Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
File: wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft (raw, json)
Hash identifier: qQGGUtE7lFIBfPu04cSowC0ONUPuTgh3X4uGRF0y7C0=
Subject key identifier: 76:1C:62:63:88:AA:AF:B3:16:47:5F:CA:3C:80:8D:41:97:CE:89:06
Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Certificate issuer: /CN=c1db67b85104e4db598fea15678699c92473bda0
Certificate serial: 019934250EF20480E8B3EA05B7376592B2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
Manifest number: 0D51
Signing time: Wed 10 Sep 2025 15:01:07 +0000
Manifest this update: Wed 10 Sep 2025 15:01:07 +0000
Manifest next update: Thu 11 Sep 2025 15:01:07 +0000
Files and hashes: 1: PJ3v6hx1GuVvKbnyJ-k0p1XrVzI.roa (hash: vSG0XnrDzzP8WtxkP9Iqj2yAInaVzagq/kUPYgF33Iw=)
2: cycF2JveybPX6grJ41wnOXvTGTE.roa (hash: aip8c8zGmCpS8zi0B5jF1UO7lc36UgLVySSkHDz+xxU=)
3: wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl (hash: nk5wZFukJfPTQIphjJ0nDJeVm4o34caM3fcI8VFXzrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:25:0e:f2:04:80:e8:b3:ea:05:b7:37:65:92:b2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0
Validity
Not Before: Sep 10 15:01:07 2025 GMT
Not After : Sep 11 15:01:07 2025 GMT
Subject: CN=761c626388aaafb316475fca3c808d4197ce8906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:32:46:92:de:19:35:d0:e1:f5:44:39:6a:
7b:34:69:cb:1a:06:d2:b5:e1:2d:f8:86:c7:92:c9:
87:6a:56:35:0c:05:29:32:b4:49:ca:1f:fd:d0:f3:
2c:47:48:db:11:44:7e:cc:49:8c:2f:a4:f4:90:b2:
92:35:c6:dd:72:b0:fb:e8:a1:c9:39:70:11:fd:e5:
19:a3:64:4d:83:51:31:c7:c0:88:80:22:3e:7a:e3:
78:c7:f6:df:4e:72:d7:f3:47:03:c3:2c:81:e2:3a:
5a:b6:7f:aa:43:46:a8:d5:60:3c:03:05:73:b3:82:
00:f1:37:6d:39:31:92:55:5a:34:71:07:34:06:77:
4e:e8:9a:ec:24:f6:1f:38:15:86:35:38:ab:44:bc:
56:a2:23:1e:a5:a0:08:82:0b:da:62:1c:48:64:6f:
6f:1d:1d:03:a6:72:f0:4d:ed:d2:70:95:b4:84:e9:
79:68:00:15:eb:1c:20:f0:ff:b7:3e:4f:35:30:b0:
eb:ca:36:d6:41:f8:41:b3:a9:ac:93:a6:f8:38:4a:
94:f6:47:53:6b:99:bb:a5:d3:8d:05:7a:f8:40:d3:
65:ab:aa:ff:26:19:2d:8b:08:de:36:50:90:d6:0c:
07:38:d3:c1:7e:46:86:07:ae:1a:fe:23:f1:04:43:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1C:62:63:88:AA:AF:B3:16:47:5F:CA:3C:80:8D:41:97:CE:89:06
X509v3 Authority Key Identifier:
keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d4:5f:fc:c8:d2:2b:f3:bd:68:d6:c5:29:40:28:2b:b8:b2:
b5:80:93:51:96:5b:e1:9f:dc:a6:26:00:65:ee:6f:3f:a1:fa:
8f:44:a2:87:40:a6:80:58:3a:eb:23:f4:ca:42:e2:ac:fa:26:
a1:79:86:8b:0a:62:c5:84:9e:c0:52:12:38:a9:6c:b6:39:e7:
69:10:d9:80:d8:ec:18:6f:25:be:83:19:e7:1d:5c:d3:c5:49:
ff:80:2f:60:2e:2f:60:4f:aa:6a:a4:d0:08:68:4e:ac:c1:28:
ad:21:12:95:15:49:ba:74:44:9e:0d:b3:7e:26:76:f3:b7:f6:
20:95:97:18:87:92:31:88:b6:b7:b8:a8:41:d7:4d:9b:d2:76:
df:53:50:67:37:4e:f4:b6:03:25:90:9c:20:09:6f:dc:32:c4:
cd:d2:35:14:f2:b2:c9:a1:25:12:ee:4f:98:11:47:5f:1e:91:
cb:ce:9c:9b:70:d6:a6:9c:48:61:f9:40:c1:fb:14:d9:1f:28:
81:60:d9:6f:68:8e:44:22:6c:a7:85:93:ae:97:06:d4:06:2e:
b2:89:b7:19:c4:d9:22:b8:36:99:28:39:83:e2:ff:b6:0c:3f:
39:0c:77:ed:35:cd:e6:51:2a:b0:3e:37:92:6b:9b:0d:3a:e9:
56:e2:96:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0JQ7yBIDos+oFtzdlkrLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZGI2N2I4NTEwNGU0ZGI1OThmZWExNTY3ODY5OWM5MjQ3
M2JkYTAwHhcNMjUwOTEwMTUwMTA3WhcNMjUwOTExMTUwMTA3WjAzMTEwLwYDVQQD
Eyg3NjFjNjI2Mzg4YWFhZmIzMTY0NzVmY2EzYzgwOGQ0MTk3Y2U4OTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjsyRpLeGTXQ4fVEOWp7NGnLGgbS
teEt+IbHksmHalY1DAUpMrRJyh/90PMsR0jbEUR+zEmML6T0kLKSNcbdcrD76KHJ
OXAR/eUZo2RNg1Exx8CIgCI+euN4x/bfTnLX80cDwyyB4jpatn+qQ0ao1WA8AwVz
s4IA8TdtOTGSVVo0cQc0BndO6JrsJPYfOBWGNTirRLxWoiMepaAIggvaYhxIZG9v
HR0DpnLwTe3ScJW0hOl5aAAV6xwg8P+3Pk81MLDryjbWQfhBs6msk6b4OEqU9kdT
a5m7pdONBXr4QNNlq6r/JhktiwjeNlCQ1gwHONPBfkaGB64a/iPxBEMsjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYcYmOIqq+zFkdfyjyAjUGXzokGMB8GA1UdIwQY
MBaAFMHbZ7hRBOTbWY/qFWeGmckkc72gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2R0bnVGRUU1TnRaai1vVlo0YVp5U1J6dmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82YTY1MzUtNmY0Mi00ZjJkLTllYjkt
N2Q0YzhmMzdmNWZkLzEvd2R0bnVGRUU1TnRaai1vVlo0YVp5U1J6dmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82YTY1MzUtNmY0Mi00ZjJkLTllYjktN2Q0YzhmMzdmNWZk
LzEvd2R0bnVGRUU1TnRaai1vVlo0YVp5U1J6dmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9Rf/MjS
K/O9aNbFKUAoK7iytYCTUZZb4Z/cpiYAZe5vP6H6j0Sih0CmgFg66yP0ykLirPom
oXmGiwpixYSewFISOKlstjnnaRDZgNjsGG8lvoMZ5x1c08VJ/4AvYC4vYE+qaqTQ
CGhOrMEorSESlRVJunREng2zfiZ287f2IJWXGIeSMYi2t7ioQddNm9J231NQZzdO
9LYDJZCcIAlv3DLEzdI1FPKyyaElEu5PmBFHXx6Ry86cm3DWppxIYflAwfsU2R8o
gWDZb2iORCJsp4WTrpcG1AYusom3GcTZIrg2mSg5g+L/tgw/OQx37TXN5lEqsD43
kmubDTrpVuKWnA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:41:39 2025 by rpki-client