Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: Qoj6gF0CvxHLNzd2VBXAadrEBtBqikjMPFVPusBeL7A=
Subject key identifier: 99:72:B6:55:AB:4C:0B:A1:9F:2C:44:C5:56:1A:9D:75:AA:FE:49:5C
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 0198D7A93C846C673DEE34AA3B192FB66DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0885
Signing time: Sat 23 Aug 2025 16:00:49 +0000
Manifest this update: Sat 23 Aug 2025 16:00:49 +0000
Manifest next update: Sun 24 Aug 2025 16:00:49 +0000
Files and hashes: 1: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (hash: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=)
2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: hY5l6XgMzp5/dMRTna1mDtLCeU9TGK9L0NZh3LyxriU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:3c:84:6c:67:3d:ee:34:aa:3b:19:2f:b6:6d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Aug 23 16:00:49 2025 GMT
Not After : Aug 24 16:00:49 2025 GMT
Subject: CN=9972b655ab4c0ba19f2c44c5561a9d75aafe495c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:6f:00:94:b0:96:c8:2d:96:a3:61:c9:8a:
ad:53:ec:b4:97:5c:36:10:a3:40:85:8b:84:2b:38:
87:b0:b8:6f:63:ab:ec:58:b1:b3:ce:a6:4e:db:90:
08:ea:a2:b0:41:3d:83:0b:23:1a:95:5b:54:f3:21:
93:07:ae:d3:0a:92:fa:18:21:79:cb:20:75:2e:16:
ac:8a:52:4c:26:67:ab:17:96:7b:a2:21:2e:db:e4:
06:41:a7:89:78:79:62:78:8a:b0:a1:8a:99:30:9c:
f3:de:ef:16:1f:8d:54:1a:e2:4c:10:51:40:ab:80:
39:22:2f:5f:de:72:73:14:a4:5e:93:4f:d4:f0:7a:
00:3f:92:2d:37:da:d8:da:e4:42:88:14:c5:a0:7c:
aa:55:ba:8c:10:b8:d9:1c:14:84:9b:88:45:1a:5f:
a8:5d:12:d7:70:c4:66:c1:9b:0f:65:83:dd:a6:ce:
b2:95:42:dc:8f:f4:53:38:99:59:34:44:17:33:55:
ac:42:4b:92:59:13:a4:8c:7c:eb:12:b5:35:72:b9:
8b:7c:96:4b:e0:40:ae:57:64:ab:11:a6:dc:eb:19:
bd:53:1b:44:3e:46:e0:5e:59:a3:91:1d:4a:18:2b:
95:dc:ef:38:b7:11:8b:ed:14:d6:40:49:66:49:5d:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:72:B6:55:AB:4C:0B:A1:9F:2C:44:C5:56:1A:9D:75:AA:FE:49:5C
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e8:c4:e9:f4:ff:3f:53:13:eb:d7:e8:04:72:0d:48:d9:8c:
36:d7:dc:70:8f:39:ad:ed:4f:f1:bc:d0:f8:9c:eb:d0:0c:a1:
de:87:89:96:56:03:cd:df:03:a2:5b:67:a4:da:84:25:2f:f6:
a0:94:48:ed:a7:b7:8c:e1:8c:4b:2c:03:62:72:04:1f:a7:5f:
ae:1f:36:68:1b:50:d9:a9:b5:99:f0:e5:2e:ef:03:9b:94:c2:
a1:63:9b:72:ca:93:77:05:39:66:06:36:ae:eb:1a:00:3d:3d:
af:95:22:d3:b9:d1:85:d8:95:bc:69:63:f1:f6:30:b2:e9:be:
34:eb:6e:88:9a:dd:55:7d:df:26:4f:1e:66:18:95:a7:d7:79:
c4:85:dc:79:a8:cb:26:65:44:f3:52:83:bf:8d:39:a3:bd:6e:
fa:c4:c0:a3:0f:31:fa:2b:64:b3:12:1b:97:6a:45:e3:95:54:
4e:35:42:1d:34:67:6e:11:8e:45:a9:06:5c:a1:7b:bc:b5:fc:
52:68:67:3e:96:33:90:41:ce:c2:8e:13:b4:94:6c:2c:79:14:
d2:c9:18:5d:b9:33:51:10:02:77:41:e1:99:80:a2:12:d1:c9:
df:f6:27:80:07:13:2d:44:b4:e6:9a:f0:93:57:44:aa:8d:d2:
d7:92:30:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqTyEbGc97jSqOxkvtm2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjEyNTg5NzRlZThlMDU0NTYwYzcxNzZmODM0N2Q0MzU1
YjlhODcwHhcNMjUwODIzMTYwMDQ5WhcNMjUwODI0MTYwMDQ5WjAzMTEwLwYDVQQD
Eyg5OTcyYjY1NWFiNGMwYmExOWYyYzQ0YzU1NjFhOWQ3NWFhZmU0OTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QZvAJSwlsgtlqNhyYqtU+y0l1w2
EKNAhYuEKziHsLhvY6vsWLGzzqZO25AI6qKwQT2DCyMalVtU8yGTB67TCpL6GCF5
yyB1LhasilJMJmerF5Z7oiEu2+QGQaeJeHlieIqwoYqZMJzz3u8WH41UGuJMEFFA
q4A5Ii9f3nJzFKRek0/U8HoAP5ItN9rY2uRCiBTFoHyqVbqMELjZHBSEm4hFGl+o
XRLXcMRmwZsPZYPdps6ylULcj/RTOJlZNEQXM1WsQkuSWROkjHzrErU1crmLfJZL
4ECuV2SrEabc6xm9UxtEPkbgXlmjkR1KGCuV3O84txGL7RTWQElmSV2apQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlytlWrTAuhnyxExVYanXWq/klcMB8GA1UdIwQY
MBaAFMIhJYl07o4FRWDHF2+DR9Q1W5qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgt
MjVmNzlkMmQ4YzE3LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgtMjVmNzlkMmQ4YzE3
LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+jE6fT/
P1MT69foBHINSNmMNtfccI85re1P8bzQ+Jzr0Ayh3oeJllYDzd8DoltnpNqEJS/2
oJRI7ae3jOGMSywDYnIEH6dfrh82aBtQ2am1mfDlLu8Dm5TCoWObcsqTdwU5ZgY2
rusaAD09r5Ui07nRhdiVvGlj8fYwsum+NOtuiJrdVX3fJk8eZhiVp9d5xIXceajL
JmVE81KDv405o71u+sTAow8x+itksxIbl2pF45VUTjVCHTRnbhGORakGXKF7vLX8
UmhnPpYzkEHOwo4TtJRsLHkU0skYXbkzURACd0HhmYCiEtHJ3/YngAcTLUS05prw
k1dEqo3S15IwSA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:21:38 2025 by rpki-client