
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
File: wpN7lGGj0mbpNYNOUEehgiODYsg.mft (raw, json)
Hash identifier: vYiKVTz7vVlMe2kKHl9qFfbfJALhtnSLLWuk6xB/UHs=
Subject key identifier: 5C:9F:E2:AC:1C:45:B9:2A:49:BD:86:CA:47:34:E1:44:96:3D:EE:F5
Authority key identifier: C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
Certificate issuer: /CN=c2937b9461a3d266e935834e5047a182238362c8
Certificate serial: 019921E744F7E8FDCCEF4969E86BDC4A67BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 02:00:28 +0000
Manifest this update: Sun 07 Sep 2025 02:00:28 +0000
Manifest next update: Mon 08 Sep 2025 02:00:28 +0000
Files and hashes: 1: kDT6d1olq2g9PhBud1lpevtgwMM.roa (hash: GVT4b+j1f9W7ipFuYf2UE8OPchdOvhrHWTWGtiol0Gg=)
2: wpN7lGGj0mbpNYNOUEehgiODYsg.crl (hash: TB70zk8L283AXuc/aQngc/BJrp13avotZs1BNa6BiSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:44:f7:e8:fd:cc:ef:49:69:e8:6b:dc:4a:67:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2937b9461a3d266e935834e5047a182238362c8
Validity
Not Before: Sep 7 02:00:28 2025 GMT
Not After : Sep 8 02:00:28 2025 GMT
Subject: CN=5c9fe2ac1c45b92a49bd86ca4734e144963deef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:45:fe:e3:41:5a:18:10:15:f2:10:4c:25:
fa:59:5e:75:72:a1:67:54:f5:02:2b:91:78:b1:20:
da:1e:67:9e:3c:1b:d1:d0:78:b8:28:d4:20:15:bc:
50:ad:cd:c3:4e:5d:de:4c:c1:e0:bc:70:f5:2c:46:
62:a1:a0:88:23:41:ec:7b:d9:59:ce:b3:e5:6f:88:
a7:86:ba:1a:44:24:8c:67:71:9a:71:c6:f2:5f:db:
29:7a:56:5a:8e:58:41:41:e3:e4:ff:fc:cb:60:9b:
e0:5f:e2:e3:22:2d:92:c3:e4:bd:f6:a5:e5:8e:7d:
36:91:c8:b4:53:83:0c:34:16:26:48:e7:f7:2d:35:
94:5a:0c:2a:6a:cb:5b:3f:a1:fd:db:48:23:82:19:
54:2b:80:ca:f6:6f:8e:ee:fb:08:11:87:a0:4f:24:
f8:97:51:fb:eb:de:95:91:1d:91:6b:9e:d1:f6:27:
05:da:34:a5:b7:48:ba:80:00:1b:ca:ed:a2:8c:6e:
0c:7b:53:0f:69:85:59:28:c9:93:77:d2:6e:b2:92:
79:87:49:1f:f3:43:a4:ae:b5:a5:52:c0:ca:fd:7c:
fe:01:1e:51:5d:4a:70:d3:ce:b2:74:fd:21:b8:16:
25:d4:79:09:b7:ef:83:f9:d5:45:d5:be:b7:4a:6e:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:E2:AC:1C:45:B9:2A:49:BD:86:CA:47:34:E1:44:96:3D:EE:F5
X509v3 Authority Key Identifier:
keyid:C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c6:9d:3b:1c:e2:0e:cd:4f:2a:05:eb:61:4f:ff:7f:83:de:
70:29:15:18:0a:56:e0:a2:0a:42:50:86:fb:01:8b:bc:6d:63:
65:0c:43:ab:10:03:91:55:a5:67:aa:57:f6:d4:da:cb:93:22:
4d:74:1c:a3:1c:b9:74:d1:aa:8d:e1:24:3c:5d:5d:72:27:96:
5c:ce:3a:3c:ff:b2:c6:94:a2:4a:c5:d2:94:83:0d:cb:c7:62:
1d:8d:41:f7:2a:7b:e6:0d:a6:3e:26:31:ae:3a:7e:0e:4a:11:
e3:5b:48:1a:8f:6b:51:b0:f3:e1:99:9b:50:20:e0:9e:e4:9c:
72:69:36:cb:ab:f7:00:22:d0:46:94:eb:97:d7:10:40:36:cc:
96:ca:11:bb:ea:3b:63:9c:3f:69:05:30:e6:4f:4c:bf:a8:2d:
3c:1d:c5:9f:96:cd:be:f9:c4:e1:14:ae:1c:f3:2d:10:1f:a1:
33:be:c5:c4:73:e6:b5:fb:7d:27:5f:5d:ae:7b:41:d4:72:0c:
0e:31:ca:9f:09:79:70:ba:e2:15:93:ea:97:97:41:e9:de:c4:
db:75:59:a0:d1:50:36:b1:1b:39:aa:c2:42:77:00:aa:ed:2c:
da:cd:8a:ca:40:00:64:25:a0:dc:30:08:15:8f:ec:c2:50:e4:
58:9a:14:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh50T36P3M70lp6GvcSme6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTM3Yjk0NjFhM2QyNjZlOTM1ODM0ZTUwNDdhMTgyMjM4
MzYyYzgwHhcNMjUwOTA3MDIwMDI4WhcNMjUwOTA4MDIwMDI4WjAzMTEwLwYDVQQD
Eyg1YzlmZTJhYzFjNDViOTJhNDliZDg2Y2E0NzM0ZTE0NDk2M2RlZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhpF/uNBWhgQFfIQTCX6WV51cqFn
VPUCK5F4sSDaHmeePBvR0Hi4KNQgFbxQrc3DTl3eTMHgvHD1LEZioaCII0Hse9lZ
zrPlb4inhroaRCSMZ3GaccbyX9spelZajlhBQePk//zLYJvgX+LjIi2Sw+S99qXl
jn02kci0U4MMNBYmSOf3LTWUWgwqastbP6H920gjghlUK4DK9m+O7vsIEYegTyT4
l1H7696VkR2Ra57R9icF2jSlt0i6gAAbyu2ijG4Me1MPaYVZKMmTd9JuspJ5h0kf
80OkrrWlUsDK/Xz+AR5RXUpw086ydP0huBYl1HkJt++D+dVF1b63Sm6UtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyf4qwcRbkqSb2Gykc04USWPe71MB8GA1UdIwQY
MBaAFMKTe5Rho9Jm6TWDTlBHoYIjg2LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZGVkMmUtMzk3My00YmNmLTk1NjIt
Mzc3NDg4MWU3ZTFlLzEvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZGVkMmUtMzk3My00YmNmLTk1NjItMzc3NDg4MWU3ZTFl
LzEvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcadOxzi
Ds1PKgXrYU//f4PecCkVGApW4KIKQlCG+wGLvG1jZQxDqxADkVWlZ6pX9tTay5Mi
TXQcoxy5dNGqjeEkPF1dcieWXM46PP+yxpSiSsXSlIMNy8diHY1B9yp75g2mPiYx
rjp+DkoR41tIGo9rUbDz4ZmbUCDgnuSccmk2y6v3ACLQRpTrl9cQQDbMlsoRu+o7
Y5w/aQUw5k9Mv6gtPB3Fn5bNvvnE4RSuHPMtEB+hM77FxHPmtft9J19drntB1HIM
DjHKnwl5cLriFZPql5dB6d7E23VZoNFQNrEbOarCQncAqu0s2s2KykAAZCWg3DAI
FY/swlDkWJoUog==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:24 2025 by rpki-client