Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
File: rWUjcvDl0WnCAPfR0IDoVw_-23E.mft (raw, json)
Hash identifier: qnr8pl5YoDqVakAFfaX0H+4mU6IhtN5Iu1WRjqNQDu4=
Subject key identifier: 97:5D:FD:7B:25:90:C2:6B:EE:7C:65:60:A5:B6:F4:DC:10:67:A4:99
Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
Certificate issuer: /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Certificate serial: 019849658F92EE6239EC4ECD578D2487981B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
Manifest number: 036C
Signing time: Sun 27 Jul 2025 01:00:49 +0000
Manifest this update: Sun 27 Jul 2025 01:00:49 +0000
Manifest next update: Mon 28 Jul 2025 01:00:49 +0000
Files and hashes: 1: nQ9AG6h0t4BBBHaY1oIQ2Z7HXiE.roa (hash: bmhEBNk6LesEwcu8xwGODwFl5oPTmJlYZFKxsnvzgRU=)
2: rWUjcvDl0WnCAPfR0IDoVw_-23E.crl (hash: YzlP5JxgbxU+5JBgW2psvyKud7UkKBt3+x3Gv4bGRzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:8f:92:ee:62:39:ec:4e:cd:57:8d:24:87:98:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Validity
Not Before: Jul 27 01:00:49 2025 GMT
Not After : Jul 28 01:00:49 2025 GMT
Subject: CN=975dfd7b2590c26bee7c6560a5b6f4dc1067a499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:53:75:83:e0:0d:4d:8a:dd:29:cf:55:3f:
fb:17:37:76:fe:57:5f:cc:88:c3:4d:eb:96:d4:b9:
0e:69:24:79:5f:8e:75:1b:08:9d:54:cf:0c:16:ce:
80:31:bd:d0:f3:40:d3:a6:c0:a1:9e:d8:d9:55:a7:
ca:db:8f:bd:24:ab:f2:0b:da:9c:f9:e2:bb:56:7a:
28:76:b6:54:32:3e:37:59:76:cc:93:9d:45:7b:c9:
3f:d7:40:87:5e:a7:38:b7:b3:ff:06:80:0c:89:53:
2e:41:c8:71:d6:90:a5:27:cb:54:fb:e3:f9:fc:ba:
90:e9:54:cb:72:71:eb:e2:4d:e6:b8:06:b2:85:00:
ad:b8:e8:3d:9f:57:10:38:8e:9a:35:07:60:90:17:
d0:cf:45:b0:cd:24:d1:19:9d:06:ce:16:d0:5b:14:
8c:f7:a0:44:60:30:19:d2:18:ae:1c:c6:e1:0e:aa:
71:24:b2:8f:a0:14:d4:8a:f3:51:68:51:2a:65:2e:
9d:23:ee:e7:34:b1:74:1b:29:16:4f:3d:ae:5b:a2:
78:d6:0b:b0:45:3d:e6:e1:d6:f6:e7:5f:c1:cb:d6:
72:83:06:06:97:c5:bb:82:9e:f2:7e:35:f5:52:ec:
23:bc:c0:f0:d1:36:a5:95:5b:41:07:0f:86:9e:df:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5D:FD:7B:25:90:C2:6B:EE:7C:65:60:A5:B6:F4:DC:10:67:A4:99
X509v3 Authority Key Identifier:
keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:78:d6:4a:ce:92:be:d2:6a:3a:8b:24:af:e6:cd:a8:9f:f4:
5a:73:56:87:66:e9:4e:47:f4:25:15:e5:fd:b1:81:4c:f2:64:
42:d5:a4:4a:54:88:28:27:51:1c:a8:ff:53:2a:67:d7:30:6e:
9d:e9:f2:59:04:d9:fa:8c:92:d1:fa:a0:37:c2:19:82:bf:d6:
bb:db:08:b2:7c:e2:03:80:a1:63:b0:ba:9a:33:c5:a9:a9:7a:
75:7e:95:3f:5a:fc:38:f4:a8:44:78:8c:a4:7e:27:bd:b5:cb:
4a:21:64:02:0e:74:a3:eb:02:3f:97:a5:88:37:a5:c0:00:86:
16:4b:ac:67:82:47:fe:ea:4f:83:e7:62:d0:66:09:7f:a5:67:
84:38:db:0a:94:16:c0:46:14:e8:ec:b7:d9:c5:73:17:36:df:
30:cc:f3:c9:35:e5:15:21:1b:fa:1c:7e:2c:20:3e:9d:1c:b8:
5f:61:c9:3f:e5:b2:c4:4d:3e:dd:29:06:5d:d4:73:cf:23:d0:
88:a4:d7:2e:ce:28:c8:b9:ea:86:0a:2e:21:aa:32:4d:c9:a4:
4e:5e:e3:7f:fe:1f:66:32:56:3c:69:6f:1f:f7:32:2b:5e:53:
62:3b:4c:90:5f:e6:40:33:0d:76:98:e5:0c:91:7f:2c:7b:c6:
d9:9e:e6:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZY+S7mI57E7NV40kh5gbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNjUyMzcyZjBlNWQxNjljMjAwZjdkMWQwODBlODU3MGZm
ZWRiNzEwHhcNMjUwNzI3MDEwMDQ5WhcNMjUwNzI4MDEwMDQ5WjAzMTEwLwYDVQQD
Eyg5NzVkZmQ3YjI1OTBjMjZiZWU3YzY1NjBhNWI2ZjRkYzEwNjdhNDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLhTdYPgDU2K3SnPVT/7Fzd2/ldf
zIjDTeuW1LkOaSR5X451GwidVM8MFs6AMb3Q80DTpsChntjZVafK24+9JKvyC9qc
+eK7VnoodrZUMj43WXbMk51Fe8k/10CHXqc4t7P/BoAMiVMuQchx1pClJ8tU++P5
/LqQ6VTLcnHr4k3muAayhQCtuOg9n1cQOI6aNQdgkBfQz0WwzSTRGZ0GzhbQWxSM
96BEYDAZ0hiuHMbhDqpxJLKPoBTUivNRaFEqZS6dI+7nNLF0GykWTz2uW6J41guw
RT3m4db251/By9ZygwYGl8W7gp7yfjX1UuwjvMDw0TallVtBBw+Gnt+SGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdd/XslkMJr7nxlYKW29NwQZ6SZMB8GA1UdIwQY
MBaAFK1lI3Lw5dFpwgD30dCA6FcP/ttxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcldVamN2RGwwV25DQVBmUjBJRG9Wd18tMjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iZDk4YzktZmNlMy00YmJhLWI0OWIt
NGNhZTMyNWMwZTI4LzEvcldVamN2RGwwV25DQVBmUjBJRG9Wd18tMjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iZDk4YzktZmNlMy00YmJhLWI0OWItNGNhZTMyNWMwZTI4
LzEvcldVamN2RGwwV25DQVBmUjBJRG9Wd18tMjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnjWSs6S
vtJqOoskr+bNqJ/0WnNWh2bpTkf0JRXl/bGBTPJkQtWkSlSIKCdRHKj/Uypn1zBu
nenyWQTZ+oyS0fqgN8IZgr/Wu9sIsnziA4ChY7C6mjPFqal6dX6VP1r8OPSoRHiM
pH4nvbXLSiFkAg50o+sCP5eliDelwACGFkusZ4JH/upPg+di0GYJf6VnhDjbCpQW
wEYU6Oy32cVzFzbfMMzzyTXlFSEb+hx+LCA+nRy4X2HJP+WyxE0+3SkGXdRzzyPQ
iKTXLs4oyLnqhgouIaoyTcmkTl7jf/4fZjJWPGlvH/cyK15TYjtMkF/mQDMNdpjl
DJF/LHvG2Z7m6g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:35:40 2025 by rpki-client