Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: FJIRuju+7D1pKH6uyN9CQcb2yKzrrcMh1+R8yqTdvl8=
Subject key identifier: C0:25:4D:D9:36:38:69:31:50:E6:CD:2E:52:9C:D1:35:4C:CF:61:1B
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 019A0FA81E0F9BDBACE7F6AA05981F664370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 106A
Signing time: Thu 23 Oct 2025 06:01:07 +0000
Manifest this update: Thu 23 Oct 2025 06:01:07 +0000
Manifest next update: Fri 24 Oct 2025 06:01:07 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: Od38xPUkaeb/MTvc2O7Ja5bYuQgFFgU6HyxsK1XbQXM=)
2: rwRRPql1rIQzsq_i06yzoO2wgHQ.roa (hash: 0FdnTsSRRUfY+3q4ZnKlxf+D+uYOXphiuhAQtxiPw20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:a8:1e:0f:9b:db:ac:e7:f6:aa:05:98:1f:66:43:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Oct 23 06:01:07 2025 GMT
Not After : Oct 24 06:01:07 2025 GMT
Subject: CN=c0254dd93638693150e6cd2e529cd1354ccf611b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:08:dc:74:3e:ea:b2:2d:7b:b0:c8:e5:49:
a4:d9:32:04:46:cc:47:a1:d2:b2:23:16:95:a3:21:
a7:87:9e:30:13:43:d9:8f:76:f2:52:58:82:78:d4:
95:8c:f2:54:01:c5:c5:29:ca:1b:9d:23:91:a1:eb:
6c:8f:c8:1e:de:88:d3:88:92:cf:89:4e:83:ab:9a:
ca:22:f3:36:16:42:4a:de:4f:2b:51:82:4d:bc:6b:
3d:bd:2b:91:6e:7f:50:d3:a1:87:92:00:c6:47:f9:
2b:cd:c4:e2:ee:bf:eb:1a:cc:b6:76:5f:9d:a6:1a:
09:32:be:50:b5:c0:ad:a1:47:aa:cf:dc:a1:34:f6:
6d:4f:d6:a1:b1:b9:eb:b2:56:9a:f5:6f:97:84:97:
8f:5d:96:8a:9e:af:3e:00:3b:f4:65:6b:bd:b9:64:
67:a2:9e:2c:e3:1a:4e:13:a2:94:75:1e:fa:16:ae:
34:43:35:0d:bf:54:7b:5c:5c:eb:57:c0:ef:9c:4e:
3f:a0:ed:4a:b1:a1:ae:66:35:3e:ae:a6:d9:be:1f:
33:23:89:b4:03:af:01:e0:0a:c5:ba:04:ea:4e:b6:
03:2a:d5:17:c2:f2:c1:64:76:cd:91:08:e5:35:47:
24:dd:23:71:db:d7:89:68:54:1a:e2:7e:4d:4d:9a:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:25:4D:D9:36:38:69:31:50:E6:CD:2E:52:9C:D1:35:4C:CF:61:1B
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e2:6d:0f:37:ab:51:89:3e:82:53:20:fc:a8:cb:51:48:76:
f8:b5:20:1e:05:19:e5:f1:f4:4a:61:9c:e8:c3:71:70:2e:76:
02:06:1a:ce:2c:9b:b7:94:ae:a9:65:07:d9:b5:45:74:8b:ec:
10:21:b6:9d:5f:90:13:8d:a6:9b:2e:06:da:ba:c0:2d:87:b7:
7b:a1:f8:6e:ff:b2:a8:f0:00:06:b1:57:cb:8b:bf:74:48:1c:
da:03:37:ff:65:c2:f8:18:e1:b6:90:c6:52:31:d3:d0:28:11:
4f:d1:88:32:49:cc:46:1b:48:d9:9e:4e:2e:ed:f4:50:3c:4f:
da:71:61:c9:83:65:b5:f0:53:08:52:53:c8:18:c1:e1:93:3a:
c9:7f:8f:03:1a:80:93:dc:2e:ab:8a:f8:17:ae:09:bc:7d:7c:
23:af:de:85:79:de:2b:79:0c:5e:62:f0:37:be:9a:89:43:f3:
ca:c0:27:75:e3:39:a3:42:41:55:0f:9c:62:48:de:b9:a8:16:
e7:17:7f:40:1a:7b:65:56:bb:8f:d8:9a:10:3f:a9:32:77:83:
d3:60:7a:98:92:09:f0:da:99:3c:0b:fd:be:48:bf:dd:34:fa:
82:b7:e0:5c:cd:51:e5:4f:cf:30:8d:1e:ee:ea:61:48:45:8e:
27:bc:8c:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoPqB4Pm9us5/aqBZgfZkNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MDA3NDA4YmJmOGFkOTA0NGRlNjgwNDY1ODdjNzU4OWI3
MmViZWYwHhcNMjUxMDIzMDYwMTA3WhcNMjUxMDI0MDYwMTA3WjAzMTEwLwYDVQQD
EyhjMDI1NGRkOTM2Mzg2OTMxNTBlNmNkMmU1MjljZDEzNTRjY2Y2MTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvAI3HQ+6rIte7DI5Umk2TIERsxH
odKyIxaVoyGnh54wE0PZj3byUliCeNSVjPJUAcXFKcobnSORoetsj8ge3ojTiJLP
iU6Dq5rKIvM2FkJK3k8rUYJNvGs9vSuRbn9Q06GHkgDGR/krzcTi7r/rGsy2dl+d
phoJMr5QtcCtoUeqz9yhNPZtT9ahsbnrslaa9W+XhJePXZaKnq8+ADv0ZWu9uWRn
op4s4xpOE6KUdR76Fq40QzUNv1R7XFzrV8DvnE4/oO1KsaGuZjU+rqbZvh8zI4m0
A68B4ArFugTqTrYDKtUXwvLBZHbNkQjlNUck3SNx29eJaFQa4n5NTZppEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAlTdk2OGkxUObNLlKc0TVMz2EbMB8GA1UdIwQY
MBaAFFkAdAi7+K2QRN5oBGWHx1ibcuvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMt
OWM3MDhkYWMxZDkyLzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMtOWM3MDhkYWMxZDky
LzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeJtDzer
UYk+glMg/KjLUUh2+LUgHgUZ5fH0SmGc6MNxcC52AgYaziybt5SuqWUH2bVFdIvs
ECG2nV+QE42mmy4G2rrALYe3e6H4bv+yqPAABrFXy4u/dEgc2gM3/2XC+BjhtpDG
UjHT0CgRT9GIMknMRhtI2Z5OLu30UDxP2nFhyYNltfBTCFJTyBjB4ZM6yX+PAxqA
k9wuq4r4F64JvH18I6/ehXneK3kMXmLwN76aiUPzysAndeM5o0JBVQ+cYkjeuagW
5xd/QBp7ZVa7j9iaED+pMneD02B6mJIJ8NqZPAv9vki/3TT6grfgXM1R5U/PMI0e
7uphSEWOJ7yMzw==
-----END CERTIFICATE-----
Generated at Thu Oct 23 16:10:11 2025 by rpki-client