Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
File: wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json)
Hash identifier: f2O6kkhu4bjin+4AtHpohVU4ol4hj8/d6WTEk8judfo=
Subject key identifier: 42:23:E4:DF:97:91:26:1A:59:26:86:F1:26:5C:F4:7B:0A:F3:61:BF
Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
Certificate issuer: /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Certificate serial: 019923A0C472D065F52DA4C3A7230CC33AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:02:42 +0000
Manifest this update: Sun 07 Sep 2025 10:02:42 +0000
Manifest next update: Mon 08 Sep 2025 10:02:42 +0000
Files and hashes: 1: mHKZZdX4P1dK57yB0hCJdDCS-A8.roa (hash: sgKlWaet9A3w8v934Vjaqn1vJ0nwSp4V/6BEjtLuqMM=)
2: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: 6cD7U6e4vR6E1DnoCnZdQwp1p60NUS45mWwvEYeFA0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:c4:72:d0:65:f5:2d:a4:c3:a7:23:0c:c3:3a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Validity
Not Before: Sep 7 10:02:42 2025 GMT
Not After : Sep 8 10:02:42 2025 GMT
Subject: CN=4223e4df9791261a592686f1265cf47b0af361bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:8a:88:ca:f1:05:37:f9:d4:ff:fb:5b:9d:
8d:31:a2:0a:44:26:04:22:d7:10:55:84:00:fd:71:
09:c3:91:3a:9c:87:11:ff:14:fb:4c:04:77:6a:0e:
ec:1e:27:8b:a5:e8:80:90:9a:5b:6a:d8:39:08:fb:
83:8b:79:c7:b2:dc:56:9d:8e:b8:39:f9:a1:f7:31:
65:95:3e:e7:6f:94:7f:d3:26:bf:80:ca:fd:b3:0d:
92:63:c9:76:ba:9f:23:09:59:f3:1a:fe:13:f4:dc:
fa:fc:40:57:da:3a:43:9c:8c:8b:31:54:c9:31:33:
37:ac:da:0b:50:63:a9:1b:9e:d2:36:5b:71:6d:04:
fd:11:b3:98:50:21:76:34:6b:dd:7e:67:05:87:77:
f2:25:ed:e5:45:14:68:fd:c2:4c:a2:83:9a:e8:bd:
e9:c4:4b:4e:94:a1:4c:74:69:86:d7:6b:01:c7:75:
9f:f9:42:a0:06:71:55:41:c6:ee:94:9e:12:e3:4d:
21:70:26:20:2f:66:04:c4:e1:63:13:a1:56:ae:26:
9e:57:22:c1:61:a4:60:e0:21:55:a3:93:ab:2e:8e:
39:74:90:7b:88:b1:51:66:c9:e8:2e:12:6f:e5:9b:
5b:42:91:e1:2f:76:a5:f0:ae:a6:40:9f:12:d4:3f:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:23:E4:DF:97:91:26:1A:59:26:86:F1:26:5C:F4:7B:0A:F3:61:BF
X509v3 Authority Key Identifier:
keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:00:8e:37:2a:46:43:d5:fe:78:71:af:2c:03:d8:a4:67:
ae:2a:68:13:a1:66:09:a0:b7:8d:a8:a2:c8:10:40:59:bc:87:
78:5d:44:f8:45:68:41:92:2c:e0:a1:ac:82:2b:14:95:2f:47:
16:15:3c:fb:b7:87:32:96:4b:a6:83:6c:b7:fa:09:ba:e1:fa:
36:8b:8e:73:df:e5:b2:b6:9d:59:87:23:23:3d:36:2f:26:da:
56:48:11:72:69:28:cc:a6:bb:f3:a6:18:e2:26:25:a9:11:88:
ab:08:f9:93:0c:5e:48:6b:c5:47:ab:69:89:1d:e2:a7:47:ae:
47:7d:e8:57:57:0c:42:06:e9:46:1c:d1:17:19:11:56:73:27:
d7:bb:e8:d5:8e:cf:e4:2e:62:43:15:88:78:19:19:df:42:80:
ca:40:9a:31:60:21:93:87:e6:8f:d7:a0:ab:db:bc:9f:74:32:
21:dd:d6:dd:4e:44:37:3e:e3:f7:f2:25:8f:e3:01:af:2f:59:
4a:12:72:76:8b:b7:ee:c2:18:43:91:bd:1b:83:43:56:db:fc:
ff:7d:ed:69:3e:d9:af:45:19:6d:31:e5:97:48:9c:c2:af:b4:
01:da:5e:eb:e9:73:eb:d2:6d:7f:2f:20:a1:2e:8d:20:99:86:
86:7c:41:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoMRy0GX1LaTDpyMMwzrtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMzI0OTViODlkY2U4MWIwYzdmODg2ZGRmYzM2MDRiZGUw
NmQ4YTYwHhcNMjUwOTA3MTAwMjQyWhcNMjUwOTA4MTAwMjQyWjAzMTEwLwYDVQQD
Eyg0MjIzZTRkZjk3OTEyNjFhNTkyNjg2ZjEyNjVjZjQ3YjBhZjM2MWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHqKiMrxBTf51P/7W52NMaIKRCYE
ItcQVYQA/XEJw5E6nIcR/xT7TAR3ag7sHieLpeiAkJpbatg5CPuDi3nHstxWnY64
Ofmh9zFllT7nb5R/0ya/gMr9sw2SY8l2up8jCVnzGv4T9Nz6/EBX2jpDnIyLMVTJ
MTM3rNoLUGOpG57SNltxbQT9EbOYUCF2NGvdfmcFh3fyJe3lRRRo/cJMooOa6L3p
xEtOlKFMdGmG12sBx3Wf+UKgBnFVQcbulJ4S400hcCYgL2YExOFjE6FWriaeVyLB
YaRg4CFVo5OrLo45dJB7iLFRZsnoLhJv5ZtbQpHhL3al8K6mQJ8S1D84zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIj5N+XkSYaWSaG8SZc9HsK82G/MB8GA1UdIwQY
MBaAFMAySVuJ3OgbDH+Ibd/DYEveBtimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMmRkMmMtNGQwYy00MjBhLTk4YTUt
MDJlNjQyMmM0MTgxLzEvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMmRkMmMtNGQwYy00MjBhLTk4YTUtMDJlNjQyMmM0MTgx
LzEvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBIAjjcq
RkPV/nhxrywD2KRnripoE6FmCaC3jaiiyBBAWbyHeF1E+EVoQZIs4KGsgisUlS9H
FhU8+7eHMpZLpoNst/oJuuH6NouOc9/lsradWYcjIz02LybaVkgRcmkozKa786YY
4iYlqRGIqwj5kwxeSGvFR6tpiR3ip0euR33oV1cMQgbpRhzRFxkRVnMn17vo1Y7P
5C5iQxWIeBkZ30KAykCaMWAhk4fmj9egq9u8n3QyId3W3U5ENz7j9/Ilj+MBry9Z
ShJydou37sIYQ5G9G4NDVtv8/33taT7Zr0UZbTHll0icwq+0Adpe6+lz69Jtfy8g
oS6NIJmGhnxBYw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:18:40 2025 by rpki-client