Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
File: WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json)
Hash identifier: yOr91qoCWn1HgfyPlld7ED7oaKcOiJsu6vAeqhae+Gw=
Subject key identifier: CD:7C:EF:44:31:DE:76:EA:CF:1C:CA:1F:FA:3C:00:52:39:27:0F:ED
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 019A73013AD7DABA2AA9789A5D1C13505D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
Manifest number: 0CBF
Signing time: Tue 11 Nov 2025 13:00:51 +0000
Manifest this update: Tue 11 Nov 2025 13:00:51 +0000
Manifest next update: Wed 12 Nov 2025 13:00:51 +0000
Files and hashes: 1: 0KA7UlWcA7dQ-EcGfcWWOlx-BpU.roa (hash: bkO5B1nteyEGZdFfFkbrhIlP/XMGpvPzgXFRnn0UfZE=)
2: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: spCoJL5uDT6Wu4v7aldo5k+2Cxh+4rG8QG9a3s8ca3Q=)
3: sPVz6CXeimsgpxuXKMYY5ra1yXI.roa (hash: uGVCkdoP9XZVNq6UA53Y8OgwaBktr5jNaHV/XYvmoPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:3a:d7:da:ba:2a:a9:78:9a:5d:1c:13:50:5d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Nov 11 13:00:51 2025 GMT
Not After : Nov 12 13:00:51 2025 GMT
Subject: CN=cd7cef4431de76eacf1cca1ffa3c005239270fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:f2:67:cf:10:f3:db:ff:a3:63:33:39:90:
61:3f:27:01:ae:01:b7:e3:ce:67:06:ed:20:a8:8d:
f5:41:61:ed:e5:97:c4:1a:88:dc:a0:77:60:70:28:
c3:a1:47:49:b9:2c:60:bc:58:f3:0e:9e:1f:83:e2:
46:5e:7a:72:f2:c7:ef:64:ad:c7:05:32:32:24:e6:
23:34:ce:05:bd:37:b9:37:4f:39:ae:d4:39:9b:83:
80:3c:17:a3:5e:ad:ea:bb:23:17:e9:38:32:32:e1:
ca:e5:fe:c5:30:41:13:a2:c9:fc:71:a7:89:e4:d0:
e2:80:dc:fd:56:db:79:a4:94:c0:8a:b6:2c:5b:f4:
2f:f5:27:0d:ea:a1:b6:3a:98:c0:cf:12:d1:62:ac:
f3:9c:73:88:e7:d2:43:d7:87:13:6e:af:3d:3c:e0:
5a:0a:51:f6:69:27:53:50:11:e8:45:63:46:c6:d8:
7b:d6:4f:77:56:bb:12:1f:1e:2f:d5:a0:75:8b:91:
24:94:86:fa:08:56:a8:63:80:d6:b1:f1:1b:2c:c9:
c0:c2:bc:b0:ac:5b:2b:d6:8a:8a:32:59:09:0b:54:
e1:c4:ae:80:32:25:4c:ae:24:57:37:87:85:d3:ff:
ed:6a:89:d5:0b:6c:55:34:63:6f:da:81:66:11:e2:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7C:EF:44:31:DE:76:EA:CF:1C:CA:1F:FA:3C:00:52:39:27:0F:ED
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1b:8b:8b:f1:92:1b:48:07:69:12:4a:7e:1d:21:90:1c:41:
19:4b:a7:e2:94:58:13:4c:42:dc:84:cf:74:94:e6:82:65:3e:
d6:97:a0:6c:07:46:23:f7:7a:a4:f2:a6:64:6f:8a:05:2f:02:
