Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: y9PH2ytPefWGzVreIKCyEgOvrXz+DZaaLODFO6doEtI=
Subject key identifier: 9F:00:B6:04:D5:42:30:E3:AD:72:70:DB:A4:EB:57:B6:8A:48:1A:D9
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 01994D7799E25F08790935060717A1192AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 16A1
Signing time: Mon 15 Sep 2025 13:01:47 +0000
Manifest this update: Mon 15 Sep 2025 13:01:47 +0000
Manifest next update: Tue 16 Sep 2025 13:01:47 +0000
Files and hashes: 1: HARnUvjlt2Ihiye5L31M1Ihsszo.roa (hash: R6szIcdOkXpk4Tvb4l6mExr2G3bKCj15fJUl212PxlA=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: aOLHHjwcEtLDqKTJp5eN5MbDunE7W/3kJzJxJNr18yk=)
3: eZmwFy41-LIbouqrlW9zkimoU3M.roa (hash: zJU/IMiyEvSZt1AwTK7cRbJ+HAzHnx6LAKEgb7nLXYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:77:99:e2:5f:08:79:09:35:06:07:17:a1:19:2a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Sep 15 13:01:47 2025 GMT
Not After : Sep 16 13:01:47 2025 GMT
Subject: CN=9f00b604d54230e3ad7270dba4eb57b68a481ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:23:ec:80:f4:14:82:ab:81:ec:1a:f7:23:
1e:4d:48:a1:de:90:22:aa:2e:82:26:c7:30:80:a2:
96:6c:d6:76:6c:98:fe:19:55:7c:12:8a:10:56:8a:
8b:a1:73:e3:9f:67:0c:5c:61:b5:6b:8e:2d:cd:e8:
b2:7f:ae:4b:12:fa:31:7e:31:db:8a:f3:1c:6a:c9:
d3:a9:3b:02:07:39:87:08:cf:e3:35:8e:d7:8d:26:
f8:b2:62:98:6a:c9:e3:2f:8e:2e:97:f7:4d:38:4d:
a1:9a:38:9c:5b:d8:7e:6a:99:db:91:50:a1:19:59:
e1:04:e7:88:7d:82:2f:60:e8:be:ad:86:9d:23:5d:
e0:b4:53:6e:0d:21:f6:94:e7:8e:cc:a8:e7:c9:84:
08:de:60:a8:db:78:d1:c1:ea:b5:4e:70:bd:82:db:
0e:40:ed:a0:f0:de:85:3c:72:cd:cd:84:26:94:85:
81:88:99:4e:67:c7:b9:46:ef:65:16:d9:64:16:d1:
17:63:0b:f6:5e:26:b0:78:08:89:98:9c:c1:8d:ef:
ef:62:5f:6c:bd:5f:db:5d:42:eb:45:a4:59:29:7b:
bb:9e:4b:14:b5:24:51:a9:be:7b:2d:9f:44:d7:53:
f8:36:fb:74:41:28:33:84:c5:1c:65:3d:05:68:b7:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:00:B6:04:D5:42:30:E3:AD:72:70:DB:A4:EB:57:B6:8A:48:1A:D9
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a2:bd:a7:d9:19:bb:fa:2b:ef:a7:4a:1d:ce:4c:af:56:b4:
e7:b5:17:1c:d0:0c:9c:3e:82:ba:c7:9c:ce:15:13:d8:c8:a7:
bd:0a:d2:63:e6:61:c6:4f:c7:8d:bd:2e:31:75:cb:0d:a9:6b:
23:f3:c3:a6:63:50:6b:24:c4:a9:8a:ba:5c:ee:ec:97:9d:69:
5a:df:12:53:21:9d:04:e8:99:fb:79:4b:d0:76:87:4e:87:de:
05:b7:f7:1b:00:76:64:66:6a:57:11:4d:de:42:6b:1d:63:c2:
7a:25:ad:0c:db:e9:d8:52:7b:32:b0:1b:a9:98:73:f6:3c:6e:
4a:92:09:36:33:93:15:4a:23:1b:7e:1f:05:5b:4c:78:a0:76:
dd:9c:2f:4b:bb:89:8e:a8:ac:0c:c2:40:d5:da:60:2a:aa:95:
29:c0:0a:66:e3:d8:86:6f:d1:5a:94:8c:5b:a1:83:0f:2a:5f:
93:f8:15:ee:10:f5:8c:9b:a2:2a:45:13:fa:00:cb:06:d9:7b:
78:d8:0b:df:ac:54:ca:db:90:0f:4f:e4:52:49:87:13:fe:18:
ed:26:4e:a7:04:78:15:78:b8:b5:76:17:ed:8e:19:ca:17:79:
e0:b8:66:09:ed:65:53:ff:af:29:1e:e7:6f:d1:89:49:e1:94:
d6:cb:69:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlNd5niXwh5CTUGBxehGSrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx
YzRmZTIwHhcNMjUwOTE1MTMwMTQ3WhcNMjUwOTE2MTMwMTQ3WjAzMTEwLwYDVQQD
Eyg5ZjAwYjYwNGQ1NDIzMGUzYWQ3MjcwZGJhNGViNTdiNjhhNDgxYWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQEj7ID0FIKrgewa9yMeTUih3pAi
qi6CJscwgKKWbNZ2bJj+GVV8EooQVoqLoXPjn2cMXGG1a44tzeiyf65LEvoxfjHb
ivMcasnTqTsCBzmHCM/jNY7XjSb4smKYasnjL44ul/dNOE2hmjicW9h+apnbkVCh
GVnhBOeIfYIvYOi+rYadI13gtFNuDSH2lOeOzKjnyYQI3mCo23jRweq1TnC9gtsO
QO2g8N6FPHLNzYQmlIWBiJlOZ8e5Ru9lFtlkFtEXYwv2XiaweAiJmJzBje/vYl9s
vV/bXULrRaRZKXu7nksUtSRRqb57LZ9E11P4Nvt0QSgzhMUcZT0FaLeFKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8AtgTVQjDjrXJw26TrV7aKSBrZMB8GA1UdIwQY
MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt
NzA4N2UzZmUyYTVkLzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk
LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaK9p9kZ
u/or76dKHc5Mr1a057UXHNAMnD6CuseczhUT2MinvQrSY+Zhxk/Hjb0uMXXLDalr
I/PDpmNQayTEqYq6XO7sl51pWt8SUyGdBOiZ+3lL0HaHTofeBbf3GwB2ZGZqVxFN
3kJrHWPCeiWtDNvp2FJ7MrAbqZhz9jxuSpIJNjOTFUojG34fBVtMeKB23ZwvS7uJ
jqisDMJA1dpgKqqVKcAKZuPYhm/RWpSMW6GDDypfk/gV7hD1jJuiKkUT+gDLBtl7
eNgL36xUytuQD0/kUkmHE/4Y7SZOpwR4FXi4tXYX7Y4Zyhd54LhmCe1lU/+vKR7n
b9GJSeGU1stpww==
-----END CERTIFICATE-----
Generated at Mon Sep 15 23:03:16 2025 by rpki-client