31t50x29xVukupm+qruIGXvR6USzacqb8
6CzLdA+Pzw3ub1arfEv3VzzNJTYdjoWU0ERNXe9QQwHyDSkJsJ8MdE+gjZhUbYqt
Tf6ykELHAkc74tW5Y/5Jc6kpbgmOUi/AEx5VyjgpxQfoNVMuLLwWKxFwkZXiDj9I
pk3Dj5yHdhX/HZZrZ7totItq88YgDujlHC0CdMohEVWGphYvK8zdzY02RqxwN7Jc
7aYZlJSKKOEWIA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:45 2025 by rpki-client