Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
File: WdWQ4swUythErvFa1fLUZ96KN_4.mft (raw, json)
Hash identifier: LYYXVGEQNW0a1C5si+D2GK88LUDKY7CnYa7fXNr2b5I=
Subject key identifier: 57:C0:5D:45:6C:EA:AF:F5:37:FD:64:84:F7:77:5A:62:96:A9:39:87
Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Certificate issuer: /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Certificate serial: 0198ECB090057A166E52960E932154845153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
Manifest number: 1656
Signing time: Wed 27 Aug 2025 18:00:50 +0000
Manifest this update: Wed 27 Aug 2025 18:00:50 +0000
Manifest next update: Thu 28 Aug 2025 18:00:50 +0000
Files and hashes: 1: JH4Pw6k9bW-EXpipE2GyaPmXdT0.roa (hash: nYPTNfn16VpyVNgK62YL/AjqeUMOonTZwALbyhAMma0=)
2: WdWQ4swUythErvFa1fLUZ96KN_4.crl (hash: uxsGnuH9CEHi09A4BU8F4bk1uehtVh7ecT8vwY7chVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Aug 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ec:b0:90:05:7a:16:6e:52:96:0e:93:21:54:84:51:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Validity
Not Before: Aug 27 18:00:50 2025 GMT
Not After : Aug 28 18:00:50 2025 GMT
Subject: CN=57c05d456ceaaff537fd6484f7775a6296a93987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:35:8e:e3:57:5b:01:b8:bd:da:3a:32:3b:
d8:54:1f:d2:a8:ad:21:14:b1:11:d7:8e:5e:6d:51:
28:7f:43:3e:fb:e3:56:e4:aa:4d:65:7c:fc:19:42:
17:26:33:e3:72:8e:ba:d7:ae:c3:2f:9c:89:c4:d6:
b1:e4:53:3b:25:9a:2e:11:0f:e2:7e:68:af:98:e4:
3e:3f:ca:ee:15:4e:6f:1b:60:5e:06:1c:09:a4:fb:
93:36:02:da:59:14:09:b4:53:fe:04:1f:94:91:51:
e7:17:a9:ff:1b:27:18:47:e1:ca:2e:9d:eb:01:6e:
69:56:3e:1f:66:53:3d:ec:fa:13:6a:0c:98:b5:00:
df:8e:05:76:90:3e:9d:c5:2c:03:fd:12:e6:54:bf:
8e:26:78:9f:02:ca:1e:12:5b:ae:f1:4e:00:0d:93:
1b:86:4a:98:fa:75:e3:2b:f9:31:fc:9b:d6:f8:21:
5d:a6:5d:f0:3b:f8:13:fe:36:16:49:c1:6e:52:fc:
90:52:8e:11:68:9e:86:b0:b1:a2:4e:2c:03:90:2e:
b2:40:c3:6d:1a:77:39:e3:12:0e:7a:9d:8e:dc:4b:
04:68:df:c3:35:ed:81:91:0e:d2:69:34:8d:bc:a3:
43:0b:d3:e1:92:72:74:0a:fb:92:b8:86:a8:7c:5d:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C0:5D:45:6C:EA:AF:F5:37:FD:64:84:F7:77:5A:62:96:A9:39:87
X509v3 Authority Key Identifier:
keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d4:de:97:bd:7d:3b:fb:d0:f1:94:74:02:e6:76:a2:ac:78:
af:3a:c9:fa:f7:8d:32:67:a6:13:f4:68:61:79:71:d8:7b:14:
8c:f8:fd:cc:58:f2:28:ea:e9:fc:9d:c4:e6:fa:63:37:49:23:
51:fb:50:8f:52:8f:d7:40:b3:1c:35:b8:76:5a:ab:34:e7:07:
80:b2:29:c9:31:0c:8e:af:70:f8:2f:08:76:a0:0f:03:b3:27:
6e:ac:2f:df:f9:86:1d:fc:6f:05:49:72:6b:fa:45:47:df:15:
71:40:c5:f2:cd:e3:b3:00:4a:32:f3:5a:96:21:9c:e5:4c:34:
0f:5b:de:c4:a9:bf:90:39:d7:31:fc:32:43:08:2d:93:a1:94:
c7:7a:ce:dd:be:3e:17:ee:25:11:3e:f8:47:94:62:32:aa:ec:
45:df:ca:dd:19:bd:77:39:fe:c3:a7:8e:8f:3c:ba:31:09:ba:
15:98:43:52:5d:07:13:b8:72:15:67:e4:77:9e:61:e0:e4:1f:
ea:3e:8f:c5:08:3e:87:b2:66:00:74:26:ff:1e:31:a0:4a:cf:
7e:4d:59:46:46:4d:c5:56:fb:d2:d4:7d:b1:6e:9a:20:02:67:
f9:27:c6:56:ea:30:c3:10:96:20:23:0d:94:3f:bc:0d:92:33:
1a:a0:0a:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjssJAFehZuUpYOkyFUhFFTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZDU5MGUyY2MxNGNhZDg0NGFlZjE1YWQ1ZjJkNDY3ZGU4
YTM3ZmUwHhcNMjUwODI3MTgwMDUwWhcNMjUwODI4MTgwMDUwWjAzMTEwLwYDVQQD
Eyg1N2MwNWQ0NTZjZWFhZmY1MzdmZDY0ODRmNzc3NWE2Mjk2YTkzOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDA1juNXWwG4vdo6MjvYVB/SqK0h
FLER145ebVEof0M+++NW5KpNZXz8GUIXJjPjco66167DL5yJxNax5FM7JZouEQ/i
fmivmOQ+P8ruFU5vG2BeBhwJpPuTNgLaWRQJtFP+BB+UkVHnF6n/GycYR+HKLp3r
AW5pVj4fZlM97PoTagyYtQDfjgV2kD6dxSwD/RLmVL+OJnifAsoeEluu8U4ADZMb
hkqY+nXjK/kx/JvW+CFdpl3wO/gT/jYWScFuUvyQUo4RaJ6GsLGiTiwDkC6yQMNt
Gnc54xIOep2O3EsEaN/DNe2BkQ7SaTSNvKNDC9PhknJ0CvuSuIaofF3OdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfAXUVs6q/1N/1khPd3WmKWqTmHMB8GA1UdIwQY
MBaAFFnVkOLMFMrYRK7xWtXy1Gfeijf+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yZmE3MDctZGFkNi00Zjk1LWI1ZGUt
ZmM5OWQzM2QzMzQ0LzEvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yZmE3MDctZGFkNi00Zjk1LWI1ZGUtZmM5OWQzM2QzMzQ0
LzEvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdTel719
O/vQ8ZR0AuZ2oqx4rzrJ+veNMmemE/RoYXlx2HsUjPj9zFjyKOrp/J3E5vpjN0kj
UftQj1KP10CzHDW4dlqrNOcHgLIpyTEMjq9w+C8IdqAPA7Mnbqwv3/mGHfxvBUly
a/pFR98VcUDF8s3jswBKMvNaliGc5Uw0D1vexKm/kDnXMfwyQwgtk6GUx3rO3b4+
F+4lET74R5RiMqrsRd/K3Rm9dzn+w6eOjzy6MQm6FZhDUl0HE7hyFWfkd55h4OQf
6j6PxQg+h7JmAHQm/x4xoErPfk1ZRkZNxVb70tR9sW6aIAJn+SfGVuowwxCWICMN
lD+8DZIzGqAKIw==
-----END CERTIFICATE-----
Generated at Thu Aug 28 00:47:23 2025 by rpki-client