Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File: wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier: v5nwHzw++BEv6FTEm25ZKDfq2Yy9fR9ddEX5RfhZKmQ=
Subject key identifier: AA:05:90:30:48:54:4D:F5:6A:6E:BF:6D:D7:7A:B4:E0:C1:F2:3F:A6
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer: /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial: 0199C30D60737A5FACDB2870B903C9229C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number: 0695
Signing time: Wed 08 Oct 2025 09:00:57 +0000
Manifest this update: Wed 08 Oct 2025 09:00:57 +0000
Manifest next update: Thu 09 Oct 2025 09:00:57 +0000
Files and hashes: 1: RSjnM6zCvAOEItwpVtC0m6KUGtw.roa (hash: 63Mz4fOoq8b9mEgPpq4X77Rjr3X+uaQbsoHZFlRZzdY=)
2: b800M8UQE_ndSkfHQhV3cPUcjPM.roa (hash: MbkUQn3Ix8UmF2oKyZjDZOrZVxkNdqgLjfIY0GRvAPU=)
3: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: PolPHIc0nLQdJU4ycX3louOI8hI+XPxmfhDEnWwYix8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:0d:60:73:7a:5f:ac:db:28:70:b9:03:c9:22:9c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
Validity
Not Before: Oct 8 09:00:57 2025 GMT
Not After : Oct 9 09:00:57 2025 GMT
Subject: CN=aa05903048544df56a6ebf6dd77ab4e0c1f23fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:17:28:e6:41:b8:b8:bd:c8:1b:42:5c:b5:57:
f3:5b:86:71:cf:8b:c1:3b:02:8b:8a:ab:99:a1:0c:
7c:56:f8:ca:82:27:a7:e6:90:ca:7d:7b:af:ae:0e:
2c:e4:b8:4e:29:b2:bb:08:dc:1c:77:53:3b:13:6c:
0d:f1:80:a9:92:9a:34:50:4b:cb:d9:e9:de:bc:1e:
6d:da:e2:a6:58:cb:9a:7a:06:1d:19:8b:31:8d:f8:
6f:11:fd:2f:e6:b8:88:d3:36:5a:6e:57:04:02:0c:
c2:05:70:26:10:2f:1f:ee:49:99:eb:ed:76:12:f5:
d4:41:bc:f8:d1:e3:1b:7a:32:4d:92:1f:71:a8:e6:
2a:79:7d:a1:97:e3:b4:57:66:fd:84:90:19:4c:8d:
2d:ad:2a:59:05:d8:81:f2:5d:95:09:76:08:ea:ab:
d7:57:c7:be:a9:71:fc:71:15:7f:14:2e:35:78:58:
0e:d7:e0:db:12:bb:84:e5:b4:6e:a6:68:14:4e:9d:
4c:2d:c3:dd:08:31:60:c8:50:8b:ab:34:aa:81:7f:
ba:55:3a:9a:74:17:40:fb:0f:a6:f0:d7:9f:19:11:
ba:23:0e:b0:19:4a:31:a0:ec:6c:06:78:34:95:b2:
4b:84:fb:f2:9e:f3:68:c8:1d:73:64:b0:0c:47:86:
da:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:05:90:30:48:54:4D:F5:6A:6E:BF:6D:D7:7A:B4:E0:C1:F2:3F:A6
X509v3 Authority Key Identifier:
keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ca:93:5e:b2:80:28:20:b5:94:be:99:d4:99:51:5f:e3:8d:
14:5f:4b:a1:a6:c5:21:1d:9c:44:7e:07:ee:27:07:e2:19:92:
4b:a8:91:d6:9a:40:0a:0f:d7:6b:6a:8a:80:98:8c:87:5b:10:
56:9a:1e:68:6e:56:04:d0:ef:49:dc:02:37:46:5e:24:4c:9d:
9f:38:6e:35:bb:e2:ed:e4:e4:5d:79:62:fd:9d:fa:d3:01:68:
67:45:78:63:ac:e6:6b:df:11:b8:5c:98:1a:d9:d5:d5:b2:af:
41:27:f9:ee:bc:04:12:ae:31:35:7e:88:af:55:37:3f:7f:c5:
2d:ab:f1:a5:25:40:d3:52:c1:ba:38:88:89:2f:54:ff:06:db:
47:d0:25:cf:a8:39:91:3e:21:d6:e1:c0:6b:49:9a:09:0a:f7:
02:f0:36:eb:19:ca:36:ae:73:e6:89:c2:90:c4:a0:02:47:82:
f6:bf:93:51:c9:e8:55:de:6a:51:a5:20:09:08:22:dc:f5:a3:
a7:4b:af:ab:b1:b0:16:ab:6d:01:1d:b7:68:d0:91:cc:ed:2a:
32:25:35:21:86:bc:c2:ca:c0:89:83:e4:43:e7:3c:96:3f:9b:
21:f4:62:4d:d5:84:a8:b9:4d:f7:1e:18:73:21:b7:10:dd:da:
0f:5e:90:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnDDWBzel+s2yhwuQPJIpwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTE5MzM0YWQyYWQ1MzYxNmMzNGZlY2U5NmNlMjkyMzBm
ODYzNDkwHhcNMjUxMDA4MDkwMDU3WhcNMjUxMDA5MDkwMDU3WjAzMTEwLwYDVQQD
EyhhYTA1OTAzMDQ4NTQ0ZGY1NmE2ZWJmNmRkNzdhYjRlMGMxZjIzZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hco5kG4uL3IG0JctVfzW4Zxz4vB
OwKLiquZoQx8VvjKgien5pDKfXuvrg4s5LhOKbK7CNwcd1M7E2wN8YCpkpo0UEvL
2enevB5t2uKmWMuaegYdGYsxjfhvEf0v5riI0zZablcEAgzCBXAmEC8f7kmZ6+12
EvXUQbz40eMbejJNkh9xqOYqeX2hl+O0V2b9hJAZTI0trSpZBdiB8l2VCXYI6qvX
V8e+qXH8cRV/FC41eFgO1+DbEruE5bRupmgUTp1MLcPdCDFgyFCLqzSqgX+6VTqa
dBdA+w+m8NefGRG6Iw6wGUoxoOxsBng0lbJLhPvynvNoyB1zZLAMR4baqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoFkDBIVE31am6/bdd6tODB8j+mMB8GA1UdIwQY
MBaAFMKRkzStKtU2FsNP7Ols4pIw+GNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDIt
MTY1MzE4OGQ4MTI2LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDItMTY1MzE4OGQ4MTI2
LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvcqTXrKA
KCC1lL6Z1JlRX+ONFF9LoabFIR2cRH4H7icH4hmSS6iR1ppACg/Xa2qKgJiMh1sQ
VpoeaG5WBNDvSdwCN0ZeJEydnzhuNbvi7eTkXXli/Z360wFoZ0V4Y6zma98RuFyY
GtnV1bKvQSf57rwEEq4xNX6Ir1U3P3/FLavxpSVA01LBujiIiS9U/wbbR9Alz6g5
kT4h1uHAa0maCQr3AvA26xnKNq5z5onCkMSgAkeC9r+TUcnoVd5qUaUgCQgi3PWj
p0uvq7GwFqttAR23aNCRzO0qMiU1IYa8wsrAiYPkQ+c8lj+bIfRiTdWEqLlN9x4Y
cyG3EN3aD16QeA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 15:48:59 2025 by rpki-client