
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
File: wSWw9XiOWBEj5eSfAB1S16f89a8.mft (raw, json)
Hash identifier: JYRxslqkmtkoo9zWw5dTDB7H3l2iT3Cmrc0gbSkYVyk=
Subject key identifier: 5A:DD:A9:2A:C9:B1:B0:6A:CB:57:6B:67:CB:A8:69:DF:03:E8:BC:37
Authority key identifier: C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF
Certificate issuer: /CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af
Certificate serial: 01982B5B9DF22C228719111A11184703AC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
Manifest number: 4C
Signing time: Mon 21 Jul 2025 05:01:21 +0000
Manifest this update: Mon 21 Jul 2025 05:01:21 +0000
Manifest next update: Tue 22 Jul 2025 05:01:21 +0000
Files and hashes: 1: navuee4FJbu9Mu_giIFAY0BYzaM.roa (hash: 6gSGweu9FwNJJ/ezj94dZmef8nFklycxHKre4DDzNBE=)
2: wSWw9XiOWBEj5eSfAB1S16f89a8.crl (hash: 3DIeL3TT98FxM1Mk7tv1kZvJJw++3Nl2jJx9PhxfQAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:5b:9d:f2:2c:22:87:19:11:1a:11:18:47:03:ac:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af
Validity
Not Before: Jul 21 05:01:21 2025 GMT
Not After : Jul 22 05:01:21 2025 GMT
Subject: CN=5adda92ac9b1b06acb576b67cba869df03e8bc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:ba:58:8a:17:7e:51:c7:e4:76:a1:04:ae:
bc:c1:6a:14:70:8e:cc:d6:ab:af:a3:2c:e2:6f:9e:
49:fe:fe:29:f6:a5:68:04:0b:6f:30:df:10:b7:18:
d0:ad:e4:a5:82:38:89:a4:e7:51:17:a6:2d:92:c9:
48:31:79:ae:96:cb:04:c4:60:c7:02:fc:85:1b:be:
78:06:d0:10:59:d4:fd:b3:2d:96:3a:81:23:67:0c:
95:04:38:3f:5d:e0:90:f6:e7:da:79:71:5c:23:1d:
dd:d6:1c:36:ef:21:72:c2:d3:49:d9:01:fb:52:5d:
2b:a0:26:08:ff:1f:01:ec:6e:f7:0d:bf:57:a2:e2:
6b:62:5e:12:04:d2:3e:bd:db:9f:e3:f6:94:54:1b:
7f:e6:a8:12:67:fa:e4:a4:f5:f3:d1:33:31:8a:f1:
e6:98:e9:b4:cf:9c:24:33:47:3e:38:26:29:e9:20:
37:dd:8b:9b:45:34:31:c5:ab:14:73:a4:8b:8a:73:
04:74:0f:d9:d2:2b:8d:94:fb:ec:2c:eb:dd:7b:9d:
73:e8:1a:09:da:d2:02:61:58:0a:12:49:ca:da:fb:
8c:6f:f8:0f:e5:83:dc:4d:31:68:71:95:4c:84:4d:
39:5d:ef:ac:b1:74:1d:a1:17:43:ea:65:3c:e1:96:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:A9:2A:C9:B1:B0:6A:CB:57:6B:67:CB:A8:69:DF:03:E8:BC:37
X509v3 Authority Key Identifier:
keyid:C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:05:c2:1b:3b:21:3e:8e:8a:81:85:4b:2f:79:f0:75:2a:91:
10:c0:5a:39:a1:62:ac:9d:92:40:ba:8c:a0:47:ce:3f:54:d0:
