Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
File: wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft (raw, json)
Hash identifier: O+x4IjPt0hZk5vdSmh6Ps2kd6n1LjKhFpK2QGQ/aY34=
Subject key identifier: BB:07:96:3F:9E:21:57:C1:94:82:EF:9C:06:0B:D6:42:82:EC:E9:E6
Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
Certificate issuer: /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Certificate serial: 0198D8845A462FE01AA98D699225FDB0A613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
Manifest number: 054E
Signing time: Sat 23 Aug 2025 20:00:09 +0000
Manifest this update: Sat 23 Aug 2025 20:00:09 +0000
Manifest next update: Sun 24 Aug 2025 20:00:09 +0000
Files and hashes: 1: KG9HkmRGaF_sHhDWjx3vp73PeIA.roa (hash: xtQ/Bf0q+zKX28vYl4yuK/JzcH8nDzNW75ipUDIj1iY=)
2: wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl (hash: FqyzVRDRS0KEsB17I2I6ib5wFkJUSjS6SD2ExyQumwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:5a:46:2f:e0:1a:a9:8d:69:92:25:fd:b0:a6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Validity
Not Before: Aug 23 20:00:09 2025 GMT
Not After : Aug 24 20:00:09 2025 GMT
Subject: CN=bb07963f9e2157c19482ef9c060bd64282ece9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:65:ec:60:9b:c6:15:51:b8:65:b2:65:e1:
36:2f:d6:95:2b:6a:ef:e2:5d:d9:59:d3:ea:ed:b3:
de:36:9b:16:31:51:e9:4e:38:2f:15:17:32:46:27:
f9:fe:64:95:dc:cd:40:7e:42:84:d8:f0:94:28:1b:
15:13:74:bb:18:84:89:b9:5d:df:8d:f4:1f:8d:ca:
18:7f:d1:03:a4:72:f2:ce:0b:00:68:e9:0f:98:18:
b9:87:1d:31:e3:15:a2:a3:82:a4:6d:a5:90:f6:20:
0b:ba:29:53:d0:7e:40:50:5f:ad:2c:8a:65:dc:0b:
56:43:dc:1e:5b:f6:66:a4:f7:4a:b9:0a:47:a5:43:
72:1f:cf:82:a9:63:0c:12:d7:80:8d:58:a8:ff:2a:
36:d3:5a:6f:bf:fd:a9:b2:23:5b:36:e4:47:54:cc:
db:27:64:4c:04:49:53:68:ca:81:0b:dd:2c:4d:75:
5a:ba:e2:c5:dd:a0:80:73:2c:23:5e:19:6c:4e:0f:
81:a9:53:67:55:a4:e7:dc:34:8e:9e:ba:6c:c5:f2:
aa:0f:bb:ff:05:5c:c5:64:32:db:32:45:42:45:66:
2f:b3:3a:7a:e5:30:9e:94:43:48:70:bc:6c:3a:f8:
7f:8b:68:76:8f:aa:68:68:96:65:ec:bb:cb:8d:de:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:07:96:3F:9E:21:57:C1:94:82:EF:9C:06:0B:D6:42:82:EC:E9:E6
X509v3 Authority Key Identifier:
keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:83:d2:78:6e:74:63:96:ed:ef:56:7e:37:54:46:64:cb:19:
cb:cd:68:f1:a4:73:79:1c:4e:e0:85:f6:25:02:96:55:42:5a:
f3:dd:d7:7b:e2:a8:2f:1f:d0:c2:59:1d:d1:71:d9:2c:e7:55:
53:25:ab:80:3b:9d:f2:3d:84:2f:7b:d3:53:60:fb:e0:59:7e:
b6:ef:00:c3:6d:51:6e:b0:1f:47:47:28:d4:d5:ff:68:83:22:
2f:62:ca:6f:ac:ee:05:9b:d6:d4:14:dc:16:51:fe:22:86:6e:
3b:e2:61:a1:79:07:cd:4c:4d:66:0e:36:b9:7e:f5:12:26:56:
32:c3:c6:65:11:84:7c:a5:ca:26:13:38:21:81:06:62:c1:33:
84:b7:55:ce:b5:2c:49:56:77:a1:44:f9:f4:f4:b0:0c:70:45:
64:f2:26:07:99:d9:54:1a:9e:84:6c:22:33:bc:d3:28:a3:c0:
80:98:5d:d1:b0:e9:80:5e:08:49:b5:07:d6:a8:bb:62:32:50:
3d:b7:f5:93:cb:d3:46:e1:af:b0:0a:b4:49:09:fc:b9:1f:1d:
9a:21:67:ff:fb:14:78:3c:32:ac:9f:92:14:a3:bc:83:1f:3e:
3e:0b:b7:f6:24:38:ed:d9:0d:40:c7:06:f7:92:9c:a2:cd:ec:
80:cf:33:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYhFpGL+AaqY1pkiX9sKYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGE4OGQ3ZTVhNTY1ZWE3MTljZmM0MGQ4YmI2M2VlMTY3
MTg1NmEwHhcNMjUwODIzMjAwMDA5WhcNMjUwODI0MjAwMDA5WjAzMTEwLwYDVQQD
EyhiYjA3OTYzZjllMjE1N2MxOTQ4MmVmOWMwNjBiZDY0MjgyZWNlOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Zl7GCbxhVRuGWyZeE2L9aVK2rv
4l3ZWdPq7bPeNpsWMVHpTjgvFRcyRif5/mSV3M1AfkKE2PCUKBsVE3S7GISJuV3f
jfQfjcoYf9EDpHLyzgsAaOkPmBi5hx0x4xWio4KkbaWQ9iALuilT0H5AUF+tLIpl
3AtWQ9weW/ZmpPdKuQpHpUNyH8+CqWMMEteAjVio/yo201pvv/2psiNbNuRHVMzb
J2RMBElTaMqBC90sTXVauuLF3aCAcywjXhlsTg+BqVNnVaTn3DSOnrpsxfKqD7v/
BVzFZDLbMkVCRWYvszp65TCelENIcLxsOvh/i2h2j6poaJZl7LvLjd4RiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsHlj+eIVfBlILvnAYL1kKC7OnmMB8GA1UdIwQY
MBaAFMAKiNflpWXqcZz8QNi7Y+4WcYVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYt
ZGUzYzhkOTUzZWM1LzEvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYtZGUzYzhkOTUzZWM1
LzEvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYPSeG50
Y5bt71Z+N1RGZMsZy81o8aRzeRxO4IX2JQKWVUJa893Xe+KoLx/Qwlkd0XHZLOdV
UyWrgDud8j2EL3vTU2D74Fl+tu8Aw21RbrAfR0co1NX/aIMiL2LKb6zuBZvW1BTc
FlH+IoZuO+JhoXkHzUxNZg42uX71EiZWMsPGZRGEfKXKJhM4IYEGYsEzhLdVzrUs
SVZ3oUT59PSwDHBFZPImB5nZVBqehGwiM7zTKKPAgJhd0bDpgF4ISbUH1qi7YjJQ
Pbf1k8vTRuGvsAq0SQn8uR8dmiFn//sUeDwyrJ+SFKO8gx8+Pgu39iQ47dkNQMcG
95Kcos3sgM8zkQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:18 2025 by rpki-client