Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: WivpvOExcRz5ColN61C0vKTXtdYVeqxX5Jkgb5vTgMQ=
Subject key identifier: D2:EA:A7:99:75:83:E5:35:3C:90:F2:77:47:38:A4:CA:D3:36:CA:D8
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 019A221BCBB947ED3DF9CAD865E3B467E599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 1272
Signing time: Sun 26 Oct 2025 20:00:38 +0000
Manifest this update: Sun 26 Oct 2025 20:00:38 +0000
Manifest next update: Mon 27 Oct 2025 20:00:38 +0000
Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: cWowNlgOw8yqak6VJwXbAicAF8sLCBPswkAg/453Mbk=)
2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:cb:b9:47:ed:3d:f9:ca:d8:65:e3:b4:67:e5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Oct 26 20:00:38 2025 GMT
Not After : Oct 27 20:00:38 2025 GMT
Subject: CN=d2eaa7997583e5353c90f2774738a4cad336cad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:54:ec:7f:eb:12:66:f3:9e:1b:05:50:4f:4d:
6b:bb:0f:8f:d2:ff:16:ea:a2:cd:2e:53:2a:ea:48:
d4:6d:26:b2:85:12:0c:0a:4c:17:01:06:45:2e:88:
0d:a1:b2:15:44:ac:73:a4:97:18:ab:24:fb:03:c3:
de:50:0c:fb:74:ba:78:c5:e7:e7:8b:c0:0c:64:a6:
ca:59:ad:3d:f1:ff:d8:a2:3e:d6:4f:12:f0:41:17:
94:8b:ba:7c:60:bd:6c:31:ca:92:7b:96:76:18:da:
85:7b:d4:cc:a5:18:35:eb:62:5d:a0:86:04:76:6e:
cc:8f:68:97:f4:60:a7:28:98:51:03:c3:d1:38:5c:
9a:65:0c:47:a0:c2:6f:c5:09:e3:04:c4:c3:2d:b1:
b3:35:45:63:2b:5d:d4:cb:8f:d5:ff:74:5c:77:a7:
8a:cd:b0:5a:f4:98:06:dd:7a:8c:37:95:6f:a8:0d:
bc:95:4a:d5:62:5f:ae:bd:1b:00:23:b9:0f:ba:ea:
c2:69:53:db:f0:b9:5c:65:3c:11:0b:b5:22:09:f9:
ad:48:4d:ee:7d:b7:9c:12:19:fe:f1:1f:46:d1:0e:
af:c0:bf:c4:d9:9c:42:4d:cc:35:f9:43:c2:24:b5:
d6:24:2e:f0:10:62:9a:f6:ee:94:da:73:19:30:84:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EA:A7:99:75:83:E5:35:3C:90:F2:77:47:38:A4:CA:D3:36:CA:D8
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b7:c8:ec:aa:1f:b6:45:7d:90:c1:5b:f3:b6:2d:54:5b:56:
12:44:3a:6d:71:7e:e0:f7:4c:50:4b:2e:71:b1:73:ba:8d:dc:
ce:b3:13:91:dc:7b:ae:3a:ff:11:70:38:14:3f:93:0c:3f:c3:
7a:10:a4:c1:f9:5f:93:60:36:04:95:e0:c2:11:2e:8b:ef:58:
71:f4:7a:dd:42:cb:76:0c:0f:fe:75:c5:9e:58:a8:f5:c5:70:
d5:e4:a9:6a:59:73:0b:8e:f0:60:fc:e0:36:3d:c8:00:b0:8c:
fe:aa:4f:bf:52:56:82:22:d9:f1:89:00:c9:e5:c0:07:e3:fa:
1e:50:61:20:a4:d4:e7:c1:9d:79:28:f3:b3:58:44:e0:20:c3:
e5:64:79:b9:8b:8a:ea:09:8e:87:2c:78:13:10:b7:62:01:4f:
76:6d:9d:7e:6f:80:70:b0:43:90:98:66:f6:8e:ba:91:34:18:
e7:70:2a:71:9c:ec:33:ce:7a:5b:7e:00:16:61:bd:e3:ba:a4:
ea:a3:4e:f9:cc:06:c2:80:f1:11:8c:dc:2c:23:34:83:19:94:
55:8f:cc:57:9d:5f:c6:30:ba:78:c8:3f:0f:2f:86:b8:fd:c9:
d0:9d:06:74:e2:dc:4e:e9:0b:9e:79:8d:48:75:ba:3b:6f:6e:
15:4c:2c:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiG8u5R+09+crYZeO0Z+WZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1
NTcyODgwHhcNMjUxMDI2MjAwMDM4WhcNMjUxMDI3MjAwMDM4WjAzMTEwLwYDVQQD
EyhkMmVhYTc5OTc1ODNlNTM1M2M5MGYyNzc0NzM4YTRjYWQzMzZjYWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21Tsf+sSZvOeGwVQT01ruw+P0v8W
6qLNLlMq6kjUbSayhRIMCkwXAQZFLogNobIVRKxzpJcYqyT7A8PeUAz7dLp4xefn
i8AMZKbKWa098f/Yoj7WTxLwQReUi7p8YL1sMcqSe5Z2GNqFe9TMpRg162JdoIYE
dm7Mj2iX9GCnKJhRA8PROFyaZQxHoMJvxQnjBMTDLbGzNUVjK13Uy4/V/3Rcd6eK
zbBa9JgG3XqMN5VvqA28lUrVYl+uvRsAI7kPuurCaVPb8LlcZTwRC7UiCfmtSE3u
fbecEhn+8R9G0Q6vwL/E2ZxCTcw1+UPCJLXWJC7wEGKa9u6U2nMZMITk5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLqp5l1g+U1PJDyd0c4pMrTNsrYMB8GA1UdIwQY
MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt
OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh
LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrfI7Kof
tkV9kMFb87YtVFtWEkQ6bXF+4PdMUEsucbFzuo3czrMTkdx7rjr/EXA4FD+TDD/D
ehCkwflfk2A2BJXgwhEui+9YcfR63ULLdgwP/nXFnlio9cVw1eSpallzC47wYPzg
Nj3IALCM/qpPv1JWgiLZ8YkAyeXAB+P6HlBhIKTU58GdeSjzs1hE4CDD5WR5uYuK
6gmOhyx4ExC3YgFPdm2dfm+AcLBDkJhm9o66kTQY53AqcZzsM856W34AFmG947qk
6qNO+cwGwoDxEYzcLCM0gxmUVY/MV51fxjC6eMg/Dy+GuP3J0J0GdOLcTukLnnmN
SHW6O29uFUws3w==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:04:05 2025 by rpki-client