Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: JN8wE2ZJuNe3EIE01c3p1jRn8DlIsMVs3nU54EpHLwk=
Subject key identifier: 36:B1:F4:8F:F1:56:EC:26:FC:B5:06:DC:5C:72:7B:80:93:10:4E:7F
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 019847783DD5A9D082EDA79ADFF5836AF77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 0169
Signing time: Sat 26 Jul 2025 16:01:59 +0000
Manifest this update: Sat 26 Jul 2025 16:01:59 +0000
Manifest next update: Sun 27 Jul 2025 16:01:59 +0000
Files and hashes: 1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=)
2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: KxkdfvxvVWQ1P0RZj4Is/BMFHxFrNYaHIdAD9gLo9xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:3d:d5:a9:d0:82:ed:a7:9a:df:f5:83:6a:f7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Jul 26 16:01:59 2025 GMT
Not After : Jul 27 16:01:59 2025 GMT
Subject: CN=36b1f48ff156ec26fcb506dc5c727b8093104e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:e3:da:a0:38:e5:41:4c:ec:5f:95:f9:01:
b9:40:22:d6:60:ab:fb:82:60:94:63:7d:74:49:6c:
2e:db:1a:43:be:da:b2:a6:47:7d:fa:3e:c5:b8:4f:
96:e8:45:b9:b1:a3:0f:63:08:ca:f9:f5:6f:24:ab:
4f:7e:a0:07:7a:6d:ab:ed:41:12:1e:9d:d0:65:71:
d0:5d:8a:3c:67:18:c0:53:77:57:a4:68:cc:53:1a:
ce:23:08:8c:29:e2:63:bd:bc:60:15:c6:58:de:62:
85:9a:e3:77:0e:35:98:62:3b:50:74:e4:1f:1b:34:
db:4e:64:c2:a4:55:58:af:00:c4:0f:79:9d:02:9b:
41:06:0a:68:bb:73:eb:9f:83:61:e8:b3:a0:91:c1:
ff:ae:c6:75:70:86:e3:1c:89:45:b1:ee:5e:12:7f:
85:d8:b0:47:86:82:38:1d:55:7e:ab:97:33:70:f6:
27:7d:41:c6:ed:1f:e0:d8:50:dc:cd:f5:9d:ea:e3:
5a:54:7f:88:de:63:3c:96:ed:0f:40:02:0d:6b:a1:
fb:16:dc:b3:38:13:8e:97:4f:53:68:9a:41:c1:3b:
c3:08:f0:3b:b0:8c:d5:b6:23:90:ec:7a:16:f9:b0:
46:a4:a7:7d:a1:d2:9d:93:c3:e1:11:9b:ae:b3:8b:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B1:F4:8F:F1:56:EC:26:FC:B5:06:DC:5C:72:7B:80:93:10:4E:7F
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e9:a8:9d:c9:55:4e:5a:36:e3:d0:2d:27:64:b1:62:fd:2d:
b1:4e:5b:ca:7d:60:06:54:fa:77:e0:79:b6:e2:ec:74:60:56:
4c:0e:36:8b:02:c1:7e:8f:a0:2b:07:b7:94:ee:3a:0a:9a:75:
36:0a:ed:c6:26:91:3c:ed:3e:0a:cf:0a:05:ba:81:13:ad:18:
ca:c5:11:e2:41:1f:5e:b5:19:88:6f:c9:9d:43:43:98:d8:c8:
fd:c7:2d:f1:97:bc:cd:33:6b:15:ea:e5:5d:6a:21:23:a4:95:
46:bf:27:82:26:1b:49:83:a2:75:7f:e4:7b:6f:12:f6:fd:a4:
2c:4c:18:5d:db:3b:6d:48:c4:3b:8d:a2:71:81:95:a4:7f:92:
fb:4b:c4:bf:d0:54:16:ce:9e:8b:b8:4a:aa:52:71:34:d1:74:
a0:b5:06:99:a2:d1:b3:c6:47:67:cb:11:18:e3:07:62:1b:96:
e7:03:96:71:9f:9a:2b:66:f8:d9:1f:3b:d8:1f:f6:60:18:ac:
83:3f:6d:55:0e:5a:e9:84:99:15:5f:f7:4b:a9:58:22:24:d9:
be:f6:95:0d:b2:cc:a6:22:08:f9:16:b4:61:10:1a:64:ac:e2:
a8:7f:67:e6:3b:cd:35:8e:d9:26:cb:1e:32:2f:3f:08:16:df:
14:bb:64:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeD3VqdCC7aea3/WDavd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDg3ZDkyZjg5MGMyZDM2NTk2ZGVjYTFjYjBiMGJiOGIw
N2ExMjIwHhcNMjUwNzI2MTYwMTU5WhcNMjUwNzI3MTYwMTU5WjAzMTEwLwYDVQQD
EygzNmIxZjQ4ZmYxNTZlYzI2ZmNiNTA2ZGM1YzcyN2I4MDkzMTA0ZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kLj2qA45UFM7F+V+QG5QCLWYKv7
gmCUY310SWwu2xpDvtqypkd9+j7FuE+W6EW5saMPYwjK+fVvJKtPfqAHem2r7UES
Hp3QZXHQXYo8ZxjAU3dXpGjMUxrOIwiMKeJjvbxgFcZY3mKFmuN3DjWYYjtQdOQf
GzTbTmTCpFVYrwDED3mdAptBBgpou3Prn4Nh6LOgkcH/rsZ1cIbjHIlFse5eEn+F
2LBHhoI4HVV+q5czcPYnfUHG7R/g2FDczfWd6uNaVH+I3mM8lu0PQAINa6H7Ftyz
OBOOl09TaJpBwTvDCPA7sIzVtiOQ7HoW+bBGpKd9odKdk8PhEZuus4ttgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDax9I/xVuwm/LUG3Fxye4CTEE5/MB8GA1UdIwQY
MBaAFFjYfZL4kMLTZZbeyhywsLuLB6EiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMt
YmQ3MzYwOWVlNWRhLzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMtYmQ3MzYwOWVlNWRh
LzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOmonclV
Tlo249AtJ2SxYv0tsU5byn1gBlT6d+B5tuLsdGBWTA42iwLBfo+gKwe3lO46Cpp1
NgrtxiaRPO0+Cs8KBbqBE60YysUR4kEfXrUZiG/JnUNDmNjI/cct8Ze8zTNrFerl
XWohI6SVRr8ngiYbSYOidX/ke28S9v2kLEwYXds7bUjEO42icYGVpH+S+0vEv9BU
Fs6ei7hKqlJxNNF0oLUGmaLRs8ZHZ8sRGOMHYhuW5wOWcZ+aK2b42R872B/2YBis
gz9tVQ5a6YSZFV/3S6lYIiTZvvaVDbLMpiII+Ra0YRAaZKziqH9n5jvNNY7ZJsse
Mi8/CBbfFLtk5A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:46:21 2025 by rpki-client