Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json)
Hash identifier: gVSSIjvH5RAeW33y5kth/HvrDsU/jnjjC5vNhR/sGps=
Subject key identifier: A5:B2:4B:A6:FD:FA:E9:23:E6:2F:2A:84:AA:DA:8F:AF:FA:77:D9:C8
Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Certificate serial: 0198D73B332D482E8752954619032DC9DD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
Manifest number: 0916
Signing time: Sat 23 Aug 2025 14:00:37 +0000
Manifest this update: Sat 23 Aug 2025 14:00:37 +0000
Manifest next update: Sun 24 Aug 2025 14:00:37 +0000
Files and hashes: 1: 24ln-8DkQtv-Hk-B6dzvfSqyjQY.roa (hash: SeW6VNZ/+9bUzjzq/OzL5WVkY+lRaswkW52Mz3zEsYI=)
2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: x8ob4rxkvDczgwZo0G3HPox3ZDzm1DzrapGdLLSp1k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:33:2d:48:2e:87:52:95:46:19:03:2d:c9:dd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Validity
Not Before: Aug 23 14:00:37 2025 GMT
Not After : Aug 24 14:00:37 2025 GMT
Subject: CN=a5b24ba6fdfae923e62f2a84aada8faffa77d9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:18:e8:f0:72:f3:ac:22:5c:97:09:6e:c0:
b4:9c:2a:f5:3d:7a:d5:66:08:0b:66:c3:86:cd:20:
30:04:a5:f7:52:ce:39:0a:02:4d:a4:4b:87:71:1c:
28:19:eb:05:d9:7f:44:c1:73:fb:8a:4b:f4:5c:e0:
13:e7:ce:e7:4a:16:6b:a3:5e:e0:76:76:2c:df:61:
f6:a1:ba:37:62:de:5d:18:f9:45:8b:72:cc:c9:b1:
bd:0b:39:54:f5:0a:55:9e:51:e4:ef:86:d0:d9:ff:
22:3b:55:aa:7c:e2:fb:01:96:b3:37:6d:dc:16:fa:
26:3d:b5:b4:47:13:e9:30:e2:6d:9e:14:5c:49:e1:
f7:3e:7e:bf:2d:f4:05:62:14:c6:95:ff:9c:9c:51:
d6:64:5c:3f:e3:f6:45:6c:f0:73:01:c8:28:1f:b6:
c1:22:be:59:cc:6e:50:64:13:3a:a5:65:76:2e:c8:
7c:c4:8f:90:d8:8f:2b:43:f2:04:00:e9:25:bd:23:
83:19:8a:f2:2a:47:03:62:a9:c0:9c:f3:92:86:59:
4a:c3:ae:2e:f6:81:dc:dd:7f:82:62:5f:aa:1c:2d:
5d:e5:ed:fd:12:4a:7a:1f:df:20:df:5f:5e:db:fc:
61:ee:42:54:f7:2e:7a:7c:39:3b:6e:27:13:a4:bb:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B2:4B:A6:FD:FA:E9:23:E6:2F:2A:84:AA:DA:8F:AF:FA:77:D9:C8
X509v3 Authority Key Identifier:
keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:82:e2:58:7e:08:13:2b:24:cb:79:83:d6:93:85:ee:9a:e1:
20:46:23:3f:68:3f:e8:30:7e:be:aa:44:7d:c9:a3:af:77:3c:
a5:44:f0:68:4a:5d:e3:73:9d:83:50:9a:58:7a:6c:69:40:dd:
f6:d0:d8:a1:ec:8a:61:a0:04:e1:a3:e1:89:15:27:65:c5:8b:
75:39:30:b3:9b:a5:f4:4b:a7:cd:96:f9:46:95:aa:f3:45:50:
42:2f:46:8f:39:ff:29:78:68:df:ce:e1:36:63:2d:00:bb:c7:
70:a3:08:a5:06:82:0f:ab:8b:1b:03:af:ba:e5:c3:c3:6d:5c:
e8:12:27:9a:6e:6c:dd:b8:65:04:49:3d:7b:2b:e0:33:ea:41:
f5:f7:40:9e:ac:1b:3a:ed:6a:13:db:a9:19:c9:80:23:fa:b4:
25:13:72:1d:24:47:e3:95:82:54:c7:01:4c:90:be:91:9a:c2:
97:5f:43:7d:c5:2e:f6:db:de:32:7b:8b:87:fa:0a:6c:4b:c9:
9e:77:7f:37:ff:8b:33:b4:2b:8f:f7:da:c0:bd:e1:12:36:34:
27:25:13:90:85:50:95:8c:52:d8:c7:29:c5:b3:c3:5d:3f:c2:
80:d2:3d:e7:c1:bc:dc:4f:45:e5:fb:8b:a2:6e:6f:b5:10:23:
83:3d:49:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOzMtSC6HUpVGGQMtyd1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYjVkM2FmZDBiNzJlYjczNGMyMWVkNzgyMzI5ZWI2ZTdj
MWNlNDEwHhcNMjUwODIzMTQwMDM3WhcNMjUwODI0MTQwMDM3WjAzMTEwLwYDVQQD
EyhhNWIyNGJhNmZkZmFlOTIzZTYyZjJhODRhYWRhOGZhZmZhNzdkOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHkY6PBy86wiXJcJbsC0nCr1PXrV
ZggLZsOGzSAwBKX3Us45CgJNpEuHcRwoGesF2X9EwXP7ikv0XOAT587nShZro17g
dnYs32H2obo3Yt5dGPlFi3LMybG9CzlU9QpVnlHk74bQ2f8iO1WqfOL7AZazN23c
FvomPbW0RxPpMOJtnhRcSeH3Pn6/LfQFYhTGlf+cnFHWZFw/4/ZFbPBzAcgoH7bB
Ir5ZzG5QZBM6pWV2Lsh8xI+Q2I8rQ/IEAOklvSODGYryKkcDYqnAnPOShllKw64u
9oHc3X+CYl+qHC1d5e39Ekp6H98g319e2/xh7kJU9y56fDk7bicTpLtNhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWyS6b9+ukj5i8qhKraj6/6d9nIMB8GA1UdIwQY
MBaAFMK106/Qty63NMIe14Iynrbnwc5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lMmUwNDgtMjc4OC00OWI4LTllZDUt
NDUzYmQ4OTk1YmNhLzEvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lMmUwNDgtMjc4OC00OWI4LTllZDUtNDUzYmQ4OTk1YmNh
LzEvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVILiWH4I
Eysky3mD1pOF7prhIEYjP2g/6DB+vqpEfcmjr3c8pUTwaEpd43Odg1CaWHpsaUDd
9tDYoeyKYaAE4aPhiRUnZcWLdTkws5ul9EunzZb5RpWq80VQQi9Gjzn/KXho387h
NmMtALvHcKMIpQaCD6uLGwOvuuXDw21c6BInmm5s3bhlBEk9eyvgM+pB9fdAnqwb
Ou1qE9upGcmAI/q0JRNyHSRH45WCVMcBTJC+kZrCl19DfcUu9tveMnuLh/oKbEvJ
nnd/N/+LM7Qrj/fawL3hEjY0JyUTkIVQlYxS2McpxbPDXT/CgNI958G83E9F5fuL
om5vtRAjgz1JGA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:40 2025 by rpki-client