Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft
File: WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft (raw, json)
Hash identifier: 4QsYqRxctt5GiCIsurTWnkz1Fs+ngK7SIneSp585Lg0=
Subject key identifier: B7:8D:59:29:7B:1C:0E:77:32:A0:90:AA:B3:47:C3:BA:3C:67:42:D5
Authority key identifier: 58:D3:E9:53:B5:FE:17:A5:31:C9:CF:71:56:07:48:DF:41:FF:71:4A
Certificate issuer: /CN=58d3e953b5fe17a531c9cf71560748df41ff714a
Certificate serial: 019921B2711FD48792D6D99E2361395578AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft
Manifest number: 0D64
Signing time: Sun 07 Sep 2025 01:02:46 +0000
Manifest this update: Sun 07 Sep 2025 01:02:46 +0000
Manifest next update: Mon 08 Sep 2025 01:02:46 +0000
Files and hashes: 1: CMb2v2PccTlBgcAh5nA2SeBCOKc.roa (hash: khwSYgRcb0xgIwV3Wxw9JYrinxD/gAooMfP6PNCyCK0=)
2: WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl (hash: sWhD6CuXhLTSgLzVHm0xMAnwIeH998evK2+6/+gdwo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:71:1f:d4:87:92:d6:d9:9e:23:61:39:55:78:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d3e953b5fe17a531c9cf71560748df41ff714a
Validity
Not Before: Sep 7 01:02:46 2025 GMT
Not After : Sep 8 01:02:46 2025 GMT
Subject: CN=b78d59297b1c0e7732a090aab347c3ba3c6742d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:8a:4d:b7:f0:ec:68:95:fe:ee:8f:e3:05:
78:43:72:4c:fd:8e:80:bf:a6:7c:a9:19:f5:90:bc:
f1:3d:8a:58:00:e9:7d:1b:09:18:ce:b4:b8:e3:94:
91:82:24:7e:4c:00:01:5b:6e:bf:76:a7:55:17:ea:
e8:18:69:fa:01:0b:c1:e1:3f:94:dc:5b:46:db:db:
ac:9d:f3:2a:eb:ef:3b:53:48:d2:08:e1:66:65:5e:
06:67:10:28:a6:9e:98:b4:55:35:7d:d3:7d:46:c6:
fb:8c:87:bd:10:2e:03:5d:c5:38:a8:75:53:9d:4e:
39:6a:44:fe:7a:fb:fe:a6:24:cd:ad:0f:c5:45:54:
2a:ed:85:dc:da:99:5d:2e:8a:bb:7b:2c:34:d4:23:
f2:ef:8f:fe:00:32:12:19:ce:88:e3:d9:4f:cf:91:
ec:54:56:da:e0:e4:95:b3:5d:98:97:8e:77:d0:2c:
61:98:fc:8a:46:ac:32:ce:3d:9c:b3:f8:da:9b:2e:
f5:09:1b:da:fe:ea:7b:82:69:ba:84:b4:63:89:c9:
c8:1c:6b:0f:c8:fd:ad:c8:d0:21:2b:ff:53:82:29:
96:ee:5c:98:a7:5f:66:d5:9b:f5:5a:9b:f1:85:1b:
c6:54:ff:4c:ea:81:18:01:24:df:2a:41:dd:a4:f8:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8D:59:29:7B:1C:0E:77:32:A0:90:AA:B3:47:C3:BA:3C:67:42:D5
X509v3 Authority Key Identifier:
keyid:58:D3:E9:53:B5:FE:17:A5:31:C9:CF:71:56:07:48:DF:41:FF:71:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:96:4b:71:28:a0:dd:e6:5f:45:32:86:1f:91:bc:58:d9:cc:
b9:70:48:ca:04:7b:88:c7:f6:65:64:5d:a1:22:0b:40:c8:7d:
87:5b:52:28:be:be:ea:dd:f1:51:ac:2f:cc:a3:43:e8:88:ae:
aa:78:bf:bb:c3:31:00:c0:0f:67:08:dc:25:4c:bc:84:56:47:
ee:a1:7c:ea:43:ac:e4:37:91:70:81:c7:70:26:ec:96:1e:de:
e0:c6:b3:6f:9b:65:b1:5f:04:b7:9b:6d:17:0a:5f:a4:b4:90:
36:cd:12:52:3a:6a:6b:7d:06:c6:33:b6:3a:cc:1c:d3:83:9b:
fa:97:0a:71:0f:01:ec:3d:5f:5d:a9:35:5d:47:30:77:aa:4a:
e0:fe:be:4c:80:41:47:1d:3d:0c:19:d2:7a:de:2f:bc:8a:40:
11:fb:ab:1a:25:06:68:b2:ae:20:c3:ca:7d:7a:77:91:22:08:
22:8e:da:02:81:5c:89:11:7e:7b:27:ce:1f:65:7d:49:2e:60:
b8:d1:21:c3:a5:75:f6:1c:91:2c:ab:0e:d7:f7:fa:1f:a5:81:
ab:46:89:07:7d:f1:ab:90:31:31:79:32:01:be:62:34:ce:ea:
6f:5c:7e:7b:32:dd:44:55:02:74:aa:04:3c:3c:a5:61:d1:1f:
79:fb:cf:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsnEf1IeS1tmeI2E5VXiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDNlOTUzYjVmZTE3YTUzMWM5Y2Y3MTU2MDc0OGRmNDFm
ZjcxNGEwHhcNMjUwOTA3MDEwMjQ2WhcNMjUwOTA4MDEwMjQ2WjAzMTEwLwYDVQQD
EyhiNzhkNTkyOTdiMWMwZTc3MzJhMDkwYWFiMzQ3YzNiYTNjNjc0MmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzKKTbfw7GiV/u6P4wV4Q3JM/Y6A
v6Z8qRn1kLzxPYpYAOl9GwkYzrS445SRgiR+TAABW26/dqdVF+roGGn6AQvB4T+U
3FtG29usnfMq6+87U0jSCOFmZV4GZxAopp6YtFU1fdN9Rsb7jIe9EC4DXcU4qHVT
nU45akT+evv+piTNrQ/FRVQq7YXc2pldLoq7eyw01CPy74/+ADISGc6I49lPz5Hs
VFba4OSVs12Yl4530CxhmPyKRqwyzj2cs/jamy71CRva/up7gmm6hLRjicnIHGsP
yP2tyNAhK/9TgimW7lyYp19m1Zv1WpvxhRvGVP9M6oEYASTfKkHdpPhKFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeNWSl7HA53MqCQqrNHw7o8Z0LVMB8GA1UdIwQY
MBaAFFjT6VO1/helMcnPcVYHSN9B/3FKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05QcFU3WC1GNlV4eWM5eFZnZEkzMEhfY1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hYzM4YzQtNGI4My00MGI3LThkMGUt
N2NlYWJjZTM0ZTBkLzEvV05QcFU3WC1GNlV4eWM5eFZnZEkzMEhfY1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hYzM4YzQtNGI4My00MGI3LThkMGUtN2NlYWJjZTM0ZTBk
LzEvV05QcFU3WC1GNlV4eWM5eFZnZEkzMEhfY1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZZLcSig
3eZfRTKGH5G8WNnMuXBIygR7iMf2ZWRdoSILQMh9h1tSKL6+6t3xUawvzKND6Iiu
qni/u8MxAMAPZwjcJUy8hFZH7qF86kOs5DeRcIHHcCbslh7e4Mazb5tlsV8Et5tt
FwpfpLSQNs0SUjpqa30GxjO2Oswc04Ob+pcKcQ8B7D1fXak1XUcwd6pK4P6+TIBB
Rx09DBnSet4vvIpAEfurGiUGaLKuIMPKfXp3kSIIIo7aAoFciRF+eyfOH2V9SS5g
uNEhw6V19hyRLKsO1/f6H6WBq0aJB33xq5AxMXkyAb5iNM7qb1x+ezLdRFUCdKoE
PDylYdEfefvPiA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:39 2025 by rpki-client