Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File: w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier: FC3jEv4R8AMrvnoJz5N8ZOgN0EccIVEUjyJ3A7DSAJA=
Subject key identifier: 04:87:D1:2A:F4:8E:25:45:A6:31:1D:68:7A:D5:68:BC:96:D6:86:D4
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial: 0198D54E920D777C42526AFB07FF7B117A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number: 1655
Signing time: Sat 23 Aug 2025 05:02:32 +0000
Manifest this update: Sat 23 Aug 2025 05:02:32 +0000
Manifest next update: Sun 24 Aug 2025 05:02:32 +0000
Files and hashes: 1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
2: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
3: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: fH6EemLPvcGOx3HZacDbmnxyn7iztJ5UxdtSw00SfLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:92:0d:77:7c:42:52:6a:fb:07:ff:7b:11:7a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Validity
Not Before: Aug 23 05:02:32 2025 GMT
Not After : Aug 24 05:02:32 2025 GMT
Subject: CN=0487d12af48e2545a6311d687ad568bc96d686d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:77:28:49:c7:72:41:8d:92:7b:e1:02:a2:
93:a6:e5:d1:77:73:1f:f3:c6:f8:c2:61:19:9d:bd:
97:9e:b8:70:f5:67:4c:3e:70:18:49:16:6c:f2:4c:
b9:43:11:d6:4c:38:87:17:88:9a:37:45:06:cf:11:
30:07:f5:61:8f:12:76:f6:cb:a3:9b:8d:8a:06:04:
f9:a7:06:36:bd:ef:00:16:87:5e:7b:92:b8:fb:1e:
ce:e6:54:5b:43:2b:67:50:d2:96:35:df:07:8a:bb:
5b:13:60:18:46:f2:4c:75:ff:5f:f6:93:f9:56:64:
f0:b0:75:c5:88:4b:67:1a:fe:bc:2a:9f:6a:0b:e7:
9b:64:02:8d:d4:b9:21:da:fc:dc:aa:38:a0:5a:a7:
a6:c1:61:da:e6:90:1b:c5:28:6b:35:bb:40:a7:31:
36:19:5c:51:43:25:63:bf:ca:c8:79:17:b3:6a:af:
15:94:39:d9:7a:b7:27:30:d4:a0:14:26:8e:10:0c:
fc:13:3b:d3:f0:97:6f:83:f9:68:44:42:58:2f:98:
b5:76:be:01:1c:ab:ff:8a:ce:2b:2f:1f:a0:96:a5:
17:bb:cc:5e:b8:01:ab:e4:23:ff:20:b7:54:97:80:
15:ad:e2:da:5b:54:49:a4:4f:74:7b:37:ab:82:fb:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:D1:2A:F4:8E:25:45:A6:31:1D:68:7A:D5:68:BC:96:D6:86:D4
X509v3 Authority Key Identifier:
keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d8:db:0c:84:0e:b3:73:21:0f:a4:d9:5a:da:68:7c:46:bf:
e2:75:02:0e:a2:b0:21:da:5f:e0:e0:f7:46:f4:85:70:bd:a9:
c3:b6:3b:a6:83:5f:ad:8d:d9:3c:e2:62:4d:1c:79:70:7e:33:
de:ec:7c:b4:c0:e6:e3:9b:58:d8:7f:30:d1:6a:c1:65:ff:7f:
34:f6:18:29:dc:8f:2f:e3:df:c4:dc:25:76:71:6a:86:90:22:
24:47:a9:72:57:24:96:89:cd:0d:33:99:e6:4e:e7:cd:28:01:
64:fd:c6:7b:f5:31:c8:d3:c2:4d:95:e4:eb:0d:a0:c1:c1:ce:
7b:5c:6f:91:d4:47:57:cc:f3:e4:ab:14:96:2d:f7:3b:84:5b:
b7:77:f5:f5:91:fc:83:89:e7:2b:7a:f8:af:80:a6:8a:4f:50:
73:c3:ee:0b:b3:64:49:92:71:23:bb:da:18:23:4f:55:be:fc:
d6:ef:28:20:51:65:ce:c8:91:e6:86:a7:1c:b2:31:66:86:bc:
b6:65:81:c5:57:6c:dd:40:f4:67:7f:0c:ce:22:58:a7:d1:75:
1b:be:04:08:35:85:6a:ee:30:38:df:c4:54:e2:75:9d:95:01:
fb:f3:cc:87:9c:60:2d:b1:11:c9:3e:a9:60:1f:88:c0:cd:5b:
3e:26:08:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTpINd3xCUmr7B/97EXoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzA1OTFlMmViNDlkMDU1OWU2ZmNlN2VlMmFhODFmMGY1
OWJhNmYwHhcNMjUwODIzMDUwMjMyWhcNMjUwODI0MDUwMjMyWjAzMTEwLwYDVQQD
EygwNDg3ZDEyYWY0OGUyNTQ1YTYzMTFkNjg3YWQ1NjhiYzk2ZDY4NmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06x3KEnHckGNknvhAqKTpuXRd3Mf
88b4wmEZnb2Xnrhw9WdMPnAYSRZs8ky5QxHWTDiHF4iaN0UGzxEwB/VhjxJ29suj
m42KBgT5pwY2ve8AFodee5K4+x7O5lRbQytnUNKWNd8HirtbE2AYRvJMdf9f9pP5
VmTwsHXFiEtnGv68Kp9qC+ebZAKN1Lkh2vzcqjigWqemwWHa5pAbxShrNbtApzE2
GVxRQyVjv8rIeRezaq8VlDnZercnMNSgFCaOEAz8EzvT8Jdvg/loREJYL5i1dr4B
HKv/is4rLx+glqUXu8xeuAGr5CP/ILdUl4AVreLaW1RJpE90ezergvuWKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASH0Sr0jiVFpjEdaHrVaLyW1obUMB8GA1UdIwQY
MBaAFMPAWR4utJ0FWeb85+4qqB8PWbpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQt
ZTM0MDcxNzQ2NjNiLzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQtZTM0MDcxNzQ2NjNi
LzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdjbDIQO
s3MhD6TZWtpofEa/4nUCDqKwIdpf4OD3RvSFcL2pw7Y7poNfrY3ZPOJiTRx5cH4z
3ux8tMDm45tY2H8w0WrBZf9/NPYYKdyPL+PfxNwldnFqhpAiJEepclcklonNDTOZ
5k7nzSgBZP3Ge/UxyNPCTZXk6w2gwcHOe1xvkdRHV8zz5KsUli33O4Rbt3f19ZH8
g4nnK3r4r4Cmik9Qc8PuC7NkSZJxI7vaGCNPVb781u8oIFFlzsiR5oanHLIxZoa8
tmWBxVds3UD0Z38MziJYp9F1G74ECDWFau4wON/EVOJ1nZUB+/PMh5xgLbERyT6p
YB+IwM1bPiYIGA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:16:51 2025 by rpki-client