Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: NqZnckuplpeBzMpaYk/rAoKtFplwrXvZ2f/nWYBE4s4=
Subject key identifier: F9:CE:7C:25:61:71:69:88:91:45:0E:42:17:D4:19:0C:B6:97:E3:7C
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 0198D661228A3E42FFDAFD16C51CDF1EF742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 01B3
Signing time: Sat 23 Aug 2025 10:02:26 +0000
Manifest this update: Sat 23 Aug 2025 10:02:26 +0000
Manifest next update: Sun 24 Aug 2025 10:02:26 +0000
Files and hashes: 1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=)
2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: v3HDUlao5oq4aJ04rAmggM+UatadkNal9VknbikfXRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:22:8a:3e:42:ff:da:fd:16:c5:1c:df:1e:f7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Aug 23 10:02:26 2025 GMT
Not After : Aug 24 10:02:26 2025 GMT
Subject: CN=f9ce7c256171698891450e4217d4190cb697e37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:18:8b:07:6b:fc:85:2d:63:c0:31:99:e9:
ac:dc:2d:c5:c0:e9:93:d3:3c:9f:b6:2d:8a:c2:b8:
ae:ff:8c:32:22:65:38:f2:52:73:09:9c:92:f5:56:
62:18:f7:7b:93:01:30:f5:3c:ed:b6:87:de:20:08:
63:19:6f:22:b8:ed:ff:a3:6b:a0:8b:9a:82:46:40:
2c:12:81:9c:17:79:9e:a2:13:7f:38:bc:62:09:b8:
2c:c5:9e:ae:84:3f:73:e1:d5:fe:83:8a:e1:40:ae:
96:49:88:f3:8f:c2:e0:5f:ee:9f:db:aa:d9:9c:cc:
0b:94:c6:62:b0:b9:5e:05:2a:ab:0d:8a:74:91:15:
62:3d:56:8a:3c:6c:d4:ee:97:d2:49:83:04:33:1f:
01:30:d1:ae:bc:bc:19:4b:7c:8d:38:c4:3c:c6:b6:
a3:75:34:70:dc:18:3b:68:4c:f4:3b:d9:37:ce:64:
b9:5d:dc:78:f8:91:90:b4:5f:65:7e:76:77:0f:5d:
ee:5b:24:73:72:31:35:0c:91:ce:8a:28:53:5a:8f:
3f:b3:9f:46:ca:2f:14:2b:26:f8:a9:01:94:f8:79:
da:f0:6b:85:21:8f:45:59:b7:c8:02:f6:ed:d2:f6:
23:78:2c:1d:b6:f2:3c:fa:e2:0c:22:69:ff:cb:35:
0e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:7C:25:61:71:69:88:91:45:0E:42:17:D4:19:0C:B6:97:E3:7C
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e5:57:28:1e:06:19:bc:4f:b1:a2:b5:f3:e5:6f:7a:b9:9b:
40:35:9e:91:22:fa:c4:e2:e7:88:e2:41:e1:7f:54:c8:0e:21:
23:1a:90:46:e9:d9:9b:fa:11:7a:48:62:33:46:a2:fd:cf:98:
9f:3c:32:5d:39:a8:a3:cd:3a:e6:db:21:c8:58:d5:43:61:9a:
b6:93:9d:46:e2:6a:1b:33:3b:92:cc:72:f0:23:68:2e:26:49:
85:33:54:49:45:1b:6c:18:b7:82:4f:6f:bc:cc:3c:a4:7d:89:
ee:20:c8:e9:b8:66:96:dd:7b:6a:9a:02:3f:ac:67:8d:57:a9:
1c:f0:a0:11:f4:e1:2c:01:19:b9:bd:6f:9b:87:fd:28:d8:e0:
37:ad:e2:14:41:41:af:3f:45:19:ac:5b:da:b3:6b:9e:c2:1b:
a0:fd:7d:aa:a6:66:18:5a:e1:11:42:03:c5:71:51:25:c5:27:
4a:94:a2:fd:4d:1f:34:f9:c6:a3:f2:e0:be:fd:53:fb:7c:be:
1b:a7:dd:12:e4:f7:bd:6d:31:88:aa:87:ef:d9:13:a1:ef:4d:
70:89:b1:15:c9:2e:4a:a4:f3:79:09:cc:68:3b:84:56:a0:a4:
1c:51:6d:ab:90:e2:3b:7c:1d:a8:33:00:75:b7:d5:ab:ae:c3:
08:54:0a:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYSKKPkL/2v0WxRzfHvdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDg3ZDkyZjg5MGMyZDM2NTk2ZGVjYTFjYjBiMGJiOGIw
N2ExMjIwHhcNMjUwODIzMTAwMjI2WhcNMjUwODI0MTAwMjI2WjAzMTEwLwYDVQQD
EyhmOWNlN2MyNTYxNzE2OTg4OTE0NTBlNDIxN2Q0MTkwY2I2OTdlMzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzMYiwdr/IUtY8Axmems3C3FwOmT
0zyfti2Kwriu/4wyImU48lJzCZyS9VZiGPd7kwEw9TzttofeIAhjGW8iuO3/o2ug
i5qCRkAsEoGcF3meohN/OLxiCbgsxZ6uhD9z4dX+g4rhQK6WSYjzj8LgX+6f26rZ
nMwLlMZisLleBSqrDYp0kRViPVaKPGzU7pfSSYMEMx8BMNGuvLwZS3yNOMQ8xraj
dTRw3Bg7aEz0O9k3zmS5Xdx4+JGQtF9lfnZ3D13uWyRzcjE1DJHOiihTWo8/s59G
yi8UKyb4qQGU+Hna8GuFIY9FWbfIAvbt0vYjeCwdtvI8+uIMImn/yzUOoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnOfCVhcWmIkUUOQhfUGQy2l+N8MB8GA1UdIwQY
MBaAFFjYfZL4kMLTZZbeyhywsLuLB6EiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMt
YmQ3MzYwOWVlNWRhLzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMtYmQ3MzYwOWVlNWRh
LzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeVXKB4G
GbxPsaK18+VvermbQDWekSL6xOLniOJB4X9UyA4hIxqQRunZm/oRekhiM0ai/c+Y
nzwyXTmoo8065tshyFjVQ2GatpOdRuJqGzM7ksxy8CNoLiZJhTNUSUUbbBi3gk9v
vMw8pH2J7iDI6bhmlt17apoCP6xnjVepHPCgEfThLAEZub1vm4f9KNjgN63iFEFB
rz9FGaxb2rNrnsIboP19qqZmGFrhEUIDxXFRJcUnSpSi/U0fNPnGo/Lgvv1T+3y+
G6fdEuT3vW0xiKqH79kToe9NcImxFckuSqTzeQnMaDuEVqCkHFFtq5DiO3wdqDMA
dbfVq67DCFQKhg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:57 2025 by rpki-client