Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
File: waGQUEttntnBgJaEBCWxHXsi3_Q.mft (raw, json)
Hash identifier: kXeLeaO7cg+V4DiiV1g37kPW1/he15VK1QcK1uOF/UM=
Subject key identifier: C0:70:35:C9:A4:61:97:E5:6D:F1:41:58:67:98:30:2E:FF:75:F5:57
Authority key identifier: C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
Certificate issuer: /CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Certificate serial: 0198D65FD6509A223A45A021B5273488ED71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:01:01 +0000
Manifest this update: Sat 23 Aug 2025 10:01:01 +0000
Manifest next update: Sun 24 Aug 2025 10:01:01 +0000
Files and hashes: 1: A9fopaXO-fVQpKdJ8LHIGXii_SU.roa (hash: 8zkX8M3Fk6VQlJpwJIcZtNmfIBhTghba03PireQiTxw=)
2: waGQUEttntnBgJaEBCWxHXsi3_Q.crl (hash: am59fDaGmbNHriLZRzygGj+KjGIUX4/VEBTdytncw6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d6:50:9a:22:3a:45:a0:21:b5:27:34:88:ed:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Validity
Not Before: Aug 23 10:01:01 2025 GMT
Not After : Aug 24 10:01:01 2025 GMT
Subject: CN=c07035c9a46197e56df141586798302eff75f557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:72:15:8e:e5:dd:81:12:b4:f9:89:e5:c0:
27:80:68:38:b2:1c:55:b5:db:df:2a:71:96:f9:4a:
25:08:ca:4b:58:bb:e8:95:0b:ab:12:09:97:c9:50:
2a:0a:c7:36:e2:78:23:1e:d1:0c:46:07:a7:29:be:
54:a3:39:5e:9e:87:3b:9b:9e:99:5f:db:74:df:45:
2d:20:38:48:8a:72:a9:48:23:40:b8:7c:16:27:97:
29:c6:52:80:4c:f8:6c:f1:da:6c:57:5b:cc:e4:aa:
f0:22:84:5a:a7:57:db:fa:5d:a0:db:c2:e7:d4:26:
bf:21:ad:e5:31:58:80:9e:25:0e:2a:b5:39:98:e1:
ce:a8:24:51:d6:b3:43:7c:98:8f:62:d2:e8:14:97:
e7:b9:4d:03:96:85:2a:06:3d:20:4a:89:f4:f4:dd:
a2:92:7c:27:7a:79:d1:f4:7f:f6:a6:4c:06:c9:07:
cf:be:b8:7a:c3:d2:1c:e8:7a:7c:d0:d9:3c:58:b9:
02:72:cb:50:67:51:b0:1c:02:12:a7:3b:7f:0f:4d:
a4:94:a6:a4:b5:5e:59:cd:0a:84:b1:49:32:14:8c:
cc:14:de:a9:be:e3:aa:95:36:33:db:98:7e:a6:d9:
70:ab:c1:e4:8c:e6:c2:80:93:ba:d9:c5:93:6d:a4:
2c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:35:C9:A4:61:97:E5:6D:F1:41:58:67:98:30:2E:FF:75:F5:57
X509v3 Authority Key Identifier:
keyid:C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:79:dc:c4:16:45:e8:88:23:9b:98:a4:04:dc:37:af:ef:0d:
5f:82:b3:e9:88:5f:fa:63:1b:b4:a3:6d:3a:52:b3:b7:b2:47:
00:a4:a1:d1:85:12:64:18:9c:d5:5c:c4:6f:3f:13:e9:aa:3e:
54:d9:65:9f:aa:2c:3a:77:01:0c:70:40:91:ad:cb:70:6b:3b:
0d:ac:ed:f0:a6:38:51:71:46:f5:37:fd:f8:97:80:ef:fb:74:
17:7d:a8:e1:97:d1:e0:2a:43:d0:82:91:aa:9a:88:93:c0:c6:
f2:16:02:ca:35:08:bd:db:69:26:e8:cf:6b:be:45:c1:c1:0a:
4c:46:fd:bf:7e:08:16:a8:aa:44:90:81:2c:0f:9c:0c:03:76:
8b:f2:99:79:3a:cc:77:9f:a3:b9:f8:01:a3:65:4f:59:87:42:
a9:6e:2d:8f:94:6e:86:7a:b3:a5:97:c4:89:d8:25:06:26:79:
eb:4d:3d:d3:3e:63:fa:96:64:a9:68:d7:81:2f:d0:80:49:6b:
3d:52:10:0b:d1:7e:4a:09:7b:8d:dc:40:1c:9d:57:7a:36:0b:
67:96:88:45:45:f3:d3:e2:48:f2:ed:9e:f7:88:0a:36:c4:19:
c4:f8:77:bf:9f:ec:9f:b1:ff:71:69:07:57:d7:a4:54:0f:79:
78:ab:f5:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX9ZQmiI6RaAhtSc0iO1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYTE5MDUwNGI2ZDllZDljMTgwOTY4NDA0MjViMTFkN2Iy
MmRmZjQwHhcNMjUwODIzMTAwMTAxWhcNMjUwODI0MTAwMTAxWjAzMTEwLwYDVQQD
EyhjMDcwMzVjOWE0NjE5N2U1NmRmMTQxNTg2Nzk4MzAyZWZmNzVmNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlVyFY7l3YEStPmJ5cAngGg4shxV
tdvfKnGW+UolCMpLWLvolQurEgmXyVAqCsc24ngjHtEMRgenKb5Uozlenoc7m56Z
X9t030UtIDhIinKpSCNAuHwWJ5cpxlKATPhs8dpsV1vM5KrwIoRap1fb+l2g28Ln
1Ca/Ia3lMViAniUOKrU5mOHOqCRR1rNDfJiPYtLoFJfnuU0DloUqBj0gSon09N2i
knwnennR9H/2pkwGyQfPvrh6w9Ic6Hp80Nk8WLkCcstQZ1GwHAISpzt/D02klKak
tV5ZzQqEsUkyFIzMFN6pvuOqlTYz25h+ptlwq8HkjObCgJO62cWTbaQsjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBwNcmkYZflbfFBWGeYMC7/dfVXMB8GA1UdIwQY
MBaAFMGhkFBLbZ7ZwYCWhAQlsR17It/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2FHUVVFdHRudG5CZ0phRUJDV3hIWHNpM19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zODdmMjEtMTAxYi00ODdlLThhMGYt
MGI4MzhhNTk5NjYyLzEvd2FHUVVFdHRudG5CZ0phRUJDV3hIWHNpM19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zODdmMjEtMTAxYi00ODdlLThhMGYtMGI4MzhhNTk5NjYy
LzEvd2FHUVVFdHRudG5CZ0phRUJDV3hIWHNpM19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHncxBZF
6Igjm5ikBNw3r+8NX4Kz6Yhf+mMbtKNtOlKzt7JHAKSh0YUSZBic1VzEbz8T6ao+
VNlln6osOncBDHBAka3LcGs7Dazt8KY4UXFG9Tf9+JeA7/t0F32o4ZfR4CpD0IKR
qpqIk8DG8hYCyjUIvdtpJujPa75FwcEKTEb9v34IFqiqRJCBLA+cDAN2i/KZeTrM
d5+jufgBo2VPWYdCqW4tj5RuhnqzpZfEidglBiZ560090z5j+pZkqWjXgS/QgElr
PVIQC9F+Sgl7jdxAHJ1XejYLZ5aIRUXz0+JI8u2e94gKNsQZxPh3v5/sn7H/cWkH
V9ekVA95eKv1YQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:01 2025 by rpki-client