Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier: cjJt3BGfYuiNfh5O/q+D6wkg0Zx7kIOpNpWas6WH140=
Subject key identifier: 6D:4F:5C:F4:F3:41:51:8B:DF:D1:AB:6C:05:09:72:14:14:FE:4C:99
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 019921B1D4F2158771A65DEA21A658534C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number: 04B2
Signing time: Sun 07 Sep 2025 01:02:06 +0000
Manifest this update: Sun 07 Sep 2025 01:02:06 +0000
Manifest next update: Mon 08 Sep 2025 01:02:06 +0000
Files and hashes: 1: 7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa (hash: b8AATSifx7/LvpsKfDCuwWcrOC9fgkYZg2ZM6+VpEfM=)
2: iuHoct3zHKPAQY0zJWbgQODPfEo.roa (hash: Un9DAj/KSTfz3PzRpucfMK4GqYVgsTE2tiPdLJ964Po=)
3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: npWPOr+ybTNuG4mbODHe55bNOltUvtFfVGoOKQEilLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:d4:f2:15:87:71:a6:5d:ea:21:a6:58:53:4c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: Sep 7 01:02:06 2025 GMT
Not After : Sep 8 01:02:06 2025 GMT
Subject: CN=6d4f5cf4f341518bdfd1ab6c0509721414fe4c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:75:81:05:89:76:0f:d8:27:a4:3a:f1:cf:
74:aa:7b:02:36:be:b7:ee:24:61:c3:88:32:e0:34:
ab:43:f8:03:b9:0d:32:e7:aa:3a:be:63:c5:1c:87:
16:cd:54:ed:73:eb:d0:63:9c:c5:fd:09:1b:a3:e4:
5c:2d:5e:39:af:22:b4:17:7c:6d:45:be:c3:59:23:
9a:94:e7:a8:b4:2d:57:b5:d3:e6:5e:97:c3:be:f7:
81:aa:c3:c1:66:8d:99:d3:46:a0:e1:fe:0e:a7:1b:
93:37:31:0b:98:d9:3d:dc:b7:dd:fe:61:44:36:4b:
7a:76:3d:f4:14:c6:30:18:60:25:cc:c1:0a:6e:9f:
32:99:31:c2:e6:51:a0:e9:ec:79:58:9c:ce:c0:8e:
d8:db:40:5a:57:4f:9c:f3:5e:95:bb:b2:22:70:0a:
5d:7a:3b:07:0b:e2:93:21:35:0c:57:62:7b:96:75:
67:49:b9:eb:9f:0f:91:73:b3:f6:e5:4c:54:c2:aa:
ab:76:b9:60:8a:e1:bc:27:2d:15:50:cf:e4:4f:47:
c9:0b:f7:1d:b6:5d:a2:a1:26:17:56:63:9f:3d:5b:
e9:c4:b8:6a:3b:38:d9:da:78:ce:0e:10:84:c6:0c:
c2:26:73:c0:71:02:13:95:65:68:d1:36:ed:61:64:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4F:5C:F4:F3:41:51:8B:DF:D1:AB:6C:05:09:72:14:14:FE:4C:99
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f8:d5:ae:cf:2c:21:2d:a6:73:c9:ac:f2:19:85:cd:27:8a:
ad:ce:5d:ad:68:72:38:09:64:a1:fe:a9:84:8f:88:1b:bb:33:
0a:41:25:69:1b:e3:e4:8f:3a:02:88:12:06:65:fd:90:16:08:
81:e2:53:f2:01:75:22:80:a1:74:f6:70:45:d7:77:60:1b:a1:
12:07:52:fb:1a:0b:d0:50:ed:b2:e5:e9:63:41:cd:b0:be:84:
b5:a2:4e:88:5c:1a:b8:fc:3b:23:82:9f:6d:a5:f3:9b:e9:f5:
cd:c6:5a:df:03:29:a8:77:a8:aa:43:a6:85:64:0a:9b:d2:4d:
83:87:23:0c:98:76:8c:19:d4:d9:ff:1b:3b:f0:45:43:a0:d8:
7a:12:ba:18:fb:3a:9f:67:01:d4:c2:52:64:88:06:7f:b9:2c:
30:24:f3:e2:ae:e8:2e:e9:a1:3c:f9:f4:94:11:bb:80:24:59:
4b:3a:cf:4f:ab:f0:4d:d4:fc:3b:e5:21:ac:34:1a:7f:fe:0f:
c9:66:bc:fe:f7:25:60:5d:d7:d1:e0:04:0d:4e:19:3a:c3:df:
99:27:1a:20:f3:ab:c7:08:7d:62:57:73:77:f0:6a:7d:63:23:
78:23:d5:4b:a4:6e:7b:3a:90:2d:ab:4c:08:8f:58:5a:43:1f:
be:00:dd:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsdTyFYdxpl3qIaZYU0wFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZGRkMmQ0ZjAzMGZhMzYzOGMwNGJlNjM2ZWY5M2QyODky
NzE2NTIwHhcNMjUwOTA3MDEwMjA2WhcNMjUwOTA4MDEwMjA2WjAzMTEwLwYDVQQD
Eyg2ZDRmNWNmNGYzNDE1MThiZGZkMWFiNmMwNTA5NzIxNDE0ZmU0Yzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv011gQWJdg/YJ6Q68c90qnsCNr63
7iRhw4gy4DSrQ/gDuQ0y56o6vmPFHIcWzVTtc+vQY5zF/Qkbo+RcLV45ryK0F3xt
Rb7DWSOalOeotC1XtdPmXpfDvveBqsPBZo2Z00ag4f4OpxuTNzELmNk93Lfd/mFE
Nkt6dj30FMYwGGAlzMEKbp8ymTHC5lGg6ex5WJzOwI7Y20BaV0+c816Vu7IicApd
ejsHC+KTITUMV2J7lnVnSbnrnw+Rc7P25UxUwqqrdrlgiuG8Jy0VUM/kT0fJC/cd
tl2ioSYXVmOfPVvpxLhqOzjZ2njODhCExgzCJnPAcQITlWVo0TbtYWSTZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1PXPTzQVGL39GrbAUJchQU/kyZMB8GA1UdIwQY
MBaAFMDd0tTwMPo2OMBL5jbvk9KJJxZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzIt
NGZiNDA0ODVmZjdiLzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzItNGZiNDA0ODVmZjdi
LzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfjVrs8s
IS2mc8ms8hmFzSeKrc5drWhyOAlkof6phI+IG7szCkElaRvj5I86AogSBmX9kBYI
geJT8gF1IoChdPZwRdd3YBuhEgdS+xoL0FDtsuXpY0HNsL6EtaJOiFwauPw7I4Kf
baXzm+n1zcZa3wMpqHeoqkOmhWQKm9JNg4cjDJh2jBnU2f8bO/BFQ6DYehK6GPs6
n2cB1MJSZIgGf7ksMCTz4q7oLumhPPn0lBG7gCRZSzrPT6vwTdT8O+UhrDQaf/4P
yWa8/vclYF3X0eAEDU4ZOsPfmScaIPOrxwh9Yldzd/BqfWMjeCPVS6RuezqQLatM
CI9YWkMfvgDdEw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:52 2025 by rpki-client