Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
File: waskfGNq04m_n4xQdMgiAjDo7cw.mft (raw, json)
Hash identifier: kf00BddpgXU0cESx1Lf2ExbTgbik7mXFgj+rooLew3s=
Subject key identifier: 4D:2E:A9:BF:D3:4E:72:9E:72:39:76:32:79:1B:05:38:8B:05:F3:08
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Certificate issuer: /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial: 0199228D2BC62AFEAF66E500DDBD70F92BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 05:01:40 +0000
Manifest this update: Sun 07 Sep 2025 05:01:40 +0000
Manifest next update: Mon 08 Sep 2025 05:01:40 +0000
Files and hashes: 1: YhlJJJSXn0316GXMCt3evKM4RRA.roa (hash: GoRGuSI9MFxsC15qVirr/MrX3xBRfDPgJUjig6NxAVs=)
2: l9EgD7Cv7e532Hlt9LLUu3z8_dw.roa (hash: 4Xh0ogOpmmD0jHDBdjnr8Hc05bJosT/Z9VheuQZJvIw=)
3: ux1IC1yxeTUgRbCsz7aKGJRUxDA.roa (hash: Cbk3gKO+GYUzaeJI/vrLpgkHk9pkTZFjphWYEpQbc/Y=)
4: waskfGNq04m_n4xQdMgiAjDo7cw.crl (hash: 0jTb88OG3QKt3z03sez6HvVjZCZ3lTAtf6/7+S2eXLk=)
5: xPSDuA4Q8aGWwP6K3N_nyK74gDo.roa (hash: UU3ufwB67xN9A6E6STJlvefFGKYdsphPt8rIQ8rp99U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:2b:c6:2a:fe:af:66:e5:00:dd:bd:70:f9:2b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Validity
Not Before: Sep 7 05:01:40 2025 GMT
Not After : Sep 8 05:01:40 2025 GMT
Subject: CN=4d2ea9bfd34e729e72397632791b05388b05f308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:a3:35:83:04:7c:ac:91:9a:b0:5a:1a:a5:
f7:71:13:86:b7:15:d5:4b:3c:39:55:79:b6:33:ad:
1d:0b:12:84:9e:c0:e6:73:ae:3a:88:29:98:36:62:
26:41:83:eb:38:0c:91:42:10:14:34:f1:d6:79:22:
dc:60:af:6e:b8:45:9f:87:01:36:15:bc:4c:4d:4e:
ca:3b:be:8a:78:81:7d:70:74:85:44:a8:90:ad:35:
f5:03:d1:47:1e:09:c8:1d:87:0f:af:b2:89:c9:c9:
dc:29:95:96:82:fa:f6:b8:36:ac:60:b6:8d:93:19:
13:5c:d1:fd:d0:41:db:e4:bc:f3:3b:e3:60:68:38:
c9:5c:c3:87:14:46:61:dc:12:f0:1d:cf:18:c5:10:
2f:7f:da:b0:3d:aa:5d:d6:26:68:5b:a3:99:0c:6e:
63:b9:1c:ab:c6:11:2d:fc:8c:3b:84:53:4a:95:2e:
b4:9b:c6:cb:28:a7:2e:45:cf:a5:87:19:49:ad:7c:
7e:82:8d:5d:92:e3:0e:f3:39:fe:54:e8:91:f4:63:
5f:87:11:de:8b:d1:88:94:df:21:8c:4e:b8:c4:02:
b9:48:3d:b8:f6:be:c5:b2:13:29:67:ac:5f:1f:e2:
45:00:36:0c:32:48:ec:55:55:17:fc:ab:e0:e6:8b:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2E:A9:BF:D3:4E:72:9E:72:39:76:32:79:1B:05:38:8B:05:F3:08
X509v3 Authority Key Identifier:
keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:53:9e:4b:85:79:ce:bd:ff:7e:8c:99:f3:ac:fb:31:49:ac:
49:80:5d:87:b4:0d:af:25:54:89:c8:d2:86:71:88:41:f3:36:
60:ab:ff:d0:53:f1:a6:8a:59:a1:e4:8e:4f:fb:ce:c7:b9:47:
0c:a1:f1:c2:0d:db:2b:04:70:16:f8:9c:cb:0d:6c:33:11:5c:
90:45:4e:7a:5a:1b:d5:fc:52:d9:2d:83:6e:d2:fd:a2:fc:a8:
7a:93:8b:41:45:0e:d0:6e:16:71:10:09:72:26:34:81:3d:a1:
be:58:3a:09:1d:3f:85:7b:ee:65:b2:fe:04:c6:42:76:c3:1e:
f2:b7:91:d6:04:ba:45:af:9b:17:b1:d8:08:ff:2c:63:fc:1a:
a4:aa:35:b1:11:1d:c9:a4:a3:0e:52:3c:9b:c0:e9:94:d7:b7:
25:c1:98:5e:39:8c:f6:b6:94:5e:55:2e:1d:56:db:f0:f4:45:
85:e0:3a:b8:ac:2a:46:c7:c8:3a:b7:82:bd:90:83:22:45:81:
16:32:21:6c:9b:84:76:a6:3b:51:06:8c:8f:bc:30:1a:57:bb:
62:c6:9d:75:0b:bf:f6:7d:cf:79:96:ba:98:dd:a3:e6:09:98:
f8:b8:ff:aa:f6:0f:08:b2:1a:d2:29:65:c5:ad:de:0b:4e:8c:
23:9f:1a:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijSvGKv6vZuUA3b1w+Sv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWIyNDdjNjM2YWQzODliZjlmOGM1MDc0YzgyMjAyMzBl
OGVkY2MwHhcNMjUwOTA3MDUwMTQwWhcNMjUwOTA4MDUwMTQwWjAzMTEwLwYDVQQD
Eyg0ZDJlYTliZmQzNGU3MjllNzIzOTc2MzI3OTFiMDUzODhiMDVmMzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxajNYMEfKyRmrBaGqX3cROGtxXV
Szw5VXm2M60dCxKEnsDmc646iCmYNmImQYPrOAyRQhAUNPHWeSLcYK9uuEWfhwE2
FbxMTU7KO76KeIF9cHSFRKiQrTX1A9FHHgnIHYcPr7KJycncKZWWgvr2uDasYLaN
kxkTXNH90EHb5LzzO+NgaDjJXMOHFEZh3BLwHc8YxRAvf9qwPapd1iZoW6OZDG5j
uRyrxhEt/Iw7hFNKlS60m8bLKKcuRc+lhxlJrXx+go1dkuMO8zn+VOiR9GNfhxHe
i9GIlN8hjE64xAK5SD249r7FshMpZ6xfH+JFADYMMkjsVVUX/Kvg5ot2SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0uqb/TTnKecjl2MnkbBTiLBfMIMB8GA1UdIwQY
MBaAFMGrJHxjatOJv5+MUHTIIgIw6O3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmIt
MjdiMTEzY2ZmNTNiLzEvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmItMjdiMTEzY2ZmNTNi
LzEvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVOeS4V5
zr3/foyZ86z7MUmsSYBdh7QNryVUicjShnGIQfM2YKv/0FPxpopZoeSOT/vOx7lH
DKHxwg3bKwRwFvicyw1sMxFckEVOelob1fxS2S2DbtL9ovyoepOLQUUO0G4WcRAJ
ciY0gT2hvlg6CR0/hXvuZbL+BMZCdsMe8reR1gS6Ra+bF7HYCP8sY/wapKo1sREd
yaSjDlI8m8DplNe3JcGYXjmM9raUXlUuHVbb8PRFheA6uKwqRsfIOreCvZCDIkWB
FjIhbJuEdqY7UQaMj7wwGle7YsaddQu/9n3PeZa6mN2j5gmY+Lj/qvYPCLIa0ill
xa3eC06MI58a9A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:18 2025 by rpki-client