Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: fmisHNcfzNZt73FAm1agrHZLXl36+bSZ91z9EvWOMyk=
Subject key identifier: 6E:47:34:5D:19:75:31:AE:7D:4C:03:B8:0A:94:11:A1:7D:BB:91:5F
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 019A221BDCD27EFEB82D573F20744DC8FABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 04D9
Signing time: Sun 26 Oct 2025 20:00:42 +0000
Manifest this update: Sun 26 Oct 2025 20:00:42 +0000
Manifest next update: Mon 27 Oct 2025 20:00:42 +0000
Files and hashes: 1: RhPTeugmZDfkfUBJoLhRret8XmI.roa (hash: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: nFYPu53Es0T0x3/Y7gN2s3Bgtvu8/sqrKJTT2+oZJQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:dc:d2:7e:fe:b8:2d:57:3f:20:74:4d:c8:fa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Oct 26 20:00:42 2025 GMT
Not After : Oct 27 20:00:42 2025 GMT
Subject: CN=6e47345d197531ae7d4c03b80a9411a17dbb915f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ce:df:2c:af:8b:a4:7d:dd:c1:c1:69:3e:b7:
11:2e:da:48:5a:36:d6:6b:aa:6f:d7:ed:7b:3a:fe:
38:91:42:04:3e:e1:e4:61:5f:6a:e2:02:08:f1:40:
b6:b7:11:88:72:93:b5:e2:4f:bc:6e:f6:79:9a:24:
57:06:5e:42:ab:c9:7a:5a:fe:0a:7d:17:6d:59:4c:
d1:e8:3f:14:02:b9:41:dc:a6:9d:99:1d:5c:e3:00:
6c:6c:d0:68:f8:8f:10:2c:82:7c:df:7d:da:9a:d2:
97:d6:f9:c9:28:aa:c3:4e:0b:b8:94:49:3b:84:9a:
35:75:22:e1:4f:8d:34:72:e8:39:83:62:a5:ce:4f:
ec:28:c9:b0:e5:de:d2:a4:12:d8:4f:22:f8:48:1e:
36:54:ce:e0:92:80:5e:e2:ce:b4:ee:57:4f:54:d5:
a6:ca:51:01:db:f9:7d:75:b3:13:0f:bc:ac:10:b5:
26:87:9e:ca:1e:22:bf:8d:25:20:60:d3:86:c5:1e:
6e:6c:ea:ab:d9:0d:0d:7c:e8:36:8e:2c:fe:dd:25:
b0:d6:19:8e:8e:2c:da:00:c5:2c:55:e5:1e:4f:e7:
ab:a1:ed:a2:00:d1:fa:0f:2e:8c:52:0e:50:5b:34:
4f:ab:0a:e1:d0:bf:b4:5a:f7:d2:61:34:78:7f:03:
cd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:47:34:5D:19:75:31:AE:7D:4C:03:B8:0A:94:11:A1:7D:BB:91:5F
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4a:8d:41:b6:08:31:7f:c8:bb:6b:34:63:25:25:cf:22:5d:
34:3f:8d:39:06:12:e0:da:9d:a0:5d:ef:95:f1:ab:9f:44:58:
ec:17:3e:9c:d0:2e:45:66:7a:21:45:39:c0:7a:60:31:b4:d4:
10:b5:56:3b:6d:4d:9e:bd:d9:d8:1f:9a:5c:02:c0:dd:85:af:
93:9a:1d:07:c2:59:9d:e9:38:51:e9:2d:9b:1a:d6:90:7e:8f:
5f:80:87:ae:0e:25:bd:09:07:29:a8:95:45:ab:87:8f:a3:4d:
75:1b:29:6f:f0:d2:81:43:0c:88:e4:ff:20:38:9c:00:17:c4:
22:c0:6f:81:5e:21:38:19:59:c3:fc:0f:ec:e1:20:5f:89:a2:
b0:ff:ea:66:7a:e3:df:87:d6:bc:7a:ba:61:55:4c:75:91:c0:
bd:a9:87:b3:86:9e:9b:3f:85:b0:aa:d8:86:5a:a2:d3:a7:9f:
a4:52:21:54:0d:9a:43:4c:a5:df:92:19:8a:75:27:78:68:80:
be:96:fe:83:5a:de:fe:db:65:90:e7:60:53:e5:47:89:ff:d1:
69:5d:14:08:6f:ee:7a:39:6c:a8:2c:3f:22:56:cb:2e:4e:82:
ff:49:45:f6:b1:5a:ff:fb:4c:d1:b7:68:44:1d:5d:4d:13:ee:
61:50:5f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiG9zSfv64LVc/IHRNyPq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGJhODRjZGRlYTQzZmNiZTQxZTk4NmIxZmM3ODEzN2Rj
ZmVmZDcwHhcNMjUxMDI2MjAwMDQyWhcNMjUxMDI3MjAwMDQyWjAzMTEwLwYDVQQD
Eyg2ZTQ3MzQ1ZDE5NzUzMWFlN2Q0YzAzYjgwYTk0MTFhMTdkYmI5MTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis7fLK+LpH3dwcFpPrcRLtpIWjbW
a6pv1+17Ov44kUIEPuHkYV9q4gII8UC2txGIcpO14k+8bvZ5miRXBl5Cq8l6Wv4K
fRdtWUzR6D8UArlB3KadmR1c4wBsbNBo+I8QLIJ8333amtKX1vnJKKrDTgu4lEk7
hJo1dSLhT400cug5g2Klzk/sKMmw5d7SpBLYTyL4SB42VM7gkoBe4s607ldPVNWm
ylEB2/l9dbMTD7ysELUmh57KHiK/jSUgYNOGxR5ubOqr2Q0NfOg2jiz+3SWw1hmO
jizaAMUsVeUeT+eroe2iANH6Dy6MUg5QWzRPqwrh0L+0WvfSYTR4fwPNfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5HNF0ZdTGufUwDuAqUEaF9u5FfMB8GA1UdIwQY
MBaAFFnbqEzd6kP8vkHphrH8eBN9z+/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEt
MDVkMDhjZWEwMmE5LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEtMDVkMDhjZWEwMmE5
LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEqNQbYI
MX/Iu2s0YyUlzyJdND+NOQYS4NqdoF3vlfGrn0RY7Bc+nNAuRWZ6IUU5wHpgMbTU
ELVWO21Nnr3Z2B+aXALA3YWvk5odB8JZnek4UektmxrWkH6PX4CHrg4lvQkHKaiV
RauHj6NNdRspb/DSgUMMiOT/IDicABfEIsBvgV4hOBlZw/wP7OEgX4misP/qZnrj
34fWvHq6YVVMdZHAvamHs4aemz+FsKrYhlqi06efpFIhVA2aQ0yl35IZinUneGiA
vpb+g1re/ttlkOdgU+VHif/RaV0UCG/uejlsqCw/IlbLLk6C/0lF9rFa//tM0bdo
RB1dTRPuYVBfUQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:53:50 2025 by rpki-client