Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
File: wC4yPxvhY8TX-LiKrY2q--AQbW8.mft (raw, json)
Hash identifier: DL6r50IfpEp2qLS/wcF+QX0pf94+HV4jI75U76DKn9E=
Subject key identifier: 27:4F:66:28:F9:01:4D:63:4F:55:96:8A:E0:C0:66:26:B6:37:93:26
Authority key identifier: C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
Certificate issuer: /CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Certificate serial: 019873E3030D326C4161FEE26802A64D093F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
Manifest number: 0135
Signing time: Mon 04 Aug 2025 07:01:53 +0000
Manifest this update: Mon 04 Aug 2025 07:01:53 +0000
Manifest next update: Tue 05 Aug 2025 07:01:53 +0000
Files and hashes: 1: wC4yPxvhY8TX-LiKrY2q--AQbW8.crl (hash: fR/SDxvvIV8ybX18LCL/MgnrF81DCxH7tQT56BsK+9c=)
2: z4hyHniAgsjhip0WWSLXoanCOdQ.roa (hash: M3AlMbZsNGFOvYnoOV0xvC8E+XBvcvrqkI0jCnJgG2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:03:0d:32:6c:41:61:fe:e2:68:02:a6:4d:09:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Validity
Not Before: Aug 4 07:01:53 2025 GMT
Not After : Aug 5 07:01:53 2025 GMT
Subject: CN=274f6628f9014d634f55968ae0c06626b6379326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:c6:ec:2f:3e:72:79:e2:4c:52:03:d7:b4:
4b:d1:8b:24:4a:50:74:d1:22:e0:72:ff:27:a8:2d:
06:2e:85:32:db:74:cd:e3:9b:52:2d:17:ac:c4:b8:
27:75:e8:1d:f6:3b:42:93:4d:1b:8a:c4:d8:d9:0e:
c1:e3:aa:2e:4a:26:59:de:86:8e:cd:9d:30:b2:8b:
6a:ca:b0:82:fd:f3:e1:bd:55:ab:d1:31:1e:14:74:
17:3f:b1:1c:b0:7e:db:17:0f:77:e0:2e:b1:38:af:
9d:3f:1e:fd:4a:35:73:63:26:9b:00:e4:85:dc:72:
05:26:19:4c:39:89:82:ea:68:9f:dd:0d:8c:3c:54:
56:22:cc:df:0c:54:48:ba:df:30:fe:4d:44:22:27:
f9:b9:5f:6b:0b:e8:58:28:6b:9a:0e:e6:35:d6:2d:
24:4e:69:15:fe:9f:2f:1b:01:a2:13:ac:fb:5e:52:
ab:f9:77:7d:5e:ba:a4:49:eb:42:8a:9b:a7:ec:77:
fb:49:63:58:53:c7:be:fc:12:c7:c7:ff:ac:d3:ff:
f5:7c:ff:fa:ce:e1:2a:5a:01:81:58:e2:69:c7:34:
32:a6:71:a3:9a:00:43:f2:c0:96:09:ab:ca:14:2f:
73:88:d0:e2:25:2e:60:dd:4b:99:e8:41:a5:24:78:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4F:66:28:F9:01:4D:63:4F:55:96:8A:E0:C0:66:26:B6:37:93:26
X509v3 Authority Key Identifier:
keyid:C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:65:80:26:a7:13:1c:98:c4:a1:70:97:a8:f3:ef:50:4a:f3:
ed:aa:3d:30:6d:f1:73:91:f0:cd:d5:a6:6e:9e:9e:a8:6d:46:
