Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: N/Hc9sSxmD/NVMPwZVgmufAFFYkEjsRvuFHWaTKgPqA=
Subject key identifier: 89:B7:FD:3A:42:C1:79:A0:5E:51:72:BA:A9:58:99:FE:73:68:19:68
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 0198D4047AFFAABF71C27894E6746EB47B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 042C
Signing time: Fri 22 Aug 2025 23:02:00 +0000
Manifest this update: Fri 22 Aug 2025 23:02:00 +0000
Manifest next update: Sat 23 Aug 2025 23:02:00 +0000
Files and hashes: 1: RhPTeugmZDfkfUBJoLhRret8XmI.roa (hash: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: 4COetvkrupT2MgP5x77a0A79QA3GX6H81JS4DU/UNHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:7a:ff:aa:bf:71:c2:78:94:e6:74:6e:b4:7b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Aug 22 23:02:00 2025 GMT
Not After : Aug 23 23:02:00 2025 GMT
Subject: CN=89b7fd3a42c179a05e5172baa95899fe73681968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:2a:e0:e6:f2:56:88:78:b3:56:13:08:fe:
9c:e8:d0:4c:a7:f9:b8:26:b4:0d:56:c7:db:3d:a8:
5e:3c:18:b2:3c:59:1d:d7:06:e9:fe:45:f1:5b:07:
0c:bf:42:43:6d:5f:07:e8:f9:53:49:cf:7a:06:ad:
68:d3:ec:71:b7:5c:0e:2a:b6:e2:79:4a:c6:34:34:
9c:f5:df:59:5f:9e:b4:a6:32:2b:32:33:d0:36:10:
38:fa:73:25:9f:6e:3a:71:d4:ed:61:a3:ce:10:53:
dd:a6:53:87:cd:03:16:90:fa:71:a3:bb:33:ff:06:
5d:94:f4:0a:6e:c4:20:ca:89:fc:2c:5c:0d:65:3a:
06:7c:40:1c:ed:32:18:f2:7d:e1:1b:30:fe:c1:00:
16:b1:79:40:c4:60:bd:b2:9d:36:a3:4a:f6:ab:c8:
67:37:08:39:c0:bd:ce:ad:3d:90:a2:a7:8f:8c:93:
c2:6a:e3:c9:7f:87:54:63:94:d7:1e:a2:0f:6a:f1:
1f:9a:21:08:14:f0:e4:97:64:8a:89:e9:1a:fd:65:
3a:d4:9e:0b:b9:da:74:87:d9:ce:26:3c:07:4d:29:
9e:1a:d2:05:e7:91:2e:6f:34:5a:a5:4d:ba:be:8d:
2b:f5:61:c3:98:3f:38:f1:0c:e3:ee:06:0a:05:9c:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B7:FD:3A:42:C1:79:A0:5E:51:72:BA:A9:58:99:FE:73:68:19:68
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a9:f1:b4:62:b1:36:0e:c1:88:f5:71:cf:1c:7a:e9:ff:79:
a9:f3:d0:77:5f:6c:99:9d:c5:99:ce:3a:8f:ba:46:a3:8b:22:
02:0f:31:2a:bc:8d:56:af:e6:24:cb:02:c6:1f:a0:87:a1:c8:
89:f8:37:44:6e:c5:e9:22:19:3e:fb:59:e8:fd:13:87:79:26:
6c:5f:be:13:dd:d6:8c:1d:ed:b2:eb:76:36:4b:30:aa:29:5b:
03:a2:cd:07:3f:ca:8f:47:6f:c2:37:71:2b:c0:f9:1e:9c:a6:
2b:54:cd:95:8e:88:f4:bc:ab:f6:d1:5c:a3:eb:62:a1:f8:c8:
68:fd:48:c0:84:de:eb:73:73:43:c8:e7:50:14:9b:11:13:92:
62:b3:27:e2:96:7a:38:dd:6d:37:b9:48:52:7a:58:2a:e9:9e:
53:1a:8e:1a:2c:a4:e3:c1:43:f1:31:81:ca:79:72:ee:2b:83:
f6:85:95:69:b1:45:a8:57:ba:76:a6:88:48:be:89:92:d1:24:
72:ac:42:aa:67:9c:7f:28:eb:7c:0b:5f:62:2e:c9:23:17:eb:
de:5e:09:66:91:4b:28:96:9f:e3:f5:58:1a:9b:c5:55:1e:c6:
f0:c4:79:45:2c:1b:89:3b:0b:dc:7b:c5:e9:1c:00:1c:d0:be:
52:76:c4:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBHr/qr9xwniU5nRutHuYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGJhODRjZGRlYTQzZmNiZTQxZTk4NmIxZmM3ODEzN2Rj
ZmVmZDcwHhcNMjUwODIyMjMwMjAwWhcNMjUwODIzMjMwMjAwWjAzMTEwLwYDVQQD
Eyg4OWI3ZmQzYTQyYzE3OWEwNWU1MTcyYmFhOTU4OTlmZTczNjgxOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAkq4ObyVoh4s1YTCP6c6NBMp/m4
JrQNVsfbPahePBiyPFkd1wbp/kXxWwcMv0JDbV8H6PlTSc96Bq1o0+xxt1wOKrbi
eUrGNDSc9d9ZX560pjIrMjPQNhA4+nMln246cdTtYaPOEFPdplOHzQMWkPpxo7sz
/wZdlPQKbsQgyon8LFwNZToGfEAc7TIY8n3hGzD+wQAWsXlAxGC9sp02o0r2q8hn
Nwg5wL3OrT2QoqePjJPCauPJf4dUY5TXHqIPavEfmiEIFPDkl2SKieka/WU61J4L
udp0h9nOJjwHTSmeGtIF55EubzRapU26vo0r9WHDmD848Qzj7gYKBZzdfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIm3/TpCwXmgXlFyuqlYmf5zaBloMB8GA1UdIwQY
MBaAFFnbqEzd6kP8vkHphrH8eBN9z+/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEt
MDVkMDhjZWEwMmE5LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEtMDVkMDhjZWEwMmE5
LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKnxtGKx
Ng7BiPVxzxx66f95qfPQd19smZ3Fmc46j7pGo4siAg8xKryNVq/mJMsCxh+gh6HI
ifg3RG7F6SIZPvtZ6P0Th3kmbF++E93WjB3tsut2NkswqilbA6LNBz/Kj0dvwjdx
K8D5HpymK1TNlY6I9Lyr9tFco+tiofjIaP1IwITe63NzQ8jnUBSbEROSYrMn4pZ6
ON1tN7lIUnpYKumeUxqOGiyk48FD8TGBynly7iuD9oWVabFFqFe6dqaISL6JktEk
cqxCqmecfyjrfAtfYi7JIxfr3l4JZpFLKJaf4/VYGpvFVR7G8MR5RSwbiTsL3HvF
6RwAHNC+UnbEyA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:25 2025 by rpki-client