Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File: wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier: K2sPaNM5iuhnYEz9KOuvh5Lc23zNoVSMEMo9mkO1228=
Subject key identifier: F0:25:13:7A:30:7E:6B:C5:18:97:87:41:37:E3:5E:DB:7C:04:AB:99
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer: /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial: 0198D583C50921477D2D7706A28A15427575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number: 08BC
Signing time: Sat 23 Aug 2025 06:00:39 +0000
Manifest this update: Sat 23 Aug 2025 06:00:39 +0000
Manifest next update: Sun 24 Aug 2025 06:00:39 +0000
Files and hashes: 1: JlMTszQ0SriAWERqlr9FMnp6WvU.roa (hash: M6WDGwhPPqHvkOqSI6cVPu36gkAbrulfoDxAqaGV7po=)
2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: y3A0dtxjRXptPXtRaZDgqII1ScnNCTovuBhUkILLb/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c5:09:21:47:7d:2d:77:06:a2:8a:15:42:75:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Validity
Not Before: Aug 23 06:00:39 2025 GMT
Not After : Aug 24 06:00:39 2025 GMT
Subject: CN=f025137a307e6bc51897874137e35edb7c04ab99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:47:c8:0d:6e:70:ea:8c:0c:49:eb:ab:0a:
e5:29:09:58:2d:36:19:a4:69:60:99:97:8c:61:8d:
7b:fd:05:5a:52:9d:aa:2f:a3:6d:68:e5:12:5a:0a:
32:93:c0:54:66:f8:c7:bd:42:ac:77:54:61:ed:b6:
b8:98:c5:73:6c:34:11:a9:3a:7f:86:53:7c:4d:50:
22:d0:7d:5b:27:af:57:17:f0:e1:cd:d4:38:cb:93:
1e:9d:b2:33:78:99:96:e4:93:6b:7d:1c:c6:3f:39:
7e:b7:3e:8f:cd:c9:d4:5e:bb:ba:75:79:37:a1:6e:
5d:7c:ef:d9:ff:0f:cb:bf:26:11:12:5a:d1:53:b3:
76:8a:b5:a6:c3:d6:e9:e4:43:07:f1:19:f6:57:30:
ef:f2:ef:79:30:81:30:24:67:7f:e3:03:0a:10:fc:
7b:27:c5:97:0c:d4:19:3a:e7:89:15:6a:b1:33:9f:
3c:e7:26:09:bb:d5:0f:3e:94:76:c7:57:99:af:0e:
51:70:a6:3a:d0:3a:e8:9b:fa:00:6d:5c:db:82:e0:
3c:b5:37:a6:07:93:73:68:dc:61:34:ca:73:42:9a:
92:a1:3b:02:05:21:32:4a:f5:2e:cf:27:d4:3e:7f:
c6:02:2e:e5:e7:4d:c4:c9:d0:c1:76:8a:5d:c2:08:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:25:13:7A:30:7E:6B:C5:18:97:87:41:37:E3:5E:DB:7C:04:AB:99
X509v3 Authority Key Identifier:
keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b2:6f:06:5c:0d:46:37:84:c1:03:9b:3f:9b:7b:4b:32:1c:
f7:59:73:14:da:a7:62:b6:d3:e8:33:30:68:8d:e1:d9:0b:8d:
79:7d:8b:e9:49:e0:3b:d2:7c:f5:50:c7:00:ac:74:56:86:9f:
a3:36:2a:8d:bd:0d:6e:ef:dd:71:67:27:5c:82:c5:69:4a:33:
ab:e9:be:49:1a:30:36:26:3e:cb:87:ce:d6:ee:aa:2b:d5:1e:
5e:9c:3c:7e:a6:ed:38:d9:b9:3b:02:c0:41:7d:f7:31:4c:e6:
f0:a7:32:09:c8:8a:5e:d2:d4:d7:68:61:0c:21:70:80:c9:76:
6e:63:20:a4:8d:2c:f9:64:f7:9d:64:6a:50:36:72:30:7b:3b:
72:ec:e5:bd:2c:d2:5e:23:d8:e2:5a:89:9f:b1:b1:d9:46:9e:
4a:3f:e9:ae:59:e9:4b:84:62:6f:4a:36:5c:39:e1:c8:c6:f0:
6b:6f:8f:6e:61:3f:a1:b4:82:ae:01:18:cb:fa:6c:11:ad:f2:
84:a7:18:6b:3a:d2:a5:c9:cb:56:66:cf:bd:73:09:4c:32:e4:
bc:67:10:c5:28:b6:c0:33:36:0d:8f:3a:45:7d:f8:70:3b:01:
6e:54:95:09:ed:04:dc:3c:b9:d8:80:fb:f8:49:50:59:ca:71:
98:86:39:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg8UJIUd9LXcGoooVQnV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYTkxMWQ2OWM0ZjY0NTdhMTA5ZGU3N2IxYzc1MjQ5ZGM1
MzBlMTcwHhcNMjUwODIzMDYwMDM5WhcNMjUwODI0MDYwMDM5WjAzMTEwLwYDVQQD
EyhmMDI1MTM3YTMwN2U2YmM1MTg5Nzg3NDEzN2UzNWVkYjdjMDRhYjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17lHyA1ucOqMDEnrqwrlKQlYLTYZ
pGlgmZeMYY17/QVaUp2qL6NtaOUSWgoyk8BUZvjHvUKsd1Rh7ba4mMVzbDQRqTp/
hlN8TVAi0H1bJ69XF/DhzdQ4y5MenbIzeJmW5JNrfRzGPzl+tz6PzcnUXru6dXk3
oW5dfO/Z/w/LvyYRElrRU7N2irWmw9bp5EMH8Rn2VzDv8u95MIEwJGd/4wMKEPx7
J8WXDNQZOueJFWqxM5885yYJu9UPPpR2x1eZrw5RcKY60Drom/oAbVzbguA8tTem
B5NzaNxhNMpzQpqSoTsCBSEySvUuzyfUPn/GAi7l503EydDBdopdwgiBhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAlE3owfmvFGJeHQTfjXtt8BKuZMB8GA1UdIwQY
MBaAFMKpEdacT2RXoQned7HHUkncUw4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jNjUzNWQtNzIxZi00MzAxLTlkODkt
ZmNkYWQyYjU2NTZiLzEvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jNjUzNWQtNzIxZi00MzAxLTlkODktZmNkYWQyYjU2NTZi
LzEvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbJvBlwN
RjeEwQObP5t7SzIc91lzFNqnYrbT6DMwaI3h2QuNeX2L6UngO9J89VDHAKx0Voaf
ozYqjb0Nbu/dcWcnXILFaUozq+m+SRowNiY+y4fO1u6qK9UeXpw8fqbtONm5OwLA
QX33MUzm8KcyCciKXtLU12hhDCFwgMl2bmMgpI0s+WT3nWRqUDZyMHs7cuzlvSzS
XiPY4lqJn7Gx2UaeSj/prlnpS4Rib0o2XDnhyMbwa2+PbmE/obSCrgEYy/psEa3y
hKcYazrSpcnLVmbPvXMJTDLkvGcQxSi2wDM2DY86RX34cDsBblSVCe0E3Dy52ID7
+ElQWcpxmIY5GA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:13 2025 by rpki-client