Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: wM4PtDyTkfiqCWZR1PHxNPhJqPJUan84xlrudiWEsjg=
Subject key identifier: 9A:0D:A4:2A:31:44:8C:52:8F:BE:5D:2D:DC:AA:CF:88:BA:4E:32:0A
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 0199FB7C9B35BD6960B05C00593D0B442C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0C30
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: nbpkrmin/DKZbRtwAXOWdj1stUBhIJnD4xMP67aEfww=)
2: ZpykCbVPiyWDmZYOTfO_ZDkVQS8.roa (hash: dMJ7baRxj0geuiw7R0CU8VhA5Y/WfKmOFau3mkt++fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9b:35:bd:69:60:b0:5c:00:59:3d:0b:44:2c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=9a0da42a31448c528fbe5d2ddcaacf88ba4e320a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:8f:18:fa:86:ff:7d:16:77:a4:d9:83:f0:
da:17:e8:77:9b:64:e8:14:35:d4:a4:43:e9:56:91:
9d:7b:bf:03:7e:bf:6d:3c:70:eb:a6:e4:f5:b5:49:
5d:1f:1d:4b:30:7c:e2:3b:f4:90:b9:bf:9b:d7:87:
07:bc:92:d9:aa:99:ef:95:b5:28:08:56:c9:d1:2b:
6d:be:b6:ac:a1:17:8c:0c:7d:c7:7b:fb:3d:ad:20:
78:c9:c2:12:69:8e:ae:49:16:2b:30:81:d1:65:d7:
c3:f1:c1:57:41:ce:53:09:dd:1d:72:ab:00:31:8e:
7d:f6:1b:11:18:31:03:d2:89:5d:90:3e:56:5d:ca:
3a:4b:1b:14:db:ac:09:ab:a0:d9:98:fe:c6:a1:b5:
95:7a:1d:38:31:6e:8f:1a:9b:b6:f2:30:12:3b:2c:
51:90:82:02:8f:de:e6:31:6a:08:fb:f0:2a:cc:5d:
a3:4b:62:df:a4:c7:72:75:f9:c6:5e:33:41:dd:ed:
80:79:9b:bd:fe:9a:44:0e:5f:da:c5:74:28:99:1a:
d0:6d:08:c4:4e:8f:f8:14:4a:8a:7a:3e:2f:e0:2e:
68:5a:e9:1f:c4:58:5d:ae:89:93:f5:f5:28:ab:bc:
c0:fc:68:92:dc:f9:60:f1:c1:81:42:ef:3f:2a:4b:
ba:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0D:A4:2A:31:44:8C:52:8F:BE:5D:2D:DC:AA:CF:88:BA:4E:32:0A
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:81:e8:79:a0:4d:53:93:41:59:4f:d2:40:07:81:bb:0f:f1:
16:a5:50:a4:ad:4b:02:5b:08:14:83:e0:d2:25:0b:c2:b0:0a:
83:e7:4f:ef:a5:64:9b:1b:2e:2d:0c:a3:b6:02:49:47:b5:b6:
84:25:dd:2f:27:5a:6e:65:97:6a:d0:14:8d:0d:47:13:dd:84:
3e:f4:d7:8f:0e:44:79:5e:b0:6f:2d:95:a7:ea:85:f5:cf:e0:
62:96:ee:3b:f9:fc:e9:ad:b2:40:ad:0a:cd:1f:c7:b5:39:51:
8d:65:3c:05:c7:b2:db:22:74:fa:dd:e1:38:60:9f:7b:60:f1:
6c:19:ca:30:28:60:54:3b:68:78:3b:91:93:ad:75:8a:6b:2f:
ab:94:98:c5:10:fd:b0:97:94:d1:04:d7:ae:12:01:9a:26:d9:
74:f8:b7:fe:47:66:31:17:c7:af:c1:c2:b1:48:b3:5b:a4:e9:
75:e3:6e:b0:fe:00:ed:70:d4:2c:eb:90:ce:c8:63:36:68:d3:
c0:7a:ca:bc:ea:34:80:5c:40:0d:a8:ab:a7:5d:b0:57:41:a4:
8b:19:52:75:5c:d8:c0:0a:5b:be:eb:ee:b8:48:8e:c5:d7:07:
17:8a:8d:46:83:34:81:9a:16:f4:b4:d3:7a:99:39:21:8e:e6:
79:87:fd:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJs1vWlgsFwAWT0LRCyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTc2M2YwYzQ2N2FiYWE3MDFkOTY4YzM3NDljNmRhZDAz
NDg5YjAwHhcNMjUxMDE5MDgwMTExWhcNMjUxMDIwMDgwMTExWjAzMTEwLwYDVQQD
Eyg5YTBkYTQyYTMxNDQ4YzUyOGZiZTVkMmRkY2FhY2Y4OGJhNGUzMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLCPGPqG/30Wd6TZg/DaF+h3m2To
FDXUpEPpVpGde78Dfr9tPHDrpuT1tUldHx1LMHziO/SQub+b14cHvJLZqpnvlbUo
CFbJ0SttvrasoReMDH3He/s9rSB4ycISaY6uSRYrMIHRZdfD8cFXQc5TCd0dcqsA
MY599hsRGDED0oldkD5WXco6SxsU26wJq6DZmP7GobWVeh04MW6PGpu28jASOyxR
kIICj97mMWoI+/AqzF2jS2LfpMdydfnGXjNB3e2AeZu9/ppEDl/axXQomRrQbQjE
To/4FEqKej4v4C5oWukfxFhdromT9fUoq7zA/GiS3Plg8cGBQu8/Kku6/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoNpCoxRIxSj75dLdyqz4i6TjIKMB8GA1UdIwQY
MBaAFFinY/DEZ6uqcB2WjDdJxtrQNImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMt
MDk4ZjdjNWZkOTc1LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMtMDk4ZjdjNWZkOTc1
LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoHoeaBN
U5NBWU/SQAeBuw/xFqVQpK1LAlsIFIPg0iULwrAKg+dP76VkmxsuLQyjtgJJR7W2
hCXdLydabmWXatAUjQ1HE92EPvTXjw5EeV6wby2Vp+qF9c/gYpbuO/n86a2yQK0K
zR/HtTlRjWU8Bcey2yJ0+t3hOGCfe2DxbBnKMChgVDtoeDuRk611imsvq5SYxRD9
sJeU0QTXrhIBmibZdPi3/kdmMRfHr8HCsUizW6TpdeNusP4A7XDULOuQzshjNmjT
wHrKvOo0gFxADairp12wV0GkixlSdVzYwApbvuvuuEiOxdcHF4qNRoM0gZoW9LTT
epk5IY7meYf9VA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:13 2025 by rpki-client