Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
File: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft (raw, json)
Hash identifier: ltImyxuv/kGfLTjGWz1Z5fYtlyqjCmMCkUH3TsejFTw=
Subject key identifier: 4B:CF:3D:3E:AC:A1:34:A5:F0:A2:84:B2:64:70:8C:B5:33:6D:40:93
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Certificate issuer: /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial: 019A334609F1E121707A4D6676E55967C7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
Manifest number: 0DAA
Signing time: Thu 30 Oct 2025 04:00:19 +0000
Manifest this update: Thu 30 Oct 2025 04:00:19 +0000
Manifest next update: Fri 31 Oct 2025 04:00:19 +0000
Files and hashes: 1: 3iX2jkkHiD5MWdLtUD1Exzmo13Q.roa (hash: 3QNrKYAXHRyi/BOzLIrAyRHDvtVW/W4+B5tMO6HApyM=)
2: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl (hash: eIZ7lnJsYN5ZGV6Uh0Do3Ms1ecAq33LCJY9Wx0mPTII=)
3: ula9jfoyo-Oxj4oQTJhGSM2DQ5o.roa (hash: +U/LkfnqXi7jglNA2KgxDFsmoz1cp5+KfODGzHBZoUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:46:09:f1:e1:21:70:7a:4d:66:76:e5:59:67:c7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
Validity
Not Before: Oct 30 04:00:19 2025 GMT
Not After : Oct 31 04:00:19 2025 GMT
Subject: CN=4bcf3d3eaca134a5f0a284b264708cb5336d4093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ae:97:b6:7b:74:9e:94:db:e9:90:1b:87:07:
a6:a9:8e:94:2d:a2:63:cd:4c:29:48:b7:6a:ce:b9:
68:ef:0a:89:02:70:b6:4b:4b:c8:e7:77:2d:09:70:
75:dc:ab:bd:35:08:23:87:70:55:64:3e:c2:b7:11:
98:fa:68:27:38:6b:b8:7e:c9:af:a8:26:da:f4:e2:
76:ba:06:78:98:5c:d7:3d:ce:2c:fd:9c:da:e1:b0:
5e:33:64:b7:1f:96:5d:ef:ea:40:92:2e:53:99:c5:
86:14:64:1b:d0:e8:32:cf:ad:2a:48:60:c1:6f:85:
61:b9:4e:bd:2e:8e:b6:ce:55:7c:a2:fd:fc:d1:4a:
7f:85:df:6b:c8:af:e5:ad:84:3f:5c:26:06:a5:1c:
0e:f4:6f:b0:24:ae:c3:38:ed:5d:40:45:bf:cb:97:
02:a4:46:ac:e0:a4:b2:a8:d7:dc:dc:29:50:50:67:
8a:63:4e:04:cd:28:60:16:5b:a8:8e:1c:40:8e:bc:
03:b7:8a:ed:25:48:d5:e7:6f:05:dd:54:cf:73:4c:
e0:16:db:4c:32:38:6a:47:4f:87:b8:01:06:40:25:
ee:ad:8b:b6:58:58:52:7d:56:85:4f:8b:11:22:eb:
52:ca:e9:b9:4a:7e:f7:58:5f:cf:a2:61:69:34:f6:
a0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CF:3D:3E:AC:A1:34:A5:F0:A2:84:B2:64:70:8C:B5:33:6D:40:93
X509v3 Authority Key Identifier:
keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7e:a9:d2:b0:3a:32:e0:eb:c6:7c:d2:47:3e:11:ee:6c:ed:
