Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
File: WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft (raw, json)
Hash identifier: 0WJGnTNrfQB2GWeH9c7AIS2XwlW0nunXhkQOJHKEZOg=
Subject key identifier: 4D:60:07:AD:97:D4:87:5D:54:1A:66:98:50:3E:D2:FD:5D:1E:8D:2D
Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
Certificate issuer: /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Certificate serial: 019A23D3905271B38F441F5DCC6DE12421D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
Manifest number: 05AF
Signing time: Mon 27 Oct 2025 04:00:58 +0000
Manifest this update: Mon 27 Oct 2025 04:00:58 +0000
Manifest next update: Tue 28 Oct 2025 04:00:58 +0000
Files and hashes: 1: QEzw4CiK6CiHgldhyTg0boyDFI4.roa (hash: ffDuLw/6EUMQBC9wlTrHOAlboOryP+rRmytNZtNkFZU=)
2: WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl (hash: sUbLm1ON8n4Z2jORm2rm9lR+MFeZIW7V1aIhqZN8eAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:90:52:71:b3:8f:44:1f:5d:cc:6d:e1:24:21:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Validity
Not Before: Oct 27 04:00:58 2025 GMT
Not After : Oct 28 04:00:58 2025 GMT
Subject: CN=4d6007ad97d4875d541a6698503ed2fd5d1e8d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:0a:2e:38:7c:eb:3d:c1:6b:63:96:6b:16:
89:e8:ef:a2:44:25:c0:70:fd:ce:10:57:48:96:48:
2b:9c:8d:2f:03:1d:16:21:51:61:ca:24:dc:a4:fe:
46:4e:9e:30:dc:34:e8:dc:93:9f:54:ee:7f:7e:3a:
1c:c6:70:84:46:a5:74:87:c1:13:7c:99:2c:9a:ec:
a1:c1:1b:e6:d3:37:98:0f:99:46:fa:53:02:45:f3:
95:a8:6e:a4:1a:a1:05:c4:b2:39:a3:c2:f3:33:5d:
f6:03:70:3f:56:1a:c5:79:a9:4a:a1:71:2b:31:f6:
27:e4:bb:6a:24:76:f8:d2:6e:53:ee:3a:82:d7:01:
87:b2:fa:88:7e:3a:b2:a8:9e:e3:72:fb:b5:36:e0:
11:8b:ea:35:f7:29:50:be:42:7a:18:a0:de:8e:aa:
29:c6:a7:18:7e:de:23:62:7a:f0:37:cc:0b:72:49:
eb:67:13:c9:a7:fe:6a:b3:2b:06:8e:0e:41:9f:df:
6e:49:e3:37:04:a2:11:80:24:18:d8:62:40:33:ea:
91:7b:a3:0c:b6:1c:d5:82:45:0e:60:1f:b0:55:90:
f1:0e:80:96:a8:f8:48:d0:94:80:ba:eb:1d:4e:b1:
aa:04:81:aa:9f:77:0d:dc:78:13:d7:29:4d:1d:67:
63:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:60:07:AD:97:D4:87:5D:54:1A:66:98:50:3E:D2:FD:5D:1E:8D:2D
X509v3 Authority Key Identifier:
keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7c:7c:79:d8:9f:f2:b1:20:34:78:29:20:fd:3f:e6:4f:7f:
13:b2:f9:d0:0b:7a:9e:4f:d7:2b:5f:cc:cd:ff:39:94:67:93:
08:e9:a4:dc:a8:4f:4b:0b:24:53:8d:83:65:5a:eb:d3:af:e3:
18:d4:48:bf:8e:9d:e6:b7:e1:73:42:d0:23:95:53:b1:04:b2:
e6:1d:b9:15:0f:7b:d5:ea:db:63:15:9b:c6:c7:7d:13:b5:b7:
ea:4f:51:fd:8c:37:94:66:5d:0f:e3:c2:56:90:78:3d:32:05:
23:48:2e:1f:eb:f9:ef:ec:e8:c7:e1:8c:95:81:4a:b9:eb:9f:
85:26:10:4a:e7:c8:e1:50:59:61:f6:c8:c7:0e:2d:8b:a7:ec:
56:d8:1a:aa:8b:11:51:9d:fc:1a:9c:e0:37:9c:7f:1e:4f:54:
d0:8c:d2:a4:b8:21:a6:e1:16:ae:87:9c:fe:4b:4a:1c:a5:8a:
87:ea:6c:4b:ef:49:34:b4:78:9d:59:b3:3e:d7:0d:e2:95:b1:
59:eb:92:88:5f:2a:2e:f5:78:ff:be:d6:d9:07:ad:de:85:ae:
18:dc:b7:af:fd:31:2a:3d:eb:98:57:c8:83:b9:69:28:24:f5:
df:fc:bd:e5:48:7a:3d:26:74:91:43:47:a7:2e:98:7d:b1:d2:
af:68:b4:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoj05BScbOPRB9dzG3hJCHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Y2JmZTA4MzRmOGU2NjUxMmY1NWJkNzhjYzA3NWI3ZWQ1
NmY0MDkwHhcNMjUxMDI3MDQwMDU4WhcNMjUxMDI4MDQwMDU4WjAzMTEwLwYDVQQD
Eyg0ZDYwMDdhZDk3ZDQ4NzVkNTQxYTY2OTg1MDNlZDJmZDVkMWU4ZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL0KLjh86z3Ba2OWaxaJ6O+iRCXA
cP3OEFdIlkgrnI0vAx0WIVFhyiTcpP5GTp4w3DTo3JOfVO5/fjocxnCERqV0h8ET
fJksmuyhwRvm0zeYD5lG+lMCRfOVqG6kGqEFxLI5o8LzM132A3A/VhrFealKoXEr
MfYn5LtqJHb40m5T7jqC1wGHsvqIfjqyqJ7jcvu1NuARi+o19ylQvkJ6GKDejqop
xqcYft4jYnrwN8wLcknrZxPJp/5qsysGjg5Bn99uSeM3BKIRgCQY2GJAM+qRe6MM
thzVgkUOYB+wVZDxDoCWqPhI0JSAuusdTrGqBIGqn3cN3HgT1ylNHWdj4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1gB62X1IddVBpmmFA+0v1dHo0tMB8GA1UdIwQY
MBaAFFjL/gg0+OZlEvVb14zAdbftVvQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iZTg2M2YtYjMzYi00MzM0LWJiZDIt
NDA5NDEwNjc4NmE5LzEvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iZTg2M2YtYjMzYi00MzM0LWJiZDItNDA5NDEwNjc4NmE5
LzEvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXx8edif
8rEgNHgpIP0/5k9/E7L50At6nk/XK1/Mzf85lGeTCOmk3KhPSwskU42DZVrr06/j
GNRIv46d5rfhc0LQI5VTsQSy5h25FQ971erbYxWbxsd9E7W36k9R/Yw3lGZdD+PC
VpB4PTIFI0guH+v57+zox+GMlYFKueufhSYQSufI4VBZYfbIxw4ti6fsVtgaqosR
UZ38GpzgN5x/Hk9U0IzSpLghpuEWroec/ktKHKWKh+psS+9JNLR4nVmzPtcN4pWx
WeuSiF8qLvV4/77W2Qet3oWuGNy3r/0xKj3rmFfIg7lpKCT13/y95Uh6PSZ0kUNH
py6YfbHSr2i0eQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:50:44 2025 by rpki-client