81:cf:46:7e:09:1c:4b:84:5a:1e:d4:e8:e5:7c:d0:23:ec:5e:
3e:40:6e:ca:2d:cd:d7:72:8a:5a:44:8a:0e:d1:4d:37:88:9b:
c9:e6:29:6d:6a:98:0b:e8:67:fb:7d:09:7f:e9:31:d9:12:90:
f6:be:9f:1e:af:73:53:73:35:50:53:6b:be:77:ca:91:0d:4c:
b1:8f:af:8e:d7:f4:fc:2e:6e:d3:4c:77:6e:64:a7:f3:26:d0:
84:7a:d7:c6:f9:a3:b7:2a:50:b5:16:05:91:6c:3c:26:2d:46:
a8:00:e9:0f:de:d2:ad:44:26:f6:79:a4:42:b7:3a:04:65:eb:
4a:37:bf:ae:bc:eb:7a:a2:f1:5f:2a:9f:92:5c:ba:a3:32:90:
de:37:60:fd:0a:0e:af:08:fb:c1:7b:82:6d:e1:51:0d:3b:df:
ed:14:ee:f2:70:9f:73:1f:b1:47:a3:f7:da:87:88:62:30:2c:
e3:d6:c0:56:70:a2:2b:99:af:60:8f:bb:9e:17:a8:9e:e3:b8:
fe:35:d6:76:81:25:18:2f:4b:17:f1:cb:07:4e:50:d9:e9:73:
9b:80:9c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgrW53yLCKHGREaERhHA6xXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjViMGY1Nzg4ZTU4MTEyM2U1ZTQ5ZjAwMWQ1MmQ3YTdm
Y2Y1YWYwHhcNMjUwNzIxMDUwMTIxWhcNMjUwNzIyMDUwMTIxWjAzMTEwLwYDVQQD
Eyg1YWRkYTkyYWM5YjFiMDZhY2I1NzZiNjdjYmE4NjlkZjAzZThiYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ+6WIoXflHH5HahBK68wWoUcI7M
1quvoyzib55J/v4p9qVoBAtvMN8QtxjQreSlgjiJpOdRF6YtkslIMXmulssExGDH
AvyFG754BtAQWdT9sy2WOoEjZwyVBDg/XeCQ9ufaeXFcIx3d1hw27yFywtNJ2QH7
Ul0roCYI/x8B7G73Db9XouJrYl4SBNI+vduf4/aUVBt/5qgSZ/rkpPXz0TMxivHm
mOm0z5wkM0c+OCYp6SA33YubRTQxxasUc6SLinMEdA/Z0iuNlPvsLOvde51z6BoJ
2tICYVgKEknK2vuMb/gP5YPcTTFocZVMhE05Xe+ssXQdoRdD6mU84ZZomQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrdqSrJsbBqy1drZ8uoad8D6Lw3MB8GA1UdIwQY
MBaAFMElsPV4jlgRI+XknwAdUten/PWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NXdzlYaU9XQkVqNWVTZkFCMVMxNmY4OWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lNzY4MTQtZDIyNy00MGNhLWIzODMt
NDY5M2Q4MDZlOGM5LzEvd1NXdzlYaU9XQkVqNWVTZkFCMVMxNmY4OWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9lNzY4MTQtZDIyNy00MGNhLWIzODMtNDY5M2Q4MDZlOGM5
LzEvd1NXdzlYaU9XQkVqNWVTZkFCMVMxNmY4OWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQXCGzsh
Po6KgYVLL3nwdSqREMBaOaFirJ2SQLqMoEfOP1TQgc9GfgkcS4RaHtTo5XzQI+xe
PkBuyi3N13KKWkSKDtFNN4ibyeYpbWqYC+hn+30Jf+kx2RKQ9r6fHq9zU3M1UFNr
vnfKkQ1MsY+vjtf0/C5u00x3bmSn8ybQhHrXxvmjtypQtRYFkWw8Ji1GqADpD97S
rUQm9nmkQrc6BGXrSje/rrzreqLxXyqfkly6ozKQ3jdg/QoOrwj7wXuCbeFRDTvf
7RTu8nCfcx+xR6P32oeIYjAs49bAVnCiK5mvYI+7nheonuO4/jXWdoElGC9LF/HL
B05Q2elzm4CcAw==
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:26:35 2025 by rpki-client