Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File: woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier: WV1sBHIa2xtgDnjba5z390resPfYNrbeBMql7Zvf3vo=
Subject key identifier: 66:42:36:0F:DB:CD:9B:98:DA:D9:B7:7C:34:D4:6E:05:F0:8F:10:47
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 0199221E2F809E767DAA7C1E2CDC79D36A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:27 +0000
Manifest this update: Sun 07 Sep 2025 03:00:27 +0000
Manifest next update: Mon 08 Sep 2025 03:00:27 +0000
Files and hashes: 1: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (hash: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=)
2: TKlbM4JoTI14SvlWl9KxKwEmigw.roa (hash: YEHXScxruB3ZAlC0fbNpVAnfjw2qlaMRSrlrmf/M0XY=)
3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: SUcq0U+xx9Cxmg1W1Sv6iHkpliSFDAjFWUA5kC8Uy5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:2f:80:9e:76:7d:aa:7c:1e:2c:dc:79:d3:6a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Sep 7 03:00:27 2025 GMT
Not After : Sep 8 03:00:27 2025 GMT
Subject: CN=6642360fdbcd9b98dad9b77c34d46e05f08f1047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:cb:b6:9d:15:d9:39:6d:ef:af:c1:d8:a1:
0e:1f:ae:d3:32:a7:9a:ee:95:31:c2:1f:ff:32:f6:
21:04:a5:26:f1:b5:8d:46:39:74:bc:ad:99:ce:91:
dd:89:b0:fd:c3:7e:1a:a2:06:2c:82:9f:6e:c7:01:
1b:5c:64:14:8f:c2:28:fd:ac:1a:64:46:d9:6c:eb:
c6:0f:9d:fe:2a:68:0b:9c:ef:d8:a2:8d:22:f9:d4:
79:2d:65:cd:e0:35:0f:58:e5:4f:dd:44:f3:48:17:
fb:56:c2:a7:ef:8d:a6:38:38:bb:6b:76:9e:54:9e:
ff:29:50:5f:07:f8:b5:9a:d3:11:2a:e3:b3:f8:0d:
50:64:b0:7d:98:40:c8:3b:ef:c6:05:9e:ee:c8:f0:
a2:be:22:9a:ee:2a:16:02:eb:3a:05:e0:86:57:e2:
8b:5e:28:23:b3:2f:9f:06:0b:fd:99:32:b1:49:a0:
63:cf:60:ee:ea:c3:b6:91:e8:49:53:53:55:ae:ed:
eb:aa:99:2b:64:83:dd:ec:15:a2:a4:09:3b:c1:e8:
0a:32:b1:d9:cc:e6:88:0b:a8:2e:75:43:99:72:99:
60:41:90:df:48:f3:f0:13:4d:77:15:80:dc:0e:e5:
55:34:c5:63:0c:71:82:8e:a7:af:87:5e:f7:15:72:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:42:36:0F:DB:CD:9B:98:DA:D9:B7:7C:34:D4:6E:05:F0:8F:10:47
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:97:3a:3c:6f:00:5f:5d:bb:5c:23:d7:87:d9:a5:58:a9:15:
b0:ed:9b:cd:ba:f7:d1:35:23:89:50:0d:66:3a:da:2d:82:61:
a6:dc:23:83:29:ab:7d:1c:64:72:4a:d1:c6:2a:61:bc:f0:b4:
2e:dc:2c:37:dc:1b:1a:db:59:e0:66:0d:17:26:43:eb:e6:86:
2b:f3:d4:e4:46:df:38:79:52:bb:fb:56:ef:44:1c:8d:90:86:
97:76:fb:42:d3:e9:60:17:58:1f:13:d7:d0:d5:b5:84:9b:8c:
f1:66:b8:29:84:9f:69:64:c1:a1:ef:60:22:ec:d7:f1:fe:a4:
9d:13:c6:95:55:78:bf:c6:e3:30:c1:a9:8c:35:2e:aa:51:31:
d9:e0:5a:a9:2e:9b:ef:79:06:81:09:64:57:b2:d5:15:62:26:
09:05:fb:f4:17:22:62:a6:c4:08:d3:14:af:db:e3:03:1b:3a:
f3:52:12:76:e6:78:65:08:e0:a3:78:41:a4:cd:e2:29:84:01:
2a:ec:08:05:6e:33:51:59:9d:d2:f2:78:30:d7:6d:09:e3:95:
45:89:5f:17:51:dc:0d:0c:21:7e:a1:23:ab:26:12:e9:c7:70:
6c:a7:a2:90:26:08:2d:f3:99:0e:d4:71:de:da:c7:61:3c:0c:
97:ca:f4:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHi+AnnZ9qnweLNx502qcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyODVhMTQ3NGUzODYyN2UzMDFhNTUxYmUzNGVmYTQ1ODJh
NWNmMzkwHhcNMjUwOTA3MDMwMDI3WhcNMjUwOTA4MDMwMDI3WjAzMTEwLwYDVQQD
Eyg2NjQyMzYwZmRiY2Q5Yjk4ZGFkOWI3N2MzNGQ0NmUwNWYwOGYxMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WjLtp0V2Tlt76/B2KEOH67TMqea
7pUxwh//MvYhBKUm8bWNRjl0vK2ZzpHdibD9w34aogYsgp9uxwEbXGQUj8Io/awa
ZEbZbOvGD53+KmgLnO/Yoo0i+dR5LWXN4DUPWOVP3UTzSBf7VsKn742mODi7a3ae
VJ7/KVBfB/i1mtMRKuOz+A1QZLB9mEDIO+/GBZ7uyPCiviKa7ioWAus6BeCGV+KL
Xigjsy+fBgv9mTKxSaBjz2Du6sO2kehJU1NVru3rqpkrZIPd7BWipAk7wegKMrHZ
zOaIC6gudUOZcplgQZDfSPPwE013FYDcDuVVNMVjDHGCjqevh173FXIBvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZCNg/bzZuY2tm3fDTUbgXwjxBHMB8GA1UdIwQY
MBaAFMKFoUdOOGJ+MBpVG+NO+kWCpc85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd29XaFIwNDRZbjR3R2xVYjQwNzZSWUtsenprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9iNDlmODEtODUzNi00YTY3LTg5OWYt
ZDVlNjM4NTZkNTVkLzEvd29XaFIwNDRZbjR3R2xVYjQwNzZSWUtsenprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9iNDlmODEtODUzNi00YTY3LTg5OWYtZDVlNjM4NTZkNTVk
LzEvd29XaFIwNDRZbjR3R2xVYjQwNzZSWUtsenprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5c6PG8A
X127XCPXh9mlWKkVsO2bzbr30TUjiVANZjraLYJhptwjgymrfRxkckrRxiphvPC0
LtwsN9wbGttZ4GYNFyZD6+aGK/PU5EbfOHlSu/tW70QcjZCGl3b7QtPpYBdYHxPX
0NW1hJuM8Wa4KYSfaWTBoe9gIuzX8f6knRPGlVV4v8bjMMGpjDUuqlEx2eBaqS6b
73kGgQlkV7LVFWImCQX79BciYqbECNMUr9vjAxs681ISduZ4ZQjgo3hBpM3iKYQB
KuwIBW4zUVmd0vJ4MNdtCeOVRYlfF1HcDQwhfqEjqyYS6cdwbKeikCYILfOZDtRx
3trHYTwMl8r0aA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:47 2025 by rpki-client