Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
File: wPQvc_8rzEiFsSAL0C7n4p9gjis.mft (raw, json)
Hash identifier: czZ94/TdegGz886WAhHnnarwftUHcXufmAPqEfl0OCo=
Subject key identifier: 71:D0:22:6D:78:A9:F4:07:17:28:B6:97:98:C4:1C:F5:02:F3:A7:A4
Authority key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
Certificate issuer: /CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Certificate serial: 0199240D0524A82F7962927BC6F1D644408A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
Manifest number: EB
Signing time: Sun 07 Sep 2025 12:00:57 +0000
Manifest this update: Sun 07 Sep 2025 12:00:57 +0000
Manifest next update: Mon 08 Sep 2025 12:00:57 +0000
Files and hashes: 1: DhYlOELQmejsuqE0q-lFm-NVMP0.roa (hash: mf0P0l64vNrzlnAnRIlTkqO53r1pyoZwPlURmjISdFU=)
2: S0h9COCL9yDPAz3dul4Z5VK_88Q.roa (hash: xAF8HzsYzOEotQ+1gvdFYGccAU/IelrIejunqeu7D98=)
3: wPQvc_8rzEiFsSAL0C7n4p9gjis.crl (hash: jUcOKPEwo0lT/QQTCXc/xC/V/g/S/4O9Rmy1klVIOl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:05:24:a8:2f:79:62:92:7b:c6:f1:d6:44:40:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Validity
Not Before: Sep 7 12:00:57 2025 GMT
Not After : Sep 8 12:00:57 2025 GMT
Subject: CN=71d0226d78a9f4071728b69798c41cf502f3a7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:db:74:e9:d4:f8:d6:7b:44:5d:23:4b:c3:
65:e3:76:cb:d3:e5:8a:4a:56:d3:16:6d:5a:05:84:
ee:f8:c2:9e:0a:38:0d:16:0c:31:8e:f7:5e:ed:90:
a3:b8:dc:34:aa:26:49:89:3c:20:97:f4:f3:92:22:
72:8e:4d:99:04:ea:03:7b:cd:87:ea:7a:fb:91:70:
a2:e7:3d:2e:13:1b:e4:27:47:ab:d1:5f:e9:69:2f:
dd:01:75:bc:20:de:da:3f:58:91:09:60:d7:dd:e5:
95:ed:41:eb:f4:33:29:15:d0:ba:65:42:05:93:a4:
31:04:f3:59:1b:cf:f9:ea:31:59:ac:e0:88:75:45:
7a:45:1a:7d:8d:66:28:9f:50:a9:59:6a:c9:26:20:
a9:96:78:aa:c2:49:8f:23:75:aa:76:85:71:ca:c0:
5a:d0:cd:ef:5b:e0:c7:98:14:50:35:a7:fb:21:a3:
de:01:56:5f:87:cb:07:4d:9d:4a:a0:4f:b6:7e:e4:
e6:d6:7b:6c:55:5b:70:db:32:ae:a7:b9:1c:33:61:
54:f0:53:01:08:f7:70:be:9f:f0:5d:a9:f0:76:ab:
7f:b8:74:a4:2d:73:94:c3:e1:b3:05:32:35:78:06:
b2:8c:3e:cd:89:ff:5e:68:fb:da:5f:91:64:9c:45:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D0:22:6D:78:A9:F4:07:17:28:B6:97:98:C4:1C:F5:02:F3:A7:A4
X509v3 Authority Key Identifier:
keyid:C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:71:a9:11:86:7c:ba:72:50:23:bd:2b:54:88:dc:0d:cb:e7:
68:b8:4c:62:2c:82:b2:2c:ad:4c:ae:64:33:98:7c:9f:3c:d2:
cf:e8:f3:12:97:d8:0c:15:77:fd:f8:36:1a:3f:24:e7:d3:aa:
8f:0f:c0:33:9b:81:69:9c:0a:c3:be:ff:ff:f4:d2:53:59:73:
b0:7e:f0:d1:08:4d:cb:20:99:98:1d:84:12:64:04:26:26:a6:
3c:81:08:8a:99:79:5c:c6:46:9a:8e:6a:71:27:bd:6c:36:49:
c7:06:e4:47:bb:7a:bf:54:ee:f9:7e:eb:2f:3f:b3:68:52:72:
db:8e:89:9c:10:79:31:1d:18:be:a9:8f:91:a6:3b:78:8d:9f:
4b:e1:0a:b2:9f:00:bc:20:a8:35:ee:f4:46:62:d3:2b:5e:84:
bb:0c:5c:1c:ee:9a:1d:d9:96:d7:0c:dd:e1:a1:f4:14:ba:0d:
16:01:34:54:26:be:f6:8d:9c:32:ab:5f:30:ae:1d:26:d4:16:
c0:88:f3:0f:3e:99:f1:90:ab:27:74:ec:31:ea:3b:a3:56:b7:
fb:d7:c4:9d:ef:73:97:dc:39:d7:fa:bb:39:94:ce:b7:e1:6b:
c9:85:e9:da:b2:f2:17:95:71:c8:67:53:5f:c0:fe:f2:c0:aa:
8d:14:d0:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDQUkqC95YpJ7xvHWRECKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjQyZjczZmYyYmNjNDg4NWIxMjAwYmQwMmVlN2UyOWY2
MDhlMmIwHhcNMjUwOTA3MTIwMDU3WhcNMjUwOTA4MTIwMDU3WjAzMTEwLwYDVQQD
Eyg3MWQwMjI2ZDc4YTlmNDA3MTcyOGI2OTc5OGM0MWNmNTAyZjNhN2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYHbdOnU+NZ7RF0jS8Nl43bL0+WK
SlbTFm1aBYTu+MKeCjgNFgwxjvde7ZCjuNw0qiZJiTwgl/TzkiJyjk2ZBOoDe82H
6nr7kXCi5z0uExvkJ0er0V/paS/dAXW8IN7aP1iRCWDX3eWV7UHr9DMpFdC6ZUIF
k6QxBPNZG8/56jFZrOCIdUV6RRp9jWYon1CpWWrJJiCplniqwkmPI3WqdoVxysBa
0M3vW+DHmBRQNaf7IaPeAVZfh8sHTZ1KoE+2fuTm1ntsVVtw2zKup7kcM2FU8FMB
CPdwvp/wXanwdqt/uHSkLXOUw+GzBTI1eAayjD7Nif9eaPvaX5FknEUK9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHQIm14qfQHFyi2l5jEHPUC86ekMB8GA1UdIwQY
MBaAFMD0L3P/K8xIhbEgC9Au5+KfYI4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDct
N2RkNTdlNzM2NzQ2LzEvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDctN2RkNTdlNzM2NzQ2
LzEvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnGpEYZ8
unJQI70rVIjcDcvnaLhMYiyCsiytTK5kM5h8nzzSz+jzEpfYDBV3/fg2Gj8k59Oq
jw/AM5uBaZwKw77///TSU1lzsH7w0QhNyyCZmB2EEmQEJiamPIEIipl5XMZGmo5q
cSe9bDZJxwbkR7t6v1Tu+X7rLz+zaFJy246JnBB5MR0YvqmPkaY7eI2fS+EKsp8A
vCCoNe70RmLTK16EuwxcHO6aHdmW1wzd4aH0FLoNFgE0VCa+9o2cMqtfMK4dJtQW
wIjzDz6Z8ZCrJ3TsMeo7o1a3+9fEne9zl9w51/q7OZTOt+FryYXp2rLyF5VxyGdT
X8D+8sCqjRTQXA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:03 2025 by rpki-client