Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: h4zXqU9lTiJwcOqF3y1jy8o8dFhm2sLr+ajW4HOYXUE=
Subject key identifier: 5B:77:85:53:0C:3A:11:B4:CB:87:E9:82:28:EE:A1:EF:28:5D:13:61
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 019923314B003FE2E91CCF1D325D4C9BFAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 08:00:56 +0000
Manifest this update: Sun 07 Sep 2025 08:00:56 +0000
Manifest next update: Mon 08 Sep 2025 08:00:56 +0000
Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: E+L6wvS7UdRM41ycpqAA8tytc/QrEeFKVw2SdahGDUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:4b:00:3f:e2:e9:1c:cf:1d:32:5d:4c:9b:fa:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Sep 7 08:00:56 2025 GMT
Not After : Sep 8 08:00:56 2025 GMT
Subject: CN=5b7785530c3a11b4cb87e98228eea1ef285d1361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:52:9d:e6:65:f0:bc:ba:a6:4d:6e:87:59:
98:17:e5:0f:5a:b7:ab:0c:68:6e:c2:f6:5e:44:f2:
c4:d5:54:c9:14:a7:c2:af:19:a1:ce:94:5a:25:0d:
6e:e0:9e:c0:4d:99:5c:cf:2d:26:f6:6b:be:98:8e:
62:d9:3f:f8:09:5d:d8:0a:47:df:fe:93:07:7a:51:
e3:27:21:04:45:23:a7:d4:91:c5:ef:cb:ff:52:f3:
1c:44:c0:2b:e6:75:ac:29:43:ab:74:eb:4f:fa:09:
5a:2e:26:7e:af:d5:58:a0:4a:3c:16:ed:c0:ac:28:
f2:89:1f:ac:7f:89:70:ef:a0:4a:75:bf:cd:32:56:
6f:84:fe:ef:f5:c9:e4:e0:bf:fb:0d:b8:77:d1:44:
4a:58:eb:86:0a:24:3c:22:3b:60:45:65:89:8c:20:
36:6f:b6:a3:17:16:34:08:63:d6:d0:d8:ef:10:55:
32:7a:a7:25:ab:d3:cb:e8:9d:bb:32:34:dd:09:77:
4f:b7:7c:ab:32:78:e0:c2:99:17:2a:d3:b4:2e:3d:
32:03:1e:c9:90:cb:fb:9d:31:46:7e:3d:5e:f4:3b:
2a:a7:b7:97:a1:cf:c9:c1:d3:b7:58:81:ee:25:7c:
a2:b8:00:48:e5:3d:16:bd:ee:bd:ff:47:10:4a:88:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:77:85:53:0C:3A:11:B4:CB:87:E9:82:28:EE:A1:EF:28:5D:13:61
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:05:50:b4:15:7c:45:df:6d:e1:ab:d1:40:f9:12:20:82:1a:
01:dd:b9:4d:29:bf:fa:c9:f5:60:b9:84:5e:f4:33:0f:a4:72:
1b:88:3d:19:04:96:a5:2c:67:f4:4a:ad:88:db:97:44:f3:53:
d9:e6:66:23:66:da:7c:81:87:d9:a6:d8:28:bd:57:30:ef:b1:
4f:e6:81:d0:db:a5:6e:4a:8b:f8:0c:a8:f1:32:7a:0b:7d:a3:
ee:9a:56:fc:4b:e7:6d:a6:38:6c:70:e7:a7:57:2a:56:56:2e:
38:28:27:5a:2b:38:f6:22:e4:f1:37:61:79:d1:b2:56:23:26:
1b:57:da:a6:65:38:a0:a1:0d:ec:39:6a:1e:dd:a3:87:ee:61:
aa:35:a0:ba:0a:78:62:c2:b1:63:91:ec:46:13:36:fd:25:c4:
ea:c3:72:e5:4e:50:e9:11:86:1d:cd:fe:f6:6d:b9:cb:1e:39:
59:4a:1c:6c:ed:3e:32:9c:e1:bf:30:cd:dc:72:04:67:92:69:
2b:f1:80:0d:55:a9:51:55:91:6e:45:d1:ff:43:bd:d3:dc:be:
56:7d:42:a2:de:73:b5:6f:24:95:06:0f:b8:5c:01:13:8c:42:
fc:5b:90:80:bc:1c:91:2e:f0:09:91:e7:17:7d:d6:7b:bd:fb:
a2:24:41:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMUsAP+LpHM8dMl1Mm/rxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZTNmYTg3ZWIzMTY5YTdkMmRkNzQ0NTMyODMwMjFhMjcw
M2M3NjkwHhcNMjUwOTA3MDgwMDU2WhcNMjUwOTA4MDgwMDU2WjAzMTEwLwYDVQQD
Eyg1Yjc3ODU1MzBjM2ExMWI0Y2I4N2U5ODIyOGVlYTFlZjI4NWQxMzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUhSneZl8Ly6pk1uh1mYF+UPWrer
DGhuwvZeRPLE1VTJFKfCrxmhzpRaJQ1u4J7ATZlczy0m9mu+mI5i2T/4CV3YCkff
/pMHelHjJyEERSOn1JHF78v/UvMcRMAr5nWsKUOrdOtP+glaLiZ+r9VYoEo8Fu3A
rCjyiR+sf4lw76BKdb/NMlZvhP7v9cnk4L/7Dbh30URKWOuGCiQ8IjtgRWWJjCA2
b7ajFxY0CGPW0NjvEFUyeqclq9PL6J27MjTdCXdPt3yrMnjgwpkXKtO0Lj0yAx7J
kMv7nTFGfj1e9Dsqp7eXoc/JwdO3WIHuJXyiuABI5T0Wve69/0cQSojFTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFt3hVMMOhG0y4fpgijuoe8oXRNhMB8GA1UdIwQY
MBaAFMLj+ofrMWmn0t10RTKDAhonA8dpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYt
ZGZlNTY2NDExMDE2LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYtZGZlNTY2NDExMDE2
LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQVQtBV8
Rd9t4avRQPkSIIIaAd25TSm/+sn1YLmEXvQzD6RyG4g9GQSWpSxn9EqtiNuXRPNT
2eZmI2bafIGH2abYKL1XMO+xT+aB0NulbkqL+Ayo8TJ6C32j7ppW/EvnbaY4bHDn
p1cqVlYuOCgnWis49iLk8TdhedGyViMmG1fapmU4oKEN7DlqHt2jh+5hqjWgugp4
YsKxY5HsRhM2/SXE6sNy5U5Q6RGGHc3+9m25yx45WUocbO0+MpzhvzDN3HIEZ5Jp
K/GADVWpUVWRbkXR/0O909y+Vn1Cot5ztW8klQYPuFwBE4xC/FuQgLwckS7wCZHn
F33We737oiRBNQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:43:32 2025 by rpki-client