Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
File: WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json)
Hash identifier: BmSaD7CFKNnDQtZCCeF8dKxizb15jgtFWpsfoQCosFc=
Subject key identifier: EE:1C:5A:84:84:58:A2:46:31:13:64:E5:8C:2A:8A:B9:8B:39:CD:91
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Certificate issuer: /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial: 019A725CE7E6F57C9FA6355ED94B17CBC29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
Manifest number: 0639
Signing time: Tue 11 Nov 2025 10:01:22 +0000
Manifest this update: Tue 11 Nov 2025 10:01:22 +0000
Manifest next update: Wed 12 Nov 2025 10:01:22 +0000
Files and hashes: 1: 0RROrS7EP_5CwYaWtOibTCuabhc.roa (hash: uwLvq6OyphLPb9DhsW74rLK9fPzz8lUuatzazhiEDUA=)
2: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: nuaJ9rQavjwasDZrO+ysS/7kHIoFvtjyqtWnNJjVp+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e7:e6:f5:7c:9f:a6:35:5e:d9:4b:17:cb:c2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Validity
Not Before: Nov 11 10:01:22 2025 GMT
Not After : Nov 12 10:01:22 2025 GMT
Subject: CN=ee1c5a848458a246311364e58c2a8ab98b39cd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:c0:68:88:63:d6:25:41:34:67:7d:1e:e2:
d8:6d:4f:7c:a5:b0:2c:cd:95:ee:b8:81:69:1a:9d:
cc:7c:aa:80:28:4c:54:d5:aa:27:24:a1:0e:8d:e7:
2c:05:e3:7e:b0:08:d0:c0:34:6a:cf:c8:76:b1:5b:
bd:7a:84:96:f9:77:6a:0e:e9:4a:3d:e5:85:d8:be:
f4:ed:44:f9:10:63:6f:8c:59:ae:2d:ba:29:2a:f0:
96:e9:50:50:4e:70:c4:be:27:19:45:f7:a8:52:bf:
f6:95:dd:91:d0:3b:e0:1f:78:4a:73:73:f8:be:91:
6c:ea:08:df:0e:7c:bf:16:5c:4a:1a:51:e2:5b:fd:
a1:9b:d4:d0:e1:55:ae:e6:ba:23:c4:7b:4a:c2:7f:
5d:bf:cf:95:b6:87:ea:5c:be:e6:a2:56:3e:d9:81:
0f:21:fb:9a:f6:85:48:7d:0e:ed:bc:3d:85:cf:ab:
39:49:14:1b:27:cc:b2:54:b3:bc:cd:80:b0:a8:d2:
cc:f5:e2:86:f8:7e:80:87:49:94:3d:67:e3:53:88:
f1:d8:ca:e9:52:1e:d6:7b:cc:3d:72:5b:59:4a:42:
77:06:65:cf:bc:dc:13:90:15:b4:9f:81:35:05:6c:
2a:17:e1:fa:29:0b:e3:f9:97:d0:1c:f8:60:f3:db:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:5A:84:84:58:A2:46:31:13:64:E5:8C:2A:8A:B9:8B:39:CD:91
X509v3 Authority Key Identifier:
keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:98:ad:15:6e:3c:2b:d4:2c:d7:33:06:a4:02:93:23:92:50:
77:2e:ad:9e:df:ee:9a:63:00:1d:39:57:79:91:0c:3c:52:e2:
d9:87:9e:ef:cc:fa:b1:32:b3:98:7b:0f:32:9c:f3:ff:5d:df:
3a:d5:36:74:f4:ea:6d:3c:62:1b:2b:a6:f6:a8:2e:3c:99:a3:
c2:2d:d7:b7:fa:51:a8:35:7a:ab:7f:db:18:9d:52:32:a2:41:
81:37:42:8e:2a:94:99:b3:e5:1d:f4:26:07:0a:2a:2a:6e:38:
22:56:a2:ed:64:05:53:06:73:f6:fe:85:92:b9:77:60:d0:00:
cb:61:ba:f4:f9:de:98:39:c6:b7:03:ce:bb:1b:9e:d3:42:49:
c2:36:eb:d0:1f:f7:77:50:23:00:a7:dd:3c:3f:c9:dd:4f:28:
32:78:2c:1c:78:a2:0e:16:90:3d:65:45:5d:33:af:dc:d0:81:
6f:0a:c1:c2:fe:b3:85:55:fe:7a:fd:1d:5c:ec:10:43:d9:72:
63:0c:e4:85:ce:8e:1e:c0:49:8e:a7:99:1e:24:ab:97:c0:ef:
7d:d4:d0:73:43:b2:f5:41:4c:94:01:19:66:d0:36:5a:99:63:
25:04:57:a7:3f:28:3e:70:bc:e1:53:25:b0:7c:fe:f8:3f:72:
18:6b:bc:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXOfm9XyfpjVe2UsXy8KfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTNlMjZkNzFhYzViNmE2MDExNTZkOTBjZTBkY2NlYzU5
ODYyNDMwHhcNMjUxMTExMTAwMTIyWhcNMjUxMTEyMTAwMTIyWjAzMTEwLwYDVQQD
EyhlZTFjNWE4NDg0NThhMjQ2MzExMzY0ZTU4YzJhOGFiOThiMzljZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMfAaIhj1iVBNGd9HuLYbU98pbAs
zZXuuIFpGp3MfKqAKExU1aonJKEOjecsBeN+sAjQwDRqz8h2sVu9eoSW+XdqDulK
PeWF2L707UT5EGNvjFmuLbopKvCW6VBQTnDEvicZRfeoUr/2ld2R0DvgH3hKc3P4
vpFs6gjfDny/FlxKGlHiW/2hm9TQ4VWu5rojxHtKwn9dv8+VtofqXL7molY+2YEP
Ifua9oVIfQ7tvD2Fz6s5SRQbJ8yyVLO8zYCwqNLM9eKG+H6Ah0mUPWfjU4jx2Mrp
Uh7We8w9cltZSkJ3BmXPvNwTkBW0n4E1BWwqF+H6KQvj+ZfQHPhg89sC3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4cWoSEWKJGMRNk5YwqirmLOc2RMB8GA1UdIwQY
MBaAFFgT4m1xrFtqYBFW2Qzg3M7FmGJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3Nzgt
MDZkZjFkYzAzMzY3LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3NzgtMDZkZjFkYzAzMzY3
LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJitFW48
K9Qs1zMGpAKTI5JQdy6tnt/ummMAHTlXeZEMPFLi2Yee78z6sTKzmHsPMpzz/13f
OtU2dPTqbTxiGyum9qguPJmjwi3Xt/pRqDV6q3/bGJ1SMqJBgTdCjiqUmbPlHfQm
BwoqKm44Ilai7WQFUwZz9v6Fkrl3YNAAy2G69PnemDnGtwPOuxue00JJwjbr0B/3
d1AjAKfdPD/J3U8oMngsHHiiDhaQPWVFXTOv3NCBbwrBwv6zhVX+ev0dXOwQQ9ly
Ywzkhc6OHsBJjqeZHiSrl8DvfdTQc0Oy9UFMlAEZZtA2WpljJQRXpz8oPnC84VMl
sHz++D9yGGu8ig==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:15 2025 by rpki-client