Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
File: WrK6mr-B1s-AM83N68jfj34iwow.mft (raw, json)
Hash identifier: PXuRjHVEEz1LCqnaHvPg92ua+pZJvJmBwbpLgqYo3XQ=
Subject key identifier: 3A:75:95:1E:6B:D8:31:9E:5E:4A:B8:7D:2C:A0:C1:11:71:8F:82:74
Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
Certificate issuer: /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Certificate serial: 0198D58385C60F627D41128B98B88A985F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
Manifest number: 02F9
Signing time: Sat 23 Aug 2025 06:00:23 +0000
Manifest this update: Sat 23 Aug 2025 06:00:23 +0000
Manifest next update: Sun 24 Aug 2025 06:00:23 +0000
Files and hashes: 1: HfvQGv3fkx8EbAZWjLyDRRI_Z8o.roa (hash: L6g/T7YHsTiEPnLp25ze+rccMiIRyJAPI1nh81w0wDo=)
2: WrK6mr-B1s-AM83N68jfj34iwow.crl (hash: mTIapWSP3PmmrTjMFUCBMo+TxxcW7c1E9jF9/SF+gbk=)
3: x4NMd_GpZKC3wjvt7UJp4kwmNNg.roa (hash: KiYRpe0+Ri1YnwEQ5QKwXeajhvNgmP7QYMIxZrED/ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:85:c6:0f:62:7d:41:12:8b:98:b8:8a:98:5f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Validity
Not Before: Aug 23 06:00:23 2025 GMT
Not After : Aug 24 06:00:23 2025 GMT
Subject: CN=3a75951e6bd8319e5e4ab87d2ca0c111718f8274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:50:4d:81:ed:f8:2e:60:44:98:eb:0d:d0:22:
82:aa:07:0f:eb:69:55:0c:a6:65:83:ac:fd:28:17:
66:24:03:f0:fb:8e:57:44:5f:ab:fd:e0:65:8d:2d:
35:af:ee:ce:66:f3:2a:ac:6a:33:e2:0b:80:9b:c2:
ec:d5:00:52:87:c6:60:64:80:07:88:ac:b3:ac:05:
ae:1e:7e:fb:a1:15:4c:ca:15:15:9b:20:d7:c4:a5:
8c:75:93:b8:c4:bd:4c:32:d0:aa:a3:6f:df:62:f1:
de:f7:9b:90:3c:36:6b:7c:0b:cb:42:2a:16:c4:69:
de:f7:34:1f:7d:72:ee:6c:1b:34:8e:99:e8:f5:9c:
be:44:19:ae:0b:c1:fc:a7:a3:b0:3d:6e:15:3f:f4:
7a:6c:64:1b:d6:05:d7:2f:22:34:0a:07:39:a1:37:
a2:b8:8f:e2:c9:c8:48:58:45:91:7f:b2:08:b9:6b:
05:d3:ae:77:24:ac:1a:43:8c:24:d8:11:fa:47:70:
13:4b:ec:c0:2f:2f:6d:1d:f1:d2:4b:1b:77:9f:37:
a0:42:93:ff:37:58:b8:0b:d8:6e:9b:f5:05:f9:bf:
d9:b4:bd:63:c5:d4:7e:be:41:52:f0:28:2a:48:a4:
22:50:34:52:8c:b1:41:19:bb:19:5e:97:11:b6:3e:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:75:95:1E:6B:D8:31:9E:5E:4A:B8:7D:2C:A0:C1:11:71:8F:82:74
X509v3 Authority Key Identifier:
keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ee:39:19:ee:8c:07:c5:e7:33:a3:d5:5b:b5:28:5d:0e:76:
f2:4f:62:bb:af:7a:0f:14:0a:6a:37:77:e3:da:96:c9:2a:28:
