Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json)
Hash identifier: KzVjLERd6qV/hcBbh5gVcjqsu0qbR0IRjuKCDCxsLz0=
Subject key identifier: 75:F9:1D:BD:BA:87:A3:83:49:26:8A:A2:51:D7:BF:46:1B:C8:51:20
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 01983E05B38AFDCC61F7EAFE2418F8767E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
Manifest number: 0C40
Signing time: Thu 24 Jul 2025 20:00:17 +0000
Manifest this update: Thu 24 Jul 2025 20:00:17 +0000
Manifest next update: Fri 25 Jul 2025 20:00:17 +0000
Files and hashes: 1: 42TScFyDsL36h4YpEfhHoHfnzjk.roa (hash: PlV9CG6o3L7E63lVcJyc5UxCQesBmENg5els1UMNldc=)
2: GzDEyQPlP7XqkDOXMJVrm-t5quA.roa (hash: yHlRVvenZ9bcsv8W/dTmVIqnz02wrgwCRtxhDUrDoKo=)
3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: FGLwhoB+GTrgIE3KFKrOjtXil4HQYfKWgHRfxed6OWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:05:b3:8a:fd:cc:61:f7:ea:fe:24:18:f8:76:7e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: Jul 24 20:00:17 2025 GMT
Not After : Jul 25 20:00:17 2025 GMT
Subject: CN=75f91dbdba87a38349268aa251d7bf461bc85120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:a6:40:af:42:90:01:6f:8b:c9:66:88:d2:
35:cf:93:6a:6a:85:bc:8c:47:b1:14:5c:7f:60:92:
8f:19:8f:3d:bc:d4:c4:62:89:b4:ec:63:ef:64:5b:
ad:4b:88:c2:4f:a1:dc:2e:b4:4f:12:aa:4a:39:18:
84:63:65:4e:d8:a5:cb:9f:c1:93:98:1d:fb:b3:30:
54:22:28:e0:b2:30:b1:85:a6:8b:02:9c:1f:5a:f7:
f2:bf:3f:ce:08:fe:e9:e9:fe:07:95:47:18:c8:37:
f1:99:76:31:a2:12:b8:44:a6:cc:21:0b:f2:34:18:
38:da:32:8b:1c:16:7e:cb:cb:f9:63:be:94:92:0b:
5a:d0:36:90:35:64:8b:46:8c:53:53:3e:44:da:ed:
51:94:dc:a2:03:fd:fb:59:12:06:04:d7:4a:c3:45:
bd:1a:20:23:67:f9:48:13:08:9f:40:db:fc:a7:ed:
c7:df:94:a9:61:b9:eb:c1:8d:23:51:70:e0:76:0f:
27:f0:71:ae:dc:ef:ef:a0:bc:99:05:f7:c9:e2:48:
c4:ac:b6:31:e2:b1:6a:4a:e2:cd:e7:3f:21:1c:fc:
ce:3d:9e:55:83:6c:ef:0d:20:71:94:5e:98:91:40:
a1:51:8b:fa:5e:d0:e9:95:d6:d6:20:17:41:6e:2b:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F9:1D:BD:BA:87:A3:83:49:26:8A:A2:51:D7:BF:46:1B:C8:51:20
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4d:e3:39:14:b8:e8:5c:87:0f:f4:a8:b2:97:55:54:4c:ed:
eb:17:96:0e:f5:49:f1:ef:d5:a8:e8:d9:be:c0:7f:48:fd:72:
b1:77:d6:77:ce:99:31:d6:57:94:42:49:dc:62:fe:c1:27:13:
27:b5:2c:7c:3c:74:90:7a:6a:4d:d8:a7:8f:bf:65:fa:4e:6e:
b6:6d:f4:56:6c:6b:f4:16:a7:1d:a4:88:97:d4:f5:3e:b7:21:
63:dd:15:4f:9b:12:74:ab:a0:8e:64:7d:57:df:42:da:eb:ca:
6b:46:e7:2c:f8:a1:84:f3:b8:e4:f8:05:d8:cf:1d:6c:0e:db:
9a:e4:e4:52:a7:1d:cf:62:b5:5d:86:9a:1b:38:b4:4b:4d:ea:
44:aa:b3:5a:be:09:e2:02:89:5b:cd:33:b4:3c:b4:26:e3:df:
50:fc:d6:ee:e3:b1:93:8e:94:a0:b5:95:7b:77:ee:9b:de:d4:
85:b3:36:5c:e4:c6:eb:df:2f:d9:70:2e:6e:86:87:d6:b4:a1:
08:fb:02:e4:b0:db:ad:83:ef:fe:72:06:92:f7:55:e9:92:d3:
28:58:80:c7:c7:37:90:fa:54:a6:c1:d4:ad:cb:af:88:81:ac:
c9:7c:44:d4:7f:e8:dc:f0:7b:a4:7c:6d:c6:df:29:f0:9c:48:
2e:a8:2d:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+BbOK/cxh9+r+JBj4dn4kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjkyNTcxMTA4OTU4Nzg2YjY1ZmZhMjQxYjFmMTFmNmQw
NThiNTYwHhcNMjUwNzI0MjAwMDE3WhcNMjUwNzI1MjAwMDE3WjAzMTEwLwYDVQQD
Eyg3NWY5MWRiZGJhODdhMzgzNDkyNjhhYTI1MWQ3YmY0NjFiYzg1MTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiWmQK9CkAFvi8lmiNI1z5NqaoW8
jEexFFx/YJKPGY89vNTEYom07GPvZFutS4jCT6HcLrRPEqpKORiEY2VO2KXLn8GT
mB37szBUIijgsjCxhaaLApwfWvfyvz/OCP7p6f4HlUcYyDfxmXYxohK4RKbMIQvy
NBg42jKLHBZ+y8v5Y76Ukgta0DaQNWSLRoxTUz5E2u1RlNyiA/37WRIGBNdKw0W9
GiAjZ/lIEwifQNv8p+3H35SpYbnrwY0jUXDgdg8n8HGu3O/voLyZBffJ4kjErLYx
4rFqSuLN5z8hHPzOPZ5Vg2zvDSBxlF6YkUChUYv6XtDpldbWIBdBbiu64QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHX5Hb26h6ODSSaKolHXv0YbyFEgMB8GA1UdIwQY
MBaAFMD5JXEQiVh4a2X/okGx8R9tBYtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQt
OWIyYjllYTk1NTM1LzEvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQtOWIyYjllYTk1NTM1
LzEvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWk3jORS4
6FyHD/SospdVVEzt6xeWDvVJ8e/VqOjZvsB/SP1ysXfWd86ZMdZXlEJJ3GL+wScT
J7UsfDx0kHpqTdinj79l+k5utm30Vmxr9BanHaSIl9T1PrchY90VT5sSdKugjmR9
V99C2uvKa0bnLPihhPO45PgF2M8dbA7bmuTkUqcdz2K1XYaaGzi0S03qRKqzWr4J
4gKJW80ztDy0JuPfUPzW7uOxk46UoLWVe3fum97UhbM2XOTG698v2XAuboaH1rSh
CPsC5LDbrYPv/nIGkvdV6ZLTKFiAx8c3kPpUpsHUrcuviIGsyXxE1H/o3PB7pHxt
xt8p8JxILqgtXg==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:31:53 2025 by rpki-client