Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier: Ha7Sxne5DQ72LMoY7lMOzEXep2AMWUolZbJ0Ex+raEg=
Subject key identifier: 75:CE:A8:70:F0:11:12:54:33:2F:93:3C:76:09:2A:C5:63:12:7C:05
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 0198D473C2CBF730A5B3124E39E9A73C1A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number: 048A
Signing time: Sat 23 Aug 2025 01:03:32 +0000
Manifest this update: Sat 23 Aug 2025 01:03:32 +0000
Manifest next update: Sun 24 Aug 2025 01:03:32 +0000
Files and hashes: 1: 7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa (hash: b8AATSifx7/LvpsKfDCuwWcrOC9fgkYZg2ZM6+VpEfM=)
2: iuHoct3zHKPAQY0zJWbgQODPfEo.roa (hash: Un9DAj/KSTfz3PzRpucfMK4GqYVgsTE2tiPdLJ964Po=)
3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: dhTEh/I1g1Gpl6jh3P9GYJmgjmCMKkbHu2RE+B+yXsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c2:cb:f7:30:a5:b3:12:4e:39:e9:a7:3c:1a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: Aug 23 01:03:32 2025 GMT
Not After : Aug 24 01:03:32 2025 GMT
Subject: CN=75cea870f0111254332f933c76092ac563127c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:37:ef:43:f3:2d:f9:aa:c4:ab:6f:77:e2:
62:e6:3a:33:71:3f:df:19:35:cf:71:1e:7c:37:20:
da:9a:c2:72:a8:02:14:c9:c2:0f:8e:84:20:3f:3c:
be:e7:b1:fd:58:49:86:2a:b0:03:48:8c:b3:0a:05:
78:6e:30:9c:2e:01:0e:83:44:a4:25:02:2f:59:de:
54:88:f9:14:bc:b0:ea:07:06:6e:6d:6e:f9:2a:b7:
49:86:4f:ad:bc:13:d0:d8:2f:17:41:b4:ff:59:da:
b6:7e:03:f2:ba:7c:a9:ee:dd:b5:29:21:28:41:49:
69:ee:ca:65:9a:6f:99:d7:4d:b6:ee:aa:ed:13:dc:
79:06:0b:d1:17:e5:71:e3:08:da:a1:96:bb:d4:3b:
d4:33:9f:f0:e1:d1:d0:79:92:83:56:54:f9:13:d7:
6e:8f:a0:be:ac:c3:2f:55:d9:5e:a5:65:b3:2e:f8:
eb:24:de:80:15:f3:e4:83:9a:03:6c:dd:04:e1:62:
7a:79:69:19:e8:66:95:47:b3:d7:4c:16:57:11:39:
34:69:c9:3d:db:18:bf:46:a9:35:09:fd:5b:d8:52:
1f:82:45:41:d9:84:8f:2b:d4:86:56:8d:5d:b3:eb:
f6:fa:92:26:d8:09:a3:a2:22:74:f9:82:80:56:d2:
7e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CE:A8:70:F0:11:12:54:33:2F:93:3C:76:09:2A:C5:63:12:7C:05
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7b:b5:a4:fd:5e:fc:b1:24:66:39:a6:03:fd:74:9a:bc:b4:
7f:f1:81:51:69:df:0f:38:dd:82:6d:c6:f9:6d:4d:41:e3:af:
5b:0f:d4:1c:76:32:b1:dc:7b:ca:7a:1a:37:e9:2a:8f:f9:90:
53:83:0f:74:58:75:f8:41:af:bd:fc:15:0d:3f:56:49:45:b0:
ea:ea:c2:7d:f6:7d:c6:8e:28:67:9c:5f:fd:55:68:91:52:64:
59:af:e9:21:b6:ca:c9:bc:e6:aa:3f:e4:47:00:4b:52:f7:a0:
7c:37:3f:a3:79:26:5b:25:d5:f6:4d:d3:ae:5b:36:8c:f8:42:
04:17:7b:c9:8c:e8:dd:47:0d:89:9a:d5:38:30:99:60:34:aa:
24:d8:02:79:5f:a3:15:fe:a0:40:21:55:e9:74:50:4e:ad:47:
d3:e0:6f:fb:8f:7c:28:c9:b7:3a:d1:51:4d:60:87:94:ef:9f:
33:03:bd:15:65:96:83:4e:af:d1:1a:5b:9f:a8:0a:2e:7a:3c:
70:27:d2:8c:8b:e2:8f:f4:0a:53:c2:46:5f:f7:4e:6c:0f:3b:
b6:92:7c:14:ed:94:d2:7d:43:c0:67:a8:b8:7d:39:b1:c4:f9:
85:29:2d:0e:0a:63:25:a8:35:62:cc:d9:11:b5:1e:ff:7c:39:
a8:1f:c2:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc8LL9zClsxJOOemnPBpVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZGRkMmQ0ZjAzMGZhMzYzOGMwNGJlNjM2ZWY5M2QyODky
NzE2NTIwHhcNMjUwODIzMDEwMzMyWhcNMjUwODI0MDEwMzMyWjAzMTEwLwYDVQQD
Eyg3NWNlYTg3MGYwMTExMjU0MzMyZjkzM2M3NjA5MmFjNTYzMTI3YzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhg370PzLfmqxKtvd+Ji5jozcT/f
GTXPcR58NyDamsJyqAIUycIPjoQgPzy+57H9WEmGKrADSIyzCgV4bjCcLgEOg0Sk
JQIvWd5UiPkUvLDqBwZubW75KrdJhk+tvBPQ2C8XQbT/Wdq2fgPyunyp7t21KSEo
QUlp7splmm+Z10227qrtE9x5BgvRF+Vx4wjaoZa71DvUM5/w4dHQeZKDVlT5E9du
j6C+rMMvVdlepWWzLvjrJN6AFfPkg5oDbN0E4WJ6eWkZ6GaVR7PXTBZXETk0ack9
2xi/Rqk1Cf1b2FIfgkVB2YSPK9SGVo1ds+v2+pIm2AmjoiJ0+YKAVtJ+mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXOqHDwERJUMy+TPHYJKsVjEnwFMB8GA1UdIwQY
MBaAFMDd0tTwMPo2OMBL5jbvk9KJJxZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzIt
NGZiNDA0ODVmZjdiLzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzItNGZiNDA0ODVmZjdi
LzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHu1pP1e
/LEkZjmmA/10mry0f/GBUWnfDzjdgm3G+W1NQeOvWw/UHHYysdx7ynoaN+kqj/mQ
U4MPdFh1+EGvvfwVDT9WSUWw6urCffZ9xo4oZ5xf/VVokVJkWa/pIbbKybzmqj/k
RwBLUvegfDc/o3kmWyXV9k3Trls2jPhCBBd7yYzo3UcNiZrVODCZYDSqJNgCeV+j
Ff6gQCFV6XRQTq1H0+Bv+498KMm3OtFRTWCHlO+fMwO9FWWWg06v0Rpbn6gKLno8
cCfSjIvij/QKU8JGX/dObA87tpJ8FO2U0n1DwGeouH05scT5hSktDgpjJag1YszZ
EbUe/3w5qB/CEw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:49 2025 by rpki-client