Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File: WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier: YhBKmJI7310M57ouhPbnPUnEV3YT8QIyWchBXMM0bio=
Subject key identifier: C7:2E:3F:1F:3A:74:11:2E:74:49:38:4D:04:A0:01:52:F2:38:68:7E
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer: /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial: 019A7149C10C5A674269ECE5736909746486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number: 0224
Signing time: Tue 11 Nov 2025 05:00:50 +0000
Manifest this update: Tue 11 Nov 2025 05:00:50 +0000
Manifest next update: Wed 12 Nov 2025 05:00:50 +0000
Files and hashes: 1: 28vwddYYnn-BejsfrgsHjSgfzQ4.roa (hash: UAZDR9r94HPPd9OVOKpoGQIjU2FUXfM+rJVeuMGWG0Y=)
2: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: jvm9UO4zEuxjbkghSVkcIZJBFxl5vuBRo6QVNDzsV2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c1:0c:5a:67:42:69:ec:e5:73:69:09:74:64:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
Validity
Not Before: Nov 11 05:00:50 2025 GMT
Not After : Nov 12 05:00:50 2025 GMT
Subject: CN=c72e3f1f3a74112e7449384d04a00152f238687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1c:ff:ad:fb:52:56:21:cc:92:6a:cf:70:e9:
aa:17:82:5a:78:75:40:17:3e:1c:3f:c7:ca:77:5b:
58:36:71:82:a7:f1:08:e5:0b:6f:4e:e1:1d:c3:f9:
bd:00:bf:12:b8:6e:c3:61:1d:ad:3d:ea:f7:c8:cb:
6d:37:41:c7:14:24:65:78:75:37:4f:0d:df:f6:65:
92:fe:3e:e5:40:11:f4:17:3d:d0:30:c9:0a:4e:98:
23:5e:12:67:8e:de:0d:8d:87:07:a5:fa:e5:8b:e3:
3b:58:85:4d:e7:50:33:a4:ef:26:a2:a9:0d:c0:db:
c8:4a:ab:e5:e5:15:df:b7:f1:63:b2:7f:25:6c:83:
3d:61:46:3c:1c:59:62:f1:0a:0e:c0:de:58:89:6a:
fa:32:60:98:39:c0:06:bd:9b:0e:4b:ee:8c:c7:26:
9b:0a:9c:6d:6e:78:6b:cb:c8:f8:b6:57:89:5a:15:
9a:fe:e8:47:fa:d7:7f:22:65:2f:61:97:08:f8:a8:
6e:4c:48:ea:62:29:e6:bc:ce:ae:ef:99:50:17:e6:
30:dc:11:4f:0a:95:58:3d:b6:5a:00:fc:83:8b:38:
c9:2d:6b:5e:11:97:35:fb:6c:91:a7:4d:9b:e9:ed:
4c:64:30:4e:3e:76:bf:af:c6:9b:b5:b7:8d:65:7d:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2E:3F:1F:3A:74:11:2E:74:49:38:4D:04:A0:01:52:F2:38:68:7E
X509v3 Authority Key Identifier:
keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7f:a0:9a:dc:72:49:7a:a1:ab:ee:7c:19:30:64:7e:f5:dd:
1b:f2:dd:61:0d:b3:35:5f:4a:f0:56:e0:da:be:a8:7a:5c:f1:
f8:59:18:54:1c:01:11:d0:95:c2:48:b0:3c:02:a1:1d:ec:dc:
d0:1a:7a:cf:b5:64:78:b1:c9:fd:05:f9:88:82:bf:bd:ba:85:
dc:7f:a8:f9:5b:e7:ac:8c:d6:d1:b7:1e:e0:48:09:bf:6c:81:
3d:08:43:c6:d6:15:2d:67:4d:de:5e:4e:a7:8e:b2:40:aa:da:
80:14:4f:88:a7:c8:33:ea:cf:95:e0:31:7f:91:31:26:2c:36:
6f:85:b6:ed:da:52:4f:65:1a:77:e4:f2:5d:cf:88:af:c1:f7:
a7:31:9a:af:e0:13:c2:44:c0:84:05:2e:7f:9b:bd:3f:cc:d7:
ad:8d:44:2f:d7:65:b9:ef:75:01:ff:67:69:af:aa:a5:8c:06:
15:94:ee:5a:9d:aa:2c:16:32:a4:c5:a7:08:cf:99:7f:8e:4e:
04:6a:e4:b4:cf:5b:88:69:1a:0e:b2:d5:e4:a1:84:bc:13:78:
69:d3:f3:c2:6f:bc:fe:0f:f2:c9:50:c9:16:3a:40:18:d2:8f:
ce:9c:29:d0:67:d1:e3:b7:1b:21:5e:d8:7d:01:e9:6d:85:96:
9d:c0:67:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxScEMWmdCaezlc2kJdGSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDg5ZGMxODllMDA5MzYxYWNiMjY1NTY4MGU2NjljMGJj
NDc0NTYwHhcNMjUxMTExMDUwMDUwWhcNMjUxMTEyMDUwMDUwWjAzMTEwLwYDVQQD
EyhjNzJlM2YxZjNhNzQxMTJlNzQ0OTM4NGQwNGEwMDE1MmYyMzg2ODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Bz/rftSViHMkmrPcOmqF4JaeHVA
Fz4cP8fKd1tYNnGCp/EI5QtvTuEdw/m9AL8SuG7DYR2tPer3yMttN0HHFCRleHU3
Tw3f9mWS/j7lQBH0Fz3QMMkKTpgjXhJnjt4NjYcHpfrli+M7WIVN51AzpO8moqkN
wNvISqvl5RXft/Fjsn8lbIM9YUY8HFli8QoOwN5YiWr6MmCYOcAGvZsOS+6Mxyab
Cpxtbnhry8j4tleJWhWa/uhH+td/ImUvYZcI+KhuTEjqYinmvM6u75lQF+Yw3BFP
CpVYPbZaAPyDizjJLWteEZc1+2yRp02b6e1MZDBOPna/r8abtbeNZX2NcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcuPx86dBEudEk4TQSgAVLyOGh+MB8GA1UdIwQY
MBaAFFjYncGJ4Ak2GssmVWgOZpwLxHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGIt
OWRmZjViZDU0ODhhLzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGItOWRmZjViZDU0ODhh
LzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIn+gmtxy
SXqhq+58GTBkfvXdG/LdYQ2zNV9K8Fbg2r6oelzx+FkYVBwBEdCVwkiwPAKhHezc
0Bp6z7VkeLHJ/QX5iIK/vbqF3H+o+VvnrIzW0bce4EgJv2yBPQhDxtYVLWdN3l5O
p46yQKragBRPiKfIM+rPleAxf5ExJiw2b4W27dpST2Uad+TyXc+Ir8H3pzGar+AT
wkTAhAUuf5u9P8zXrY1EL9dlue91Af9naa+qpYwGFZTuWp2qLBYypMWnCM+Zf45O
BGrktM9biGkaDrLV5KGEvBN4adPzwm+8/g/yyVDJFjpAGNKPzpwp0GfR47cbIV7Y
fQHpbYWWncBn4w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:49 2025 by rpki-client