Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
File: wQohI_VJJk58u5-iHSxRN3IUhuQ.mft (raw, json)
Hash identifier: 7qbYBAWEtx1G72EBFBSafWw7+7DOulOyA13L3ncdrF8=
Subject key identifier: B2:21:DF:47:B8:96:43:31:3C:36:AC:75:47:4C:F5:0F:6A:44:D8:BE
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Certificate issuer: /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial: 019896009DF87992A4B574542A3418F158D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 22:01:19 +0000
Manifest this update: Sun 10 Aug 2025 22:01:19 +0000
Manifest next update: Mon 11 Aug 2025 22:01:19 +0000
Files and hashes: 1: XEsqeKOf3nUKp6N27Tk-w17zShA.roa (hash: k+ZjcSbWsbCQX+BZ6yWaMdK9CN57/SVKpUlCaIxWc4g=)
2: wQohI_VJJk58u5-iHSxRN3IUhuQ.crl (hash: TNxL41j4Gr9h7J2P3GycEhEGGx3AVkDNACsjxP9s7ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:9d:f8:79:92:a4:b5:74:54:2a:34:18:f1:58:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Validity
Not Before: Aug 10 22:01:19 2025 GMT
Not After : Aug 11 22:01:19 2025 GMT
Subject: CN=b221df47b89643313c36ac75474cf50f6a44d8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d3:63:a9:a9:d0:37:63:cd:42:97:ec:24:78:
17:02:6f:b8:da:8d:0e:74:a0:d7:4c:1d:45:c9:3d:
59:c2:db:6d:9c:99:12:2c:a9:ae:dc:d2:6f:7e:22:
30:62:6b:85:1f:c0:f4:93:f3:63:a3:40:6d:e9:ee:
65:f4:5d:fd:ee:3b:6c:7c:bc:1d:91:78:b9:ec:64:
56:36:82:37:f8:a7:75:a7:61:9e:3e:a8:ae:d0:ca:
c3:25:dd:59:72:19:a7:a5:b3:40:09:e7:ca:cf:55:
ea:e3:57:e0:0c:ea:5e:f2:81:c5:0e:5a:eb:9f:ed:
d5:5c:1c:25:15:ad:fd:d7:be:49:f1:a6:a6:eb:41:
6c:03:4f:5f:4e:4e:95:35:5b:59:3e:20:ab:86:57:
51:b3:b6:32:f4:bd:ce:ba:ec:b0:fb:0b:2a:1e:43:
dc:df:d7:43:97:ec:44:e5:f3:52:b9:a2:4d:b5:f6:
72:93:db:5f:c7:f2:11:75:a2:b1:8f:f5:4f:8d:08:
86:66:c9:6b:e2:58:ff:59:29:a6:7a:e8:0a:a3:3d:
d5:34:ca:91:56:f7:eb:c1:39:4f:e9:b8:e4:28:c7:
f8:8c:31:6d:95:4f:be:37:0d:a9:4a:67:ea:3d:bb:
28:91:63:aa:9b:47:c6:32:47:f2:e1:83:3c:a6:6d:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:DF:47:B8:96:43:31:3C:36:AC:75:47:4C:F5:0F:6A:44:D8:BE
X509v3 Authority Key Identifier:
keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:be:f2:be:bf:da:c4:89:cf:eb:ca:b1:55:af:9d:5c:e4:1a:
d8:d9:9b:15:ac:87:5a:04:a7:78:79:cc:4d:d9:f5:7f:e3:01:
37:af:4f:10:0e:b1:db:69:ee:eb:0d:4d:b8:49:e4:e8:51:8b:
44:30:51:0e:11:47:ce:20:44:14:c0:d7:a2:a1:3b:28:a9:6a:
0e:af:f8:b9:45:d4:9d:e8:31:ed:fd:f6:75:74:06:47:a7:eb:
5a:0a:31:8b:8a:01:a3:7d:7e:03:f6:9f:0c:f7:55:a5:15:d5:
c2:c2:8f:ac:2a:ee:6a:c6:e7:19:04:f0:5a:13:dd:84:49:d4:
af:03:2b:09:d8:14:2d:cf:1e:50:bd:d2:b9:9d:45:28:da:3c:
b9:ee:c7:6c:ff:50:61:e4:69:59:3e:10:4c:41:53:85:40:66:
3f:0a:4b:44:c7:5e:1f:fc:da:12:21:95:a6:ff:20:4a:80:8a:
6a:e5:01:4e:10:2b:d8:1a:be:96:e2:a9:4c:7d:79:71:78:2e:
c9:e9:4c:a8:ad:4d:4f:74:5a:e2:78:df:5e:1a:72:54:3c:de:
bb:57:59:7a:83:c1:9d:2b:bb:74:90:f5:bb:30:1e:1a:cc:48:
88:a6:7d:d7:48:b9:26:e8:a8:de:bd:9e:16:f6:44:a6:b9:ad:
6f:93:76:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWAJ34eZKktXRUKjQY8VjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMGEyMTIzZjU0OTI2NGU3Y2JiOWZhMjFkMmM1MTM3NzIx
NDg2ZTQwHhcNMjUwODEwMjIwMTE5WhcNMjUwODExMjIwMTE5WjAzMTEwLwYDVQQD
EyhiMjIxZGY0N2I4OTY0MzMxM2MzNmFjNzU0NzRjZjUwZjZhNDRkOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdNjqanQN2PNQpfsJHgXAm+42o0O
dKDXTB1FyT1ZwtttnJkSLKmu3NJvfiIwYmuFH8D0k/Njo0Bt6e5l9F397jtsfLwd
kXi57GRWNoI3+Kd1p2GePqiu0MrDJd1ZchmnpbNACefKz1Xq41fgDOpe8oHFDlrr
n+3VXBwlFa39175J8aam60FsA09fTk6VNVtZPiCrhldRs7Yy9L3Ouuyw+wsqHkPc
39dDl+xE5fNSuaJNtfZyk9tfx/IRdaKxj/VPjQiGZslr4lj/WSmmeugKoz3VNMqR
VvfrwTlP6bjkKMf4jDFtlU++Nw2pSmfqPbsokWOqm0fGMkfy4YM8pm0vvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIh30e4lkMxPDasdUdM9Q9qRNi+MB8GA1UdIwQY
MBaAFMEKISP1SSZOfLufoh0sUTdyFIbkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUt
YWRiMzAwZjcyMjVhLzEvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUtYWRiMzAwZjcyMjVh
LzEvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK77yvr/a
xInP68qxVa+dXOQa2NmbFayHWgSneHnMTdn1f+MBN69PEA6x22nu6w1NuEnk6FGL
RDBRDhFHziBEFMDXoqE7KKlqDq/4uUXUnegx7f32dXQGR6frWgoxi4oBo31+A/af
DPdVpRXVwsKPrCruasbnGQTwWhPdhEnUrwMrCdgULc8eUL3SuZ1FKNo8ue7HbP9Q
YeRpWT4QTEFThUBmPwpLRMdeH/zaEiGVpv8gSoCKauUBThAr2Bq+luKpTH15cXgu
yelMqK1NT3Ra4njfXhpyVDzeu1dZeoPBnSu7dJD1uzAeGsxIiKZ910i5Juio3r2e
FvZEprmtb5N2Kg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:35 2025 by rpki-client