Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
File: w8YbUevIQYDwprIy6H351hyQ-qs.mft (raw, json)
Hash identifier: DkJusU8YIS9APeI3fJypM7TY6SrokxdNDhc8DJcq3Uk=
Subject key identifier: D3:45:0D:7B:14:48:A1:47:24:9A:45:7B:D2:39:ED:61:33:89:AB:BC
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 01989F7187D100D0E2F9C01DB936D5CAA0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
Manifest number: 1633
Signing time: Tue 12 Aug 2025 18:01:14 +0000
Manifest this update: Tue 12 Aug 2025 18:01:14 +0000
Manifest next update: Wed 13 Aug 2025 18:01:14 +0000
Files and hashes: 1: 1-ndEryzCguWCGvVWWmkd8W4KbQ.roa (hash: W7EqtKjOdrRjfIUBcKhssjKWmvswGN88L1U5twVHTxE=)
2: 5fWADeIk4d10ZbIqGhJnIwZyHH8.roa (hash: QzLL6CT6LeM4dPuY4ZTi6ISO36hu50lOly24fxPuWC4=)
3: w8YbUevIQYDwprIy6H351hyQ-qs.crl (hash: ldo0egJwMUXlwN/S22fOOkEpNd2DtQJUru015gcX5Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:87:d1:00:d0:e2:f9:c0:1d:b9:36:d5:ca:a0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Aug 12 18:01:14 2025 GMT
Not After : Aug 13 18:01:14 2025 GMT
Subject: CN=d3450d7b1448a147249a457bd239ed613389abbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e2:ac:f5:00:39:f7:bb:75:0e:5b:48:79:8a:
1f:85:82:7e:1f:70:87:8e:bf:1e:e0:61:ca:3d:86:
23:8f:b6:70:7e:eb:73:72:41:93:cb:db:63:10:fc:
aa:bc:b5:1d:bd:7a:1a:9b:81:2e:32:53:91:77:93:
f0:47:e9:1b:ee:d4:11:21:06:b9:76:ef:f5:39:bd:
13:5c:94:73:07:de:88:6e:1e:9b:e0:c5:32:59:e4:
0b:74:30:92:8e:0d:78:6a:b3:15:68:5c:61:21:80:
19:a3:d1:eb:ba:9b:41:67:d6:d4:1d:ff:6d:a8:22:
2a:cc:28:3a:9e:57:59:12:4d:41:ba:65:f9:64:e1:
8a:26:fd:23:ab:fd:03:06:52:76:e4:54:25:a1:72:
a2:e6:86:7b:14:3a:80:b6:96:a3:a2:a4:9b:18:21:
15:93:38:69:11:fb:91:84:00:73:0d:e3:ab:04:8e:
01:51:c4:70:56:86:a1:bd:3a:40:fd:b4:61:12:13:
ae:f6:7b:e0:67:b1:ce:fa:bc:ab:da:07:dd:d1:ec:
cf:94:a0:e7:84:0a:f0:72:44:0d:95:4d:50:e0:a6:
19:3f:0e:49:7f:51:09:41:18:a3:11:5a:e3:bb:62:
3f:d0:f7:3d:43:56:c4:d1:44:4c:85:19:8f:25:a6:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:0D:7B:14:48:A1:47:24:9A:45:7B:D2:39:ED:61:33:89:AB:BC
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5c:1b:9f:da:29:a2:df:87:43:f6:54:63:20:7a:0e:6c:bd:
b7:56:a8:04:e8:b8:14:4e:b7:f5:ba:55:31:cf:e6:f0:04:8e:
5c:15:32:e7:99:4f:3c:c8:40:88:6d:62:18:f0:bd:5d:b9:69:
a4:80:e2:0b:9b:f6:b3:4d:13:5c:7f:0d:84:90:fc:15:72:48:
99:0c:ed:0c:35:74:06:a3:d2:91:55:8b:a2:10:01:85:f5:18:
78:7e:4f:14:55:74:74:2e:67:44:e4:36:a1:19:39:7a:86:04:
b1:48:2a:76:a9:95:79:83:c1:76:08:21:55:fb:c6:fa:01:f3:
d1:af:19:80:01:3d:5e:03:cc:39:50:34:7f:05:85:8f:d9:0c:
6e:ad:5b:55:2c:a3:13:70:6f:02:75:06:5f:70:22:d6:b7:2d:
dd:f3:60:73:9e:dc:40:72:73:2a:c7:e8:0a:65:06:8c:66:cf:
b3:34:a9:92:1b:1b:14:6a:cb:b8:34:e3:ea:e3:fc:1a:cb:b4:
36:2a:dd:b1:59:44:a0:26:19:35:09:4d:bc:9d:16:32:36:e6:
e3:b8:31:9e:fc:c0:22:8b:a8:af:d8:8d:f1:14:0b:e3:20:e0:
7a:24:28:b1:00:79:9f:13:b1:bd:6d:6c:08:95:ce:c8:7e:14:
c5:93:05:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifcYfRANDi+cAduTbVyqDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzYxYjUxZWJjODQxODBmMGE2YjIzMmU4N2RmOWQ2MWM5
MGZhYWIwHhcNMjUwODEyMTgwMTE0WhcNMjUwODEzMTgwMTE0WjAzMTEwLwYDVQQD
EyhkMzQ1MGQ3YjE0NDhhMTQ3MjQ5YTQ1N2JkMjM5ZWQ2MTMzODlhYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+Ks9QA597t1DltIeYofhYJ+H3CH
jr8e4GHKPYYjj7ZwfutzckGTy9tjEPyqvLUdvXoam4EuMlORd5PwR+kb7tQRIQa5
du/1Ob0TXJRzB96Ibh6b4MUyWeQLdDCSjg14arMVaFxhIYAZo9HruptBZ9bUHf9t
qCIqzCg6nldZEk1BumX5ZOGKJv0jq/0DBlJ25FQloXKi5oZ7FDqAtpajoqSbGCEV
kzhpEfuRhABzDeOrBI4BUcRwVoahvTpA/bRhEhOu9nvgZ7HO+ryr2gfd0ezPlKDn
hArwckQNlU1Q4KYZPw5Jf1EJQRijEVrju2I/0Pc9Q1bE0URMhRmPJaYRDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNFDXsUSKFHJJpFe9I57WEziau8MB8GA1UdIwQY
MBaAFMPGG1HryEGA8KayMuh9+dYckPqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhZYlVldklRWUR3cHJJeTZIMzUxaHlRLXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YWFkYWItOTU5YS00NjYzLWI5MzUt
OGY5ODI3MzQ0NzkwLzEvdzhZYlVldklRWUR3cHJJeTZIMzUxaHlRLXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83YWFkYWItOTU5YS00NjYzLWI5MzUtOGY5ODI3MzQ0Nzkw
LzEvdzhZYlVldklRWUR3cHJJeTZIMzUxaHlRLXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVwbn9op
ot+HQ/ZUYyB6Dmy9t1aoBOi4FE639bpVMc/m8ASOXBUy55lPPMhAiG1iGPC9Xblp
pIDiC5v2s00TXH8NhJD8FXJImQztDDV0BqPSkVWLohABhfUYeH5PFFV0dC5nROQ2
oRk5eoYEsUgqdqmVeYPBdgghVfvG+gHz0a8ZgAE9XgPMOVA0fwWFj9kMbq1bVSyj
E3BvAnUGX3Ai1rct3fNgc57cQHJzKsfoCmUGjGbPszSpkhsbFGrLuDTj6uP8Gsu0
NirdsVlEoCYZNQlNvJ0WMjbm47gxnvzAIouor9iN8RQL4yDgeiQosQB5nxOxvW1s
CJXOyH4UxZMFTA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:47:25 2025 by rpki-client