Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
File: w1k5CyF0quIpYaDzwp_EAvH-I8g.mft (raw, json)
Hash identifier: D0WLz11eQzW9XHzYj46q1O1p4WdHyF0Xbk3B62QCFQY=
Subject key identifier: 11:4F:ED:2F:76:1E:89:C6:C2:7B:1B:A3:7E:3D:8E:02:F8:C3:A7:00
Authority key identifier: C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8
Certificate issuer: /CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
Certificate serial: 0199337FEE9D70B4A08ACB27F402DF6E3E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
Manifest number: 02E8
Signing time: Wed 10 Sep 2025 12:00:46 +0000
Manifest this update: Wed 10 Sep 2025 12:00:46 +0000
Manifest next update: Thu 11 Sep 2025 12:00:46 +0000
Files and hashes: 1: roRpX3bRKDuocHxusV0WH0MjbWo.roa (hash: P8a5SzApQjB4G+3G1+p+RkD68unIbIu33oid4GIMvlk=)
2: w1k5CyF0quIpYaDzwp_EAvH-I8g.crl (hash: N/iVylCnryEZOV2Qw0zX1pt0Z4hODuJA24J+WXAiQPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:7f:ee:9d:70:b4:a0:8a:cb:27:f4:02:df:6e:3e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
Validity
Not Before: Sep 10 12:00:46 2025 GMT
Not After : Sep 11 12:00:46 2025 GMT
Subject: CN=114fed2f761e89c6c27b1ba37e3d8e02f8c3a700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:5f:0c:71:e3:cf:50:76:ec:b3:36:c3:53:
7b:63:5b:3a:db:ff:17:4c:9f:cd:3f:4b:d5:fe:a5:
b6:6f:66:6b:4c:f8:3d:84:fb:05:80:e7:d7:13:45:
be:d4:c7:42:8f:1d:59:fb:7b:53:cc:5a:77:96:aa:
91:c8:2b:88:55:39:d8:49:8c:09:d8:1e:ca:84:17:
ab:ba:a1:41:ff:79:1c:47:a4:c1:92:9f:23:45:53:
62:94:ae:c7:db:35:9f:df:d1:bf:28:32:cf:40:b7:
ae:b2:44:e7:e4:1b:ea:b8:e7:c9:6d:63:27:15:fd:
fa:29:8a:fe:0d:71:f9:08:8a:0a:07:3f:52:64:24:
ab:ec:b3:77:1a:74:21:f9:e6:14:05:b6:3c:64:48:
f6:4e:49:ba:db:62:53:7c:63:8b:56:0a:96:ea:3a:
ed:2f:5c:c1:c8:fc:f4:0c:e8:03:f6:ab:ab:7f:2c:
0b:fb:28:46:b6:33:e3:e2:77:20:ce:37:94:a6:7e:
67:db:24:dd:01:5b:31:29:0a:5f:cb:5d:9d:bb:30:
5f:83:ff:0a:ec:b8:f5:ae:78:db:cf:59:61:3e:61:
36:77:c0:74:c6:19:7a:ac:0d:ea:76:96:e9:49:21:
4e:bd:d5:80:58:69:41:37:a3:56:2d:8d:07:6e:97:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4F:ED:2F:76:1E:89:C6:C2:7B:1B:A3:7E:3D:8E:02:F8:C3:A7:00
X509v3 Authority Key Identifier:
keyid:C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c8:83:f7:bd:49:a1:27:27:fe:54:4c:c4:03:a7:d2:11:8b:
21:85:21:c5:eb:52:48:fe:a8:cc:ec:2e:97:f2:cb:0a:af:a1:
cb:a8:89:6a:2b:f0:26:22:1a:66:4b:1b:41:0c:06:97:18:7c:
3d:bd:75:c3:1b:f8:cc:14:99:b8:56:29:5f:6d:a3:45:9f:75:
1b:68:76:e9:7f:4a:0c:92:ab:67:c0:84:76:5c:50:bb:54:21:
d5:f8:7c:21:df:1f:ae:81:51:ca:bd:54:85:35:2f:51:57:a0:
eb:34:8f:1e:b6:31:ed:15:33:83:dc:6c:2b:16:db:b2:27:8d:
c2:fa:f5:d5:9d:e0:58:1a:3b:fc:42:52:53:52:dc:2e:83:43:
ed:28:80:59:16:77:4f:43:9f:53:8b:0b:a5:4f:6b:58:66:eb:
6a:3d:a6:3c:93:93:04:d7:9f:c5:63:dc:d0:c1:6c:d1:5d:5b:
6a:74:e2:7f:f0:69:24:a7:de:dc:94:51:9c:2e:94:a8:c4:6d:
fc:49:30:fd:d1:17:23:83:09:e1:07:fa:72:c9:fa:ee:f6:63:
82:11:7a:51:1d:ce:38:45:81:73:e2:2b:09:63:87:a6:1d:29:
b3:67:7e:a0:eb:78:7c:24:d9:9e:a2:40:e4:3e:b9:56:7c:37:
81:24:60:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzf+6dcLSgissn9ALfbj4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNTkzOTBiMjE3NGFhZTIyOTYxYTBmM2MyOWZjNDAyZjFm
ZTIzYzgwHhcNMjUwOTEwMTIwMDQ2WhcNMjUwOTExMTIwMDQ2WjAzMTEwLwYDVQQD
EygxMTRmZWQyZjc2MWU4OWM2YzI3YjFiYTM3ZTNkOGUwMmY4YzNhNzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq5fDHHjz1B27LM2w1N7Y1s62/8X
TJ/NP0vV/qW2b2ZrTPg9hPsFgOfXE0W+1MdCjx1Z+3tTzFp3lqqRyCuIVTnYSYwJ
2B7KhBeruqFB/3kcR6TBkp8jRVNilK7H2zWf39G/KDLPQLeuskTn5BvquOfJbWMn
Ff36KYr+DXH5CIoKBz9SZCSr7LN3GnQh+eYUBbY8ZEj2Tkm622JTfGOLVgqW6jrt
L1zByPz0DOgD9qurfywL+yhGtjPj4ncgzjeUpn5n2yTdAVsxKQpfy12duzBfg/8K
7Lj1rnjbz1lhPmE2d8B0xhl6rA3qdpbpSSFOvdWAWGlBN6NWLY0HbpeioQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFP7S92HonGwnsbo349jgL4w6cAMB8GA1UdIwQY
MBaAFMNZOQshdKriKWGg88KfxALx/iPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81YmJhN2ItZGFhNy00NDMyLTkyNzAt
ZWM1YzdkZTdhYWUxLzEvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81YmJhN2ItZGFhNy00NDMyLTkyNzAtZWM1YzdkZTdhYWUx
LzEvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsiD971J
oScn/lRMxAOn0hGLIYUhxetSSP6ozOwul/LLCq+hy6iJaivwJiIaZksbQQwGlxh8
Pb11wxv4zBSZuFYpX22jRZ91G2h26X9KDJKrZ8CEdlxQu1Qh1fh8Id8froFRyr1U
hTUvUVeg6zSPHrYx7RUzg9xsKxbbsieNwvr11Z3gWBo7/EJSU1LcLoND7SiAWRZ3
T0OfU4sLpU9rWGbraj2mPJOTBNefxWPc0MFs0V1banTif/BpJKfe3JRRnC6UqMRt
/Ekw/dEXI4MJ4Qf6csn67vZjghF6UR3OOEWBc+IrCWOHph0ps2d+oOt4fCTZnqJA
5D65Vnw3gSRghw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 13:54:37 2025 by rpki-client