Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
File: wPQvc_8rzEiFsSAL0C7n4p9gjis.mft (raw, json)
Hash identifier: TvKoMNED97a3dh3jlmlFr9gpIpOtKMrvsuVpVEKwV/k=
Subject key identifier: EC:7B:9B:34:52:2B:19:B9:C6:75:26:04:0D:7F:31:04:44:E9:64:D6
Authority key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
Certificate issuer: /CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Certificate serial: 0198744FEFCC7BB5D7A906DAC16D1E512A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
Manifest number: 90
Signing time: Mon 04 Aug 2025 09:00:52 +0000
Manifest this update: Mon 04 Aug 2025 09:00:52 +0000
Manifest next update: Tue 05 Aug 2025 09:00:52 +0000
Files and hashes: 1: DhYlOELQmejsuqE0q-lFm-NVMP0.roa (hash: mf0P0l64vNrzlnAnRIlTkqO53r1pyoZwPlURmjISdFU=)
2: S0h9COCL9yDPAz3dul4Z5VK_88Q.roa (hash: xAF8HzsYzOEotQ+1gvdFYGccAU/IelrIejunqeu7D98=)
3: wPQvc_8rzEiFsSAL0C7n4p9gjis.crl (hash: NfqivP1I9NrJatIPV9oDu/rmAWxVpbxc/WU/KeDnPTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ef:cc:7b:b5:d7:a9:06:da:c1:6d:1e:51:2a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Validity
Not Before: Aug 4 09:00:52 2025 GMT
Not After : Aug 5 09:00:52 2025 GMT
Subject: CN=ec7b9b34522b19b9c67526040d7f310444e964d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:91:29:24:21:66:40:91:07:ca:aa:90:e3:
a2:42:1b:eb:77:75:e0:3c:dd:6d:46:da:7b:8c:98:
e5:0c:59:15:79:94:48:40:11:17:73:ca:c4:79:0e:
32:45:38:54:af:62:e8:df:a9:23:7e:22:d9:ce:c0:
87:8d:1b:84:0c:c5:4a:af:6c:76:e9:65:ba:5f:79:
cb:cf:ad:81:3c:10:28:99:45:a8:2a:02:36:bd:1d:
ab:5e:b9:10:43:c6:70:0e:e6:ef:c8:75:ac:86:4c:
12:91:42:13:43:b3:63:d2:8c:f9:f3:b9:19:76:57:
2f:a4:55:ed:97:cd:35:9a:a6:bd:9f:1c:e8:40:cb:
79:88:9a:4a:c0:03:82:c8:1b:96:de:0f:5a:f6:c9:
2e:10:61:65:96:98:01:98:36:fc:8f:bd:d5:0c:f3:
6a:b2:80:22:c3:06:64:a4:47:58:80:3e:6d:0b:71:
c4:0e:a8:7e:a2:bb:0c:f8:93:33:06:73:f1:de:5f:
8a:55:c1:df:86:4b:be:16:61:ac:f1:a7:0a:02:bf:
c0:6e:c7:d3:dd:77:b3:e0:70:ef:19:11:d4:e0:25:
58:4a:aa:70:2b:19:e7:72:9d:41:34:a0:8e:22:ea:
fd:ae:50:3f:a7:de:d4:ea:cb:f6:8e:c3:10:fa:6c:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7B:9B:34:52:2B:19:B9:C6:75:26:04:0D:7F:31:04:44:E9:64:D6
X509v3 Authority Key Identifier:
keyid:C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:51:05:57:b3:68:2a:72:c5:41:45:46:df:a2:c1:5e:46:06:
32:bf:a6:23:de:f2:c5:a5:89:9d:0c:75:3b:52:e2:0a:36:e1:
fe:b9:00:76:fe:c2:15:7b:33:6f:6f:f9:ed:2d:ee:01:2a:47:
84:32:d6:07:8e:4d:2c:8a:46:29:21:f2:07:04:d4:3b:20:db:
1c:b0:7b:8a:6a:fc:a4:dd:98:19:25:58:9e:6a:98:74:c8:b0:
6e:45:5d:f3:c9:a7:c5:a9:65:28:f5:2a:3c:51:7c:f7:5c:4d:
ef:a5:dd:3d:0e:af:d2:ee:7f:7f:82:73:f9:d3:a4:be:77:1d:
ec:e3:fa:5c:14:ec:85:55:38:d8:a2:8c:db:3a:54:70:72:f6:
45:c9:ad:2e:c6:10:f7:2a:a2:75:f1:bb:d0:ad:7f:89:c6:bf:
80:b8:24:bd:d4:10:2c:86:0b:5a:43:0f:9a:1a:82:b5:29:ef:
82:14:6f:47:77:fe:40:53:28:69:d7:76:c7:3c:e1:3b:0f:bb:
92:e0:10:ce:30:79:75:b9:52:43:16:63:51:43:b7:d7:a8:14:
d4:a7:3d:ad:b1:5a:80:4d:5a:54:e3:81:88:e8:fc:1d:1c:88:
30:41:41:de:a4:ff:4c:2a:a4:a4:03:ab:59:fb:75:fd:4a:63:
7f:e2:bb:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T+/Me7XXqQbawW0eUSpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjQyZjczZmYyYmNjNDg4NWIxMjAwYmQwMmVlN2UyOWY2
MDhlMmIwHhcNMjUwODA0MDkwMDUyWhcNMjUwODA1MDkwMDUyWjAzMTEwLwYDVQQD
EyhlYzdiOWIzNDUyMmIxOWI5YzY3NTI2MDQwZDdmMzEwNDQ0ZTk2NGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjWRKSQhZkCRB8qqkOOiQhvrd3Xg
PN1tRtp7jJjlDFkVeZRIQBEXc8rEeQ4yRThUr2Lo36kjfiLZzsCHjRuEDMVKr2x2
6WW6X3nLz62BPBAomUWoKgI2vR2rXrkQQ8ZwDubvyHWshkwSkUITQ7Nj0oz587kZ
dlcvpFXtl801mqa9nxzoQMt5iJpKwAOCyBuW3g9a9skuEGFllpgBmDb8j73VDPNq
soAiwwZkpEdYgD5tC3HEDqh+orsM+JMzBnPx3l+KVcHfhku+FmGs8acKAr/AbsfT
3Xez4HDvGRHU4CVYSqpwKxnncp1BNKCOIur9rlA/p97U6sv2jsMQ+mxUDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOx7mzRSKxm5xnUmBA1/MQRE6WTWMB8GA1UdIwQY
MBaAFMD0L3P/K8xIhbEgC9Au5+KfYI4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDct
N2RkNTdlNzM2NzQ2LzEvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDctN2RkNTdlNzM2NzQ2
LzEvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1EFV7No
KnLFQUVG36LBXkYGMr+mI97yxaWJnQx1O1LiCjbh/rkAdv7CFXszb2/57S3uASpH
hDLWB45NLIpGKSHyBwTUOyDbHLB7imr8pN2YGSVYnmqYdMiwbkVd88mnxallKPUq
PFF891xN76XdPQ6v0u5/f4Jz+dOkvncd7OP6XBTshVU42KKM2zpUcHL2RcmtLsYQ
9yqidfG70K1/ica/gLgkvdQQLIYLWkMPmhqCtSnvghRvR3f+QFMoadd2xzzhOw+7
kuAQzjB5dblSQxZjUUO316gU1Kc9rbFagE1aVOOBiOj8HRyIMEFB3qT/TCqkpAOr
Wft1/Upjf+K7AA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:23 2025 by rpki-client