Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
File: wpdAm8J8WEPisWrGfNtqFVwvc_s.mft (raw, json)
Hash identifier: Cf6BQ95EMCCAe/NUOGeK/kdxeaC1ZfJxt2voghn5A0U=
Subject key identifier: 90:85:AF:31:3C:33:E0:DC:C8:7E:1A:A7:C0:BF:72:3E:B6:58:C7:E3
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Certificate issuer: /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial: 0198D65F6A7E0246695DE931B2FDB57AD4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
Manifest number: 11F7
Signing time: Sat 23 Aug 2025 10:00:34 +0000
Manifest this update: Sat 23 Aug 2025 10:00:34 +0000
Manifest next update: Sun 24 Aug 2025 10:00:34 +0000
Files and hashes: 1: V--AvBDy8CKLSulHA8-MpxkBUSk.roa (hash: 4mujn1g+vPNyUt+JT8wCWk11qrPBifj0bVJGlCn3/10=)
2: wpdAm8J8WEPisWrGfNtqFVwvc_s.crl (hash: rFsSyzP/R9WOdyCVXmyYdbATnY5ROiFcwzHb4Vq3Byw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6a:7e:02:46:69:5d:e9:31:b2:fd:b5:7a:d4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Validity
Not Before: Aug 23 10:00:34 2025 GMT
Not After : Aug 24 10:00:34 2025 GMT
Subject: CN=9085af313c33e0dcc87e1aa7c0bf723eb658c7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:3e:81:18:d9:72:56:e9:fa:80:5f:d4:a0:
e4:1a:4a:fb:f0:64:fc:d6:7f:a6:01:70:c2:15:3d:
43:3b:cc:0e:26:f0:c3:2d:a6:07:a2:0d:4d:a9:02:
c3:78:d1:f9:2e:21:d7:64:7c:64:1d:cf:42:46:34:
d4:b7:17:ef:90:22:e0:8c:35:3f:52:e2:83:f1:af:
a8:9d:fa:47:0a:11:90:9e:0d:c7:ff:24:60:9f:31:
a4:99:53:7d:28:13:c1:d0:75:ff:2f:b8:1f:d0:e6:
11:b4:84:60:01:78:06:86:05:dc:a4:45:2f:33:3f:
c3:17:5d:65:8f:17:95:d6:97:fd:90:56:47:41:86:
a0:fd:d1:97:4d:c4:aa:3f:bb:2b:34:89:79:e9:56:
a4:69:51:5c:2e:c5:bf:98:44:1e:6a:1f:00:56:96:
84:90:b9:19:5f:fd:5e:22:0a:d6:bf:eb:5c:62:42:
b8:95:80:46:c2:31:60:ad:d5:a4:c4:97:48:42:4a:
13:4f:ec:58:ae:4f:55:84:17:10:ab:19:1e:39:cd:
3e:5e:ab:a7:48:35:3e:15:30:ff:3c:6d:c1:ba:22:
e6:b1:6d:9f:db:e2:0f:5e:6b:13:e1:74:84:68:22:
47:05:d7:80:f4:de:e1:ba:e4:cc:d3:8c:b0:b5:8a:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:85:AF:31:3C:33:E0:DC:C8:7E:1A:A7:C0:BF:72:3E:B6:58:C7:E3
X509v3 Authority Key Identifier:
keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:db:c5:5e:1e:3c:a0:a4:fc:81:5e:47:1a:4b:51:45:85:6b:
cc:94:9f:ed:c9:e0:bc:ad:f7:91:5d:23:c4:bc:19:11:04:19:
67:8d:66:3b:4a:28:17:a9:8e:f7:74:16:fe:1c:db:31:03:1f:
67:a5:37:aa:50:82:42:59:61:5f:55:b1:34:b9:36:b5:63:14:
73:9f:65:a2:8a:57:1d:43:04:97:fc:96:f2:f2:9c:5a:f3:62:
d7:80:40:43:03:9a:ba:d8:f6:cf:ce:ec:0a:66:40:60:5a:16:
f2:ce:f7:04:b5:88:83:ef:f5:f8:39:28:99:0f:05:f2:19:5c:
12:69:8e:78:e0:3f:4a:1b:a8:ca:b4:79:0f:c5:4e:a8:2a:7c:
64:70:0e:00:66:50:be:7d:6c:d2:c4:25:28:e9:91:16:03:c2:
f4:c2:68:ed:9d:ed:20:49:26:16:19:9f:e7:02:13:cb:fd:e6:
7e:04:fc:f8:01:c3:3b:91:6d:42:40:d1:20:12:84:df:6b:b1:
a6:f1:92:2a:5e:d1:86:6a:62:5b:b5:21:78:fe:b7:b4:9b:b9:
20:cf:c7:05:c1:1e:d3:bd:24:be:e9:51:a7:21:a3:a5:b8:07:
46:15:bd:18:7a:6b:31:94:34:ee:cc:93:8d:21:f9:93:8c:c7:
dd:1c:80:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX2p+AkZpXekxsv21etTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTc0MDliYzI3YzU4NDNlMmIxNmFjNjdjZGI2YTE1NWMy
ZjczZmIwHhcNMjUwODIzMTAwMDM0WhcNMjUwODI0MTAwMDM0WjAzMTEwLwYDVQQD
Eyg5MDg1YWYzMTNjMzNlMGRjYzg3ZTFhYTdjMGJmNzIzZWI2NThjN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuI+gRjZclbp+oBf1KDkGkr78GT8
1n+mAXDCFT1DO8wOJvDDLaYHog1NqQLDeNH5LiHXZHxkHc9CRjTUtxfvkCLgjDU/
UuKD8a+onfpHChGQng3H/yRgnzGkmVN9KBPB0HX/L7gf0OYRtIRgAXgGhgXcpEUv
Mz/DF11ljxeV1pf9kFZHQYag/dGXTcSqP7srNIl56VakaVFcLsW/mEQeah8AVpaE
kLkZX/1eIgrWv+tcYkK4lYBGwjFgrdWkxJdIQkoTT+xYrk9VhBcQqxkeOc0+Xqun
SDU+FTD/PG3BuiLmsW2f2+IPXmsT4XSEaCJHBdeA9N7huuTM04ywtYpHLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCFrzE8M+DcyH4ap8C/cj62WMfjMB8GA1UdIwQY
MBaAFMKXQJvCfFhD4rFqxnzbahVcL3P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMt
NmMwMjhhNGQ4NWRhLzEvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMtNmMwMjhhNGQ4NWRh
LzEvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9vFXh48
oKT8gV5HGktRRYVrzJSf7cngvK33kV0jxLwZEQQZZ41mO0ooF6mO93QW/hzbMQMf
Z6U3qlCCQllhX1WxNLk2tWMUc59loopXHUMEl/yW8vKcWvNi14BAQwOautj2z87s
CmZAYFoW8s73BLWIg+/1+DkomQ8F8hlcEmmOeOA/ShuoyrR5D8VOqCp8ZHAOAGZQ
vn1s0sQlKOmRFgPC9MJo7Z3tIEkmFhmf5wITy/3mfgT8+AHDO5FtQkDRIBKE32ux
pvGSKl7RhmpiW7UheP63tJu5IM/HBcEe070kvulRpyGjpbgHRhW9GHprMZQ07syT
jSH5k4zH3RyACQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:03:52 2025 by rpki-client