Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier: hHiMkoPCuwDR8fnMLi1bonUq2i+MBZjhgqCxvdVy+xo=
Subject key identifier: B7:62:57:39:77:0E:CC:12:CF:FA:D3:B9:5C:D4:65:D1:F3:0A:91:D7
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 01984BC1977FF0D829648587BBC40611E4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number: 025D
Signing time: Sun 27 Jul 2025 12:00:35 +0000
Manifest this update: Sun 27 Jul 2025 12:00:35 +0000
Manifest next update: Mon 28 Jul 2025 12:00:35 +0000
Files and hashes: 1: StpUpn9lX23TO-Oe-4PI79KxNG0.roa (hash: Y4gPgVsX/dvV/I4lGCjA++A6e1J5MarmPPrWMNyloHc=)
2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: EAs24QsQ46CLKrSI2voQSaLE2/gZbZAPlUguwyWedaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:97:7f:f0:d8:29:64:85:87:bb:c4:06:11:e4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: Jul 27 12:00:35 2025 GMT
Not After : Jul 28 12:00:35 2025 GMT
Subject: CN=b7625739770ecc12cffad3b95cd465d1f30a91d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:ab:8d:52:b3:4b:fa:6c:b9:d1:c9:9b:9f:
cf:07:ed:4b:da:94:89:9b:b5:43:cb:48:09:1f:72:
e9:5f:ea:fe:d3:3e:e6:f2:c7:83:f8:0f:50:27:c2:
fd:b7:85:8d:ca:aa:de:05:05:35:78:45:55:b9:56:
06:d4:4e:5d:5b:e2:c9:54:58:7e:18:8a:03:5b:e8:
94:a6:90:de:d8:38:6d:85:ca:7a:90:a4:01:a3:ba:
2c:bb:8c:30:a3:71:21:29:79:fc:64:86:52:0e:3b:
3f:50:6f:db:e8:72:4b:1b:71:fe:7f:06:14:22:bd:
01:52:e0:56:3a:5c:68:48:ba:76:e7:23:ce:88:20:
ef:48:d2:6c:6b:cd:7b:4e:aa:8f:a4:cf:26:01:55:
03:82:59:e2:44:36:fa:38:ed:63:0f:f0:fe:7a:65:
27:d6:7e:66:47:05:ba:6e:8b:5e:71:10:bf:ae:08:
f4:24:be:57:14:53:83:19:1b:08:e9:1e:8b:b0:4c:
08:26:ad:81:d3:6d:8c:a6:2f:fa:56:e8:76:6f:5a:
7e:8e:f2:b8:f9:88:06:52:cd:33:eb:21:b8:21:83:
9f:db:1d:d1:c7:84:9f:51:24:6e:45:0f:37:36:2f:
47:cd:d3:e8:fd:11:cb:32:00:c0:1a:d8:a2:27:49:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:57:39:77:0E:CC:12:CF:FA:D3:B9:5C:D4:65:D1:F3:0A:91:D7
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c3:02:e0:b7:35:0a:2d:b6:8f:b8:96:61:37:05:e7:0a:10:
66:1f:b5:a6:ef:25:5c:2b:1a:0a:61:31:7c:8b:b6:9f:fd:82:
9d:09:1e:83:c4:0f:93:35:f0:6b:14:62:d7:f1:84:0c:af:cb:
48:67:22:ab:e5:86:a1:f5:56:7e:7d:bc:03:9d:77:ad:6c:6c:
05:44:39:22:dc:f5:d5:75:57:e8:69:22:3b:f5:1c:38:2d:5c:
24:98:b2:23:94:2d:ae:77:70:62:33:73:e2:b9:f7:85:fc:9c:
33:bf:42:8f:5a:24:7a:b6:c5:99:df:10:7b:e2:fc:c7:c2:0a:
62:6f:f7:11:f9:6a:dc:84:d7:4e:80:9b:b5:cc:3b:7f:ec:34:
8e:29:b2:f2:52:2c:d1:c0:42:bc:98:28:ae:17:c7:41:6a:06:
40:38:1f:80:70:f5:e1:ba:79:0e:4b:85:e6:c3:f0:15:5d:55:
4c:1f:53:45:04:6f:c6:dc:4a:e5:a8:a0:5b:69:d7:99:b9:63:
0b:56:e0:87:34:81:1e:28:1a:c7:30:99:91:3a:c1:5f:fa:bc:
fe:8f:14:07:f6:a8:28:bf:9d:45:53:fc:2e:c9:09:8e:6b:6d:
eb:90:bf:af:c2:46:88:04:54:a5:9c:7a:32:6d:c9:7c:49:13:
61:50:df:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwZd/8NgpZIWHu8QGEeT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNGVlNGNlOGQzY2VlZTIzZTAyNjZmY2FmNTQ0ODIwYWU0
MTA3ODgwHhcNMjUwNzI3MTIwMDM1WhcNMjUwNzI4MTIwMDM1WjAzMTEwLwYDVQQD
EyhiNzYyNTczOTc3MGVjYzEyY2ZmYWQzYjk1Y2Q0NjVkMWYzMGE5MWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPGrjVKzS/psudHJm5/PB+1L2pSJ
m7VDy0gJH3LpX+r+0z7m8seD+A9QJ8L9t4WNyqreBQU1eEVVuVYG1E5dW+LJVFh+
GIoDW+iUppDe2Dhthcp6kKQBo7osu4wwo3EhKXn8ZIZSDjs/UG/b6HJLG3H+fwYU
Ir0BUuBWOlxoSLp25yPOiCDvSNJsa817TqqPpM8mAVUDglniRDb6OO1jD/D+emUn
1n5mRwW6botecRC/rgj0JL5XFFODGRsI6R6LsEwIJq2B022Mpi/6Vuh2b1p+jvK4
+YgGUs0z6yG4IYOf2x3Rx4SfUSRuRQ83Ni9HzdPo/RHLMgDAGtiiJ0k8ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdiVzl3DswSz/rTuVzUZdHzCpHXMB8GA1UdIwQY
MBaAFMFO5M6NPO7iPgJm/K9USCCuQQeIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1U3a3pvMDg3dUktQW1iOHIxUklJSzVCQjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wMGEyZmMtYzg3Mi00NGY2LTljZTQt
NDg0MzgyMDJkYmFiLzEvd1U3a3pvMDg3dUktQW1iOHIxUklJSzVCQjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wMGEyZmMtYzg3Mi00NGY2LTljZTQtNDg0MzgyMDJkYmFi
LzEvd1U3a3pvMDg3dUktQW1iOHIxUklJSzVCQjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMMC4Lc1
Ci22j7iWYTcF5woQZh+1pu8lXCsaCmExfIu2n/2CnQkeg8QPkzXwaxRi1/GEDK/L
SGciq+WGofVWfn28A513rWxsBUQ5Itz11XVX6GkiO/UcOC1cJJiyI5QtrndwYjNz
4rn3hfycM79Cj1okerbFmd8Qe+L8x8IKYm/3Eflq3ITXToCbtcw7f+w0jimy8lIs
0cBCvJgorhfHQWoGQDgfgHD14bp5DkuF5sPwFV1VTB9TRQRvxtxK5aigW2nXmblj
C1bghzSBHigaxzCZkTrBX/q8/o8UB/aoKL+dRVP8LskJjmtt65C/r8JGiARUpZx6
Mm3JfEkTYVDf4A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:46:40 2025 by rpki-client