Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: KN8MEhHYSHq2/Q5EnC1oZE8+LpNuCM7FzW+Xwbn1MnQ=
Subject key identifier: C4:E6:BD:4D:9C:46:35:E9:9C:B9:36:10:09:6F:42:F3:0E:2B:41:94
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 0198D660559E1B3A1D4D711A59E6DABC87DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:34 +0000
Manifest this update: Sat 23 Aug 2025 10:01:34 +0000
Manifest next update: Sun 24 Aug 2025 10:01:34 +0000
Files and hashes: 1: kRQmIjZUZcW_fI2_4gYw0CKPjk8.roa (hash: GuGEs/myNDqnLNvt1oCueG5pjZk/wU9SkbqBX0DdzIw=)
2: kZ91QLg0xrut8heY5oLTREuaDCo.roa (hash: MHAbqSvE1IAdHrt1bDct/PVOIuPEBRkSyGqv/6pjqdI=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: x+ZN/GR0mxUOnnV2wDjoVYo/fs9B3dPAZap9J3r0SyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:55:9e:1b:3a:1d:4d:71:1a:59:e6:da:bc:87:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Aug 23 10:01:34 2025 GMT
Not After : Aug 24 10:01:34 2025 GMT
Subject: CN=c4e6bd4d9c4635e99cb93610096f42f30e2b4194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:82:8e:52:d6:92:35:17:d5:63:71:88:86:
d6:d2:95:d3:14:9f:4d:a5:45:d3:fd:8d:a7:52:d6:
d3:35:0d:6e:d4:ad:4b:c3:c9:2d:cf:24:51:a6:2d:
d4:a7:61:75:c9:1d:05:76:62:ea:ce:00:d6:cc:d0:
f0:aa:01:43:60:a4:67:56:87:03:17:7b:6c:9d:8e:
1d:f1:33:5f:90:17:f9:37:6e:f8:30:fb:1f:af:d7:
25:30:b5:29:9b:b8:e5:45:5d:91:7f:b7:22:a8:b9:
26:6a:8a:30:a5:78:fe:ba:09:83:e1:84:40:54:b0:
f6:13:51:99:b6:b9:ff:31:00:2f:2d:b4:33:f2:b7:
99:95:13:a0:70:83:4d:64:4d:e2:78:9c:a3:ab:4a:
1a:f8:27:0c:50:f0:a8:2b:e8:23:8e:a3:81:12:ae:
7d:d3:97:b8:31:e6:8d:0c:d4:30:a9:2d:37:b9:9c:
f1:58:93:13:4f:8a:cd:e2:71:9c:1f:87:a1:86:b8:
69:b2:16:0e:38:b4:a6:d6:5a:53:59:72:be:7b:e0:
02:d8:19:47:fd:f4:7a:3e:ef:21:8e:73:78:cc:ae:
05:2e:4c:14:27:61:81:9f:9f:29:50:65:71:cb:ae:
87:1f:d4:56:d3:93:42:f0:74:03:f2:5d:c8:09:70:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E6:BD:4D:9C:46:35:E9:9C:B9:36:10:09:6F:42:F3:0E:2B:41:94
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:82:ca:b5:62:d9:0a:1c:2d:f4:30:4c:d8:50:87:63:75:c6:
18:83:31:76:74:3e:b3:ca:e8:29:54:d0:78:ae:e8:7f:5b:48:
db:bb:8f:1f:62:b8:fc:35:1e:d3:fd:9e:bb:eb:a6:96:67:72:
e5:5f:c3:1b:41:f9:e9:db:58:99:c4:f3:3d:d7:a5:a0:77:65:
86:b8:8d:3a:33:e9:40:08:4b:a6:c8:3c:2c:e3:2d:ea:58:72:
91:12:ec:19:9a:cf:6b:f1:4f:33:34:d1:5b:ff:24:b7:1c:70:
f5:4c:16:47:7c:71:6b:75:8c:9c:01:1a:46:d4:46:d1:a8:f2:
30:34:76:51:60:af:d2:fe:46:7f:43:57:28:d0:16:e0:a9:e5:
53:a3:13:7b:bb:33:e6:cc:ac:1f:b3:11:ed:1f:dc:43:87:ae:
b2:1b:6e:b4:b9:65:f5:61:85:2c:4f:86:a6:90:ff:83:ef:ad:
46:fc:98:ec:29:1c:db:65:fd:a4:dc:a9:db:ae:d7:16:cc:6f:
5e:6f:19:9c:f3:45:07:ec:10:1b:05:e8:88:3d:6f:bf:8a:99:
a4:d5:1a:55:58:4b:33:e0:28:15:9c:3f:f7:03:ea:80:d3:d2:
80:41:03:90:a0:74:30:3a:56:3d:c3:b6:61:3e:9f:88:27:7e:
e3:f9:7f:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYFWeGzodTXEaWebavIfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzJjNWFlZjMzYzA2YzRhZWYyZGFjOGYwNTAzZmNiZGQ5
YTcyODcwHhcNMjUwODIzMTAwMTM0WhcNMjUwODI0MTAwMTM0WjAzMTEwLwYDVQQD
EyhjNGU2YmQ0ZDljNDYzNWU5OWNiOTM2MTAwOTZmNDJmMzBlMmI0MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZOCjlLWkjUX1WNxiIbW0pXTFJ9N
pUXT/Y2nUtbTNQ1u1K1Lw8ktzyRRpi3Up2F1yR0FdmLqzgDWzNDwqgFDYKRnVocD
F3tsnY4d8TNfkBf5N274MPsfr9clMLUpm7jlRV2Rf7ciqLkmaoowpXj+ugmD4YRA
VLD2E1GZtrn/MQAvLbQz8reZlROgcINNZE3ieJyjq0oa+CcMUPCoK+gjjqOBEq59
05e4MeaNDNQwqS03uZzxWJMTT4rN4nGcH4ehhrhpshYOOLSm1lpTWXK+e+AC2BlH
/fR6Pu8hjnN4zK4FLkwUJ2GBn58pUGVxy66HH9RW05NC8HQD8l3ICXB3HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTmvU2cRjXpnLk2EAlvQvMOK0GUMB8GA1UdIwQY
MBaAFMFyxa7zPAbErvLayPBQP8vdmnKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDIt
ZWE1ODcwNjUzMDc2LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDItZWE1ODcwNjUzMDc2
LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoLKtWLZ
Chwt9DBM2FCHY3XGGIMxdnQ+s8roKVTQeK7of1tI27uPH2K4/DUe0/2eu+umlmdy
5V/DG0H56dtYmcTzPdeloHdlhriNOjPpQAhLpsg8LOMt6lhykRLsGZrPa/FPMzTR
W/8ktxxw9UwWR3xxa3WMnAEaRtRG0ajyMDR2UWCv0v5Gf0NXKNAW4KnlU6MTe7sz
5sysH7MR7R/cQ4eushtutLll9WGFLE+GppD/g++tRvyY7Ckc22X9pNyp267XFsxv
Xm8ZnPNFB+wQGwXoiD1vv4qZpNUaVVhLM+AoFZw/9wPqgNPSgEEDkKB0MDpWPcO2
YT6fiCd+4/l/uA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:27:59 2025 by rpki-client