Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: txRiCqHofCBK/D+6XIz/2PfGLpzBOxkS+6XQMzijQWc=
Subject key identifier: 6A:B1:E7:C9:A3:08:D8:A8:88:E4:A4:CA:D0:D2:2E:3B:5F:C3:78:86
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 01987298B764658ACFD3031BF7502E8F0AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 03E8
Signing time: Mon 04 Aug 2025 01:01:07 +0000
Manifest this update: Mon 04 Aug 2025 01:01:07 +0000
Manifest next update: Tue 05 Aug 2025 01:01:07 +0000
Files and hashes: 1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=)
2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: owyGS0VMLQOnBW7P+7dXV9/+y9muqX4hJp91dm6/lak=)
3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:b7:64:65:8a:cf:d3:03:1b:f7:50:2e:8f:0a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Aug 4 01:01:07 2025 GMT
Not After : Aug 5 01:01:07 2025 GMT
Subject: CN=6ab1e7c9a308d8a888e4a4cad0d22e3b5fc37886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:58:60:c3:c9:08:19:ad:33:96:d9:a6:b5:
4b:ef:0e:27:e1:73:d8:19:01:c1:07:6a:80:6d:95:
5c:bc:29:03:90:28:2d:31:59:b4:67:7b:2c:29:be:
9c:a1:fd:38:a7:e1:51:b0:06:91:a4:16:1b:bf:48:
09:d5:1c:bc:28:83:6b:9a:e7:33:f8:29:96:6a:4f:
03:1f:74:d5:2b:09:2e:67:28:16:3e:b4:40:57:01:
e5:85:0e:24:82:9e:00:29:3f:c0:d6:7a:5d:3c:1a:
9e:32:5a:ad:3b:39:07:27:0d:45:32:59:f7:5c:3b:
98:b9:df:df:dd:af:82:35:dc:76:cd:46:90:70:e9:
68:bc:7b:36:db:1e:94:20:e5:3c:87:9b:2b:a6:80:
a2:d8:8e:40:3b:d8:ac:de:a1:15:ff:8d:71:9f:06:
f9:8d:82:5d:ad:17:c1:8a:8a:bc:b2:69:47:bf:02:
c8:de:e2:7b:a5:8d:26:80:24:16:8f:5e:10:1c:ff:
a6:84:47:2f:3f:28:64:df:27:8e:5e:ec:6d:3b:a2:
35:f4:e1:34:1c:cf:62:f2:bd:32:62:48:24:0c:1b:
d3:e0:51:e2:8c:25:c9:96:2c:3b:9e:f0:16:e7:99:
40:62:5f:d4:91:bf:0f:11:d4:82:a7:96:84:5d:b0:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B1:E7:C9:A3:08:D8:A8:88:E4:A4:CA:D0:D2:2E:3B:5F:C3:78:86
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a0:40:a9:92:cf:54:f2:ef:34:b5:a0:db:f4:ac:39:77:7a:
cc:b2:fb:d7:66:e9:8f:b3:e8:7c:1c:80:99:26:7f:90:b9:69:
10:a9:54:6d:ef:32:94:10:f3:e6:7b:45:78:1a:5c:f1:47:99:
ac:78:f5:59:33:02:02:4b:e7:2a:67:c7:d9:74:0e:9d:8b:42:
ae:52:2b:f8:7d:43:00:58:6b:82:dd:e1:45:a9:c5:72:17:1f:
01:a7:df:05:b5:01:f1:4d:1d:dc:e7:91:d4:b5:36:a1:ba:e3:
0e:14:b2:64:e2:cc:c6:54:bb:c8:c3:f2:59:f6:ab:16:b8:38:
97:20:78:25:5c:ac:9c:3d:df:4d:bc:3d:b6:b8:ef:4e:42:b5:
22:f8:1e:33:98:de:d9:0c:04:b4:2f:f8:e1:59:d3:9f:24:74:
fd:ae:db:6f:b1:80:58:0b:18:4e:4d:04:aa:46:0c:22:55:a7:
ce:84:f4:a0:62:36:cd:28:d8:d4:b1:68:2b:f8:e8:9a:04:1d:
53:ba:47:45:e7:06:fa:30:e4:35:c3:f5:53:b1:25:94:05:14:
2b:d0:89:15:2a:3a:9b:dd:20:05:39:be:fe:75:b4:21:9e:dc:
35:fd:ae:ef:e3:0c:01:28:97:fe:66:cb:ab:81:69:41:16:45:
06:be:01:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymLdkZYrP0wMb91AujwqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMjMyYWUzOGE5MjMzYWI3ZmMxYjQyOWE1MDI5MjIwYWZh
N2IyODgwHhcNMjUwODA0MDEwMTA3WhcNMjUwODA1MDEwMTA3WjAzMTEwLwYDVQQD
Eyg2YWIxZTdjOWEzMDhkOGE4ODhlNGE0Y2FkMGQyMmUzYjVmYzM3ODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNNYYMPJCBmtM5bZprVL7w4n4XPY
GQHBB2qAbZVcvCkDkCgtMVm0Z3ssKb6cof04p+FRsAaRpBYbv0gJ1Ry8KINrmucz
+CmWak8DH3TVKwkuZygWPrRAVwHlhQ4kgp4AKT/A1npdPBqeMlqtOzkHJw1FMln3
XDuYud/f3a+CNdx2zUaQcOlovHs22x6UIOU8h5srpoCi2I5AO9is3qEV/41xnwb5
jYJdrRfBioq8smlHvwLI3uJ7pY0mgCQWj14QHP+mhEcvPyhk3yeOXuxtO6I19OE0
HM9i8r0yYkgkDBvT4FHijCXJliw7nvAW55lAYl/Ukb8PEdSCp5aEXbAP9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqx58mjCNioiOSkytDSLjtfw3iGMB8GA1UdIwQY
MBaAFFojKuOKkjOrf8G0KaUCkiCvp7KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2It
MTBhNDg1YzBiMGYyLzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2ItMTBhNDg1YzBiMGYy
LzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKBAqZLP
VPLvNLWg2/SsOXd6zLL712bpj7PofByAmSZ/kLlpEKlUbe8ylBDz5ntFeBpc8UeZ
rHj1WTMCAkvnKmfH2XQOnYtCrlIr+H1DAFhrgt3hRanFchcfAaffBbUB8U0d3OeR
1LU2obrjDhSyZOLMxlS7yMPyWfarFrg4lyB4JVysnD3fTbw9trjvTkK1IvgeM5je
2QwEtC/44VnTnyR0/a7bb7GAWAsYTk0EqkYMIlWnzoT0oGI2zSjY1LFoK/jomgQd
U7pHRecG+jDkNcP1U7EllAUUK9CJFSo6m90gBTm+/nW0IZ7cNf2u7+MMASiX/mbL
q4FpQRZFBr4Big==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:40 2025 by rpki-client