Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier: qHvaPw3Nikjv1UjlUJd4F5DkKU12Ncjs4edKzOuRTBc=
Subject key identifier: 20:84:21:69:10:BB:76:61:C3:8E:87:74:25:C1:41:99:EB:78:4A:EA
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial: 0198D4048E15857A5B3409D95DDB40DDD5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number: 164A
Signing time: Fri 22 Aug 2025 23:02:04 +0000
Manifest this update: Fri 22 Aug 2025 23:02:04 +0000
Manifest next update: Sat 23 Aug 2025 23:02:04 +0000
Files and hashes: 1: 9Z5tAyPoNAUrhK3XQbPirY-i870.roa (hash: JYdT76bIYS9WiRnbn5ANGOhlwfQ42Z47wnU1M4quBe4=)
2: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: BPR6heVKZQlJCD2n196S6vvyGYym7pLkC7yuWlatdyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:8e:15:85:7a:5b:34:09:d9:5d:db:40:dd:d5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Validity
Not Before: Aug 22 23:02:04 2025 GMT
Not After : Aug 23 23:02:04 2025 GMT
Subject: CN=2084216910bb7661c38e877425c14199eb784aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a7:3b:e1:b4:e6:31:ea:b5:87:3d:e5:00:ae:
10:cb:8c:1f:61:c3:04:1b:62:fa:54:c2:f8:6c:93:
f0:dd:01:26:c9:c2:fc:8a:ff:60:63:96:4d:07:63:
6b:ff:ed:68:83:76:a5:9e:2b:b3:7c:02:44:19:c5:
55:9e:11:87:c0:51:cd:73:7e:e7:c3:72:11:a8:a4:
e3:17:eb:13:44:f2:86:c9:d1:f9:96:72:62:e7:5e:
89:a5:fd:0a:05:5e:4d:32:24:75:56:b8:86:57:5e:
cd:1a:e3:b1:d3:68:84:ae:3f:89:17:ab:46:e5:ba:
66:1a:e9:dd:8a:f5:38:25:ec:ca:37:af:7a:4b:e4:
00:12:e9:40:b6:db:07:f5:22:16:e6:63:23:e1:ef:
d1:32:bd:e8:31:5e:61:fd:c1:87:d9:d7:df:ce:8e:
dc:68:29:db:91:64:06:47:bc:32:06:0c:bc:e0:13:
0c:e7:09:15:10:60:b1:c2:dc:39:ce:dd:9c:87:b5:
47:82:91:3e:6d:07:6b:23:06:75:e6:1b:ae:2f:1a:
5f:96:61:26:36:40:88:13:89:6d:12:59:da:83:a8:
62:df:4f:6c:ae:77:6f:7c:7f:55:95:e7:3d:a7:a2:
a8:33:bc:ef:d4:9f:a5:23:73:01:15:48:4d:fc:fd:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:84:21:69:10:BB:76:61:C3:8E:87:74:25:C1:41:99:EB:78:4A:EA
X509v3 Authority Key Identifier:
keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:58:e4:50:39:7d:b6:10:0e:cd:8e:47:f6:0a:cb:00:94:08:
f9:54:67:57:00:82:c1:4e:2f:01:62:bc:01:13:15:47:e3:ce:
e2:a3:23:3f:d7:7a:8b:14:e1:62:a6:06:6b:7b:f3:0a:c1:ec:
cc:c2:14:89:cb:df:30:bb:51:db:b8:3d:3f:0b:13:2f:54:4f:
44:81:13:50:98:6c:b4:b4:44:1c:d1:14:64:44:ed:fb:0f:d8:
8c:4e:b7:e1:cf:1d:06:3e:b1:45:7c:01:cc:fa:26:41:97:b2:
8f:ba:d7:50:ad:29:a4:18:54:8c:ba:99:ee:8d:95:26:9c:08:
a7:40:56:ad:ed:81:10:58:bb:80:78:a9:6c:dd:4b:7f:71:ed:
d3:99:8e:02:04:4b:ac:0f:a1:00:27:50:52:ae:63:00:c6:8a:
3f:98:e0:4d:43:dd:c6:e3:6f:8a:e5:55:07:e2:78:c2:fd:81:
83:82:7c:25:92:a8:0d:ec:21:81:2a:36:88:53:07:da:29:f6:
a4:4f:0e:42:85:00:6d:9c:94:db:d5:3d:1a:09:54:db:14:3a:
05:d2:c5:e7:32:0e:04:42:14:17:b9:c1:c9:5d:64:69:ac:35:
4b:65:68:d2:c8:c5:72:5d:0d:59:12:05:df:51:a6:02:7b:74:
0a:60:2f:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBI4VhXpbNAnZXdtA3dWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWRiZGZlMDFlOWEzZjk2ZDUwMDIyYzNjZGFmZGMzZTFh
OGQ5ODgwHhcNMjUwODIyMjMwMjA0WhcNMjUwODIzMjMwMjA0WjAzMTEwLwYDVQQD
EygyMDg0MjE2OTEwYmI3NjYxYzM4ZTg3NzQyNWMxNDE5OWViNzg0YWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ac74bTmMeq1hz3lAK4Qy4wfYcME
G2L6VML4bJPw3QEmycL8iv9gY5ZNB2Nr/+1og3alniuzfAJEGcVVnhGHwFHNc37n
w3IRqKTjF+sTRPKGydH5lnJi516Jpf0KBV5NMiR1VriGV17NGuOx02iErj+JF6tG
5bpmGundivU4JezKN696S+QAEulAttsH9SIW5mMj4e/RMr3oMV5h/cGH2dffzo7c
aCnbkWQGR7wyBgy84BMM5wkVEGCxwtw5zt2ch7VHgpE+bQdrIwZ15huuLxpflmEm
NkCIE4ltElnag6hi309srndvfH9Vlec9p6KoM7zv1J+lI3MBFUhN/P1XuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCEIWkQu3Zhw46HdCXBQZnreErqMB8GA1UdIwQY
MBaAFMGtvf4B6aP5bVACLDza/cPhqNmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hNGM2ZjEtN2M5My00NWVlLThlYWYt
NDM5NDA1MmNkNjVlLzEvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hNGM2ZjEtN2M5My00NWVlLThlYWYtNDM5NDA1MmNkNjVl
LzEvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1jkUDl9
thAOzY5H9grLAJQI+VRnVwCCwU4vAWK8ARMVR+PO4qMjP9d6ixThYqYGa3vzCsHs
zMIUicvfMLtR27g9PwsTL1RPRIETUJhstLREHNEUZETt+w/YjE634c8dBj6xRXwB
zPomQZeyj7rXUK0ppBhUjLqZ7o2VJpwIp0BWre2BEFi7gHipbN1Lf3Ht05mOAgRL
rA+hACdQUq5jAMaKP5jgTUPdxuNviuVVB+J4wv2Bg4J8JZKoDewhgSo2iFMH2in2
pE8OQoUAbZyU29U9GglU2xQ6BdLF5zIOBEIUF7nByV1kaaw1S2Vo0sjFcl0NWRIF
31GmAnt0CmAvxA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:10 2025 by rpki-client