Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier: WsOEeVkiRowlXjrzcbB5BXVx3NkzNNFkOJi0t0Qz6Xw=
Subject key identifier: A7:FF:90:DD:09:4D:68:AA:88:2A:E2:08:94:53:66:0F:BD:29:50:FE
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial: 0198D54DD9D90A31778B3F5EA1DCD91F1C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number: 0F1D
Signing time: Sat 23 Aug 2025 05:01:45 +0000
Manifest this update: Sat 23 Aug 2025 05:01:45 +0000
Manifest next update: Sun 24 Aug 2025 05:01:45 +0000
Files and hashes: 1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=)
2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: NmEPzzZRyb810WFIawNy/iPvLi+lcUrgrcgjck3j/7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d9:d9:0a:31:77:8b:3f:5e:a1:dc:d9:1f:1c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Validity
Not Before: Aug 23 05:01:45 2025 GMT
Not After : Aug 24 05:01:45 2025 GMT
Subject: CN=a7ff90dd094d68aa882ae2089453660fbd2950fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:c9:bc:93:69:9b:80:2d:19:c3:98:5e:b9:
48:33:94:b8:6b:be:26:02:dc:39:6b:61:4c:19:d7:
e5:fb:73:ad:73:a0:83:de:5d:1a:b0:f7:fb:82:c8:
1f:9d:d6:59:6f:be:9c:1c:35:c9:d7:e6:8b:33:da:
e5:ae:27:84:73:68:0d:cd:90:50:30:06:c5:81:bb:
37:d3:c9:3f:1d:17:41:9d:4b:05:4b:eb:15:6b:40:
77:c1:22:37:9c:5a:2c:34:ac:7c:ff:8b:2b:be:3a:
9e:4b:eb:72:a9:fb:4a:b8:0a:82:c9:aa:c0:6e:00:
58:c2:8e:91:3c:f1:95:bb:ef:62:67:23:7e:cc:b7:
5a:29:a3:fb:60:54:15:0b:85:78:5b:24:ec:5c:9f:
10:78:91:5b:2f:ef:e7:23:30:4a:85:bc:63:60:93:
9f:c8:04:12:4f:ba:3c:9a:35:ef:33:79:a6:66:c4:
6b:23:13:cf:61:94:ac:e0:ab:a1:cd:cc:9d:60:49:
89:7a:a3:51:f2:2f:24:73:36:ba:98:9d:57:e2:af:
eb:15:63:e0:8c:6c:87:15:c7:c7:5e:19:ff:80:70:
2a:dd:f2:fc:5f:34:5b:55:5f:f9:ba:e8:ba:8b:0d:
ee:cd:dd:26:0d:b3:45:4a:81:c9:84:2d:c5:50:44:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:90:DD:09:4D:68:AA:88:2A:E2:08:94:53:66:0F:BD:29:50:FE
X509v3 Authority Key Identifier:
keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fb:8d:eb:a3:e7:c1:a7:c5:dc:3f:96:3a:6c:c9:3d:f3:39:
00:a6:b5:cf:c4:65:7c:2b:51:8f:39:fc:9d:f2:50:68:3e:a2:
cb:46:7e:a7:a3:a7:aa:3a:41:9e:7b:6c:06:1e:59:24:a1:c1:
9d:e2:db:7b:73:91:c7:55:4f:0a:b4:41:d7:2a:30:02:53:24:
ed:0c:b5:af:c9:72:6e:25:d8:73:4b:8a:30:4b:a3:8b:66:40:
52:21:ce:10:c5:85:9c:e8:bb:a9:8d:6b:23:94:00:3e:60:81:
bb:f7:39:2c:14:74:ab:9f:98:98:e6:68:b6:e2:76:0f:cf:44:
05:02:ce:f2:42:10:40:f0:bd:3e:16:54:f4:c7:b0:b0:6e:7e:
d7:86:f3:cb:d9:b6:9e:b8:df:a9:e4:52:a1:ab:9d:51:63:2e:
f8:ba:e2:d2:60:9b:cc:4e:45:e0:90:bb:30:51:4d:ce:db:e9:
1f:db:1c:82:03:f7:84:92:ae:22:18:05:f3:c6:9e:1c:ce:81:
03:27:84:45:65:be:d2:7d:2e:a8:9a:a2:a6:eb:3c:61:99:20:
d2:7c:25:45:ab:f1:8a:0b:e1:ee:dc:77:e7:74:f7:29:43:a0:
45:77:d6:13:46:c0:b3:08:78:1d:3c:e3:3b:ad:12:35:51:7a:
73:a3:e1:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTdnZCjF3iz9eodzZHxxGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNzc1MGI4MzExMWQ0MTcxYmJmNTVjYTAyMzIyYzFhMGRj
MGFjMzIwHhcNMjUwODIzMDUwMTQ1WhcNMjUwODI0MDUwMTQ1WjAzMTEwLwYDVQQD
EyhhN2ZmOTBkZDA5NGQ2OGFhODgyYWUyMDg5NDUzNjYwZmJkMjk1MGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNPJvJNpm4AtGcOYXrlIM5S4a74m
Atw5a2FMGdfl+3Otc6CD3l0asPf7gsgfndZZb76cHDXJ1+aLM9rlrieEc2gNzZBQ
MAbFgbs308k/HRdBnUsFS+sVa0B3wSI3nFosNKx8/4srvjqeS+tyqftKuAqCyarA
bgBYwo6RPPGVu+9iZyN+zLdaKaP7YFQVC4V4WyTsXJ8QeJFbL+/nIzBKhbxjYJOf
yAQST7o8mjXvM3mmZsRrIxPPYZSs4KuhzcydYEmJeqNR8i8kcza6mJ1X4q/rFWPg
jGyHFcfHXhn/gHAq3fL8XzRbVV/5uui6iw3uzd0mDbNFSoHJhC3FUESP5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKf/kN0JTWiqiCriCJRTZg+9KVD+MB8GA1UdIwQY
MBaAFMB3ULgxEdQXG79VygIyLBoNwKwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iZTkzMTEtNjZkOC00YzE5LTgyNjct
M2M1MjliZjYyZTU0LzEvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iZTkzMTEtNjZkOC00YzE5LTgyNjctM2M1MjliZjYyZTU0
LzEvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfuN66Pn
wafF3D+WOmzJPfM5AKa1z8RlfCtRjzn8nfJQaD6iy0Z+p6OnqjpBnntsBh5ZJKHB
neLbe3ORx1VPCrRB1yowAlMk7Qy1r8lybiXYc0uKMEuji2ZAUiHOEMWFnOi7qY1r
I5QAPmCBu/c5LBR0q5+YmOZotuJ2D89EBQLO8kIQQPC9PhZU9MewsG5+14bzy9m2
nrjfqeRSoaudUWMu+Lri0mCbzE5F4JC7MFFNztvpH9scggP3hJKuIhgF88aeHM6B
AyeERWW+0n0uqJqipus8YZkg0nwlRavxigvh7tx353T3KUOgRXfWE0bAswh4HTzj
O60SNVF6c6PhkA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:35 2025 by rpki-client