Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
File: w7iL5VE_Guckk1Ivpml-_zNpKuA.mft (raw, json)
Hash identifier: 9ys01NXL53xg3/gf7aGOWnl68Yiw+U4vg0/jv8hcmG0=
Subject key identifier: 8D:42:05:6A:EC:75:BC:8B:F6:16:B8:C9:D5:F7:66:9C:5B:45:CF:DA
Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
Certificate issuer: /CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Certificate serial: 0199244392BF9ACA934EF5C6696CEC7C5521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
Manifest number: 0914
Signing time: Sun 07 Sep 2025 13:00:32 +0000
Manifest this update: Sun 07 Sep 2025 13:00:32 +0000
Manifest next update: Mon 08 Sep 2025 13:00:32 +0000
Files and hashes: 1: NrQlovA-ENvWm52W_XszKtgFuEM.roa (hash: CEb3/pIl0j5Q+iEy5jGadkT0Uot6DJeWgORkKHAYYJw=)
2: w7iL5VE_Guckk1Ivpml-_zNpKuA.crl (hash: /+mxPRw5KloIYfzcEEeo6SeK2qB7/9atW9MkVBFmCSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:92:bf:9a:ca:93:4e:f5:c6:69:6c:ec:7c:55:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Validity
Not Before: Sep 7 13:00:32 2025 GMT
Not After : Sep 8 13:00:32 2025 GMT
Subject: CN=8d42056aec75bc8bf616b8c9d5f7669c5b45cfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:e0:6b:3f:7b:74:c0:94:c3:ae:92:96:0c:
0f:6d:ae:96:be:f5:f9:2c:d7:03:77:f4:8b:db:14:
ed:3a:dd:ce:cf:c0:67:58:62:44:3b:fc:41:78:1a:
dc:02:1d:b8:8d:a3:bb:bf:76:56:94:8f:96:2a:d6:
09:10:b2:ce:cd:55:d0:c3:87:65:a2:10:74:00:47:
b2:bc:a2:ba:8e:54:4d:73:fe:db:f3:5e:97:bd:2b:
5a:be:f0:f7:7f:41:31:9d:c3:60:bc:3a:a9:36:f3:
bf:cf:38:0d:ce:bf:3c:5e:f0:ae:0d:46:04:5a:5c:
79:d0:c2:94:58:1a:06:87:ec:31:e3:dd:65:b2:02:
3b:85:89:34:a1:d0:25:2f:2c:c1:ca:70:a9:bb:25:
a3:f9:73:c6:ee:28:fc:d8:49:92:fc:b8:01:6f:21:
28:7b:10:1c:a8:7f:60:5c:a5:fb:9d:2b:b6:ef:d6:
68:02:2a:2b:8f:45:5f:12:57:1d:8c:25:21:e6:a3:
d0:bc:e7:57:3d:c9:01:39:21:32:2a:b8:e9:bd:17:
eb:63:83:52:f3:91:2c:aa:a7:dc:80:18:56:25:bf:
af:a8:7c:dd:60:72:6b:c8:f8:e6:41:ce:99:70:e3:
2c:b5:a6:cb:41:91:64:63:44:0b:28:42:39:a8:da:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:42:05:6A:EC:75:BC:8B:F6:16:B8:C9:D5:F7:66:9C:5B:45:CF:DA
X509v3 Authority Key Identifier:
keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fc:84:51:01:ea:e3:cd:37:fb:74:af:de:de:c4:40:f2:69:
8c:4e:66:a2:3c:3e:77:84:74:40:8b:a9:e6:ad:ff:c5:44:8b:
af:8f:a6:b3:8a:5f:8f:ea:e2:37:fe:74:0f:01:6f:2f:88:24:
ec:84:be:5e:0b:ed:3a:ca:d1:02:74:34:a5:2b:22:05:51:bc:
04:2f:c7:66:62:ec:02:8b:99:a3:f5:12:94:7f:43:b5:ce:3c:
da:e3:6a:a5:ee:f0:d1:e3:9d:6a:69:9b:81:7e:c7:28:0b:9a:
7a:d4:8e:88:07:3e:07:3a:35:f1:be:ac:20:83:4a:81:31:c9:
0a:90:c7:77:4d:42:34:94:2f:93:4d:f4:6b:c1:89:a3:51:c3:
b2:fa:35:21:c9:cf:65:5b:71:02:d2:81:38:41:b9:5a:c6:68:
c8:cb:41:f0:a5:90:bc:aa:a8:73:fd:52:50:b0:97:fd:f6:9f:
87:48:36:d0:5d:45:0c:79:13:a5:db:d9:e5:cc:15:2f:3c:b1:
7f:da:ff:fb:cc:ce:ee:d7:5c:83:c3:84:60:97:04:81:b1:49:
f6:2e:b6:3b:b6:2f:ad:84:eb:28:ff:2d:73:cf:6b:ef:ce:3b:
22:1a:ec:01:81:11:c5:ac:64:a7:20:92:52:76:94:c0:53:7d:
64:38:8f:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkQ5K/msqTTvXGaWzsfFUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjg4YmU1NTEzZjFhZTcyNDkzNTIyZmE2Njk3ZWZmMzM2
OTJhZTAwHhcNMjUwOTA3MTMwMDMyWhcNMjUwOTA4MTMwMDMyWjAzMTEwLwYDVQQD
Eyg4ZDQyMDU2YWVjNzViYzhiZjYxNmI4YzlkNWY3NjY5YzViNDVjZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Hvgaz97dMCUw66SlgwPba6WvvX5
LNcDd/SL2xTtOt3Oz8BnWGJEO/xBeBrcAh24jaO7v3ZWlI+WKtYJELLOzVXQw4dl
ohB0AEeyvKK6jlRNc/7b816XvStavvD3f0ExncNgvDqpNvO/zzgNzr88XvCuDUYE
Wlx50MKUWBoGh+wx491lsgI7hYk0odAlLyzBynCpuyWj+XPG7ij82EmS/LgBbyEo
exAcqH9gXKX7nSu279ZoAiorj0VfElcdjCUh5qPQvOdXPckBOSEyKrjpvRfrY4NS
85EsqqfcgBhWJb+vqHzdYHJryPjmQc6ZcOMstabLQZFkY0QLKEI5qNootwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1CBWrsdbyL9ha4ydX3ZpxbRc/aMB8GA1UdIwQY
MBaAFMO4i+VRPxrnJJNSL6Zpfv8zaSrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgt
MGU0N2VkZTMwNWIzLzEvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgtMGU0N2VkZTMwNWIz
LzEvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/yEUQHq
4803+3Sv3t7EQPJpjE5mojw+d4R0QIup5q3/xUSLr4+ms4pfj+riN/50DwFvL4gk
7IS+XgvtOsrRAnQ0pSsiBVG8BC/HZmLsAouZo/USlH9Dtc482uNqpe7w0eOdammb
gX7HKAuaetSOiAc+Bzo18b6sIINKgTHJCpDHd01CNJQvk030a8GJo1HDsvo1IcnP
ZVtxAtKBOEG5WsZoyMtB8KWQvKqoc/1SULCX/fafh0g20F1FDHkTpdvZ5cwVLzyx
f9r/+8zO7tdcg8OEYJcEgbFJ9i62O7YvrYTrKP8tc89r7847IhrsAYERxaxkpyCS
UnaUwFN9ZDiPlA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:50 2025 by rpki-client