Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: Kxt0QjO35n9+RykGjVUtcs43rBlvh/sSAVNI39PBoj0=
Subject key identifier: 32:5D:43:1C:C0:64:FD:D2:5B:8C:9F:1E:35:6A:3A:F6:B4:1B:3E:6B
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 0198D4E0A448CDC9C2ABFCFC9C678F15E991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 10D1
Signing time: Sat 23 Aug 2025 03:02:28 +0000
Manifest this update: Sat 23 Aug 2025 03:02:28 +0000
Manifest next update: Sun 24 Aug 2025 03:02:28 +0000
Files and hashes: 1: 7kdmagU4QbQazPFAKJN_jh3ESjI.roa (hash: UKie7fx67vGuUXCr+OJM9sf2md8+FYbcDpZ0gOMQ3f0=)
2: oMWup55nUaojGXh2IYtrkxVaIxk.roa (hash: IgvfZQFj2syunyqqYTcXoGNSKYWlXxrN3iDEjFeptJ0=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: o1mOmlXhtbcfs1b6V+V2O7dOxPbPBztCzl/O+5ksfNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a4:48:cd:c9:c2:ab:fc:fc:9c:67:8f:15:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: Aug 23 03:02:28 2025 GMT
Not After : Aug 24 03:02:28 2025 GMT
Subject: CN=325d431cc064fdd25b8c9f1e356a3af6b41b3e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:7a:b8:0b:63:57:63:40:27:e8:0f:06:0f:
17:67:04:f3:f7:db:78:c2:dd:40:f9:6e:01:44:db:
ab:fd:b6:48:a1:11:e8:24:93:39:ae:9f:29:94:28:
64:30:53:b2:d2:4e:92:5e:d1:ad:3b:22:44:1e:29:
aa:1b:5c:c2:7a:3c:69:46:83:c0:d0:3e:bb:03:2c:
d7:62:79:c9:b8:8c:20:0e:9f:cd:25:82:40:d6:83:
0f:11:ce:db:c2:36:aa:74:0b:a7:93:f2:42:df:29:
b7:df:26:30:3c:d3:f4:b1:c5:be:0e:d6:98:fe:d5:
f4:23:65:7c:82:4c:ac:75:d3:36:e3:3e:48:99:6f:
ae:72:8c:16:c1:49:31:a1:04:99:f7:bd:33:05:90:
e3:d7:d9:da:32:da:2a:fd:55:fe:24:5a:b0:cb:48:
92:cc:42:3b:8f:59:0d:fd:42:34:d4:0b:7c:f6:67:
55:76:10:4e:35:a0:a7:89:c8:1d:e1:31:b9:70:8b:
a0:7f:2c:67:ef:69:85:e8:b9:bd:96:ca:e4:d3:32:
c8:08:88:3e:2e:94:6f:47:b7:75:d2:aa:6e:ee:18:
4d:45:b0:29:e2:d7:6c:12:3f:b9:5d:b9:f5:a9:a1:
a1:e1:d4:49:e1:01:5c:cb:44:36:e1:8b:6e:54:d3:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5D:43:1C:C0:64:FD:D2:5B:8C:9F:1E:35:6A:3A:F6:B4:1B:3E:6B
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:63:82:6b:cc:6e:2c:d0:82:55:3b:e8:3e:fd:70:04:69:6e:
48:bd:44:cb:1f:ff:8f:12:73:6e:88:89:e3:60:8f:ef:2c:1c:
84:67:22:90:8a:c2:d2:ed:49:a1:fc:eb:46:c5:56:a9:f0:99:
1b:b5:f6:fb:50:55:f1:9c:a5:86:47:7f:f7:e4:dd:15:39:eb:
6f:0e:e6:9c:e9:6d:11:7f:c0:d6:bf:77:7a:43:d1:b4:7e:98:
8e:7e:18:d8:c2:98:a3:95:64:32:fa:a7:3f:53:44:fa:b1:5a:
0c:83:44:b1:1a:19:53:57:60:a2:bb:70:cf:c8:3f:f5:ce:f0:
a8:79:dc:d6:2d:a2:c0:15:ca:9b:aa:97:ed:15:0b:c9:3a:93:
7f:6d:65:7b:2a:1d:9a:e3:e1:84:55:b5:36:3d:33:31:05:fa:
d3:d2:9b:9e:9a:49:b2:d8:90:8a:55:44:47:85:64:e4:fb:0c:
64:72:4f:e3:7b:5e:95:d4:2c:1f:c7:c4:72:75:a1:44:69:37:
aa:46:be:e3:a7:71:11:7e:ae:88:90:5b:23:62:7d:2f:3a:92:
bb:6b:35:e1:d3:86:fd:fa:a2:6f:ea:d3:0a:e0:9d:f2:25:0e:
20:90:48:6f:c5:f7:41:71:a5:ea:3e:62:51:a0:83:97:05:a7:
b6:55:7d:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4KRIzcnCq/z8nGePFemRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMGU2NWNhZGRiZWNkNDhkMmY4Nzc4Nzk5MzExMzg0MmJk
ZmNlNWQwHhcNMjUwODIzMDMwMjI4WhcNMjUwODI0MDMwMjI4WjAzMTEwLwYDVQQD
EygzMjVkNDMxY2MwNjRmZGQyNWI4YzlmMWUzNTZhM2FmNmI0MWIzZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFF6uAtjV2NAJ+gPBg8XZwTz99t4
wt1A+W4BRNur/bZIoRHoJJM5rp8plChkMFOy0k6SXtGtOyJEHimqG1zCejxpRoPA
0D67AyzXYnnJuIwgDp/NJYJA1oMPEc7bwjaqdAunk/JC3ym33yYwPNP0scW+DtaY
/tX0I2V8gkysddM24z5ImW+ucowWwUkxoQSZ970zBZDj19naMtoq/VX+JFqwy0iS
zEI7j1kN/UI01At89mdVdhBONaCnicgd4TG5cIugfyxn72mF6Lm9lsrk0zLICIg+
LpRvR7d10qpu7hhNRbAp4tdsEj+5Xbn1qaGh4dRJ4QFcy0Q24YtuVNPPxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJdQxzAZP3SW4yfHjVqOva0Gz5rMB8GA1UdIwQY
MBaAFMIOZcrdvs1I0vh3h5kxE4Qr385dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2It
N2VmYWE0YTc0Zjk3LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2ItN2VmYWE0YTc0Zjk3
LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuWOCa8xu
LNCCVTvoPv1wBGluSL1Eyx//jxJzboiJ42CP7ywchGcikIrC0u1JofzrRsVWqfCZ
G7X2+1BV8Zylhkd/9+TdFTnrbw7mnOltEX/A1r93ekPRtH6Yjn4Y2MKYo5VkMvqn
P1NE+rFaDINEsRoZU1dgortwz8g/9c7wqHnc1i2iwBXKm6qX7RULyTqTf21leyod
muPhhFW1Nj0zMQX609KbnppJstiQilVER4Vk5PsMZHJP43teldQsH8fEcnWhRGk3
qka+46dxEX6uiJBbI2J9LzqSu2s14dOG/fqib+rTCuCd8iUOIJBIb8X3QXGl6j5i
UaCDlwWntlV9sA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:22 2025 by rpki-client