Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: Tz+0fmMSMJ7VG9YxjO4oO04mrof00B6lnDNG6HDd4y8=
Subject key identifier: 1D:C1:8E:72:16:68:35:7B:DC:AB:3D:7A:86:F8:59:A1:64:19:61:60
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 019874500989E0E9635F2CAF8CE7C91527EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 0840
Signing time: Mon 04 Aug 2025 09:00:59 +0000
Manifest this update: Mon 04 Aug 2025 09:00:59 +0000
Manifest next update: Tue 05 Aug 2025 09:00:59 +0000
Files and hashes: 1: 1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa (hash: LOYh8aPG/hc+f2Wb/Cw6QofBs2xxLo7hf2Lj5w8CzgE=)
2: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: hUZ5FUBBHQbRZOHRgMsPClqqteUgRnsXRCllgAvSjss=)
3: wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa (hash: JT8633z6qqiHZIgSN23W3yJc2J/8lJJEZ1oYIJiRcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:09:89:e0:e9:63:5f:2c:af:8c:e7:c9:15:27:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Aug 4 09:00:59 2025 GMT
Not After : Aug 5 09:00:59 2025 GMT
Subject: CN=1dc18e721668357bdcab3d7a86f859a164196160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:8d:69:4a:9b:ee:41:8e:1a:1b:89:27:05:
2a:b3:21:e9:62:97:2d:dd:3d:16:ad:7f:77:c1:c6:
95:55:96:88:ec:4b:b0:f1:c7:df:b3:2a:1c:6e:ea:
17:57:2f:90:09:7d:53:25:0a:1b:cc:7c:04:b2:65:
5e:2e:7a:81:ca:fb:c8:ec:ae:9c:f0:3a:34:60:eb:
40:80:29:ca:f4:73:49:8e:70:4e:fa:40:7b:75:1c:
50:c7:12:42:cd:76:21:85:72:9a:95:6e:8b:46:27:
ad:64:df:b0:0b:80:d1:59:5a:1e:a5:b8:90:16:af:
22:05:e0:4a:3c:a2:b8:26:06:11:ee:b4:e5:90:f1:
f8:e3:79:ae:88:ff:83:10:0c:2f:28:24:e6:83:bc:
1f:6a:b6:a5:0f:23:9c:38:17:ac:37:94:3c:d2:6f:
ad:16:c3:ae:99:57:73:e0:87:3f:21:53:ac:78:9a:
28:30:6d:3c:a5:63:d7:84:e4:2e:07:69:0a:50:f0:
cd:5e:29:26:6d:0c:ab:90:12:44:bc:04:6d:74:a6:
93:37:57:90:bf:4e:e5:56:ed:e6:88:ea:32:ef:ce:
f1:d8:99:2f:fe:40:6c:5d:95:76:d0:4c:58:c6:87:
f2:57:fc:f2:b8:1c:4b:c0:73:43:71:e9:a8:bc:1b:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C1:8E:72:16:68:35:7B:DC:AB:3D:7A:86:F8:59:A1:64:19:61:60
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7c:2f:c0:e8:d2:63:9c:2d:22:9d:d0:65:7a:7c:36:0d:43:
24:a5:bd:2a:6a:7c:a6:9f:53:8c:2f:a8:f8:99:54:47:0c:4b:
68:18:29:cf:72:1a:22:14:20:da:b6:c9:df:3a:60:b5:3a:3d:
bb:2c:3c:b3:51:c9:ea:cb:e1:be:b6:dc:b5:1e:a5:f0:d7:97:
1b:96:d2:2d:e0:5a:12:35:63:5d:85:cf:ff:f0:44:b5:99:38:
12:03:3a:e8:ae:b3:bb:82:27:7f:35:34:cb:43:1e:d8:9a:e1:
db:20:13:c0:9b:99:01:f1:7d:f6:45:9f:71:6c:07:ce:41:79:
87:c3:3b:c9:96:cb:5e:a1:4e:90:44:12:e5:88:ac:59:8b:17:
d3:10:a6:26:ce:b3:1e:b4:a8:4a:55:0d:10:c2:87:8b:fc:83:
b7:a6:fc:a6:c5:93:49:0e:eb:2d:d1:77:df:c4:fd:83:0f:50:
a4:2e:51:66:c6:db:36:c1:e1:93:4f:0b:6b:a5:da:85:7c:05:
13:8f:83:75:82:dc:68:22:ff:ef:a9:de:44:db:6a:3a:ac:2e:
b1:cb:5d:89:0a:41:15:03:92:50:f8:17:7b:ff:f2:46:59:5e:
d2:6d:f0:a7:0a:03:af:a5:f1:24:fd:7e:36:bb:1d:c0:0a:8d:
3d:71:89:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UAmJ4OljXyyvjOfJFSfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDRjZDdkZjg0YzMxOWQxOWFmMzViMTEwNGYxNzNlYmEy
YzZkYmQwHhcNMjUwODA0MDkwMDU5WhcNMjUwODA1MDkwMDU5WjAzMTEwLwYDVQQD
EygxZGMxOGU3MjE2NjgzNTdiZGNhYjNkN2E4NmY4NTlhMTY0MTk2MTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIaNaUqb7kGOGhuJJwUqsyHpYpct
3T0WrX93wcaVVZaI7Euw8cffsyocbuoXVy+QCX1TJQobzHwEsmVeLnqByvvI7K6c
8Do0YOtAgCnK9HNJjnBO+kB7dRxQxxJCzXYhhXKalW6LRietZN+wC4DRWVoepbiQ
Fq8iBeBKPKK4JgYR7rTlkPH443muiP+DEAwvKCTmg7wfaralDyOcOBesN5Q80m+t
FsOumVdz4Ic/IVOseJooMG08pWPXhOQuB2kKUPDNXikmbQyrkBJEvARtdKaTN1eQ
v07lVu3miOoy787x2Jkv/kBsXZV20ExYxofyV/zyuBxLwHNDcemovBumXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3BjnIWaDV73Ks9eob4WaFkGWFgMB8GA1UdIwQY
MBaAFMEEzX34TDGdGa81sRBPFz66LG29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQt
N2VmZjhmMWU5MWNkLzEvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQtN2VmZjhmMWU5MWNk
LzEvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHwvwOjS
Y5wtIp3QZXp8Ng1DJKW9Kmp8pp9TjC+o+JlURwxLaBgpz3IaIhQg2rbJ3zpgtTo9
uyw8s1HJ6svhvrbctR6l8NeXG5bSLeBaEjVjXYXP//BEtZk4EgM66K6zu4InfzU0
y0Me2Jrh2yATwJuZAfF99kWfcWwHzkF5h8M7yZbLXqFOkEQS5YisWYsX0xCmJs6z
HrSoSlUNEMKHi/yDt6b8psWTSQ7rLdF338T9gw9QpC5RZsbbNsHhk08La6XahXwF
E4+DdYLcaCL/76neRNtqOqwusctdiQpBFQOSUPgXe//yRlle0m3wpwoDr6XxJP1+
NrsdwAqNPXGJ/A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:50 2025 by rpki-client