Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
File: w6nl9TVmI-HCjy22k-BfxtYEzIE.mft (raw, json)
Hash identifier: hyq3sE6EMAbpL5Cj6gr4SFTlyVZ5fbBpnhPkw0ONpsU=
Subject key identifier: 99:D1:58:F5:5C:EE:41:90:37:20:3D:52:79:4A:E6:FE:F4:ED:8D:53
Authority key identifier: C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81
Certificate issuer: /CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81
Certificate serial: 0198D66128D4E28E6675D566DD1F999707B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
Manifest number: D7
Signing time: Sat 23 Aug 2025 10:02:28 +0000
Manifest this update: Sat 23 Aug 2025 10:02:28 +0000
Manifest next update: Sun 24 Aug 2025 10:02:28 +0000
Files and hashes: 1: w6nl9TVmI-HCjy22k-BfxtYEzIE.crl (hash: LKs/4CpvEVFsyEbbaC6ZWKvnv8uOwSbbBlNE400cxIQ=)
2: yOFLOKqrASqCbG9H8LDQX86pKIw.roa (hash: XxA6ziYUOm/wMTbCGGt/j2IVpWOap4P3oBr16w5IzVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:28:d4:e2:8e:66:75:d5:66:dd:1f:99:97:07:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81
Validity
Not Before: Aug 23 10:02:28 2025 GMT
Not After : Aug 24 10:02:28 2025 GMT
Subject: CN=99d158f55cee419037203d52794ae6fef4ed8d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8b:86:04:87:e6:f9:01:11:2c:42:c2:b5:d8:
ab:ac:f7:4d:de:9e:f9:3c:f4:89:28:d6:b0:84:ae:
30:5a:7d:82:cc:0b:61:ee:0c:db:af:f6:a1:64:61:
c2:16:b4:a0:8b:0b:9e:53:84:87:e0:64:17:eb:d5:
84:0f:e7:52:c7:b9:78:8b:b4:ec:9b:a5:b2:ba:85:
49:db:b7:47:ca:4d:56:23:b3:cd:6c:c4:1a:ae:c8:
30:55:4d:93:64:38:7e:a9:e8:23:6d:79:4a:3a:0d:
6b:87:ff:a9:86:df:f1:03:53:17:d9:7b:ed:a1:1c:
76:8e:41:2f:c0:43:b4:8f:04:27:9a:c3:ad:be:3e:
53:13:84:d1:09:40:0a:c6:5f:71:7a:a9:db:e6:db:
da:21:3b:a4:d2:f5:2e:76:b1:09:6a:cc:aa:2a:9a:
e8:58:5e:8c:ff:e5:ef:98:6b:0e:96:dc:1e:53:ac:
0b:43:b0:3c:5e:13:3f:3f:7b:0b:93:21:f4:f6:41:
99:1b:20:6b:61:ce:f8:e2:a0:bf:92:10:d0:27:e6:
eb:cf:93:53:01:e2:90:a1:2d:57:29:86:01:e5:22:
22:67:36:e7:f9:ec:72:ed:91:17:d7:d1:e2:82:c2:
d9:fe:59:47:f0:6c:0f:01:87:e7:a9:2a:ba:47:ab:
2d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D1:58:F5:5C:EE:41:90:37:20:3D:52:79:4A:E6:FE:F4:ED:8D:53
X509v3 Authority Key Identifier:
keyid:C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e8:b9:8d:98:d8:f9:e5:af:53:cc:64:69:d3:52:15:05:43:
d9:2b:af:69:fe:64:2d:16:ed:cd:a5:07:1c:eb:a4:42:47:2d:
80:24:61:aa:ad:e2:34:ac:26:9d:1a:26:6d:eb:a3:f2:13:37:
da:8b:04:06:31:eb:27:a2:84:4e:27:2e:34:41:ef:c6:0f:5a:
38:01:85:63:0a:19:e5:15:87:ca:93:23:e9:d2:23:1a:4c:1c:
1e:36:c0:46:07:b2:25:f6:e6:a2:77:49:ed:39:d6:5f:9b:bb:
2e:82:33:34:0f:96:6f:44:91:80:ef:7e:85:a9:fd:b7:1b:a4:
dd:f3:5c:1c:54:ff:23:30:7f:fc:26:c8:5c:76:c9:bc:3c:85:
9b:ed:51:4c:9b:24:8c:d1:b7:cc:d7:b5:c0:9b:23:0a:14:7d:
12:de:75:bc:3d:e6:47:86:3d:50:69:89:8c:e2:d3:2e:13:99:
3a:14:98:af:7a:ca:cb:70:2d:00:0f:71:ca:b8:d3:91:2c:f6:
75:c3:d9:f3:5a:2d:d2:b5:c5:8d:77:30:cf:5c:f8:d5:ea:ac:
f5:e9:06:00:7a:74:4b:36:9a:d3:4f:01:14:4c:6d:e4:01:d3:
49:5e:e3:75:37:5a:41:d3:7e:fa:e9:65:e0:3f:2d:9f:a0:cb:
55:39:ba:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYSjU4o5mddVm3R+ZlwezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTllNWY1MzU2NjIzZTFjMjhmMmRiNjkzZTA1ZmM2ZDYw
NGNjODEwHhcNMjUwODIzMTAwMjI4WhcNMjUwODI0MTAwMjI4WjAzMTEwLwYDVQQD
Eyg5OWQxNThmNTVjZWU0MTkwMzcyMDNkNTI3OTRhZTZmZWY0ZWQ4ZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYuGBIfm+QERLELCtdirrPdN3p75
PPSJKNawhK4wWn2CzAth7gzbr/ahZGHCFrSgiwueU4SH4GQX69WED+dSx7l4i7Ts
m6WyuoVJ27dHyk1WI7PNbMQarsgwVU2TZDh+qegjbXlKOg1rh/+pht/xA1MX2Xvt
oRx2jkEvwEO0jwQnmsOtvj5TE4TRCUAKxl9xeqnb5tvaITuk0vUudrEJasyqKpro
WF6M/+XvmGsOltweU6wLQ7A8XhM/P3sLkyH09kGZGyBrYc744qC/khDQJ+brz5NT
AeKQoS1XKYYB5SIiZzbn+exy7ZEX19HigsLZ/llH8GwPAYfnqSq6R6stGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnRWPVc7kGQNyA9UnlK5v707Y1TMB8GA1UdIwQY
MBaAFMOp5fU1ZiPhwo8ttpPgX8bWBMyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mNWI2M2ItZDBlMC00NjBjLTkzMDgt
N2NlZjEwYWRlOGRmLzEvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9mNWI2M2ItZDBlMC00NjBjLTkzMDgtN2NlZjEwYWRlOGRm
LzEvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOi5jZjY
+eWvU8xkadNSFQVD2Suvaf5kLRbtzaUHHOukQkctgCRhqq3iNKwmnRombeuj8hM3
2osEBjHrJ6KETicuNEHvxg9aOAGFYwoZ5RWHypMj6dIjGkwcHjbARgeyJfbmondJ
7TnWX5u7LoIzNA+Wb0SRgO9+han9txuk3fNcHFT/IzB//CbIXHbJvDyFm+1RTJsk
jNG3zNe1wJsjChR9Et51vD3mR4Y9UGmJjOLTLhOZOhSYr3rKy3AtAA9xyrjTkSz2
dcPZ81ot0rXFjXcwz1z41eqs9ekGAHp0Szaa008BFExt5AHTSV7jdTdaQdN++ull
4D8tn6DLVTm6sw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:43 2025 by rpki-client