Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
File: wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft (raw, json)
Hash identifier: og23Zk3oFVeNvVOCCEfyz0iSPxfIT9KM/lb0yqTN4Z8=
Subject key identifier: D0:AF:99:86:79:17:33:84:69:50:7C:55:1B:85:24:CD:30:2E:E0:D2
Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
Certificate issuer: /CN=c20897c1dbd606929137e672bad0c1f67e637d16
Certificate serial: 019851FB139F4D5135A8E13E0C89F74CC64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
Manifest number: 1228
Signing time: Mon 28 Jul 2025 17:01:05 +0000
Manifest this update: Mon 28 Jul 2025 17:01:05 +0000
Manifest next update: Tue 29 Jul 2025 17:01:05 +0000
Files and hashes: 1: Fbynj4C6zdRgu6gIq2-WxH6T_LA.roa (hash: 1G7T6CHRBzMTi8lz6sG9TXAsvyynmWFubPkkTd5+Xfk=)
2: wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl (hash: gnubC53zUC/wz5AJtWDIzvcaCA1SLO76KC/8JefEY+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fb:13:9f:4d:51:35:a8:e1:3e:0c:89:f7:4c:c6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16
Validity
Not Before: Jul 28 17:01:05 2025 GMT
Not After : Jul 29 17:01:05 2025 GMT
Subject: CN=d0af99867917338469507c551b8524cd302ee0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:75:c6:80:52:a0:fa:37:87:a3:53:de:8f:
c0:47:23:5f:21:d1:62:73:5a:6a:a0:86:6a:e7:d7:
23:bf:a8:8e:82:27:58:8b:85:a4:e6:fb:fd:42:6a:
00:4e:5d:c6:f5:b2:28:da:c1:e7:19:ed:fc:43:31:
43:02:1c:26:06:18:45:56:ae:f5:bf:e8:38:2b:93:
c1:11:72:2e:65:f0:4a:9b:1d:ba:e7:38:af:93:35:
d9:9d:aa:53:db:4e:39:8f:57:5c:19:8f:b1:e2:f6:
ce:69:aa:41:3f:79:e3:a0:23:b7:02:9f:fb:0b:96:
4c:44:ca:d8:e8:04:f6:a5:ae:cb:79:f3:d3:04:7a:
fc:b5:ce:b3:25:ab:dd:c7:50:db:ae:13:44:6f:4b:
43:a1:e0:8b:93:c2:5a:a1:e6:2f:ae:a6:e3:2e:d2:
36:c4:86:23:f4:11:12:a0:09:49:7b:61:12:b1:2b:
c4:a8:a1:00:79:09:b2:60:4f:97:a4:a2:85:07:8e:
7a:8c:dd:87:9b:05:c3:ab:f3:4c:ba:3d:52:70:b7:
41:a3:84:5d:a1:6e:12:f7:02:c4:20:b1:a2:13:75:
3c:2e:3a:31:b4:32:93:bb:56:22:ae:99:4a:50:29:
ab:c4:13:cf:ea:1e:f6:bb:a4:fa:55:ea:49:84:35:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AF:99:86:79:17:33:84:69:50:7C:55:1B:85:24:CD:30:2E:E0:D2
X509v3 Authority Key Identifier:
keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6e:b2:83:6b:36:18:53:e0:1d:3f:89:e4:8e:54:37:46:0f:
3a:c7:3c:98:4f:5f:3c:de:30:d7:57:47:96:3f:af:de:da:68:
ae:b7:8d:3a:e8:28:17:e8:7a:e9:68:84:6b:54:d4:c4:65:e4:
b2:30:d4:b3:5d:e1:90:87:a7:a4:03:d2:f7:36:88:11:04:7d:
28:15:76:25:ff:f9:4b:05:ea:eb:47:08:55:e9:f8:c1:cc:b7:
79:ad:e7:bb:ed:d8:0c:4f:15:05:c8:18:7a:ec:db:76:c3:08:
d4:a7:7f:89:1a:4b:9a:f8:5f:a3:e8:73:f2:a9:09:59:3d:02:
81:96:bb:78:4a:34:19:1f:f4:56:09:35:ec:22:cc:a4:04:f1:
99:f6:ab:8d:5f:45:f1:d5:44:a1:0b:bc:94:75:7c:b3:8b:22:
8a:6f:bd:a8:47:da:b1:80:1a:bd:f5:87:50:bf:95:04:f2:5c:
7b:7a:95:da:b3:e5:f7:65:c4:6e:35:b9:d8:f5:af:0b:a3:8f:
1e:03:1a:08:f0:f8:85:ed:53:07:64:d7:f5:7a:f6:6b:6d:ba:
c1:28:66:87:7e:f0:fa:fe:d9:95:b7:b2:2b:25:a9:f6:c4:ff:
40:b2:e1:99:82:1c:3b:04:8b:8b:df:bf:97:b4:be:a8:08:54:
ec:6c:e3:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhR+xOfTVE1qOE+DIn3TMZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMDg5N2MxZGJkNjA2OTI5MTM3ZTY3MmJhZDBjMWY2N2U2
MzdkMTYwHhcNMjUwNzI4MTcwMTA1WhcNMjUwNzI5MTcwMTA1WjAzMTEwLwYDVQQD
EyhkMGFmOTk4Njc5MTczMzg0Njk1MDdjNTUxYjg1MjRjZDMwMmVlMGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+N1xoBSoPo3h6NT3o/ARyNfIdFi
c1pqoIZq59cjv6iOgidYi4Wk5vv9QmoATl3G9bIo2sHnGe38QzFDAhwmBhhFVq71
v+g4K5PBEXIuZfBKmx265zivkzXZnapT2045j1dcGY+x4vbOaapBP3njoCO3Ap/7
C5ZMRMrY6AT2pa7LefPTBHr8tc6zJavdx1DbrhNEb0tDoeCLk8JaoeYvrqbjLtI2
xIYj9BESoAlJe2ESsSvEqKEAeQmyYE+XpKKFB456jN2HmwXDq/NMuj1ScLdBo4Rd
oW4S9wLEILGiE3U8LjoxtDKTu1YirplKUCmrxBPP6h72u6T6VepJhDXXowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCvmYZ5FzOEaVB8VRuFJM0wLuDSMB8GA1UdIwQY
MBaAFMIIl8Hb1gaSkTfmcrrQwfZ+Y30WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2dpWHdkdldCcEtSTi1aeXV0REI5bjVqZlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8xZjhjYjQtMTcxMi00ZTUzLThkMjQt
YzkxYmY1MDEwNGI5LzEvd2dpWHdkdldCcEtSTi1aeXV0REI5bjVqZlJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8xZjhjYjQtMTcxMi00ZTUzLThkMjQtYzkxYmY1MDEwNGI5
LzEvd2dpWHdkdldCcEtSTi1aeXV0REI5bjVqZlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkW6yg2s2
GFPgHT+J5I5UN0YPOsc8mE9fPN4w11dHlj+v3tporreNOugoF+h66WiEa1TUxGXk
sjDUs13hkIenpAPS9zaIEQR9KBV2Jf/5SwXq60cIVen4wcy3ea3nu+3YDE8VBcgY
euzbdsMI1Kd/iRpLmvhfo+hz8qkJWT0CgZa7eEo0GR/0Vgk17CLMpATxmfarjV9F
8dVEoQu8lHV8s4siim+9qEfasYAavfWHUL+VBPJce3qV2rPl92XEbjW52PWvC6OP
HgMaCPD4he1TB2TX9Xr2a226wShmh37w+v7ZlbeyKyWp9sT/QLLhmYIcOwSLi9+/
l7S+qAhU7GzjUA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 00:53:42 2025 by rpki-client