61:c5:47:18:05:99:23:46:88:bb:f9:e4:78:39:d3:d0:09:b8:
64:93:14:7c:d6:9b:67:dd:ab:7f:0e:88:e6:77:b1:5a:76:a6:
ad:77:0c:c0:2f:c6:f3:6c:15:a1:9b:2b:ee:da:f1:55:e1:75:
52:a2:7a:85:c4:6d:f2:f7:4c:63:e5:ee:91:94:c2:95:d8:a1:
a1:d0:6b:51:82:59:2b:67:9c:b4:39:92:48:18:a3:7a:2e:3d:
f2:f4:f6:97:4d:9d:86:6d:09:8d:49:96:ef:07:70:07:10:fa:
65:9f:45:0b:68:a1:85:0b:07:6f:37:fa:dd:d1:07:1b:3e:dc:
e0:5b:3b:8a:0e:b0:5c:7b:cd:cf:f8:e5:3f:f8:c1:7e:84:be:
2f:15:61:2d:fc:f7:1d:4d:a0:70:f0:8a:fd:1c:ec:7b:f7:91:
2d:8d:6a:b0:d0:bd:45:4e:71:54:a7:32:a5:c3:a6:b5:25:29:
26:87:10:7f:4e:22:c8:58:7a:bf:d1:02:3a:97:25:9c:d3:d3:
dd:14:56:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzATrX2roqqXiaXRwTUF1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjI5ZTdiOGEwZGRiOWMzNmM2ZTBlM2Y0OTU3NzgxN2Iw
ZWEzYTYwHhcNMjUxMTExMTMwMDUxWhcNMjUxMTEyMTMwMDUxWjAzMTEwLwYDVQQD
EyhjZDdjZWY0NDMxZGU3NmVhY2YxY2NhMWZmYTNjMDA1MjM5MjcwZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hXyZ88Q89v/o2MzOZBhPycBrgG3
485nBu0gqI31QWHt5ZfEGojcoHdgcCjDoUdJuSxgvFjzDp4fg+JGXnpy8sfvZK3H
BTIyJOYjNM4FvTe5N085rtQ5m4OAPBejXq3quyMX6TgyMuHK5f7FMEETosn8caeJ
5NDigNz9Vtt5pJTAirYsW/Qv9ScN6qG2OpjAzxLRYqzznHOI59JD14cTbq89POBa
ClH2aSdTUBHoRWNGxth71k93VrsSHx4v1aB1i5EklIb6CFaoY4DWsfEbLMnAwryw
rFsr1oqKMlkJC1ThxK6AMiVMriRXN4eF0//taonVC2xVNGNv2oFmEeJQlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1870Qx3nbqzxzKH/o8AFI5Jw/tMB8GA1UdIwQY
MBaAFFiynnuKDducNsbg4/SVd4F7DqOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xLZWU0b04yNXcyeHVEajlKVjNnWHNPbzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yY2IzYmItMGVkMS00ZWNmLThhZjUt
ZWU3M2ZlMjFlZDIzLzEvV0xLZWU0b04yNXcyeHVEajlKVjNnWHNPbzZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yY2IzYmItMGVkMS00ZWNmLThhZjUtZWU3M2ZlMjFlZDIz
LzEvV0xLZWU0b04yNXcyeHVEajlKVjNnWHNPbzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhuLi/GS
G0gHaRJKfh0hkBxBGUun4pRYE0xC3ITPdJTmgmU+1pegbAdGI/d6pPKmZG+KBS8C
YcVHGAWZI0aIu/nkeDnT0Am4ZJMUfNabZ92rfw6I5nexWnamrXcMwC/G82wVoZsr
7trxVeF1UqJ6hcRt8vdMY+XukZTCldihodBrUYJZK2ectDmSSBijei498vT2l02d
hm0JjUmW7wdwBxD6ZZ9FC2ihhQsHbzf63dEHGz7c4Fs7ig6wXHvNz/jlP/jBfoS+
LxVhLfz3HU2gcPCK/Rzse/eRLY1qsNC9RU5xVKcypcOmtSUpJocQf04iyFh6v9EC
OpclnNPT3RRW1Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:19 2025 by rpki-client