Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File: w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier: DBTim2ho9oI8r8kHPU1+O7BgVEjXf/GEFMwriAadfuM=
Subject key identifier: CA:BE:40:AA:51:26:0C:14:96:AE:92:8F:2C:45:8A:0C:B2:51:24:4A
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 0198D472DB073ADAF0614B8AF5141937201F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:33 +0000
Manifest this update: Sat 23 Aug 2025 01:02:33 +0000
Manifest next update: Sun 24 Aug 2025 01:02:33 +0000
Files and hashes: 1: a_tI6HP1FzzUH0r0poa89IN3meo.roa (hash: W0Z3kY29z8HP1pU9kcp4FsO8DLdrIX+XsxzLiYSWp8o=)
2: n66sSu3oH6YqRjQYMkqXYnUVvGI.roa (hash: oBf8U9TtdYD0BgLgRABjFu+My106UWYSpVHQ13ZhmvY=)
3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: 1GsB0zrvGSycuQivjqIxZfJYUbcs2wfJ6UansfKouxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:db:07:3a:da:f0:61:4b:8a:f5:14:19:37:20:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Aug 23 01:02:33 2025 GMT
Not After : Aug 24 01:02:33 2025 GMT
Subject: CN=cabe40aa51260c1496ae928f2c458a0cb251244a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:74:78:38:6e:54:21:80:45:eb:ab:0b:ec:ef:
a8:a6:21:23:16:f9:ea:26:50:8f:7b:93:7f:53:76:
cf:ff:26:c6:15:11:d4:e4:ad:d7:74:39:9f:fd:5e:
80:0b:8d:0c:28:03:01:71:cd:a7:b9:a0:17:c3:f6:
8b:b8:18:7a:25:8a:63:f7:eb:37:e5:fa:0f:60:39:
44:79:56:ec:99:b1:8d:c2:16:64:f7:4c:28:c9:1d:
b1:5f:66:d0:de:5c:2b:e9:0e:00:8c:ed:8d:96:f1:
92:22:f7:38:b9:d1:42:76:eb:4f:b5:06:c5:14:3a:
3d:ca:e7:ea:b6:d1:0e:76:ab:b6:60:83:98:3e:93:
86:c5:06:9e:7f:50:bb:d2:de:09:d2:59:c0:a0:f3:
c8:03:6e:3f:e4:e3:5a:b7:e6:93:f0:b3:08:d8:c3:
f6:91:75:df:5f:b2:1e:be:72:ce:27:99:b0:a2:88:
eb:6a:5f:91:d2:9e:fd:dc:a6:4d:ec:81:ee:d7:7a:
18:90:18:c9:b7:4c:70:ea:79:3e:55:2e:4e:3a:06:
e2:b4:92:7b:f9:57:c1:d7:cd:d7:94:93:8f:fd:6f:
5b:1b:a4:04:1e:ac:ef:dd:03:8e:cd:3d:12:2f:78:
2f:f6:11:0a:1d:02:17:d9:ff:f0:9e:86:3c:37:9e:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BE:40:AA:51:26:0C:14:96:AE:92:8F:2C:45:8A:0C:B2:51:24:4A
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:74:56:b2:c0:f7:8c:98:ad:5f:e2:a3:d6:cb:54:dd:7c:30:
37:6b:7b:19:1b:82:90:6d:68:c9:6a:8f:c1:7b:62:db:c3:c3:
05:d1:3a:43:8f:f5:10:40:66:2e:a3:a2:6d:aa:20:48:1f:06:
62:56:f9:d7:9f:9f:fc:bd:4c:bd:db:1f:c8:12:f0:8c:25:62:
8f:c5:17:5a:54:ec:85:76:e7:92:24:fd:62:f3:b0:f1:2b:c7:
b4:80:a2:d9:8b:35:61:95:6e:a5:23:3b:08:59:1b:cc:92:e2:
91:26:1b:d0:8e:48:1e:93:2b:ed:72:05:8a:ac:e2:04:0d:8d:
c1:6e:6e:40:8e:b4:96:92:05:c6:d8:f3:e2:cd:39:bb:e1:10:
e3:8b:66:c8:a1:3e:c9:57:c6:61:19:02:e4:7c:7e:10:f3:24:
75:72:d4:e2:02:b0:10:c7:e9:94:a7:2d:dd:37:17:71:81:ce:
e0:f4:b0:b6:61:29:67:4c:a1:7a:9d:f3:49:9f:16:43:41:19:
04:b9:a9:56:b2:7e:fb:e7:5a:22:dd:5c:28:05:22:aa:d5:e7:
13:88:2c:d9:6b:23:b4:9c:36:f8:c5:2b:10:1b:84:93:68:58:
88:93:a7:a4:57:3c:63:48:25:60:8c:c7:14:ba:5a:2a:66:e9:
e4:6a:0e:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUctsHOtrwYUuK9RQZNyAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTg4MmIxMGYxYmE5ZWE0YmExZmE3NzA2ZGI2NDc0N2U2
MmE0MTMwHhcNMjUwODIzMDEwMjMzWhcNMjUwODI0MDEwMjMzWjAzMTEwLwYDVQQD
EyhjYWJlNDBhYTUxMjYwYzE0OTZhZTkyOGYyYzQ1OGEwY2IyNTEyNDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXR4OG5UIYBF66sL7O+opiEjFvnq
JlCPe5N/U3bP/ybGFRHU5K3XdDmf/V6AC40MKAMBcc2nuaAXw/aLuBh6JYpj9+s3
5foPYDlEeVbsmbGNwhZk90woyR2xX2bQ3lwr6Q4AjO2NlvGSIvc4udFCdutPtQbF
FDo9yufqttEOdqu2YIOYPpOGxQaef1C70t4J0lnAoPPIA24/5ONat+aT8LMI2MP2
kXXfX7IevnLOJ5mwoojral+R0p793KZN7IHu13oYkBjJt0xw6nk+VS5OOgbitJJ7
+VfB183XlJOP/W9bG6QEHqzv3QOOzT0SL3gv9hEKHQIX2f/wnoY8N55OBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq+QKpRJgwUlq6SjyxFigyyUSRKMB8GA1UdIwQY
MBaAFMOogrEPG6nqS6H6dwbbZHR+YqQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MzYyMGUtNzUyOC00YWFjLTkyMTIt
Yzc4NTdhMDMzOTYyLzEvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85MzYyMGUtNzUyOC00YWFjLTkyMTItYzc4NTdhMDMzOTYy
LzEvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3RWssD3
jJitX+Kj1stU3XwwN2t7GRuCkG1oyWqPwXti28PDBdE6Q4/1EEBmLqOibaogSB8G
Ylb515+f/L1MvdsfyBLwjCVij8UXWlTshXbnkiT9YvOw8SvHtICi2Ys1YZVupSM7
CFkbzJLikSYb0I5IHpMr7XIFiqziBA2NwW5uQI60lpIFxtjz4s05u+EQ44tmyKE+
yVfGYRkC5Hx+EPMkdXLU4gKwEMfplKct3TcXcYHO4PSwtmEpZ0yhep3zSZ8WQ0EZ
BLmpVrJ+++daIt1cKAUiqtXnE4gs2WsjtJw2+MUrEBuEk2hYiJOnpFc8Y0glYIzH
FLpaKmbp5GoOYA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:08 2025 by rpki-client