
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
File: WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft (raw, json)
Hash identifier: d5WF7MBQvGpBMsZsdvAG8gutXiH+5QFtUMNLjLWClxU=
Subject key identifier: 81:73:F7:1A:5B:71:1A:A7:71:5E:9B:4D:7A:19:E2:84:FB:5B:B5:A5
Authority key identifier: 58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
Certificate issuer: /CN=584d44ad55c262d84efd442dc8767b0413e1b162
Certificate serial: 01987C77D7392E4636F5D66E39F04F7219FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
Manifest number: 023E
Signing time: Tue 05 Aug 2025 23:01:25 +0000
Manifest this update: Tue 05 Aug 2025 23:01:25 +0000
Manifest next update: Wed 06 Aug 2025 23:01:25 +0000
Files and hashes: 1: NlmDLH5wWMGr_vzUkJAwntWEnjQ.roa (hash: 1/yiZpsUjLuoNGo0Ku/rpHLpaDxTkI6zMzawihAJCgI=)
2: WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl (hash: RDU9sItSYmgxN1wZWireP6Q4/8mltSiWF1t/SRWVLLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:d7:39:2e:46:36:f5:d6:6e:39:f0:4f:72:19:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=584d44ad55c262d84efd442dc8767b0413e1b162
Validity
Not Before: Aug 5 23:01:25 2025 GMT
Not After : Aug 6 23:01:25 2025 GMT
Subject: CN=8173f71a5b711aa7715e9b4d7a19e284fb5bb5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:75:80:5a:1b:13:b8:8d:a7:02:54:9f:0f:
e8:e1:49:cf:df:c9:82:4b:95:d4:df:6f:59:02:33:
75:f3:48:59:8f:cc:0a:01:a7:03:d6:16:6a:8d:1d:
d4:4e:1b:c6:b3:3b:e8:24:b1:2c:84:48:2d:4f:6c:
4d:ec:3e:7b:20:1f:5a:fb:8b:77:d1:d7:3f:6f:de:
8b:3d:4e:dd:52:7c:f1:eb:9a:dc:a0:f7:4f:81:7c:
86:10:42:22:86:60:45:a1:0b:30:17:05:d8:74:ab:
c3:9c:22:b9:1f:c8:1d:db:5e:9f:bb:fc:68:e4:0f:
ce:76:bb:a1:96:b5:c3:49:5b:92:73:bc:9a:92:42:
35:aa:37:a5:33:c9:bd:23:62:ac:78:6d:11:99:6f:
88:28:7b:09:66:a2:95:c8:72:c2:8e:da:0b:2f:0e:
37:af:53:2c:73:a4:12:50:94:5f:e0:90:0c:04:ef:
f2:7c:0b:68:87:5c:41:4d:a0:b3:5a:4f:cd:93:b5:
db:e2:dc:5e:64:9a:6c:e0:2a:f7:8b:50:f9:b8:79:
de:22:6f:d5:a2:6a:87:ae:98:ef:ef:b8:af:96:0d:
84:b1:6b:8e:31:50:3a:64:c2:92:0e:b3:40:bf:ec:
a8:20:8d:1c:1b:9f:eb:66:9a:a3:60:36:b8:a1:d2:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:73:F7:1A:5B:71:1A:A7:71:5E:9B:4D:7A:19:E2:84:FB:5B:B5:A5
X509v3 Authority Key Identifier:
keyid:58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:05:6d:26:0b:9a:ef:e2:fe:fa:aa:bf:06:6c:4f:5c:89:3a:
