Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
File: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft (raw, json)
Hash identifier: erC36sk545nmfgPAbBe/5R+Nx/1AZ+gtcux+DrCXv3Y=
Subject key identifier: D7:44:90:DD:78:35:82:F7:5D:69:4C:7E:F5:23:3A:05:8B:EA:FE:CA
Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
Certificate issuer: /CN=c115b327e84761685022f47328d6f4cbd6d3041e
Certificate serial: 019930113CE0B165C28E220A647AC59CB95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
Manifest number: 1434
Signing time: Tue 09 Sep 2025 20:01:00 +0000
Manifest this update: Tue 09 Sep 2025 20:01:00 +0000
Manifest next update: Wed 10 Sep 2025 20:01:00 +0000
Files and hashes: 1: IIaW89ZzFdGKWt-qkretRuZFhUw.roa (hash: +wV4CyXS7FosexYu6VMQZY2Kh9jsLDP8nTTtEBowsxI=)
2: hKI1gIRkFSpeDRxr6Gy5U-0E8bg.roa (hash: wtwNxYOC1NaLQTBIVmgD52Go7NqEorx1g4IWXnECaeA=)
3: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl (hash: oAc/ho4YCGhSB+6bRYAI5toK+B9+5y5PhjdzC77pChs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:11:3c:e0:b1:65:c2:8e:22:0a:64:7a:c5:9c:b9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e
Validity
Not Before: Sep 9 20:01:00 2025 GMT
Not After : Sep 10 20:01:00 2025 GMT
Subject: CN=d74490dd783582f75d694c7ef5233a058beafeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:71:bb:f7:6c:8c:d4:64:b8:b3:63:96:3a:
ef:7d:f8:de:3a:cd:ec:99:90:ba:62:c6:14:66:4a:
b6:20:c2:16:04:f4:13:a8:d1:ce:db:8f:36:61:f9:
33:3f:f4:33:9d:d8:e7:e5:eb:44:47:cc:3d:54:5b:
af:85:fe:43:bf:f4:6b:29:83:1c:f4:7c:9d:c4:4b:
55:fe:72:f7:bf:17:fe:15:3f:05:64:92:3b:c0:a9:
51:6b:3c:48:6d:a9:c1:a9:3d:74:99:87:e9:0e:af:
e6:12:0e:3c:b8:f5:ff:79:08:61:ee:c2:d2:6a:0e:
cd:ef:73:25:31:b9:d2:24:7c:0f:aa:7e:e2:d1:22:
00:33:1d:a6:5a:23:ba:3d:06:ba:a1:fa:00:d2:84:
d8:3b:49:de:64:48:bf:40:7c:ed:aa:ac:70:8c:6a:
14:71:2c:f1:46:6f:5b:c5:46:16:24:58:00:64:15:
fb:e5:9d:e7:cc:4a:80:a6:b6:f3:40:40:41:b6:df:
10:51:8e:cc:87:f9:fa:f4:39:19:89:71:63:66:2a:
c0:43:04:96:2f:84:1d:87:bd:2d:1b:dd:36:4b:cc:
e3:d5:29:10:58:c1:56:26:58:a2:32:44:23:62:a2:
e7:b6:f9:cd:18:7e:5f:d3:50:0f:c1:63:34:80:5f:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:44:90:DD:78:35:82:F7:5D:69:4C:7E:F5:23:3A:05:8B:EA:FE:CA
X509v3 Authority Key Identifier:
keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:36:18:09:3d:e6:35:45:b4:8d:4a:0d:1a:b1:2b:ab:12:9f:
