Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: h6kZ9NOmeWQMLSANuMZH2UVWIRah1jldeJc7X7Yp474=
Subject key identifier: 0A:E4:50:F9:A3:9B:CC:63:4D:B1:41:4D:38:F1:CE:B0:E7:36:FB:09
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 01993125216723C1CF902E3CBD49C759B21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 01:02:20 +0000
Manifest this update: Wed 10 Sep 2025 01:02:20 +0000
Manifest next update: Thu 11 Sep 2025 01:02:20 +0000
Files and hashes: 1: kRQmIjZUZcW_fI2_4gYw0CKPjk8.roa (hash: GuGEs/myNDqnLNvt1oCueG5pjZk/wU9SkbqBX0DdzIw=)
2: kZ91QLg0xrut8heY5oLTREuaDCo.roa (hash: MHAbqSvE1IAdHrt1bDct/PVOIuPEBRkSyGqv/6pjqdI=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: FBzoEmoZwm5c+EBJNgryM7EIT/840a4qg4zFe7xVZ4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:25:21:67:23:c1:cf:90:2e:3c:bd:49:c7:59:b2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Sep 10 01:02:20 2025 GMT
Not After : Sep 11 01:02:20 2025 GMT
Subject: CN=0ae450f9a39bcc634db1414d38f1ceb0e736fb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:f3:e1:0b:67:c2:a2:64:f4:a8:89:ef:e2:
aa:0a:a8:6f:3e:fe:c9:3b:3b:91:e7:68:ee:ee:28:
3d:94:fa:9e:14:0a:1d:ac:a5:43:e7:26:d5:58:28:
3f:71:e9:4c:b6:70:a8:2c:29:9a:56:bd:d3:de:73:
82:6c:7a:c8:0c:a9:56:2e:4a:48:be:70:56:fa:5e:
40:97:b8:f0:81:d8:43:c3:69:6f:81:50:e4:b8:0f:
6e:ad:d8:ad:60:9f:a9:98:cd:11:1f:26:6c:87:02:
e4:bc:23:f3:b6:25:37:2d:9c:d1:93:f6:3e:5f:0b:
d6:6e:c1:8b:64:c4:03:ad:86:81:0c:53:19:9a:b0:
38:fc:c6:5f:08:60:22:dc:82:f9:9e:da:2f:84:fc:
d4:97:55:a2:35:9c:24:dd:aa:b8:a1:c7:90:05:1d:
c1:03:ed:d8:d2:c2:cb:04:ad:3d:bd:2d:92:f9:d8:
31:09:24:c4:17:2e:56:b5:5b:39:5f:52:a3:a9:bc:
ed:55:c6:47:19:fd:e5:bc:de:7f:da:af:69:9b:5c:
5f:6a:fa:bc:ed:77:5e:11:c2:e9:8a:8c:3d:e8:e7:
2d:ef:69:5e:5d:4e:50:3e:c6:b1:49:fa:3f:bd:83:
2d:74:a6:59:45:9f:9c:65:27:f5:7d:53:e2:11:6f:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E4:50:F9:A3:9B:CC:63:4D:B1:41:4D:38:F1:CE:B0:E7:36:FB:09
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e6:b2:8e:02:4e:fc:00:83:5a:a9:62:54:20:aa:da:35:8f:
e6:5d:72:a7:cd:8e:48:43:d2:e3:44:0b:63:6a:e0:8b:a7:fc:
f4:a9:ec:b9:f0:12:e6:0a:1b:a0:ee:5e:c9:20:6c:2e:38:40:
1a:a1:fa:40:f1:69:0e:9e:3a:84:be:45:2f:42:40:08:bb:66:
86:bb:7a:ed:25:f1:12:05:8c:a2:24:2e:61:24:92:04:08:54:
1e:28:30:6d:e0:11:98:f6:67:9d:f5:ab:7d:05:90:c8:e2:b2:
7d:93:b2:7f:52:53:2e:b3:09:a1:46:64:c4:24:b3:96:51:ab:
2b:37:5f:44:72:03:8e:9c:e5:90:9f:39:61:5c:df:cc:7b:82:
dc:71:45:9e:21:b7:5c:a9:9a:ae:f1:a9:27:de:b5:c5:ab:8f:
6d:5d:29:c6:69:51:e2:46:38:49:e6:96:a3:b1:4d:19:25:b6:
2c:ce:b6:de:3d:09:a6:f5:ff:73:37:d4:db:60:0f:a0:5a:10:
e9:58:4e:1c:0a:0e:69:0b:bd:94:98:96:ae:91:fd:4b:45:20:
01:44:d8:03:42:9d:4e:68:4e:09:50:2a:cc:ba:aa:7b:12:1d:
3b:1e:4f:6b:78:b4:0b:f6:7c:db:86:f6:86:7d:7b:9b:a2:39:
8d:3c:12:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxJSFnI8HPkC48vUnHWbIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzJjNWFlZjMzYzA2YzRhZWYyZGFjOGYwNTAzZmNiZGQ5
YTcyODcwHhcNMjUwOTEwMDEwMjIwWhcNMjUwOTExMDEwMjIwWjAzMTEwLwYDVQQD
EygwYWU0NTBmOWEzOWJjYzYzNGRiMTQxNGQzOGYxY2ViMGU3MzZmYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3zz4QtnwqJk9KiJ7+KqCqhvPv7J
OzuR52ju7ig9lPqeFAodrKVD5ybVWCg/celMtnCoLCmaVr3T3nOCbHrIDKlWLkpI
vnBW+l5Al7jwgdhDw2lvgVDkuA9urditYJ+pmM0RHyZshwLkvCPztiU3LZzRk/Y+
XwvWbsGLZMQDrYaBDFMZmrA4/MZfCGAi3IL5ntovhPzUl1WiNZwk3aq4oceQBR3B
A+3Y0sLLBK09vS2S+dgxCSTEFy5WtVs5X1KjqbztVcZHGf3lvN5/2q9pm1xfavq8
7XdeEcLpiow96Oct72leXU5QPsaxSfo/vYMtdKZZRZ+cZSf1fVPiEW9/rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArkUPmjm8xjTbFBTTjxzrDnNvsJMB8GA1UdIwQY
MBaAFMFyxa7zPAbErvLayPBQP8vdmnKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDIt
ZWE1ODcwNjUzMDc2LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDItZWE1ODcwNjUzMDc2
LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOayjgJO
/ACDWqliVCCq2jWP5l1yp82OSEPS40QLY2rgi6f89KnsufAS5goboO5eySBsLjhA
GqH6QPFpDp46hL5FL0JACLtmhrt67SXxEgWMoiQuYSSSBAhUHigwbeARmPZnnfWr
fQWQyOKyfZOyf1JTLrMJoUZkxCSzllGrKzdfRHIDjpzlkJ85YVzfzHuC3HFFniG3
XKmarvGpJ961xauPbV0pxmlR4kY4SeaWo7FNGSW2LM623j0JpvX/czfU22APoFoQ
6VhOHAoOaQu9lJiWrpH9S0UgAUTYA0KdTmhOCVAqzLqqexIdOx5Pa3i0C/Z824b2
hn17m6I5jTwSEw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:17:26 2025 by rpki-client