Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
File: wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft (raw, json)
Hash identifier: J9FS2B+BhghuduKwUpBtXcZ6UfF/zp/VvBzHLc0CmqM=
Subject key identifier: 2E:3A:F3:19:78:F5:23:34:91:60:50:8C:3F:35:82:BD:E7:FD:2B:D0
Authority key identifier: C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
Certificate issuer: /CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Certificate serial: 01984B5412B8A968BB0AAF992CBB977895F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
Manifest number: 0DC6
Signing time: Sun 27 Jul 2025 10:00:57 +0000
Manifest this update: Sun 27 Jul 2025 10:00:57 +0000
Manifest next update: Mon 28 Jul 2025 10:00:57 +0000
Files and hashes: 1: a6SHvUwdULLlosMj0Qyu3etIaJs.roa (hash: AXN629p0Y1qYqZU9D/jxSCYhJRckcBgGmOm3TSGD8tc=)
2: lg4c_Y9KaB7IeYQtG_NlVFs8Ttc.roa (hash: s0TIgc9o3WnXNq+/Rw0e9Vihi4zyFHKiJVF/TZNGrnw=)
3: wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl (hash: AbudXprgaMpzyw18WWthLkoMVrhvABRnk2O9vgrfp1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:12:b8:a9:68:bb:0a:af:99:2c:bb:97:78:95:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Validity
Not Before: Jul 27 10:00:57 2025 GMT
Not After : Jul 28 10:00:57 2025 GMT
Subject: CN=2e3af31978f523349160508c3f3582bde7fd2bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:7e:94:26:4e:20:2f:80:cd:7a:f1:c3:df:
69:8e:56:78:38:76:6f:0d:67:7d:fa:ed:cf:3e:82:
69:b1:58:fd:b9:17:2f:33:ed:8f:d8:0e:47:31:5e:
2d:13:7f:0d:48:2c:db:bd:a2:5d:2e:e6:36:c4:5f:
6d:f1:1e:42:46:b7:fc:f3:30:b5:c1:ee:81:a4:55:
86:fd:ec:7b:cc:96:18:93:e7:5d:f6:73:ba:2d:18:
1c:0a:69:3a:8a:7a:ba:7c:90:35:3f:03:90:21:ff:
ae:0a:95:2f:e2:e8:d0:93:f1:c6:07:c3:eb:9b:27:
b0:8c:7f:44:4b:f7:ef:bf:66:90:c2:cd:da:8f:cc:
4d:8c:36:4d:83:96:8a:b3:08:d8:ac:ef:d6:d8:7d:
f1:a9:7d:00:40:65:a9:fc:e2:20:8c:98:45:03:b0:
cc:29:eb:6d:7a:8f:43:21:00:db:ea:42:3e:55:16:
e9:52:24:67:db:a7:b7:0f:dd:a7:17:d4:40:27:c8:
4b:09:9f:97:35:b6:44:e7:f1:bc:22:23:a9:b8:7e:
81:3e:5f:ce:63:8d:57:cf:6e:bc:89:e0:29:90:4b:
95:3f:d5:91:29:11:81:92:e0:ae:ff:b9:32:15:f7:
e7:cd:f6:ed:76:ff:5f:48:ba:f3:dd:d3:94:88:f5:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3A:F3:19:78:F5:23:34:91:60:50:8C:3F:35:82:BD:E7:FD:2B:D0
X509v3 Authority Key Identifier:
keyid:C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c7:79:0a:2e:01:52:1d:46:aa:ae:3d:62:02:99:c0:44:77:
1e:d6:20:44:17:9a:f6:2e:8d:58:6e:b5:ed:29:dd:55:fb:f5:
4c:03:86:44:dc:3a:2a:ff:85:2c:09:b7:22:21:d4:c1:8a:ff:
d6:e6:e7:e2:0e:3f:ba:e1:be:bb:6e:bc:77:c3:a6:0e:37:07:
99:32:7a:1c:62:dc:34:af:df:04:65:c5:62:08:3a:24:10:00:
c1:f6:cb:d0:7c:61:d7:49:5c:6f:5e:c1:12:2e:f2:42:ea:b1:
ee:68:b9:1d:5c:2b:2c:4e:38:56:f4:0b:a3:e5:ce:3b:2f:fc:
07:54:d8:67:e8:28:f7:70:54:44:80:65:0c:bc:2c:4c:88:38:
51:c4:c0:aa:f8:5b:b1:5d:1f:41:b7:df:47:af:ed:1a:57:c2:
7b:fa:0a:2c:e4:0b:97:b1:97:51:e9:85:7a:b1:d7:bc:48:09:
66:83:10:58:ab:14:03:6e:c1:62:18:bc:d5:aa:47:60:94:f7:
c7:fe:87:29:9e:9b:f0:4c:dd:c6:14:01:4c:ae:1a:5e:53:6d:
9a:a5:dd:d8:46:46:ab:0a:7a:b0:98:98:41:46:f1:57:32:bb:
6a:22:17:b3:7f:5e:52:71:15:30:9e:0f:43:88:80:ed:18:e1:
9a:93:0c:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVBK4qWi7Cq+ZLLuXeJX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTAyZjc2OWJmNjgxYjEwMzlmMmNlZTYxZTllMGY5NzVl
NGU1NmIwHhcNMjUwNzI3MTAwMDU3WhcNMjUwNzI4MTAwMDU3WjAzMTEwLwYDVQQD
EygyZTNhZjMxOTc4ZjUyMzM0OTE2MDUwOGMzZjM1ODJiZGU3ZmQyYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfV+lCZOIC+AzXrxw99pjlZ4OHZv
DWd9+u3PPoJpsVj9uRcvM+2P2A5HMV4tE38NSCzbvaJdLuY2xF9t8R5CRrf88zC1
we6BpFWG/ex7zJYYk+dd9nO6LRgcCmk6inq6fJA1PwOQIf+uCpUv4ujQk/HGB8Pr
myewjH9ES/fvv2aQws3aj8xNjDZNg5aKswjYrO/W2H3xqX0AQGWp/OIgjJhFA7DM
Ketteo9DIQDb6kI+VRbpUiRn26e3D92nF9RAJ8hLCZ+XNbZE5/G8IiOpuH6BPl/O
Y41Xz268ieApkEuVP9WRKRGBkuCu/7kyFffnzfbtdv9fSLrz3dOUiPW7fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC468xl49SM0kWBQjD81gr3n/SvQMB8GA1UdIwQY
MBaAFMKQL3ab9oGxA58s7mHp4Pl15OVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BBdmRwdjJnYkVEbnl6dVllbmctWFhrNVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NGQ0MTMtNDBmNS00YWUyLWFjYTkt
ZmYzOTM2ZmU5OTQ2LzEvd3BBdmRwdjJnYkVEbnl6dVllbmctWFhrNVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My81NGQ0MTMtNDBmNS00YWUyLWFjYTktZmYzOTM2ZmU5OTQ2
LzEvd3BBdmRwdjJnYkVEbnl6dVllbmctWFhrNVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsd5Ci4B
Uh1Gqq49YgKZwER3HtYgRBea9i6NWG617SndVfv1TAOGRNw6Kv+FLAm3IiHUwYr/
1ubn4g4/uuG+u268d8OmDjcHmTJ6HGLcNK/fBGXFYgg6JBAAwfbL0Hxh10lcb17B
Ei7yQuqx7mi5HVwrLE44VvQLo+XOOy/8B1TYZ+go93BURIBlDLwsTIg4UcTAqvhb
sV0fQbffR6/tGlfCe/oKLOQLl7GXUemFerHXvEgJZoMQWKsUA27BYhi81apHYJT3
x/6HKZ6b8EzdxhQBTK4aXlNtmqXd2EZGqwp6sJiYQUbxVzK7aiIXs39eUnEVMJ4P
Q4iA7RjhmpMM+w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 16:55:18 2025 by rpki-client