10:e6:9b:49:0e:82:53:48:1f:f2:19:b8:af:29:1b:c2:c5:20:
37:ba:fa:4b:20:02:1c:d8:27:de:73:eb:6c:ae:85:bd:2e:19:
52:07:ee:70:73:de:3a:61:0b:8b:4c:28:b9:79:9d:6c:3d:31:
cb:69:ed:1c:fb:e8:6f:81:9f:b2:c1:ab:57:fd:ef:c0:97:0d:
0c:3e:1f:07:c8:7d:10:fa:0c:5b:82:54:71:14:58:35:22:92:
9a:7f:e3:2a:ea:ae:b0:87:8e:ad:25:c8:4b:f4:44:38:19:b9:
ea:a0:87:a5:de:80:e0:76:05:85:57:d3:bf:75:62:bb:cc:f2:
33:c0:36:51:52:6d:78:1e:68:a0:d0:69:f0:56:d2:4d:93:ef:
52:63:1c:94:a7:1e:da:85:cc:31:c5:8c:47:b3:15:c2:f7:8b:
e6:6c:58:76:37:48:e1:19:e6:00:e2:e2:e7:2f:34:26:8c:66:
fd:84:42:f7:a6:2d:25:14:73:a9:d1:13:fb:f5:38:e9:fc:73:
b0:7b:48:24:63:8d:f4:a3:57:5c:b1:97:9d:cf:00:ec:33:a4:
f9:b9:28:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4wMNMmxBYf7iaAKmTQk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMmUzMjNmMWJlMTYzYzRkN2Y4Yjg4YWFkOGRhYWZiZTAx
MDZkNmYwHhcNMjUwODA0MDcwMTUzWhcNMjUwODA1MDcwMTUzWjAzMTEwLwYDVQQD
EygyNzRmNjYyOGY5MDE0ZDYzNGY1NTk2OGFlMGMwNjYyNmI2Mzc5MzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOvG7C8+cnniTFID17RL0YskSlB0
0SLgcv8nqC0GLoUy23TN45tSLResxLgndegd9jtCk00bisTY2Q7B46ouSiZZ3oaO
zZ0wsotqyrCC/fPhvVWr0TEeFHQXP7EcsH7bFw934C6xOK+dPx79SjVzYyabAOSF
3HIFJhlMOYmC6mif3Q2MPFRWIszfDFRIut8w/k1EIif5uV9rC+hYKGuaDuY11i0k
TmkV/p8vGwGiE6z7XlKr+Xd9XrqkSetCipun7Hf7SWNYU8e+/BLHx/+s0//1fP/6
zuEqWgGBWOJpxzQypnGjmgBD8sCWCavKFC9ziNDiJS5g3UuZ6EGlJHg8HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdPZij5AU1jT1WWiuDAZia2N5MmMB8GA1UdIwQY
MBaAFMAuMj8b4WPE1/i4iq2NqvvgEG1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0M0eVB4dmhZOFRYLUxpS3JZMnEtLUFRYlc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hYWVkNmItMTQzNC00N2M2LWE3NGQt
MWRmMWVjY2RkYzg3LzEvd0M0eVB4dmhZOFRYLUxpS3JZMnEtLUFRYlc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hYWVkNmItMTQzNC00N2M2LWE3NGQtMWRmMWVjY2RkYzg3
LzEvd0M0eVB4dmhZOFRYLUxpS3JZMnEtLUFRYlc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmWAJqcT
HJjEoXCXqPPvUErz7ao9MG3xc5HwzdWmbp6eqG1GEOabSQ6CU0gf8hm4rykbwsUg
N7r6SyACHNgn3nPrbK6FvS4ZUgfucHPeOmELi0wouXmdbD0xy2ntHPvob4GfssGr
V/3vwJcNDD4fB8h9EPoMW4JUcRRYNSKSmn/jKuqusIeOrSXIS/REOBm56qCHpd6A
4HYFhVfTv3Viu8zyM8A2UVJteB5ooNBp8FbSTZPvUmMclKce2oXMMcWMR7MVwveL
5mxYdjdI4RnmAOLi5y80Joxm/YRC96YtJRRzqdET+/U46fxzsHtIJGON9KNXXLGX
nc8A7DOk+bkoVQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:39 2025 by rpki-client