9e:49:7c:03:87:31:5e:3d:0f:ef:fd:f1:ce:6c:e3:17:ff:4d:
1e:5f:93:0f:d5:89:37:9c:30:6e:04:0d:3f:d0:23:e8:70:c6:
5e:a6:5d:e3:61:d1:a6:98:fc:de:71:7a:e8:c9:2a:ce:7f:46:
76:11:0b:31:e0:c8:d5:e0:04:1c:e7:47:cf:2f:be:60:43:c6:
5d:46:ac:3a:17:b8:36:33:1f:04:15:9f:ae:eb:de:0d:c6:57:
f7:b3:0b:6a:0a:7a:0a:e4:73:d4:92:d7:d3:b0:f5:72:0b:3d:
01:5e:4c:4f:e7:73:11:54:df:ee:42:67:03:7d:7e:44:09:c5:
76:e5:a2:c8:64:cd:b8:3f:64:29:c3:0d:c4:0a:4d:13:0d:38:
60:59:40:50:1c:fc:5e:30:d7:16:88:6d:d9:94:f5:b0:e3:fa:
99:62:7c:50:84:86:59:d9:ac:cc:07:44:10:15:08:44:86:8b:
41:16:9b:84:52:6f:0f:8f:43:e6:3e:bc:dd:38:c6:fd:8b:74:
b1:ed:5c:31:4b:0e:8e:e7:4a:a9:b4:cc:6d:c4:99:67:3a:65:
f9:0e:d7:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg4XGD2J9QRKLmLiKmF8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYjJiYTlhYmY4MWQ2Y2Y4MDMzY2RjZGViYzhkZjhmN2Uy
MmMyOGMwHhcNMjUwODIzMDYwMDIzWhcNMjUwODI0MDYwMDIzWjAzMTEwLwYDVQQD
EygzYTc1OTUxZTZiZDgzMTllNWU0YWI4N2QyY2EwYzExMTcxOGY4Mjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVBNge34LmBEmOsN0CKCqgcP62lV
DKZlg6z9KBdmJAPw+45XRF+r/eBljS01r+7OZvMqrGoz4guAm8Ls1QBSh8ZgZIAH
iKyzrAWuHn77oRVMyhUVmyDXxKWMdZO4xL1MMtCqo2/fYvHe95uQPDZrfAvLQioW
xGne9zQffXLubBs0jpno9Zy+RBmuC8H8p6OwPW4VP/R6bGQb1gXXLyI0Cgc5oTei
uI/iychIWEWRf7IIuWsF0653JKwaQ4wk2BH6R3ATS+zALy9tHfHSSxt3nzegQpP/
N1i4C9hum/UF+b/ZtL1jxdR+vkFS8CgqSKQiUDRSjLFBGbsZXpcRtj4R0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp1lR5r2DGeXkq4fSygwRFxj4J0MB8GA1UdIwQY
MBaAFFqyupq/gdbPgDPNzevI349+IsKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3JLNm1yLUIxcy1BTTgzTjY4amZqMzRpd293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hNjA4YzUtNDk2ZC00OTllLWFmNDEt
NmRmYmJkZTUyZGVhLzEvV3JLNm1yLUIxcy1BTTgzTjY4amZqMzRpd293Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9hNjA4YzUtNDk2ZC00OTllLWFmNDEtNmRmYmJkZTUyZGVh
LzEvV3JLNm1yLUIxcy1BTTgzTjY4amZqMzRpd293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWe45Ge6M
B8XnM6PVW7UoXQ528k9iu696DxQKajd349qWySoonkl8A4cxXj0P7/3xzmzjF/9N
Hl+TD9WJN5wwbgQNP9Aj6HDGXqZd42HRppj83nF66Mkqzn9GdhELMeDI1eAEHOdH
zy++YEPGXUasOhe4NjMfBBWfruveDcZX97MLagp6CuRz1JLX07D1cgs9AV5MT+dz
EVTf7kJnA31+RAnFduWiyGTNuD9kKcMNxApNEw04YFlAUBz8XjDXFoht2ZT1sOP6
mWJ8UISGWdmszAdEEBUIRIaLQRabhFJvD49D5j683TjG/Yt0se1cMUsOjudKqbTM
bcSZZzpl+Q7XpA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:37 2025 by rpki-client