38:a1:fb:c1:11:9d:e5:c0:df:dc:aa:2c:6e:bd:d8:34:cb:6b:
6f:b8:c1:e2:e5:cf:47:0e:f0:03:0b:65:00:0e:dd:d4:7e:bd:
9e:4d:50:da:ef:6e:a8:77:02:99:3b:e9:4f:7d:2d:83:a2:6c:
26:02:eb:b6:50:c3:f5:15:f4:06:59:2f:ec:d8:54:36:d4:e2:
19:10:9b:1e:4c:04:96:4c:49:ce:ec:8a:64:4d:95:ec:24:db:
c3:b4:0f:44:5b:20:f9:8c:d8:2d:41:ce:63:73:ec:1d:38:2a:
90:44:14:49:1d:c6:96:5c:2c:b8:fd:81:00:7e:ba:11:b1:62:
9c:61:51:a7:1c:56:a1:bc:04:d4:8e:52:05:ad:dc:b0:27:5c:
c6:3e:b9:95:11:f2:96:2b:66:1d:67:2b:5c:7b:9c:2b:6f:94:
2e:47:6a:35:44:0e:80:05:0c:c0:3d:0a:ce:a6:80:82:16:f9:
ea:fd:bf:15:8e:81:6b:e5:4e:9e:d5:4a:00:b7:2e:c1:39:f1:
ba:66:2e:e5:20:67:25:e1:f5:3d:4a:85:f0:76:20:b0:c7:a0:
7a:86:50:d6:b8:1f:28:cd:a8:6f:2e:4d:8e:1f:b6:b5:cb:c3:
af:ee:b2:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwETzgsWXCjiIKZHrFnLlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMTViMzI3ZTg0NzYxNjg1MDIyZjQ3MzI4ZDZmNGNiZDZk
MzA0MWUwHhcNMjUwOTA5MjAwMTAwWhcNMjUwOTEwMjAwMTAwWjAzMTEwLwYDVQQD
EyhkNzQ0OTBkZDc4MzU4MmY3NWQ2OTRjN2VmNTIzM2EwNThiZWFmZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogZxu/dsjNRkuLNjljrvffjeOs3s
mZC6YsYUZkq2IMIWBPQTqNHO2482YfkzP/Qzndjn5etER8w9VFuvhf5Dv/RrKYMc
9HydxEtV/nL3vxf+FT8FZJI7wKlRazxIbanBqT10mYfpDq/mEg48uPX/eQhh7sLS
ag7N73MlMbnSJHwPqn7i0SIAMx2mWiO6PQa6ofoA0oTYO0neZEi/QHztqqxwjGoU
cSzxRm9bxUYWJFgAZBX75Z3nzEqAprbzQEBBtt8QUY7Mh/n69DkZiXFjZirAQwSW
L4Qdh70tG902S8zj1SkQWMFWJliiMkQjYqLntvnNGH5f01APwWM0gF8QoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdEkN14NYL3XWlMfvUjOgWL6v7KMB8GA1UdIwQY
MBaAFMEVsyfoR2FoUCL0cyjW9MvW0wQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1JXekotaEhZV2hRSXZSektOYjB5OWJUQkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNGJkZjctMjU3OS00YmQwLThhOTMt
MjI0ZmQ3OGVmODI3LzEvd1JXekotaEhZV2hRSXZSektOYjB5OWJUQkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNGJkZjctMjU3OS00YmQwLThhOTMtMjI0ZmQ3OGVmODI3
LzEvd1JXekotaEhZV2hRSXZSektOYjB5OWJUQkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDYYCT3m
NUW0jUoNGrErqxKfOKH7wRGd5cDf3Kosbr3YNMtrb7jB4uXPRw7wAwtlAA7d1H69
nk1Q2u9uqHcCmTvpT30tg6JsJgLrtlDD9RX0Blkv7NhUNtTiGRCbHkwElkxJzuyK
ZE2V7CTbw7QPRFsg+YzYLUHOY3PsHTgqkEQUSR3GllwsuP2BAH66EbFinGFRpxxW
obwE1I5SBa3csCdcxj65lRHylitmHWcrXHucK2+ULkdqNUQOgAUMwD0KzqaAghb5
6v2/FY6Ba+VOntVKALcuwTnxumYu5SBnJeH1PUqF8HYgsMegeoZQ1rgfKM2oby5N
jh+2tcvDr+6yMA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 05:54:13 2025 by rpki-client