Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier: 7IDccg2QWb+StPxUZbw5evG/Z7hNFbSTE+7Vfs8PU2Q=
Subject key identifier: DD:5A:B8:5B:4C:3D:BC:CF:9C:45:C0:AB:89:45:00:07:C8:B3:FD:D8
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 0198816855B5EDDFA4AECCD085B5B0B45C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number: 163F
Signing time: Wed 06 Aug 2025 22:02:35 +0000
Manifest this update: Wed 06 Aug 2025 22:02:35 +0000
Manifest next update: Thu 07 Aug 2025 22:02:35 +0000
Files and hashes: 1: 4D3wEAaKaO-VNYMegevp2dIDiZA.roa (hash: Pboeq/VEw/fEiNcfqVmPGeRB5EfnZp8myD9JUVRtoS4=)
2: 9YIKds84pmkqqSUhkc6fWWyFF_U.roa (hash: Zl/u5pK0GcTZlUuMm3FsQSFvKxX3ghw5NC/1Sio1XdQ=)
3: Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa (hash: 8frbczP/WVHp6KYWn7u+vpW6oUS+dkfZt+1mfqWJkiA=)
4: DaFBPQjNIt89bZ-zjtkqkYfP25s.roa (hash: pp9Ceedlj+qqJJCfZTMjKuHvEOYjJEHNhnFxlngbiSQ=)
5: F7VtIEmMZmsdWkt0VCX4cwPSD3I.roa (hash: pt6vMx0dEwVx2sHh/Y99xQxE2icOOT8mwZQHp5NGxZY=)
6: HQ5pk500M9r_ovoVxF0QEcohnog.roa (hash: ww8oMO4jWUVQ6/eBdnQNu3m8JDu+2hsoI9UHwgt7uPk=)
7: cdYJonDxjk5U7tPV78g4h2hSLZo.roa (hash: WtYQS9yTDEW6OANZ+f6hcNrUBMmPvrFNaBsMzLB79qc=)
8: kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa (hash: QA88mloj+h/kCAIWi5WNjJl3VlB1DBIdl1O6jQwCD1U=)
9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: YPRFjaCRzDNulo2AOGJ3Ma/Z2eZd0Kn1qvbDl6P5tN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:55:b5:ed:df:a4:ae:cc:d0:85:b5:b0:b4:5c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Aug 6 22:02:35 2025 GMT
Not After : Aug 7 22:02:35 2025 GMT
Subject: CN=dd5ab85b4c3dbccf9c45c0ab89450007c8b3fdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:a6:b1:ec:e4:e1:8a:71:4e:08:09:eb:df:
ed:d7:be:10:22:8b:62:5c:1f:38:0a:39:b4:97:a6:
d4:82:8c:7e:30:09:f2:90:46:4f:be:bd:d5:d6:7d:
f0:67:9c:22:b9:d1:a1:61:13:9b:36:51:63:2c:1b:
01:31:19:88:a9:e8:2d:69:0a:05:95:16:31:8d:22:
0a:bc:8e:7b:25:ed:12:26:8b:6b:36:c4:3f:19:48:
fb:61:16:02:08:28:9d:cc:bc:e0:60:95:e3:18:99:
02:ff:fe:59:3a:50:f5:68:7b:77:7f:38:da:13:08:
64:cd:ca:cd:36:77:07:e0:0e:52:97:3f:61:89:e8:
99:26:c3:95:dd:49:17:04:5c:88:75:13:25:d1:f5:
18:f3:6f:89:98:4e:ce:53:1d:a7:73:c4:b8:2b:8d:
13:18:29:cd:1a:f8:d7:69:95:cd:2a:1b:e6:9f:80:
9e:df:bf:d9:fd:29:d6:f6:61:3c:b0:73:4c:aa:42:
15:08:40:e7:8d:3d:d7:f5:d9:8a:8c:66:7e:6e:d7:
3c:97:01:6f:f2:7d:28:30:a0:57:be:93:b5:74:c7:
