Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: wTe9ps689ozsYqSRtBKtbu0uNjj9147ze6Q6ZCnEhM0=
Subject key identifier: 67:68:DE:EB:1F:1F:C6:F3:65:00:6F:22:72:74:04:FD:87:C6:8A:C2
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 019847E4F271347C1353E704E00FE3F40316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 18:00:43 +0000
Manifest this update: Sat 26 Jul 2025 18:00:43 +0000
Manifest next update: Sun 27 Jul 2025 18:00:43 +0000
Files and hashes: 1: 2ckuuQNGelqhfIDU0HMZ3G_jIN4.roa (hash: Ly3hlzB/x5T87M29FpEs5LMZzWEyS3uYaMyLbALjnTU=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: US3GWPkHFdy2xvEphHYLLfYQEZDiqSypr3JkYkC/g1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:f2:71:34:7c:13:53:e7:04:e0:0f:e3:f4:03:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Jul 26 18:00:43 2025 GMT
Not After : Jul 27 18:00:43 2025 GMT
Subject: CN=6768deeb1f1fc6f365006f22727404fd87c68ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:6f:f1:45:10:3b:4b:5d:e1:0c:f9:66:60:
17:b2:a7:77:87:7d:69:22:de:d9:11:c3:ee:ea:cb:
27:ec:bb:72:f6:21:63:78:2c:4a:f8:7d:8e:ec:94:
ee:f6:d3:f2:8c:76:9a:9f:9c:d4:04:f8:bf:18:f0:
3c:5f:bd:20:f5:ca:dd:53:a1:13:ff:c4:91:5d:01:
61:5c:99:51:36:24:ad:a0:45:24:55:da:d1:8d:bf:
85:e1:93:76:11:90:2c:2c:aa:d8:0e:02:12:82:73:
23:24:44:d8:b2:39:1f:1a:e1:e0:0e:6e:1d:7a:96:
1b:09:9e:12:d5:f1:c3:bc:ae:aa:3c:b0:ef:db:fb:
1b:ba:80:7d:11:2a:45:d4:0e:2f:5f:ab:43:f2:4a:
f9:9f:2c:d5:89:44:ab:4c:a4:f4:1b:37:37:c6:f0:
95:21:24:e8:40:c5:3f:0b:a7:40:a5:d3:16:b5:1e:
0c:38:4d:c9:a3:d9:0c:09:47:4e:5c:7e:bd:d8:f0:
d0:fb:f7:a3:71:8f:36:16:dc:83:98:f8:c8:4f:c5:
79:68:08:52:89:fb:50:7b:01:69:b8:8a:1e:46:12:
8a:87:ea:3c:eb:9f:70:fb:aa:60:2f:55:82:3f:df:
27:8e:b5:8b:a2:df:dc:d9:94:c2:e0:29:d2:f5:a9:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:68:DE:EB:1F:1F:C6:F3:65:00:6F:22:72:74:04:FD:87:C6:8A:C2
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:38:79:16:1c:73:ed:c6:d6:9a:cf:c9:40:17:7e:7a:d0:17:
22:b9:c0:31:ad:b4:48:c6:74:64:44:9e:bd:60:8f:60:b4:05:
8c:9a:2c:24:85:9d:fe:02:d7:33:c1:25:ea:8a:12:a1:b1:68:
2a:7c:0e:64:48:95:c2:e8:62:c5:7a:a1:99:9a:34:64:56:2e:
c5:19:e4:4b:c7:95:22:7f:59:6e:1c:39:5e:0c:65:93:6e:8d:
1e:49:8a:a5:cd:f5:ca:8a:af:87:6a:ef:ac:11:2f:91:8e:38:
bc:1a:3f:e9:35:78:d5:5b:4c:5b:7c:72:ff:c2:88:59:28:7c:
db:4f:da:87:48:7f:2a:bb:24:46:46:3c:65:ab:5c:17:e9:60:
cf:16:a3:06:97:f0:87:c4:a4:5d:16:dd:07:f6:2d:fe:72:82:
52:4a:2f:30:6d:13:34:9a:92:64:b1:da:d4:75:7f:f8:17:f3:
51:f8:ce:38:56:3b:23:db:a4:5a:9b:cd:0b:23:2e:d8:23:bd:
18:c0:ea:a3:aa:38:8d:cf:cc:69:bb:1d:79:62:76:de:1b:75:
49:c9:5e:61:e4:6b:7a:17:2c:60:ce:2e:a2:4e:34:a4:bd:01:
af:f6:1e:e9:9c:0a:45:36:3e:ec:11:90:7d:e6:3a:44:b1:98:
79:7e:a4:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5PJxNHwTU+cE4A/j9AMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYTIzMzU5MGRlNTg2ZTBjNTU4MjFjNmY2ZDU3MzJhZmM4
NDEyMjkwHhcNMjUwNzI2MTgwMDQzWhcNMjUwNzI3MTgwMDQzWjAzMTEwLwYDVQQD
Eyg2NzY4ZGVlYjFmMWZjNmYzNjUwMDZmMjI3Mjc0MDRmZDg3YzY4YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlohv8UUQO0td4Qz5ZmAXsqd3h31p
It7ZEcPu6ssn7Lty9iFjeCxK+H2O7JTu9tPyjHaan5zUBPi/GPA8X70g9crdU6ET
/8SRXQFhXJlRNiStoEUkVdrRjb+F4ZN2EZAsLKrYDgISgnMjJETYsjkfGuHgDm4d
epYbCZ4S1fHDvK6qPLDv2/sbuoB9ESpF1A4vX6tD8kr5nyzViUSrTKT0Gzc3xvCV
ISToQMU/C6dApdMWtR4MOE3Jo9kMCUdOXH692PDQ+/ejcY82FtyDmPjIT8V5aAhS
iftQewFpuIoeRhKKh+o8659w+6pgL1WCP98njrWLot/c2ZTC4CnS9an39QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdo3usfH8bzZQBvInJ0BP2HxorCMB8GA1UdIwQY
MBaAFMCiM1kN5YbgxVghxvbVcyr8hBIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1Mzgt
YTg0ZWI0MTFlZjhhLzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1MzgtYTg0ZWI0MTFlZjhh
LzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTh5Fhxz
7cbWms/JQBd+etAXIrnAMa20SMZ0ZESevWCPYLQFjJosJIWd/gLXM8El6ooSobFo
KnwOZEiVwuhixXqhmZo0ZFYuxRnkS8eVIn9Zbhw5Xgxlk26NHkmKpc31yoqvh2rv
rBEvkY44vBo/6TV41VtMW3xy/8KIWSh820/ah0h/KrskRkY8ZatcF+lgzxajBpfw
h8SkXRbdB/Yt/nKCUkovMG0TNJqSZLHa1HV/+BfzUfjOOFY7I9ukWpvNCyMu2CO9
GMDqo6o4jc/MabsdeWJ23ht1ScleYeRrehcsYM4uok40pL0Br/Ye6ZwKRTY+7BGQ
feY6RLGYeX6kWQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:18 2025 by rpki-client