Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: f+Q50cdm1zKBP7LZnF3AHE5GGBNe/yZJX0UXAJXwubA=
Subject key identifier: 8F:C3:80:43:E6:5E:DF:EA:D2:17:9E:B5:96:8F:0C:2A:4C:E0:DA:31
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 0198808B6A941F8B2800AC341ED39E78BD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 0F1A
Signing time: Wed 06 Aug 2025 18:01:17 +0000
Manifest this update: Wed 06 Aug 2025 18:01:17 +0000
Manifest next update: Thu 07 Aug 2025 18:01:17 +0000
Files and hashes: 1: 2if-W7_9B6ndVwa4CXKbXlfYipY.roa (hash: x6w8qlU6igwl5cXDxoZUE8Lr1i8+UZJJXlmem9XWOSg=)
2: iNIpA6NRoHEtD1Gdwv0RcZxMEOY.roa (hash: QoWSCTkZW/GH9j1mmy2Sv0c+Jd5oUQpoqRVhrzgy26s=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: ywigdFiMerDc8wh0ni901s5WTlaT2qE+Re3hBoAdwU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:6a:94:1f:8b:28:00:ac:34:1e:d3:9e:78:bd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Aug 6 18:01:17 2025 GMT
Not After : Aug 7 18:01:17 2025 GMT
Subject: CN=8fc38043e65edfead2179eb5968f0c2a4ce0da31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:7a:ed:ab:3d:6d:ab:f3:88:39:49:39:1b:
28:a5:36:48:f3:96:12:43:36:5a:f1:da:c0:19:0c:
bc:c6:7d:0d:7e:2d:19:bc:b1:92:24:17:3c:c6:b3:
ae:ae:30:2c:3b:90:65:a7:d4:6d:9f:df:74:1c:a1:
a5:9b:71:30:ee:32:23:a7:f3:de:bf:a5:6c:41:ee:
86:8b:66:60:0e:7c:15:b4:3b:80:f9:d9:31:97:15:
35:1a:2d:9c:0d:d9:68:91:86:cb:cc:7a:08:c0:64:
e7:40:b9:3c:19:96:3c:dc:dc:08:fa:7b:74:4c:0c:
ed:03:60:4d:6c:69:04:d5:fb:c1:2e:c0:ec:06:c1:
b2:8f:aa:61:d9:1e:1a:eb:de:bb:88:96:28:af:e0:
68:06:e4:93:d2:f4:ff:2f:82:c3:a5:ae:2c:fe:c1:
2f:33:d2:46:2b:53:4b:44:c6:32:7e:3e:96:42:48:
4e:8c:20:19:3b:e6:b5:04:98:61:59:b2:e7:08:64:
91:03:f8:68:39:bf:46:8d:2f:9e:a5:97:21:9e:78:
d1:d1:34:21:45:da:7c:b3:b9:5b:f8:9a:8e:ac:98:
b3:45:89:de:a2:64:86:fc:55:cf:9d:ab:d4:4b:02:
d4:5a:0b:8b:1c:4e:a5:5f:bc:d7:8d:1b:54:50:8f:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C3:80:43:E6:5E:DF:EA:D2:17:9E:B5:96:8F:0C:2A:4C:E0:DA:31
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:29:62:19:b9:4f:cd:ca:e6:ea:4e:3f:de:7a:f7:90:81:13:
a1:d0:62:ac:9a:18:fb:af:12:05:2b:c8:d6:71:8d:7f:d7:0f:
46:33:7c:87:ac:d8:16:4b:c0:19:41:f8:cd:01:7a:04:25:1a:
23:f4:5e:aa:28:92:27:31:cc:d5:a7:22:6a:71:e9:a0:16:75:
e1:8b:2e:3d:02:0d:41:e7:5b:a4:10:68:66:f7:75:d0:95:3a:
ac:22:cb:a8:2d:bb:46:e2:66:3f:80:db:fe:7a:63:cd:17:b7:
2e:5c:e4:7c:d8:2f:bc:87:76:0b:83:7b:a1:01:81:6e:27:59:
bb:78:6a:34:19:0b:51:d3:2a:ad:2d:2f:58:6b:9a:f4:cc:c0:
b3:c0:f4:3d:af:00:4f:48:8b:fa:b9:d5:56:32:07:6d:e7:bb:
fb:ef:41:ae:57:d3:ab:d0:67:84:fb:5c:d0:87:dd:61:71:c0:
ca:71:08:24:29:21:38:86:87:76:50:32:b6:a0:a9:68:88:48:
5e:75:80:57:c1:ee:67:ef:4b:e5:84:f8:7d:6d:9c:4f:24:ca:
c4:00:7b:fc:69:f5:6b:e1:7d:e0:0b:41:bf:f4:b0:bc:cd:30:
04:4c:05:29:8c:24:c1:7a:65:96:c7:c3:18:ce:1e:e2:ad:21:
9d:67:c5:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAi2qUH4soAKw0HtOeeL0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMmQ1NTNiMjhjNWQwZWE1YjFlZjYwYzliY2UzM2RmNTBi
Y2I0OTMwHhcNMjUwODA2MTgwMTE3WhcNMjUwODA3MTgwMTE3WjAzMTEwLwYDVQQD
Eyg4ZmMzODA0M2U2NWVkZmVhZDIxNzllYjU5NjhmMGMyYTRjZTBkYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtip67as9bavziDlJORsopTZI85YS
QzZa8drAGQy8xn0Nfi0ZvLGSJBc8xrOurjAsO5Blp9Rtn990HKGlm3Ew7jIjp/Pe
v6VsQe6Gi2ZgDnwVtDuA+dkxlxU1Gi2cDdlokYbLzHoIwGTnQLk8GZY83NwI+nt0
TAztA2BNbGkE1fvBLsDsBsGyj6ph2R4a6967iJYor+BoBuST0vT/L4LDpa4s/sEv
M9JGK1NLRMYyfj6WQkhOjCAZO+a1BJhhWbLnCGSRA/hoOb9GjS+epZchnnjR0TQh
Rdp8s7lb+JqOrJizRYneomSG/FXPnavUSwLUWguLHE6lX7zXjRtUUI8fbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/DgEPmXt/q0heetZaPDCpM4NoxMB8GA1UdIwQY
MBaAFMItVTsoxdDqWx72DJvOM99QvLSTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTc2NDQtOTNkNC00NDU3LThlNWUt
OTY3NTA2ODg1N2YxLzEvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lMTc2NDQtOTNkNC00NDU3LThlNWUtOTY3NTA2ODg1N2Yx
LzEvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCliGblP
zcrm6k4/3nr3kIETodBirJoY+68SBSvI1nGNf9cPRjN8h6zYFkvAGUH4zQF6BCUa
I/ReqiiSJzHM1acianHpoBZ14YsuPQINQedbpBBoZvd10JU6rCLLqC27RuJmP4Db
/npjzRe3LlzkfNgvvId2C4N7oQGBbidZu3hqNBkLUdMqrS0vWGua9MzAs8D0Pa8A
T0iL+rnVVjIHbee7++9BrlfTq9BnhPtc0IfdYXHAynEIJCkhOIaHdlAytqCpaIhI
XnWAV8HuZ+9L5YT4fW2cTyTKxAB7/Gn1a+F94AtBv/SwvM0wBEwFKYwkwXpllsfD
GM4e4q0hnWfF2Q==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:02:51 2025 by rpki-client