e5:61:4f:c4:3f:2d:e5:82:d8:89:e3:0e:af:1e:8e:
e4:14:ae:4a:f1:4f:f4:71:43:6a:52:f8:04:4a:d3:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5A:B8:5B:4C:3D:BC:CF:9C:45:C0:AB:89:45:00:07:C8:B3:FD:D8
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fc:92:10:0b:b9:80:e7:a3:a0:6c:d1:55:32:44:fa:58:ce:
68:92:be:a6:3b:a1:42:f6:ba:32:78:90:a7:78:de:b7:dc:9f:
29:84:cb:2e:e2:2f:97:06:03:25:f3:79:25:3a:23:0c:e1:8a:
02:7a:4b:c0:9c:18:c1:3a:2a:11:05:c1:69:79:13:fa:2f:04:
62:c1:f7:49:8c:b0:4d:60:d2:ea:47:9f:ef:73:de:f9:b7:a3:
9d:f3:db:e1:5b:b5:ca:85:62:d8:a1:9c:97:94:b8:b1:47:9f:
48:9a:9b:ca:41:ce:49:52:dc:e2:0a:e4:c7:5e:57:98:20:e3:
98:f6:c4:41:75:9a:0d:98:5a:05:97:72:f1:6e:41:cc:5f:fa:
45:ef:b4:bf:86:d4:00:34:b7:a9:5f:34:0f:fb:05:12:68:f6:
15:38:32:95:1a:25:86:a5:b8:14:ae:4c:88:09:98:a3:ab:96:
7c:38:0f:6e:33:bd:f5:cc:51:f4:29:c0:25:4c:b8:ad:23:c0:
fe:0f:4c:93:51:66:ef:a5:49:0b:bf:d7:8c:58:09:ce:8a:5d:
48:44:ba:fe:b1:55:f0:22:14:4b:72:7f:b3:06:a1:86:39:65:
e1:23:99:59:57:8a:6c:d9:6f:f9:b8:13:fe:d8:88:56:ae:09:
92:c1:fb:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaFW17d+krszQhbWwtFxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw
NDMxZWYwHhcNMjUwODA2MjIwMjM1WhcNMjUwODA3MjIwMjM1WjAzMTEwLwYDVQQD
EyhkZDVhYjg1YjRjM2RiY2NmOWM0NWMwYWI4OTQ1MDAwN2M4YjNmZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9amsezk4YpxTggJ69/t174QIoti
XB84Cjm0l6bUgox+MAnykEZPvr3V1n3wZ5wiudGhYRObNlFjLBsBMRmIqegtaQoF
lRYxjSIKvI57Je0SJotrNsQ/GUj7YRYCCCidzLzgYJXjGJkC//5ZOlD1aHt3fzja
EwhkzcrNNncH4A5Slz9hieiZJsOV3UkXBFyIdRMl0fUY82+JmE7OUx2nc8S4K40T
GCnNGvjXaZXNKhvmn4Ce37/Z/SnW9mE8sHNMqkIVCEDnjT3X9dmKjGZ+btc8lwFv
8n0oMKBXvpO1dMflYU/EPy3lgtiJ4w6vHo7kFK5K8U/0cUNqUvgEStPh7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1auFtMPbzPnEXAq4lFAAfIs/3YMB8GA1UdIwQY
MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt
YjJhNzEzZDJlYWIyLzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy
LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/ySEAu5
gOejoGzRVTJE+ljOaJK+pjuhQva6MniQp3jet9yfKYTLLuIvlwYDJfN5JTojDOGK
AnpLwJwYwToqEQXBaXkT+i8EYsH3SYywTWDS6kef73Pe+bejnfPb4Vu1yoVi2KGc
l5S4sUefSJqbykHOSVLc4grkx15XmCDjmPbEQXWaDZhaBZdy8W5BzF/6Re+0v4bU
ADS3qV80D/sFEmj2FTgylRolhqW4FK5MiAmYo6uWfDgPbjO99cxR9CnAJUy4rSPA
/g9Mk1Fm76VJC7/XjFgJzopdSES6/rFV8CIUS3J/swahhjll4SOZWVeKbNlv+bgT
/tiIVq4JksH7LA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:10:08 2025 by rpki-client