Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
File: wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft (raw, json)
Hash identifier: y5b4tFXJU6eGrtpF8jTU4KiBq+YCg1K/3xuHZTfxI1M=
Subject key identifier: 2F:DB:6E:DA:DE:F4:0C:BF:5D:E5:F1:94:10:A3:E8:C5:C5:A3:5C:69
Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
Certificate issuer: /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Certificate serial: 0199225539E9AEC3E033CD2E6D2DDEC70578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 04:00:34 +0000
Manifest this update: Sun 07 Sep 2025 04:00:34 +0000
Manifest next update: Mon 08 Sep 2025 04:00:34 +0000
Files and hashes: 1: hFaskM76WmkGz-mPiPTUpMiqZxk.roa (hash: luq1omNBXihu/qimESEN6qhU6P0bWFQ94OAUTpScUXc=)
2: wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl (hash: i74tz0CHXDVU2ygGe93RNFNLX8bw1KBIYtc9xrVKywo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:39:e9:ae:c3:e0:33:cd:2e:6d:2d:de:c7:05:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Validity
Not Before: Sep 7 04:00:34 2025 GMT
Not After : Sep 8 04:00:34 2025 GMT
Subject: CN=2fdb6edadef40cbf5de5f19410a3e8c5c5a35c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:4c:f7:8d:95:87:48:b8:30:1b:89:dc:54:
fc:87:29:99:eb:05:d3:1a:77:0d:4d:d1:81:cb:cd:
a4:c2:1b:7b:ef:bd:44:14:e6:2e:ad:6a:38:2c:e9:
02:77:6b:b3:20:1b:bb:8b:0e:2c:bb:0a:80:ea:30:
c0:bf:ed:0b:22:0b:54:eb:3e:a3:48:80:d6:c3:c7:
d7:ab:fd:3e:8e:ca:c5:e9:81:4d:86:8e:96:c0:0a:
67:7d:26:ec:d4:fa:bc:3d:b0:ac:04:df:ac:16:3d:
d2:d9:8c:83:ff:cc:c2:18:9f:89:78:ad:6f:08:a8:
a1:d1:01:28:34:ef:33:77:42:9c:38:c7:4f:15:3e:
bc:c8:18:49:87:82:0a:70:8d:10:e2:69:37:49:5f:
1d:b7:35:2e:89:10:fa:17:7c:a0:f6:d8:9f:0b:3c:
0e:55:34:98:2c:70:55:9a:ec:28:4d:09:1a:c3:71:
57:11:47:e6:04:d7:f9:5b:5b:dc:87:32:aa:67:69:
34:ec:ef:fb:64:e0:39:7f:e8:d6:1c:b4:03:43:0a:
da:29:76:6e:cd:79:68:67:82:54:49:9a:41:be:08:
35:64:55:c7:44:1f:77:df:87:75:eb:09:f9:35:bd:
a9:3f:42:a8:12:f8:61:81:57:c6:77:d1:ad:c0:a5:
3a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DB:6E:DA:DE:F4:0C:BF:5D:E5:F1:94:10:A3:E8:C5:C5:A3:5C:69
X509v3 Authority Key Identifier:
keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:90:bd:9c:7b:0e:c4:40:11:30:67:5c:ce:af:85:b6:30:99:
84:81:f9:1c:e3:0a:96:95:ea:8e:72:bc:85:d5:7c:9c:e1:e5:
2f:bd:d2:ce:5f:de:1e:6d:74:06:46:a4:11:9a:50:58:a5:4c:
90:2a:a9:2c:92:10:9f:b5:df:a0:a7:4a:9b:e5:a6:10:0a:53:
8f:66:72:7f:0f:9f:f8:23:ad:b2:b5:ff:6e:c6:7d:54:bb:f7:
91:52:f4:d9:ee:66:ba:fa:4f:e0:50:78:bf:6e:3a:c1:a2:4c:
28:92:d7:0f:27:66:7e:d9:1d:70:9a:eb:3b:c0:10:70:9e:dd:
86:93:4a:00:2c:ca:b9:d0:23:96:0c:cb:f8:76:ac:75:9c:16:
cf:25:d3:11:b8:dd:d7:a5:6d:f2:77:16:0e:09:42:57:8e:a5:
60:e5:3d:8e:34:31:c0:7b:b9:5a:72:4c:85:fa:e4:d0:ea:af:
f3:72:ee:50:f3:83:7a:eb:06:f4:90:1e:c9:8b:11:9a:da:ae:
03:13:14:8f:3c:2b:b8:3b:cf:4c:ff:5c:11:a4:e9:33:7d:0f:
e4:43:8a:07:3a:31:7f:44:ee:7e:46:73:36:6a:b9:89:f8:e4:
d5:10:03:d4:22:79:65:5c:e3:10:5a:b4:7a:d9:43:cd:23:53:
f8:c2:94:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVTnprsPgM80ubS3exwV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMmExNmIyMDdlM2I2ZjZmNzJkM2QwYWQ1ZmNlYmE4ZWEx
MDM2MzYwHhcNMjUwOTA3MDQwMDM0WhcNMjUwOTA4MDQwMDM0WjAzMTEwLwYDVQQD
EygyZmRiNmVkYWRlZjQwY2JmNWRlNWYxOTQxMGEzZThjNWM1YTM1YzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw1M942Vh0i4MBuJ3FT8hymZ6wXT
GncNTdGBy82kwht7771EFOYurWo4LOkCd2uzIBu7iw4suwqA6jDAv+0LIgtU6z6j
SIDWw8fXq/0+jsrF6YFNho6WwApnfSbs1Pq8PbCsBN+sFj3S2YyD/8zCGJ+JeK1v
CKih0QEoNO8zd0KcOMdPFT68yBhJh4IKcI0Q4mk3SV8dtzUuiRD6F3yg9tifCzwO
VTSYLHBVmuwoTQkaw3FXEUfmBNf5W1vchzKqZ2k07O/7ZOA5f+jWHLQDQwraKXZu
zXloZ4JUSZpBvgg1ZFXHRB9334d16wn5Nb2pP0KoEvhhgVfGd9GtwKU6GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/bbtre9Ay/XeXxlBCj6MXFo1xpMB8GA1UdIwQY
MBaAFMMqFrIH47b29y09CtX866jqEDY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3lvV3NnZmp0dmIzTFQwSzFmenJxT29RTmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTY5NGItYzYxYi00MWIyLTkzY2Ut
NGRjMmY3OTNjM2NkLzEvd3lvV3NnZmp0dmIzTFQwSzFmenJxT29RTmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YTY5NGItYzYxYi00MWIyLTkzY2UtNGRjMmY3OTNjM2Nk
LzEvd3lvV3NnZmp0dmIzTFQwSzFmenJxT29RTmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5C9nHsO
xEARMGdczq+FtjCZhIH5HOMKlpXqjnK8hdV8nOHlL73Szl/eHm10BkakEZpQWKVM
kCqpLJIQn7XfoKdKm+WmEApTj2Zyfw+f+COtsrX/bsZ9VLv3kVL02e5muvpP4FB4
v246waJMKJLXDydmftkdcJrrO8AQcJ7dhpNKACzKudAjlgzL+HasdZwWzyXTEbjd
16Vt8ncWDglCV46lYOU9jjQxwHu5WnJMhfrk0Oqv83LuUPODeusG9JAeyYsRmtqu
AxMUjzwruDvPTP9cEaTpM30P5EOKBzoxf0TufkZzNmq5ifjk1RAD1CJ5ZVzjEFq0
etlDzSNT+MKU/Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:34 2025 by rpki-client