Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File: WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier: HOT1ssBIMGcLVcYTnMMDcuaMMsVKwldim+D9JtToqzU=
Subject key identifier: 77:A1:CA:BD:EE:7D:B7:DE:B2:1F:46:41:25:3C:E3:DC:A0:96:C3:ED
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 0199239F0BEAD3C9B5FB92409092482B0D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:00:49 +0000
Manifest this update: Sun 07 Sep 2025 10:00:49 +0000
Manifest next update: Mon 08 Sep 2025 10:00:49 +0000
Files and hashes: 1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: E+Jw8sgg1Sg5LQ+UFEXit2RbrZUrKZA/95OEdkQ4KME=)
2: v9e6BQrrpkX4J49zO0X4mqGyYf8.roa (hash: BAka5v89zPoK2V8W4Aeck9ZsQ+ba33dD3QTkdH9ixgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:0b:ea:d3:c9:b5:fb:92:40:90:92:48:2b:0d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Sep 7 10:00:49 2025 GMT
Not After : Sep 8 10:00:49 2025 GMT
Subject: CN=77a1cabdee7db7deb21f4641253ce3dca096c3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:7f:54:82:3e:36:69:eb:c4:c8:70:b9:88:
af:ba:9b:95:0b:48:ef:16:e2:d2:f8:72:d5:83:a7:
02:2c:af:3e:02:07:a4:6a:83:c6:a2:e1:80:90:63:
1d:d9:ac:54:b4:93:65:5f:5b:9d:e0:50:af:5a:d1:
32:31:cb:f8:7d:5d:f0:7a:61:65:52:37:69:c7:f3:
54:06:2a:f6:42:10:70:0f:96:88:60:d9:f1:27:8c:
b2:36:be:98:92:00:cb:08:0b:dd:98:e1:9e:f6:18:
87:22:2a:0e:d0:6c:81:9f:c5:42:73:cd:67:ee:bc:
b1:c0:ac:7b:29:a0:00:c1:7c:33:3c:14:62:eb:bc:
5f:c7:75:9c:e4:48:c1:a2:76:40:39:be:7b:b0:30:
4f:bd:c4:da:72:97:84:dc:b2:c4:a4:3b:2f:51:5f:
ab:f1:08:b1:41:19:62:05:17:46:db:1d:7f:e7:a2:
e3:e9:26:33:17:16:e5:5a:97:9c:74:eb:10:5c:ad:
e5:4a:27:b7:01:07:02:e5:15:ef:6f:48:f0:c5:7b:
33:4a:29:d4:a7:37:d2:b3:9f:54:0d:8c:0b:fd:80:
27:a2:7f:c7:6b:bc:e5:4d:4c:df:a0:86:e2:3c:34:
b0:7a:cd:7c:3f:5f:1e:63:35:5d:fc:11:d0:66:46:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A1:CA:BD:EE:7D:B7:DE:B2:1F:46:41:25:3C:E3:DC:A0:96:C3:ED
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0b:ce:60:ca:43:2d:76:4f:d8:68:e6:ff:0f:f8:fe:7b:10:
a3:a7:a6:dd:08:a6:ea:c0:74:e9:d1:84:85:71:56:c2:ee:cc:
80:fd:92:8e:70:22:38:d2:1f:2c:3a:2c:2b:b8:81:c9:1f:16:
c6:ad:13:9f:f9:10:3b:63:ec:10:38:15:96:0b:6c:8a:d7:37:
9a:b3:c1:ee:b4:2c:be:dc:cf:a2:9d:8a:62:f6:36:b0:b3:ec:
d4:75:41:38:27:94:00:38:bf:53:73:e2:33:d3:6f:93:66:6b:
4b:4b:6a:60:d8:58:ac:3e:92:6f:9a:07:06:b7:f8:25:87:8d:
61:10:6c:a9:54:fb:1b:29:cc:31:63:42:cc:31:27:16:81:d9:
c1:82:c5:fc:79:77:91:8b:f8:6f:49:48:1b:b2:86:9e:9e:58:
42:35:8e:7f:37:70:2a:01:74:24:65:14:b3:e2:2a:96:a8:1e:
b6:46:ea:57:b5:c3:56:2b:68:96:ff:13:44:05:15:dd:5b:b8:
a5:fa:ed:9a:8a:cf:8c:a2:97:26:0a:fb:01:49:f2:e0:54:77:
c1:82:ce:f7:ea:73:3e:02:b8:2e:02:45:21:1f:38:0c:57:30:
11:6f:94:fd:78:c0:27:c7:ea:2d:39:0a:2d:17:f0:ae:ab:60:
e0:6c:f6:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnwvq08m1+5JAkJJIKw0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhY2IzMDg5NDYxZTFmNWY4OTg0Yjc3NDJjODliYjY4ZjFi
ODhjMTIwHhcNMjUwOTA3MTAwMDQ5WhcNMjUwOTA4MTAwMDQ5WjAzMTEwLwYDVQQD
Eyg3N2ExY2FiZGVlN2RiN2RlYjIxZjQ2NDEyNTNjZTNkY2EwOTZjM2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmZ/VII+NmnrxMhwuYivupuVC0jv
FuLS+HLVg6cCLK8+AgekaoPGouGAkGMd2axUtJNlX1ud4FCvWtEyMcv4fV3wemFl
Ujdpx/NUBir2QhBwD5aIYNnxJ4yyNr6YkgDLCAvdmOGe9hiHIioO0GyBn8VCc81n
7ryxwKx7KaAAwXwzPBRi67xfx3Wc5EjBonZAOb57sDBPvcTacpeE3LLEpDsvUV+r
8QixQRliBRdG2x1/56Lj6SYzFxblWpecdOsQXK3lSie3AQcC5RXvb0jwxXszSinU
pzfSs59UDYwL/YAnon/Ha7zlTUzfoIbiPDSwes18P18eYzVd/BHQZkZwbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHehyr3ufbfesh9GQSU849yglsPtMB8GA1UdIwQY
MBaAFFrLMIlGHh9fiYS3dCyJu2jxuIwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAt
YWM1MzZiMmFiNGY4LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAtYWM1MzZiMmFiNGY4
LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgvOYMpD
LXZP2Gjm/w/4/nsQo6em3Qim6sB06dGEhXFWwu7MgP2SjnAiONIfLDosK7iByR8W
xq0Tn/kQO2PsEDgVlgtsitc3mrPB7rQsvtzPop2KYvY2sLPs1HVBOCeUADi/U3Pi
M9Nvk2ZrS0tqYNhYrD6Sb5oHBrf4JYeNYRBsqVT7GynMMWNCzDEnFoHZwYLF/Hl3
kYv4b0lIG7KGnp5YQjWOfzdwKgF0JGUUs+IqlqgetkbqV7XDVitolv8TRAUV3Vu4
pfrtmorPjKKXJgr7AUny4FR3wYLO9+pzPgK4LgJFIR84DFcwEW+U/XjAJ8fqLTkK
LRfwrqtg4Gz2wg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:19 2025 by rpki-client