Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier: 468UPKkdNJS5JtVGEG0GGQ1GWGarNY7RluDNjv8HaYM=
Subject key identifier: F0:D9:C7:17:2E:64:C5:86:DA:37:75:FB:21:F3:DB:29:20:B5:F8:1C
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial: 01984B554D9F668A1FFADC437C242CEC5AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number: 1558
Signing time: Sun 27 Jul 2025 10:02:18 +0000
Manifest this update: Sun 27 Jul 2025 10:02:18 +0000
Manifest next update: Mon 28 Jul 2025 10:02:18 +0000
Files and hashes: 1: W8cSUwyXIXnz6M1NsyKlwsJXzJ4.roa (hash: rZPkwf4eFRkmaVkGU+tJg15LkBGz0xTeLhl3l0qmLag=)
2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: Z1cRcqDDvkE4X1UabrDa4Aw58kJuQLAuGz8DgOED4JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:4d:9f:66:8a:1f:fa:dc:43:7c:24:2c:ec:5a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Validity
Not Before: Jul 27 10:02:18 2025 GMT
Not After : Jul 28 10:02:18 2025 GMT
Subject: CN=f0d9c7172e64c586da3775fb21f3db2920b5f81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:78:4d:54:4b:fb:8c:b4:ba:d4:f9:27:b4:
54:30:e5:18:af:93:ff:21:3c:42:04:5f:be:78:55:
99:e3:e1:fb:70:8f:f6:fb:9f:ee:f4:4a:f4:4e:38:
9e:1c:69:cf:70:fa:e5:2c:5c:d4:61:4c:77:21:7c:
74:67:98:24:4b:ba:85:87:9b:fe:ab:89:7c:39:18:
ff:66:6b:ab:fb:a7:6c:e7:04:53:2c:99:7d:db:64:
d9:e5:eb:8e:a1:02:9f:f0:67:46:0f:4f:d7:31:bb:
25:89:34:21:d2:8b:8a:73:1e:4f:cf:58:2e:39:18:
c4:11:2c:a5:3c:91:e0:e7:af:36:bc:c1:c8:2e:2a:
f8:fa:71:c2:1a:f5:45:ca:3b:3b:48:02:05:25:19:
98:6f:c8:cf:21:53:e1:eb:4d:f6:ef:13:c0:c5:cf:
7a:80:41:2b:76:60:3a:fe:52:7d:4d:55:d3:7e:3a:
11:16:4f:db:e9:7a:c6:63:d2:23:62:d8:ff:4c:0a:
5f:c4:9b:39:94:a9:71:75:e5:28:ae:78:74:9d:f2:
59:ae:97:6e:d7:cc:04:c4:60:4b:59:a6:cd:32:03:
f7:02:49:6d:4a:da:70:a2:75:da:d5:6a:85:f3:cb:
7d:d4:1b:e5:fc:79:6d:d6:7d:0f:5f:e9:22:a4:08:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D9:C7:17:2E:64:C5:86:DA:37:75:FB:21:F3:DB:29:20:B5:F8:1C
X509v3 Authority Key Identifier:
keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:93:9d:e3:71:15:af:9f:f5:5a:30:56:7e:2e:36:40:83:7b:
15:00:9c:2a:14:86:c7:3f:b8:e4:bb:6d:0c:9e:4b:05:8b:6b:
29:cf:a5:d6:ca:1b:23:0f:44:e0:3e:f7:c6:9c:0b:72:df:01:
f7:55:64:96:81:54:0c:1a:7d:12:60:ea:5a:9e:42:f7:9e:aa:
39:65:34:c7:d2:c6:8a:50:11:ac:dc:db:98:86:8a:32:c4:af:
59:16:ae:26:be:4d:a6:40:75:e6:01:19:a8:1a:26:b4:a8:82:
1d:e3:e6:c1:f8:70:d8:29:af:ed:f3:64:74:0e:67:3f:9c:79:
10:8a:a5:90:c2:e8:38:f0:22:f4:bb:1d:b4:f2:f0:c6:ad:6c:
ec:7a:bb:57:1c:ba:42:6e:30:10:a2:55:b9:90:be:08:e8:97:
ab:b9:92:cb:0a:bf:06:ea:51:4c:85:fb:98:fb:6d:48:47:93:
0d:27:15:5e:96:7f:62:01:43:5a:5a:67:08:56:86:8f:60:61:
80:90:20:43:eb:6d:36:8e:78:0a:24:5a:ca:28:c9:a4:b6:1f:
e5:35:fa:dd:3c:37:b8:86:e6:96:9b:25:ae:a3:6b:e9:52:c9:
1c:9f:d2:8b:ba:52:54:e5:a2:e8:97:e3:9f:f6:c4:73:d8:2f:
0d:9a:c1:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVU2fZoof+txDfCQs7FrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxODVkNzI0M2FlOTg2Y2RlNDg0MTRlNmFkODFmMjIyOWMw
YTU3ZDgwHhcNMjUwNzI3MTAwMjE4WhcNMjUwNzI4MTAwMjE4WjAzMTEwLwYDVQQD
EyhmMGQ5YzcxNzJlNjRjNTg2ZGEzNzc1ZmIyMWYzZGIyOTIwYjVmODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWd4TVRL+4y0utT5J7RUMOUYr5P/
ITxCBF++eFWZ4+H7cI/2+5/u9Er0TjieHGnPcPrlLFzUYUx3IXx0Z5gkS7qFh5v+
q4l8ORj/Zmur+6ds5wRTLJl922TZ5euOoQKf8GdGD0/XMbsliTQh0ouKcx5Pz1gu
ORjEESylPJHg5682vMHILir4+nHCGvVFyjs7SAIFJRmYb8jPIVPh60327xPAxc96
gEErdmA6/lJ9TVXTfjoRFk/b6XrGY9IjYtj/TApfxJs5lKlxdeUornh0nfJZrpdu
18wExGBLWabNMgP3AkltStpwonXa1WqF88t91Bvl/Hlt1n0PX+kipAg0VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDZxxcuZMWG2jd1+yHz2ykgtfgcMB8GA1UdIwQY
MBaAFMGF1yQ66YbN5IQU5q2B8iKcClfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3Yjkt
YTdlZGI3ZDNmNTM3LzEvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3YjktYTdlZGI3ZDNmNTM3
LzEvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepOd43EV
r5/1WjBWfi42QIN7FQCcKhSGxz+45LttDJ5LBYtrKc+l1sobIw9E4D73xpwLct8B
91VkloFUDBp9EmDqWp5C956qOWU0x9LGilARrNzbmIaKMsSvWRauJr5NpkB15gEZ
qBomtKiCHePmwfhw2Cmv7fNkdA5nP5x5EIqlkMLoOPAi9LsdtPLwxq1s7Hq7Vxy6
Qm4wEKJVuZC+COiXq7mSywq/BupRTIX7mPttSEeTDScVXpZ/YgFDWlpnCFaGj2Bh
gJAgQ+ttNo54CiRayijJpLYf5TX63Tw3uIbmlpslrqNr6VLJHJ/Si7pSVOWi6Jfj
n/bEc9gvDZrBFg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:55:55 2025 by rpki-client