Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
File: wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json)
Hash identifier: 56lrInuzLsPqNU0IKFtGwfRvEWqr+mwSkMQfByqbDAk=
Subject key identifier: AC:92:22:FC:E6:84:C2:53:29:4F:EE:8D:EB:CE:D8:82:F5:B8:E5:4D
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 019923A059AB389F69320CC9B1578663F382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:02:15 +0000
Manifest this update: Sun 07 Sep 2025 10:02:15 +0000
Manifest next update: Mon 08 Sep 2025 10:02:15 +0000
Files and hashes: 1: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (hash: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=)
2: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (hash: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=)
3: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: PtzimP70cQy0PngXetE+gwaZxv7SnBQuY4L64KRkfhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:59:ab:38:9f:69:32:0c:c9:b1:57:86:63:f3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Sep 7 10:02:15 2025 GMT
Not After : Sep 8 10:02:15 2025 GMT
Subject: CN=ac9222fce684c253294fee8debced882f5b8e54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:bd:5d:28:89:e3:c8:83:fd:cf:14:8c:ff:
49:41:8a:b8:f5:67:a0:8e:9c:a3:da:78:4b:ea:f5:
0e:56:92:a7:b8:ea:c7:8f:11:b7:8d:82:0b:cb:8e:
b6:79:0f:cf:dd:f9:21:38:ec:7d:c4:be:08:6f:3c:
80:2d:bb:e7:2a:97:91:83:02:d4:16:e9:75:60:b7:
5f:28:3f:e3:66:89:53:1c:47:3d:05:df:c5:fd:94:
ba:72:b8:d1:62:30:ed:ca:1a:e4:84:2e:24:4a:8f:
05:2e:bc:85:e8:7d:a3:0c:0a:dc:26:30:d3:9b:8b:
b2:68:6b:10:63:08:0b:da:bb:f8:b8:88:d0:2e:d6:
cd:ba:00:d7:05:c9:1a:e2:71:40:7c:23:d3:d8:2f:
29:2b:bb:3d:53:53:64:02:38:61:60:df:b9:6e:80:
3f:06:3e:11:cf:9f:fd:ea:e6:2c:29:98:9d:eb:26:
d0:ba:6a:9c:cb:11:66:c0:6f:e7:46:14:16:c3:0b:
b7:3c:f8:d4:09:b4:f8:42:55:fd:a3:24:70:a0:4b:
0f:6a:c6:0f:77:11:8d:44:cf:60:b7:f0:78:a0:16:
9b:bd:95:d1:91:b9:64:aa:cb:f7:ce:5e:42:d1:25:
e5:f7:98:d3:b4:b2:10:4c:23:05:df:24:c1:8b:b3:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:92:22:FC:E6:84:C2:53:29:4F:EE:8D:EB:CE:D8:82:F5:B8:E5:4D
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:12:24:fa:e3:83:db:98:18:84:ae:f3:7d:de:d7:20:dd:0a:
8a:bb:d8:64:5d:e3:4e:92:6d:fc:7d:72:11:de:fb:50:e1:a0:
85:56:25:3a:40:24:20:cb:60:22:96:e7:77:67:0c:dd:c1:74:
fb:14:6c:4c:5f:d6:d6:0c:e2:08:5b:53:55:4a:34:0c:ed:a0:
56:45:01:a4:f2:5e:0c:0f:ea:8f:c1:00:2b:c7:25:d9:76:51:
e7:5a:d3:39:c9:77:f5:bd:19:e1:39:ac:16:60:4c:b6:9a:75:
69:ef:c9:20:5a:b3:2c:50:c4:57:26:d9:f9:0b:23:f1:1a:66:
b8:70:35:87:10:21:25:1d:e2:01:d1:29:fb:ed:b8:1a:5d:84:
74:e2:9e:53:ed:09:a2:4b:49:50:42:f9:61:29:dd:c9:f7:70:
d1:41:81:5f:9c:42:02:d0:d0:3c:32:b4:49:17:9d:d7:bc:d7:
ad:d0:de:c2:ac:cf:cf:86:66:7d:43:2c:f3:12:2d:dc:9a:bb:
44:ca:75:eb:f2:fc:62:73:1e:e5:ef:e9:5b:cd:b5:26:6a:d3:
46:d2:ea:a4:b2:04:25:83:a2:dc:c0:32:09:99:9d:47:99:96:
e2:06:80:70:06:f6:d9:7c:df:1e:4d:2a:98:06:66:2d:00:e3:
32:30:d5:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoFmrOJ9pMgzJsVeGY/OCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZDJhODg0NWNkZjY1NzZkZThlYjAxMTE4MDhhYmQ2NWZk
OGJjNDQwHhcNMjUwOTA3MTAwMjE1WhcNMjUwOTA4MTAwMjE1WjAzMTEwLwYDVQQD
EyhhYzkyMjJmY2U2ODRjMjUzMjk0ZmVlOGRlYmNlZDg4MmY1YjhlNTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowq9XSiJ48iD/c8UjP9JQYq49Weg
jpyj2nhL6vUOVpKnuOrHjxG3jYILy462eQ/P3fkhOOx9xL4IbzyALbvnKpeRgwLU
Ful1YLdfKD/jZolTHEc9Bd/F/ZS6crjRYjDtyhrkhC4kSo8FLryF6H2jDArcJjDT
m4uyaGsQYwgL2rv4uIjQLtbNugDXBcka4nFAfCPT2C8pK7s9U1NkAjhhYN+5boA/
Bj4Rz5/96uYsKZid6ybQumqcyxFmwG/nRhQWwwu3PPjUCbT4QlX9oyRwoEsPasYP
dxGNRM9gt/B4oBabvZXRkblkqsv3zl5C0SXl95jTtLIQTCMF3yTBi7MWSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKySIvzmhMJTKU/ujevO2IL1uOVNMB8GA1UdIwQY
MBaAFMDSqIRc32V23o6wERgIq9Zf2LxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd05Lb2hGemZaWGJlanJBUkdBaXIxbF9ZdkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83Njk3NDMtNGJhMS00M2NlLWFmMjMt
NDg0NjA2MmY5YTczLzEvd05Lb2hGemZaWGJlanJBUkdBaXIxbF9ZdkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83Njk3NDMtNGJhMS00M2NlLWFmMjMtNDg0NjA2MmY5YTcz
LzEvd05Lb2hGemZaWGJlanJBUkdBaXIxbF9ZdkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxIk+uOD
25gYhK7zfd7XIN0KirvYZF3jTpJt/H1yEd77UOGghVYlOkAkIMtgIpbnd2cM3cF0
+xRsTF/W1gziCFtTVUo0DO2gVkUBpPJeDA/qj8EAK8cl2XZR51rTOcl39b0Z4Tms
FmBMtpp1ae/JIFqzLFDEVybZ+Qsj8RpmuHA1hxAhJR3iAdEp++24Gl2EdOKeU+0J
oktJUEL5YSndyfdw0UGBX5xCAtDQPDK0SRed17zXrdDewqzPz4ZmfUMs8xIt3Jq7
RMp16/L8YnMe5e/pW821JmrTRtLqpLIEJYOi3MAyCZmdR5mW4gaAcAb22XzfHk0q
mAZmLQDjMjDVug==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:43 2025 by rpki-client