Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier: YtI2NlvSu4mBwo4YzdaxG39JOxRC3ohpczPB3/5EUa0=
Subject key identifier: 99:16:6A:19:B1:D9:9A:21:31:AC:16:F6:D2:A7:C6:0E:54:CC:4C:F0
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial: 019A0148322EB7767ADC7A9615AEC032C16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number: 03C8
Signing time: Mon 20 Oct 2025 11:01:39 +0000
Manifest this update: Mon 20 Oct 2025 11:01:39 +0000
Manifest next update: Tue 21 Oct 2025 11:01:39 +0000
Files and hashes: 1: BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa (hash: uhtJUVXZSGPPQKjYqbLF+Cz5CPTBTCYfz/c5yIRK4Ss=)
2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: /lVsLf0fBwxpwS8f82ykRUlYswE6D2bCJORcnU706/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:32:2e:b7:76:7a:dc:7a:96:15:ae:c0:32:c1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Validity
Not Before: Oct 20 11:01:39 2025 GMT
Not After : Oct 21 11:01:39 2025 GMT
Subject: CN=99166a19b1d99a2131ac16f6d2a7c60e54cc4cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:21:af:f4:51:b3:a6:a4:75:c9:01:5b:5f:
0b:0c:62:4a:3a:43:79:10:6e:56:ed:ac:b9:62:9f:
34:5f:d6:6e:27:4b:81:65:b7:a2:e8:bb:4d:9a:9c:
30:01:0e:ce:18:c0:49:b3:21:a9:f1:23:90:be:df:
97:13:28:3b:53:f6:94:9d:92:ad:2c:56:e1:63:fc:
48:21:79:ca:cf:e6:be:19:3e:27:e3:2d:79:d9:9f:
a0:d0:24:2c:4b:4d:29:fc:30:30:c0:e7:1a:8b:f1:
4c:43:6d:04:cf:08:b8:ef:c1:95:03:1a:80:7f:04:
0c:72:85:c4:82:cc:5c:85:43:03:c3:19:ed:44:c1:
bb:98:3e:04:d8:1f:85:1a:37:45:3e:58:fa:14:d0:
38:ee:60:65:5a:61:ca:10:7e:12:c7:41:6f:3e:f0:
36:cc:08:c8:35:77:73:14:33:4e:be:9a:85:eb:0c:
80:2b:56:08:82:d5:2f:d7:5f:fd:a3:b6:3f:a2:d3:
3e:b4:d2:31:6e:43:07:29:43:fe:97:78:67:e9:68:
26:98:a7:dc:5f:2d:0b:d3:7e:7a:08:64:ab:8f:db:
d6:f9:94:e7:0b:08:71:85:82:0f:14:bf:0f:f9:b5:
70:b9:78:e6:91:e4:8d:44:9f:72:70:7c:f0:86:c6:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:16:6A:19:B1:D9:9A:21:31:AC:16:F6:D2:A7:C6:0E:54:CC:4C:F0
X509v3 Authority Key Identifier:
keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0b:04:43:97:8b:52:be:d1:4f:18:f0:4e:90:da:59:52:52:
45:e4:e9:3d:c0:fe:0d:92:22:08:2b:cf:c8:7a:89:1c:2a:c5:
85:93:c8:d6:a6:82:5b:3a:d8:03:7a:13:57:6e:05:fb:d0:f0:
70:84:cf:d6:e7:4c:c0:d5:70:c4:b2:f0:5a:b2:61:2b:3c:ab:
f5:a0:7a:39:bb:c5:35:03:f8:5a:a0:2b:1e:5c:0c:62:1f:9c:
63:64:6e:e3:8a:12:3b:96:ae:df:34:be:dd:f6:11:66:7c:b5:
ce:ca:53:4b:a8:f3:e6:06:4b:d1:8e:e1:d9:35:ae:f5:65:55:
88:39:3d:c8:e9:97:f3:97:6f:e5:43:17:a1:15:82:36:a0:7b:
e1:72:73:2b:b6:e6:c5:f2:e1:f7:92:bf:35:7e:e3:53:69:d1:
80:5a:48:cd:2e:72:fe:9d:da:51:16:98:f9:b6:6b:cb:34:36:
2b:3f:25:0f:44:cd:89:ad:a8:62:e2:1b:c9:48:3b:90:e1:3c:
9d:3d:c5:52:48:d0:c2:76:4b:23:46:b0:6a:3a:42:52:a0:30:
18:02:f6:61:ee:05:74:57:46:ef:86:5a:7d:e3:55:5d:51:96:
9f:90:77:5c:69:36:19:1f:91:96:81:fe:82:c5:80:64:32:84:
80:9c:ff:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBSDIut3Z63HqWFa7AMsFrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxY2Q4NzBkNjBhMWE2YzQyMDY3MTU4YWVlYmNjMGUzZmQ2
ZGQ4MWYwHhcNMjUxMDIwMTEwMTM5WhcNMjUxMDIxMTEwMTM5WjAzMTEwLwYDVQQD
Eyg5OTE2NmExOWIxZDk5YTIxMzFhYzE2ZjZkMmE3YzYwZTU0Y2M0Y2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpUhr/RRs6akdckBW18LDGJKOkN5
EG5W7ay5Yp80X9ZuJ0uBZbei6LtNmpwwAQ7OGMBJsyGp8SOQvt+XEyg7U/aUnZKt
LFbhY/xIIXnKz+a+GT4n4y152Z+g0CQsS00p/DAwwOcai/FMQ20Ezwi478GVAxqA
fwQMcoXEgsxchUMDwxntRMG7mD4E2B+FGjdFPlj6FNA47mBlWmHKEH4Sx0FvPvA2
zAjINXdzFDNOvpqF6wyAK1YIgtUv11/9o7Y/otM+tNIxbkMHKUP+l3hn6WgmmKfc
Xy0L0356CGSrj9vW+ZTnCwhxhYIPFL8P+bVwuXjmkeSNRJ9ycHzwhsYn2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkWahmx2ZohMawW9tKnxg5UzEzwMB8GA1UdIwQY
MBaAFMHNhw1goabEIGcViu68wOP9bdgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQt
MDQ4MWM2NmMyYjVhLzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQtMDQ4MWM2NmMyYjVh
LzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQsEQ5eL
Ur7RTxjwTpDaWVJSReTpPcD+DZIiCCvPyHqJHCrFhZPI1qaCWzrYA3oTV24F+9Dw
cITP1udMwNVwxLLwWrJhKzyr9aB6ObvFNQP4WqArHlwMYh+cY2Ru44oSO5au3zS+
3fYRZny1zspTS6jz5gZL0Y7h2TWu9WVViDk9yOmX85dv5UMXoRWCNqB74XJzK7bm
xfLh95K/NX7jU2nRgFpIzS5y/p3aURaY+bZryzQ2Kz8lD0TNia2oYuIbyUg7kOE8
nT3FUkjQwnZLI0awajpCUqAwGAL2Ye4FdFdG74ZafeNVXVGWn5B3XGk2GR+RloH+
gsWAZDKEgJz/NQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:07:43 2025 by rpki-client