Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: 1G16FkRjmijTv2U1hXcL/14HkOVqwd/u5/1aLIrz3vU=
Subject key identifier: CA:88:81:71:30:8F:57:47:72:05:CB:A2:3D:BA:61:29:6B:81:C1:9E
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 0198763DF6C6E235F8FA28D26794E1C85B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 18:00:28 +0000
Manifest this update: Mon 04 Aug 2025 18:00:28 +0000
Manifest next update: Tue 05 Aug 2025 18:00:28 +0000
Files and hashes: 1: 2ckuuQNGelqhfIDU0HMZ3G_jIN4.roa (hash: Ly3hlzB/x5T87M29FpEs5LMZzWEyS3uYaMyLbALjnTU=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: f5ClYUALedJ95X22bRsA1n+8t+9cx0YMH66sb/FvxSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:3d:f6:c6:e2:35:f8:fa:28:d2:67:94:e1:c8:5b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Aug 4 18:00:28 2025 GMT
Not After : Aug 5 18:00:28 2025 GMT
Subject: CN=ca888171308f57477205cba23dba61296b81c19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:cc:c6:52:86:ce:94:11:e8:3a:83:29:40:
d4:ec:aa:23:30:fb:08:06:e1:a0:20:e5:28:61:cc:
34:b9:cd:70:b5:07:3b:60:58:13:7a:84:0f:f9:b2:
9f:dc:c5:85:3f:98:10:01:24:f2:82:3d:e6:6c:8a:
06:49:d5:0f:71:1e:3a:65:4c:31:e9:70:a8:61:69:
66:71:48:49:ad:2a:76:a7:74:db:ec:6e:bc:3e:c1:
05:48:81:8e:2d:66:f3:d1:e6:5c:b4:38:83:f1:c6:
65:67:2c:36:10:53:71:24:0a:aa:72:5d:91:bc:69:
e2:f5:e5:f3:88:66:e6:bd:00:58:ff:bf:50:56:d7:
b7:6f:ae:f1:57:88:4d:f7:56:68:8d:28:e4:fe:38:
66:b5:98:cb:ab:35:b1:f7:1c:e4:47:f8:98:3b:68:
91:df:81:53:20:ca:97:8e:02:f6:12:cf:66:aa:a5:
0a:27:ff:e8:c2:2c:56:97:e0:2c:6b:b5:db:7c:11:
c6:8b:1a:17:2a:55:05:12:9f:95:f1:65:d9:f4:09:
12:e1:e4:cb:4f:22:7d:1e:8c:e9:bd:72:c1:69:1b:
80:c0:a7:16:f2:bb:ef:9f:4e:39:18:7b:83:41:fc:
b0:63:7a:04:73:13:d0:12:d2:6c:87:d2:e0:d1:7d:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:88:81:71:30:8F:57:47:72:05:CB:A2:3D:BA:61:29:6B:81:C1:9E
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0b:d0:71:42:a2:9b:2c:dc:35:81:9a:d9:ce:a0:45:4f:20:
1a:60:f0:a4:2c:e4:51:b6:3b:47:70:71:dd:97:2d:85:e6:53:
14:df:cf:4a:5b:87:d3:9a:10:82:de:33:6e:8d:c8:1c:4e:7e:
02:21:14:65:aa:96:14:d0:28:71:27:fb:5d:49:83:4c:6e:16:
1f:0b:64:ff:af:a3:4b:fb:26:b0:9a:44:56:0e:30:4c:be:d8:
1f:8f:b6:11:67:9e:5e:12:cf:66:a3:49:15:2e:1a:8f:c6:76:
3d:3a:52:c1:e3:17:c3:29:8d:0e:0f:9a:1d:7c:d6:84:cc:98:
7a:f8:d0:df:90:87:c9:ea:14:7e:61:20:09:45:32:51:f8:5b:
e3:8e:32:76:2c:06:4d:72:97:57:7e:75:b0:c0:84:76:c8:67:
70:02:c9:8a:91:a2:72:5a:b9:b7:be:72:c0:86:92:54:e6:88:
0d:ac:ae:8b:13:84:16:33:2f:80:59:7b:aa:aa:00:01:ef:14:
f1:80:a3:a7:af:7c:00:7b:22:99:17:ac:fb:f7:c4:ea:53:97:
86:7a:5a:ab:e0:57:7e:a0:84:81:af:fa:4f:51:04:fc:cc:37:
45:b6:3f:b9:d9:23:68:67:c1:41:41:84:17:75:55:17:27:02:
90:2a:76:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh2PfbG4jX4+ijSZ5ThyFs+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYTIzMzU5MGRlNTg2ZTBjNTU4MjFjNmY2ZDU3MzJhZmM4
NDEyMjkwHhcNMjUwODA0MTgwMDI4WhcNMjUwODA1MTgwMDI4WjAzMTEwLwYDVQQD
EyhjYTg4ODE3MTMwOGY1NzQ3NzIwNWNiYTIzZGJhNjEyOTZiODFjMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7LMxlKGzpQR6DqDKUDU7KojMPsI
BuGgIOUoYcw0uc1wtQc7YFgTeoQP+bKf3MWFP5gQASTygj3mbIoGSdUPcR46ZUwx
6XCoYWlmcUhJrSp2p3Tb7G68PsEFSIGOLWbz0eZctDiD8cZlZyw2EFNxJAqqcl2R
vGni9eXziGbmvQBY/79QVte3b67xV4hN91ZojSjk/jhmtZjLqzWx9xzkR/iYO2iR
34FTIMqXjgL2Es9mqqUKJ//owixWl+Asa7XbfBHGixoXKlUFEp+V8WXZ9AkS4eTL
TyJ9HozpvXLBaRuAwKcW8rvvn045GHuDQfywY3oEcxPQEtJsh9Lg0X3DcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqIgXEwj1dHcgXLoj26YSlrgcGeMB8GA1UdIwQY
MBaAFMCiM1kN5YbgxVghxvbVcyr8hBIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1Mzgt
YTg0ZWI0MTFlZjhhLzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1MzgtYTg0ZWI0MTFlZjhh
LzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgvQcUKi
myzcNYGa2c6gRU8gGmDwpCzkUbY7R3Bx3ZctheZTFN/PSluH05oQgt4zbo3IHE5+
AiEUZaqWFNAocSf7XUmDTG4WHwtk/6+jS/smsJpEVg4wTL7YH4+2EWeeXhLPZqNJ
FS4aj8Z2PTpSweMXwymNDg+aHXzWhMyYevjQ35CHyeoUfmEgCUUyUfhb444ydiwG
TXKXV351sMCEdshncALJipGiclq5t75ywIaSVOaIDayuixOEFjMvgFl7qqoAAe8U
8YCjp698AHsimRes+/fE6lOXhnpaq+BXfqCEga/6T1EE/Mw3RbY/udkjaGfBQUGE
F3VVFycCkCp2ag==
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:22:39 2025 by rpki-client