
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: QEBNd3DGbeWW2agNvJztUQmSzSLgRwMNQFVX8TLXo78=
Subject key identifier: 84:F5:C3:75:BF:93:6F:4A:BD:BE:71:3C:53:9B:74:50:32:A8:4A:C2
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 019A0ECC0F4826DA3952A8DF3DD4CE1B1F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 16EC
Signing time: Thu 23 Oct 2025 02:00:45 +0000
Manifest this update: Thu 23 Oct 2025 02:00:45 +0000
Manifest next update: Fri 24 Oct 2025 02:00:45 +0000
Files and hashes: 1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: ofgJ4W26RTxfXU96EeM1GOW8+kmz+d5UY/I24VoOYhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:cc:0f:48:26:da:39:52:a8:df:3d:d4:ce:1b:1f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Oct 23 02:00:45 2025 GMT
Not After : Oct 24 02:00:45 2025 GMT
Subject: CN=84f5c375bf936f4abdbe713c539b745032a84ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0f:05:4a:21:bc:e0:16:0b:4d:bd:c8:64:48:
53:6d:3e:c6:56:9a:f6:af:2c:ea:ee:75:69:50:9a:
2c:1e:0c:c1:4f:47:d6:9f:e8:6f:ec:41:56:04:41:
a1:d2:08:21:16:50:d2:c1:80:a2:e9:da:7e:d4:8f:
93:d5:36:34:08:cd:48:05:9c:1f:33:b5:3e:d5:e2:
97:27:eb:39:ce:d5:b5:60:8c:d9:fe:48:5f:ae:f4:
6d:3a:23:ee:43:9a:22:ce:d9:d6:a5:36:76:12:40:
3a:24:7c:ed:dd:4d:6e:8d:48:ca:08:5b:61:ae:0f:
5b:7e:b9:55:5d:03:ca:31:a4:96:75:06:c9:d7:5a:
d1:3c:3e:86:a8:05:59:4c:2b:f0:cc:b8:96:b5:fb:
9b:34:17:bd:ef:57:9e:52:af:9e:40:bc:83:4d:f8:
5f:d4:67:19:1e:32:77:79:33:02:54:11:d7:3c:da:
33:ca:57:c4:7e:f2:15:58:9d:3a:b7:bb:26:36:83:
52:50:aa:ce:c6:42:9c:bd:de:5c:31:6d:8d:58:26:
b0:45:c4:0f:9a:0c:9c:a5:fb:c7:75:b5:cc:2d:32:
d4:8b:8e:54:3f:65:75:1f:c3:d0:95:71:3a:7c:ed:
b5:7c:ea:e7:92:d8:00:9c:84:23:aa:e5:e3:b6:72:
5f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F5:C3:75:BF:93:6F:4A:BD:BE:71:3C:53:9B:74:50:32:A8:4A:C2
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3d:a1:cb:2f:a4:e4:39:c7:60:92:a0:5e:96:98:22:a0:ff:
64:0e:2d:1d:b0:e8:82:d0:97:b0:ba:35:36:3c:af:38:8c:32:
57:7d:93:08:4f:e7:d8:4e:fd:4a:26:ee:77:be:fa:01:47:cf:
8a:df:04:fb:ee:be:de:38:db:20:38:48:2d:da:b2:a1:e4:ab:
65:8d:48:c1:f0:52:12:14:11:d0:91:0a:b5:45:64:c7:3d:b4:
7c:fc:78:bf:ca:d3:70:87:2c:34:43:7b:17:76:75:79:b4:b5:
81:43:d0:1e:35:86:de:d0:e6:13:e3:35:f0:42:76:ff:f7:ad:
7b:4b:1e:e3:01:75:87:74:71:1d:7e:47:0a:be:82:88:33:c5:
6d:db:13:de:b0:0f:03:95:5a:26:a4:2a:6f:81:25:6d:39:9b:
18:ff:d9:3e:db:30:d0:b0:44:a1:92:91:e1:c2:1c:7e:8d:71:
85:9c:93:8f:44:64:96:e3:a1:2d:95:19:9a:15:bd:57:3d:c9:
f7:c2:05:8a:c5:7a:93:96:04:a7:f0:bf:0d:74:e0:c2:30:59:
10:75:37:4d:10:c9:e6:f3:51:21:4c:96:e6:de:f9:fc:e7:91:
e5:f1:5b:5d:a8:02:dd:ed:e7:65:f1:bf:e0:15:9b:8b:8c:8b:
4c:04:90:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoOzA9IJto5UqjfPdTOGx9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDQ0M2FkMTk0NDQ4MTQxMjJmM2IyN2NiOTNhNTA1YWJl
NTA3OTkwHhcNMjUxMDIzMDIwMDQ1WhcNMjUxMDI0MDIwMDQ1WjAzMTEwLwYDVQQD
Eyg4NGY1YzM3NWJmOTM2ZjRhYmRiZTcxM2M1MzliNzQ1MDMyYTg0YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg8FSiG84BYLTb3IZEhTbT7GVpr2
ryzq7nVpUJosHgzBT0fWn+hv7EFWBEGh0gghFlDSwYCi6dp+1I+T1TY0CM1IBZwf
M7U+1eKXJ+s5ztW1YIzZ/khfrvRtOiPuQ5oiztnWpTZ2EkA6JHzt3U1ujUjKCFth
rg9bfrlVXQPKMaSWdQbJ11rRPD6GqAVZTCvwzLiWtfubNBe971eeUq+eQLyDTfhf
1GcZHjJ3eTMCVBHXPNozylfEfvIVWJ06t7smNoNSUKrOxkKcvd5cMW2NWCawRcQP
mgycpfvHdbXMLTLUi45UP2V1H8PQlXE6fO21fOrnktgAnIQjquXjtnJfNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT1w3W/k29Kvb5xPFObdFAyqErCMB8GA1UdIwQY
MBaAFFrUQ60ZREgUEi87J8uTpQWr5QeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUt
MDI0ZTcyNTczMzVmLzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUtMDI0ZTcyNTczMzVm
LzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXz2hyy+k
5DnHYJKgXpaYIqD/ZA4tHbDogtCXsLo1NjyvOIwyV32TCE/n2E79Sibud776AUfP
it8E++6+3jjbIDhILdqyoeSrZY1IwfBSEhQR0JEKtUVkxz20fPx4v8rTcIcsNEN7
F3Z1ebS1gUPQHjWG3tDmE+M18EJ2//ete0se4wF1h3RxHX5HCr6CiDPFbdsT3rAP
A5VaJqQqb4ElbTmbGP/ZPtsw0LBEoZKR4cIcfo1xhZyTj0RkluOhLZUZmhW9Vz3J
98IFisV6k5YEp/C/DXTgwjBZEHU3TRDJ5vNRIUyW5t75/OeR5fFbXagC3e3nZfG/
4BWbi4yLTASQVg==
-----END CERTIFICATE-----
Generated at Thu Oct 23 10:59:21 2025 by rpki-client