90:15:b2:44:04:d0:ee:02:16:87:57:bc:bd:14:af:a2:7f:ee:
c7:28:ac:bf:e7:c7:79:f5:2b:38:b3:93:e5:78:19:9e:40:da:
60:7c:22:5e:29:70:ed:d2:2c:57:41:bf:44:61:95:67:5f:e6:
2d:0a:6f:35:fd:d2:6d:d6:3d:97:50:55:17:3d:30:67:fa:de:
78:60:32:fe:d9:f7:ae:c7:8a:58:a4:26:c9:e7:06:b3:37:2f:
0b:9b:ca:e3:d7:d7:b7:8a:7a:b9:c5:41:7d:b5:f0:d7:aa:8a:
a0:06:da:bd:15:da:98:d9:1b:53:71:9c:b7:27:9e:b6:5f:2b:
9a:2b:1a:be:bf:d7:6f:87:fa:d3:e5:9c:a4:f5:10:a3:1a:a5:
45:df:8f:a0:0c:41:30:aa:70:78:bf:f2:15:9d:ec:33:0e:01:
e7:ed:0f:68:c8:65:91:3e:77:1b:f5:1b:1d:09:4b:8a:5d:a7:
97:8f:18:6e:bd:3a:ce:ab:5c:7e:04:9f:ee:11:2a:db:54:12:
63:01:09:36:db:14:1a:a0:f3:db:e4:2d:9a:02:d7:08:22:46:
35:d8:de:14:bc:2a:c4:00:f0:a1:0d:93:46:e5:b7:a9:15:f3:
fb:69:d4:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8d9c5LkY29dZuOfBPchn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NGQ0NGFkNTVjMjYyZDg0ZWZkNDQyZGM4NzY3YjA0MTNl
MWIxNjIwHhcNMjUwODA1MjMwMTI1WhcNMjUwODA2MjMwMTI1WjAzMTEwLwYDVQQD
Eyg4MTczZjcxYTViNzExYWE3NzE1ZTliNGQ3YTE5ZTI4NGZiNWJiNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgp1gFobE7iNpwJUnw/o4UnP38mC
S5XU329ZAjN180hZj8wKAacD1hZqjR3UThvGszvoJLEshEgtT2xN7D57IB9a+4t3
0dc/b96LPU7dUnzx65rcoPdPgXyGEEIihmBFoQswFwXYdKvDnCK5H8gd216fu/xo
5A/OdruhlrXDSVuSc7yakkI1qjelM8m9I2KseG0RmW+IKHsJZqKVyHLCjtoLLw43
r1Msc6QSUJRf4JAMBO/yfAtoh1xBTaCzWk/Nk7Xb4txeZJps4Cr3i1D5uHneIm/V
omqHrpjv77ivlg2EsWuOMVA6ZMKSDrNAv+yoII0cG5/rZpqjYDa4odLAlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFz9xpbcRqncV6bTXoZ4oT7W7WlMB8GA1UdIwQY
MBaAFFhNRK1VwmLYTv1ELch2ewQT4bFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0UxRXJWWENZdGhPX1VRdHlIWjdCQlBoc1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jZGMwMjQtZWE5Yy00NTA4LWI5MzYt
ODBiOTEyMDczOGNhLzEvV0UxRXJWWENZdGhPX1VRdHlIWjdCQlBoc1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jZGMwMjQtZWE5Yy00NTA4LWI5MzYtODBiOTEyMDczOGNh
LzEvV0UxRXJWWENZdGhPX1VRdHlIWjdCQlBoc1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAVtJgua
7+L++qq/BmxPXIk6kBWyRATQ7gIWh1e8vRSvon/uxyisv+fHefUrOLOT5XgZnkDa
YHwiXilw7dIsV0G/RGGVZ1/mLQpvNf3SbdY9l1BVFz0wZ/reeGAy/tn3rseKWKQm
yecGszcvC5vK49fXt4p6ucVBfbXw16qKoAbavRXamNkbU3Gctyeetl8rmisavr/X
b4f60+WcpPUQoxqlRd+PoAxBMKpweL/yFZ3sMw4B5+0PaMhlkT53G/UbHQlLil2n
l48Ybr06zqtcfgSf7hEq21QSYwEJNtsUGqDz2+QtmgLXCCJGNdjeFLwqxADwoQ2T
RuW3qRXz+2nUvA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:42 2025 by rpki-client