2f:a0:ab:35:43:e7:27:16:9f:59:78:81:85:25:9b:ab:90:c6:
d0:55:98:31:a5:e8:11:85:aa:b4:6a:4b:c2:75:39:db:df:da:
48:dd:a4:50:29:b6:92:e0:3b:6a:f5:13:4b:bf:39:4a:1d:3a:
c0:9d:3c:24:fa:44:df:5c:33:ee:83:5a:8b:17:56:97:27:08:
8d:e5:5c:57:95:d0:56:53:0b:17:e6:ae:3c:af:52:ff:7d:5c:
44:25:d5:06:8b:cc:88:27:b5:88:23:1a:e2:79:1a:f9:88:8b:
12:5e:e3:57:a3:f9:b9:23:dd:20:75:b9:66:61:53:e2:85:22:
df:32:fa:9a:de:e4:c0:59:e6:97:05:e3:51:0c:43:b5:b5:c7:
33:d2:4c:01:98:ed:cc:8f:c0:ac:04:a0:90:fd:f0:c3:55:76:
7c:e7:7c:55:f3:5d:a8:c0:29:9c:60:ba:f3:a4:24:74:65:8f:
c6:7f:12:17:f1:92:d6:5e:09:03:e7:2d:95:4a:6b:07:90:bc:
1e:91:dd:81:1b:2f:67:3f:89:3b:2d:35:ca:e8:56:d6:84:d2:
f7:fa:8a:6f:a0:ce:34:58:36:5c:b7:8c:62:2f:73:e0:50:65:
56:4d:b3:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZozRgnx4SFwek1mduVZZ8fpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OTE5NTg0MDMzYzM5MTFhMDA5YmRkZTMxODNmNmM2MGIy
YWZjY2EwHhcNMjUxMDMwMDQwMDE5WhcNMjUxMDMxMDQwMDE5WjAzMTEwLwYDVQQD
Eyg0YmNmM2QzZWFjYTEzNGE1ZjBhMjg0YjI2NDcwOGNiNTMzNmQ0MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5q6Xtnt0npTb6ZAbhwemqY6ULaJj
zUwpSLdqzrlo7wqJAnC2S0vI53ctCXB13Ku9NQgjh3BVZD7CtxGY+mgnOGu4fsmv
qCba9OJ2ugZ4mFzXPc4s/Zza4bBeM2S3H5Zd7+pAki5TmcWGFGQb0Ogyz60qSGDB
b4VhuU69Lo62zlV8ov380Up/hd9ryK/lrYQ/XCYGpRwO9G+wJK7DOO1dQEW/y5cC
pEas4KSyqNfc3ClQUGeKY04EzShgFluojhxAjrwDt4rtJUjV528F3VTPc0zgFttM
MjhqR0+HuAEGQCXurYu2WFhSfVaFT4sRIutSyum5Sn73WF/PomFpNPag2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvPPT6soTSl8KKEsmRwjLUzbUCTMB8GA1UdIwQY
MBaAFFmRlYQDPDkRoAm93jGD9sYLKvzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZmVhMTgtZmI2Mi00Yjk1LTlmZWIt
OWNmODExZTlmYTdhLzEvV1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yZmVhMTgtZmI2Mi00Yjk1LTlmZWItOWNmODExZTlmYTdh
LzEvV1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJn6p0rA6
MuDrxnzSRz4R7mztL6CrNUPnJxafWXiBhSWbq5DG0FWYMaXoEYWqtGpLwnU529/a
SN2kUCm2kuA7avUTS785Sh06wJ08JPpE31wz7oNaixdWlycIjeVcV5XQVlMLF+au
PK9S/31cRCXVBovMiCe1iCMa4nka+YiLEl7jV6P5uSPdIHW5ZmFT4oUi3zL6mt7k
wFnmlwXjUQxDtbXHM9JMAZjtzI/ArASgkP3ww1V2fOd8VfNdqMApnGC686QkdGWP
xn8SF/GS1l4JA+ctlUprB5C8HpHdgRsvZz+JOy01yuhW1oTS9/qKb6DONFg2XLeM
Yi9z4FBlVk2zrA==
-----END CERTIFICATE-----
Generated at Thu Oct 30 05:46:32 2025 by rpki-client