Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: 5Exks5UCf6Hq7CRU5E7wugnhgQp5npwrr49561uIW/0=
Subject key identifier: 35:D4:D8:E7:BF:5D:14:25:BB:33:C2:CF:B4:B4:69:37:21:DB:B2:43
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 0198D7A9359D2908D24E8686336BA88A7E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 1664
Signing time: Sat 23 Aug 2025 16:00:47 +0000
Manifest this update: Sat 23 Aug 2025 16:00:47 +0000
Manifest next update: Sun 24 Aug 2025 16:00:47 +0000
Files and hashes: 1: HARnUvjlt2Ihiye5L31M1Ihsszo.roa (hash: R6szIcdOkXpk4Tvb4l6mExr2G3bKCj15fJUl212PxlA=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: +b1rYBZl5gv37gI53VC54KTbhB5HmTWsTstXgovu9GE=)
3: eZmwFy41-LIbouqrlW9zkimoU3M.roa (hash: zJU/IMiyEvSZt1AwTK7cRbJ+HAzHnx6LAKEgb7nLXYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:35:9d:29:08:d2:4e:86:86:33:6b:a8:8a:7e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Aug 23 16:00:47 2025 GMT
Not After : Aug 24 16:00:47 2025 GMT
Subject: CN=35d4d8e7bf5d1425bb33c2cfb4b4693721dbb243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:06:84:5e:d2:b4:3a:80:86:af:70:4c:05:df:
10:f5:57:88:d0:ad:fb:f7:fb:ea:6d:00:97:4d:b9:
ab:6b:2b:98:c2:5e:92:a2:9b:fb:24:fa:64:ad:a4:
a2:0c:39:77:39:dd:f3:19:df:bd:15:11:ed:7d:12:
fa:08:a3:8a:34:06:66:52:41:88:0a:59:e8:3b:9e:
4d:d0:8c:56:1f:50:6a:99:6e:32:15:3e:fb:d0:14:
3a:29:e0:8b:a0:e9:d1:c4:e8:00:3f:66:63:5e:a9:
99:59:e3:fe:27:d0:c3:df:63:eb:70:fa:9a:c1:7f:
b1:f0:f3:5e:0a:c8:7e:ce:bc:80:9c:1a:9e:c4:75:
e0:23:7e:85:d3:e4:10:30:88:c4:4e:19:12:9a:00:
ca:ea:b1:e0:cf:51:59:84:a5:9f:f8:75:52:f4:c1:
5d:06:0b:14:9a:cd:29:de:10:76:02:1a:40:fd:40:
47:71:1a:1f:92:2f:c9:fb:55:62:2d:a5:2b:d4:51:
dd:5d:62:78:16:aa:f7:d4:b1:3f:ac:75:57:7b:69:
d4:46:0e:a1:6e:3d:bd:e3:25:7d:c1:c1:45:82:07:
d3:1f:e9:37:53:b1:1b:62:45:22:5a:3f:aa:9c:26:
b1:08:c4:7b:f4:9b:34:2e:d1:c6:b9:cc:d5:bb:96:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D4:D8:E7:BF:5D:14:25:BB:33:C2:CF:B4:B4:69:37:21:DB:B2:43
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a1:7f:4b:57:e1:9e:d8:2f:55:eb:2f:55:0f:a3:65:ff:ec:
55:bc:11:e1:f3:3b:f2:63:f8:de:39:dd:52:29:1e:a8:47:2b:
16:fb:3e:97:7b:da:36:1c:c1:ae:74:5c:53:63:dc:5a:b9:03:
b6:6a:46:d4:db:2e:db:39:f3:00:47:80:c4:7f:30:fc:02:35:
26:73:26:20:8f:98:e1:08:00:5c:eb:41:89:cb:c9:c8:a7:c9:
0c:31:c9:d4:07:cb:e9:f3:f4:54:e2:e9:b9:2c:26:2c:21:25:
ff:6b:42:d5:1c:0c:3e:51:a5:00:48:f0:37:b6:52:c7:c1:f6:
b5:c5:5b:fc:5f:5d:bf:c5:ca:7c:19:f0:c1:8c:95:e4:12:3f:
7d:2f:67:a5:d4:00:68:f7:5b:ec:f2:02:77:24:37:de:42:8f:
2c:37:23:4c:93:e8:a3:c6:e6:b4:ad:b9:3c:6e:18:59:0f:b7:
cf:8b:7a:75:b4:f8:03:39:31:e0:cd:1f:d5:12:ee:30:10:55:
73:10:54:2d:e3:a7:e5:e2:b2:46:75:46:08:53:28:1d:e3:03:
f1:0a:92:44:f0:12:79:59:b3:0e:be:92:ea:48:82:59:90:3a:
45:1a:f9:4d:d1:06:64:4a:7f:e8:22:d8:6e:1f:e0:f8:c3:bd:
8b:97:35:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqTWdKQjSToaGM2uoin5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx
YzRmZTIwHhcNMjUwODIzMTYwMDQ3WhcNMjUwODI0MTYwMDQ3WjAzMTEwLwYDVQQD
EygzNWQ0ZDhlN2JmNWQxNDI1YmIzM2MyY2ZiNGI0NjkzNzIxZGJiMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAaEXtK0OoCGr3BMBd8Q9VeI0K37
9/vqbQCXTbmrayuYwl6Sopv7JPpkraSiDDl3Od3zGd+9FRHtfRL6CKOKNAZmUkGI
ClnoO55N0IxWH1BqmW4yFT770BQ6KeCLoOnRxOgAP2ZjXqmZWeP+J9DD32PrcPqa
wX+x8PNeCsh+zryAnBqexHXgI36F0+QQMIjEThkSmgDK6rHgz1FZhKWf+HVS9MFd
BgsUms0p3hB2AhpA/UBHcRofki/J+1ViLaUr1FHdXWJ4Fqr31LE/rHVXe2nURg6h
bj294yV9wcFFggfTH+k3U7EbYkUiWj+qnCaxCMR79Js0LtHGuczVu5YUFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXU2Oe/XRQluzPCz7S0aTch27JDMB8GA1UdIwQY
MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt
NzA4N2UzZmUyYTVkLzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk
LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6F/S1fh
ntgvVesvVQ+jZf/sVbwR4fM78mP43jndUikeqEcrFvs+l3vaNhzBrnRcU2PcWrkD
tmpG1Nsu2znzAEeAxH8w/AI1JnMmII+Y4QgAXOtBicvJyKfJDDHJ1AfL6fP0VOLp
uSwmLCEl/2tC1RwMPlGlAEjwN7ZSx8H2tcVb/F9dv8XKfBnwwYyV5BI/fS9npdQA
aPdb7PICdyQ33kKPLDcjTJPoo8bmtK25PG4YWQ+3z4t6dbT4Azkx4M0f1RLuMBBV
cxBULeOn5eKyRnVGCFMoHeMD8QqSRPASeVmzDr6S6kiCWZA6RRr5TdEGZEp/6CLY
bh/g+MO9i5c1Ng==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:02:40 2025 by rpki-client