Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
File: WwyVAj-g0zsibu8vIsjso5BSa_A.mft (raw, json)
Hash identifier: Wu9ueAWrNQPtmDpiNwqKSkDsHh47UqZgvG2Hyt7O+eU=
Subject key identifier: 07:4D:F8:0A:04:0B:34:39:2D:AC:7D:CB:7C:62:C1:36:82:2C:C5:D9
Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Certificate serial: 019A711362DAD21DE92C46253FD259EF500F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
Manifest number: 0E53
Signing time: Tue 11 Nov 2025 04:01:27 +0000
Manifest this update: Tue 11 Nov 2025 04:01:27 +0000
Manifest next update: Wed 12 Nov 2025 04:01:27 +0000
Files and hashes: 1: WwyVAj-g0zsibu8vIsjso5BSa_A.crl (hash: geITB5O1cJVWp3vrAKshEPiM436Qvw2kaK+CCrgsF+o=)
2: wllNqt1P393lVw_WgHLjVq0jQ3M.roa (hash: BBqAMtasXCpwxv6WN/tQ+Ub2hvQgjIJGzl78O7sCb5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:62:da:d2:1d:e9:2c:46:25:3f:d2:59:ef:50:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Validity
Not Before: Nov 11 04:01:27 2025 GMT
Not After : Nov 12 04:01:27 2025 GMT
Subject: CN=074df80a040b34392dac7dcb7c62c136822cc5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:96:c2:09:f0:87:73:95:e9:b4:4d:d7:35:
5e:53:79:63:a7:cf:7d:58:fd:b9:3f:15:9d:83:9a:
15:7a:f2:da:ca:7b:b6:d4:ac:c7:8a:67:5b:fb:51:
60:41:74:65:95:1b:ed:64:63:eb:b3:dd:c5:73:73:
8d:95:db:31:4a:c7:0d:4c:77:4d:6f:d1:28:f3:71:
80:13:55:8c:84:cf:67:c7:18:4b:dc:79:3c:d6:fc:
57:a4:67:34:0a:12:9c:5b:0d:11:de:b3:cd:b3:94:
fe:96:3d:5a:81:51:4a:33:64:78:49:3a:93:9f:97:
2c:dd:df:fb:f8:25:30:b1:84:b8:31:ee:a3:d6:86:
bf:81:62:e0:e0:83:50:f3:5d:91:1f:38:81:e8:ff:
95:ef:b1:86:24:f0:60:ae:28:7b:f8:8e:98:98:c0:
d2:a9:4e:a5:96:40:f2:ec:d5:59:a4:6b:7f:29:fe:
9e:a0:18:5d:d1:3b:fc:b5:2c:bc:4b:1c:8a:58:4e:
c2:40:86:b0:74:52:5d:05:5c:ad:ea:45:9c:12:8b:
c3:b7:dd:ca:c6:74:87:11:d1:3c:13:d4:a3:5a:8b:
13:47:70:08:94:14:aa:0b:e8:3a:d2:f9:4c:df:d9:
ac:a6:ad:9a:46:9a:3b:4e:a5:5e:a9:80:2d:d7:cc:
49:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:F8:0A:04:0B:34:39:2D:AC:7D:CB:7C:62:C1:36:82:2C:C5:D9
X509v3 Authority Key Identifier:
keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4b:72:ce:b4:c1:6a:4f:c3:08:64:10:1d:cf:11:3e:ce:39:
76:bb:0a:de:67:52:97:23:cb:86:ad:95:a5:33:2b:0e:49:6c:
39:53:63:46:a4:58:ca:50:f2:21:ac:91:fe:32:e3:4c:d7:71:
49:cb:bc:7d:31:54:a6:72:33:97:a5:bf:62:4a:c3:4f:8d:63:
5c:e4:df:fa:7e:9f:7f:9f:53:85:9e:52:14:12:63:5a:3f:a6:
c1:8e:af:b1:95:a3:d2:4e:50:5e:aa:fb:97:e4:2e:df:0f:c6:
64:7e:7d:6e:6b:8a:f2:71:23:b7:35:d9:56:54:da:11:f6:b0:
f2:81:46:0b:9a:46:16:05:16:7f:7a:6a:d4:d8:86:42:ea:2c:
85:89:23:bf:c2:02:d1:e3:70:4d:37:b9:fe:64:d7:02:3f:0e:
47:15:db:3b:8a:de:e7:4f:a2:a8:f5:f3:b9:5b:90:fa:c9:c1:
82:8d:0f:0e:dd:37:92:78:b1:ab:fd:75:63:09:14:df:6b:94:
22:8f:9f:8f:92:66:2d:4d:a6:7f:11:c2:cc:f2:e7:d5:29:2a:
42:43:88:15:2e:4e:5e:57:ad:62:c3:3e:96:19:29:34:40:72:
05:3a:9c:2b:01:c9:1c:67:b8:c9:3a:6d:95:5d:c6:90:cb:a0:
2f:6f:7a:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE2La0h3pLEYlP9JZ71APMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMGM5NTAyM2ZhMGQzM2IyMjZlZWYyZjIyYzhlY2EzOTA1
MjZiZjAwHhcNMjUxMTExMDQwMTI3WhcNMjUxMTEyMDQwMTI3WjAzMTEwLwYDVQQD
EygwNzRkZjgwYTA0MGIzNDM5MmRhYzdkY2I3YzYyYzEzNjgyMmNjNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+uWwgnwh3OV6bRN1zVeU3ljp899
WP25PxWdg5oVevLaynu21KzHimdb+1FgQXRllRvtZGPrs93Fc3ONldsxSscNTHdN
b9Eo83GAE1WMhM9nxxhL3Hk81vxXpGc0ChKcWw0R3rPNs5T+lj1agVFKM2R4STqT
n5cs3d/7+CUwsYS4Me6j1oa/gWLg4INQ812RHziB6P+V77GGJPBgrih7+I6YmMDS
qU6llkDy7NVZpGt/Kf6eoBhd0Tv8tSy8SxyKWE7CQIawdFJdBVyt6kWcEovDt93K
xnSHEdE8E9SjWosTR3AIlBSqC+g60vlM39mspq2aRpo7TqVeqYAt18xJ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdN+AoECzQ5Lax9y3xiwTaCLMXZMB8GA1UdIwQY
MBaAFFsMlQI/oNM7Im7vLyLI7KOQUmvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEt
ZTBlOTBlMDg0NTA4LzEvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEtZTBlOTBlMDg0NTA4
LzEvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUtyzrTB
ak/DCGQQHc8RPs45drsK3mdSlyPLhq2VpTMrDklsOVNjRqRYylDyIayR/jLjTNdx
Scu8fTFUpnIzl6W/YkrDT41jXOTf+n6ff59ThZ5SFBJjWj+mwY6vsZWj0k5QXqr7
l+Qu3w/GZH59bmuK8nEjtzXZVlTaEfaw8oFGC5pGFgUWf3pq1NiGQuoshYkjv8IC
0eNwTTe5/mTXAj8ORxXbO4re50+iqPXzuVuQ+snBgo0PDt03knixq/11YwkU32uU
Io+fj5JmLU2mfxHCzPLn1SkqQkOIFS5OXletYsM+lhkpNEByBTqcKwHJHGe4yTpt
lV3GkMugL296sQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:10 2025 by rpki-client