Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File: WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier: LiQCa/HilQB02jH7pUwZGmOhPtm/ka0qWYtUV3YyhRc=
Subject key identifier: 7E:81:07:12:84:F7:08:A3:AC:1F:7A:1B:EC:BA:67:40:9F:CF:3C:AE
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer: /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial: 0198413DA6C4A3A13212789426EEB3E5980F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number: 0102
Signing time: Fri 25 Jul 2025 11:00:16 +0000
Manifest this update: Fri 25 Jul 2025 11:00:16 +0000
Manifest next update: Sat 26 Jul 2025 11:00:16 +0000
Files and hashes: 1: 28vwddYYnn-BejsfrgsHjSgfzQ4.roa (hash: UAZDR9r94HPPd9OVOKpoGQIjU2FUXfM+rJVeuMGWG0Y=)
2: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: KpHQ3dj677evAG/3J13HkbJbpgSQLUEM4d0bVQC/uio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:3d:a6:c4:a3:a1:32:12:78:94:26:ee:b3:e5:98:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
Validity
Not Before: Jul 25 11:00:16 2025 GMT
Not After : Jul 26 11:00:16 2025 GMT
Subject: CN=7e81071284f708a3ac1f7a1becba67409fcf3cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:ef:dc:f3:8d:84:98:d8:ba:55:c5:e6:19:
86:c5:04:2c:48:bd:dc:0e:13:85:86:a7:65:c6:a3:
12:19:f8:28:2c:4e:fd:25:aa:6c:89:07:09:bd:1b:
f4:03:1a:bd:7f:23:8f:84:67:cf:aa:35:da:c7:e0:
75:80:a6:01:d7:52:04:fc:9c:57:e8:9c:01:af:74:
e3:36:f1:24:07:a8:93:16:2c:b6:e7:e4:ea:86:18:
2f:f2:e3:cc:b3:c3:5a:9e:01:57:4e:ba:f9:7c:ff:
c8:40:04:72:65:73:2d:05:b0:b3:52:55:fc:10:11:
5f:6b:58:57:3b:72:fb:81:84:79:84:9e:d6:6b:03:
d2:d3:c5:0b:6d:c3:3c:01:c2:3f:dc:ca:6e:c5:74:
78:04:59:5f:3f:9d:54:1e:ce:77:98:b1:3d:17:43:
df:df:f9:88:f2:87:4f:b5:2b:c0:3f:af:64:97:3c:
e1:9e:33:4f:dd:97:11:4c:5a:cb:a8:5f:26:f3:42:
bf:c2:0d:20:38:90:30:9b:63:68:ce:18:75:19:5b:
48:97:f1:bd:99:9d:6d:b0:78:a2:38:ab:e5:14:ec:
17:0b:86:b2:ff:0e:0c:2b:e0:cd:7d:52:7f:11:1b:
ba:02:da:e7:cf:3c:4f:91:38:7d:78:01:64:cc:33:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:81:07:12:84:F7:08:A3:AC:1F:7A:1B:EC:BA:67:40:9F:CF:3C:AE
X509v3 Authority Key Identifier:
keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e5:8b:b1:7b:7c:a6:9a:02:a4:3e:c8:3e:5a:3b:92:89:cf:
47:60:c2:4d:bd:4a:1a:06:4e:f1:ca:a5:b9:54:e7:2d:b3:64:
f6:1a:b2:5f:a0:26:61:c5:5c:d7:3c:6f:34:06:e2:2d:96:ea:
89:47:98:b4:d3:42:74:8c:59:c9:b6:3d:e8:52:e8:bf:22:cf:
13:b4:d0:af:d7:11:b8:e3:4a:87:a3:d8:9d:15:63:89:b3:fd:
4d:25:ce:01:c6:3e:3f:3a:e5:a1:0e:3d:1a:6b:9e:29:09:7f:
ac:b9:d7:65:5d:f6:c0:e3:31:75:3a:fe:cf:33:94:8b:a1:f2:
ee:69:25:b9:38:fd:dd:10:84:61:4e:e8:65:40:c1:1a:3c:e8:
19:a6:cb:12:40:21:86:92:0d:ae:3b:78:e7:d1:be:0a:7a:42:
67:fc:a1:af:13:75:60:f8:42:d4:f3:39:24:82:b2:d3:ff:3a:
33:c1:13:b5:43:f8:50:08:b1:9b:e6:9b:28:38:78:df:84:36:
e9:7b:19:3e:fd:b2:71:24:81:15:3f:ba:bc:af:7a:14:52:b4:
54:3d:f7:7d:d9:3d:30:86:84:62:a3:9d:d0:e0:76:91:17:79:
10:7a:d9:f3:d5:ca:59:c8:74:89:90:0e:8a:98:fe:48:4e:0c:
9b:2d:f7:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhBPabEo6EyEniUJu6z5ZgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDg5ZGMxODllMDA5MzYxYWNiMjY1NTY4MGU2NjljMGJj
NDc0NTYwHhcNMjUwNzI1MTEwMDE2WhcNMjUwNzI2MTEwMDE2WjAzMTEwLwYDVQQD
Eyg3ZTgxMDcxMjg0ZjcwOGEzYWMxZjdhMWJlY2JhNjc0MDlmY2YzY2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhbv3PONhJjYulXF5hmGxQQsSL3c
DhOFhqdlxqMSGfgoLE79JapsiQcJvRv0Axq9fyOPhGfPqjXax+B1gKYB11IE/JxX
6JwBr3TjNvEkB6iTFiy25+Tqhhgv8uPMs8NangFXTrr5fP/IQARyZXMtBbCzUlX8
EBFfa1hXO3L7gYR5hJ7WawPS08ULbcM8AcI/3MpuxXR4BFlfP51UHs53mLE9F0Pf
3/mI8odPtSvAP69klzzhnjNP3ZcRTFrLqF8m80K/wg0gOJAwm2Nozhh1GVtIl/G9
mZ1tsHiiOKvlFOwXC4ay/w4MK+DNfVJ/ERu6AtrnzzxPkTh9eAFkzDOwpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6BBxKE9wijrB96G+y6Z0CfzzyuMB8GA1UdIwQY
MBaAFFjYncGJ4Ak2GssmVWgOZpwLxHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGIt
OWRmZjViZDU0ODhhLzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGItOWRmZjViZDU0ODhh
LzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOWLsXt8
ppoCpD7IPlo7konPR2DCTb1KGgZO8cqluVTnLbNk9hqyX6AmYcVc1zxvNAbiLZbq
iUeYtNNCdIxZybY96FLovyLPE7TQr9cRuONKh6PYnRVjibP9TSXOAcY+PzrloQ49
GmueKQl/rLnXZV32wOMxdTr+zzOUi6Hy7mkluTj93RCEYU7oZUDBGjzoGabLEkAh
hpINrjt459G+CnpCZ/yhrxN1YPhC1PM5JIKy0/86M8ETtUP4UAixm+abKDh434Q2
6XsZPv2ycSSBFT+6vK96FFK0VD33fdk9MIaEYqOd0OB2kRd5EHrZ89XKWch0iZAO
ipj+SE4Mmy33Mg==
-----END CERTIFICATE-----
Generated at Fri Jul 25 15:49:47 2025 by rpki-client