Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File: wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier: VivaxwW1VGihCJwQ1rOyXAhQFRuf+PueS/s1Rm6QvFw=
Subject key identifier: ED:33:9B:20:54:CA:EA:D2:5C:BA:47:3D:58:6A:84:4E:8D:AD:BE:DF
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 019896A6B99FC5664469FDC5DD02A38025A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number: 1087
Signing time: Mon 11 Aug 2025 01:02:45 +0000
Manifest this update: Mon 11 Aug 2025 01:02:45 +0000
Manifest next update: Tue 12 Aug 2025 01:02:45 +0000
Files and hashes: 1: MaNg2WPI-q4to7SVp52zO_QNsfw.roa (hash: HsUZQaqhFj/mJrXYPb29143giiHL5X0iJfJWhLhO0VU=)
2: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: jTWQtKK92wzeJBeHm/Dcf1yNR7Rfm0HQuQlFDMOzYGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:b9:9f:c5:66:44:69:fd:c5:dd:02:a3:80:25:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Aug 11 01:02:45 2025 GMT
Not After : Aug 12 01:02:45 2025 GMT
Subject: CN=ed339b2054caead25cba473d586a844e8dadbedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:79:68:2d:52:f1:68:5d:ff:f0:86:dc:e2:
7e:42:95:fe:a3:33:8d:df:5e:8d:fd:15:88:3f:bc:
47:92:0d:1b:10:cd:d4:f5:d5:35:cd:6f:25:15:54:
35:2b:ed:7e:ee:0a:4d:cf:8f:ca:38:44:09:7f:eb:
97:4e:71:af:88:0e:27:da:17:ac:1a:e1:c1:83:1d:
b6:53:6b:ae:67:30:08:85:07:bd:63:f7:75:cf:f5:
52:29:18:dc:e2:a0:9b:7b:67:0a:e2:5f:76:65:cf:
59:47:dc:94:64:fb:d7:49:6c:41:b4:77:13:8f:1b:
b2:2b:d9:be:f0:36:2f:64:1b:80:52:0f:81:4e:27:
0d:5e:40:a6:32:06:3e:ed:85:67:96:ba:20:fc:63:
1b:df:bd:43:2f:b8:9e:1c:f6:3b:7b:e4:15:5b:86:
56:be:ab:aa:a9:01:71:a9:62:43:68:8a:61:ed:02:
1b:a2:5f:df:e1:d4:63:b6:70:d7:2e:aa:43:f3:5f:
2a:0e:87:76:70:70:d7:89:bf:89:f1:f8:ac:ba:70:
21:a6:5d:16:94:99:65:da:c3:05:0c:85:c4:ee:ac:
d0:d4:ea:d9:2a:a4:85:4a:68:ea:1a:49:cf:c6:d8:
f9:91:3f:7a:f3:ef:ba:a0:d5:05:fb:83:ea:c6:d3:
48:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:33:9B:20:54:CA:EA:D2:5C:BA:47:3D:58:6A:84:4E:8D:AD:BE:DF
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c7:b5:ac:57:cd:02:7b:63:ad:30:fe:b6:91:f4:dd:80:81:
12:8a:fe:6e:64:24:39:50:c2:b4:ad:39:34:d9:05:01:22:60:
a5:09:50:e5:ad:0a:87:45:31:cf:fa:4f:49:92:c7:02:61:28:
b4:fc:7e:e2:3f:6d:5c:e5:ef:42:91:46:68:1e:f7:d5:8d:c2:
92:df:02:b1:0f:21:25:28:7c:16:64:12:a0:7c:ed:e4:a1:42:
0f:b2:fb:d7:04:8e:eb:38:88:bf:ae:82:58:28:c0:22:54:38:
18:c0:a2:19:80:85:c7:a7:cf:60:8a:99:2d:be:6d:89:40:7c:
98:56:e2:ab:a3:9c:1b:46:7e:10:bc:f9:46:cd:e9:8d:9c:dd:
13:11:3a:fa:c6:2b:07:a2:7a:94:c9:4a:f6:4a:ec:4e:b0:6c:
ec:59:b5:a9:e6:f4:fe:7f:ca:95:93:c1:9c:50:8f:2a:bf:3e:
3f:22:0c:15:a2:71:2d:f0:05:2b:1c:24:fe:db:1d:56:61:28:
6b:41:1a:ff:3a:1e:1a:19:91:61:c7:15:75:f8:38:93:b6:e8:
2f:de:72:fc:21:1f:9e:91:81:ea:b4:4b:64:7b:66:11:c4:89:
a7:74:be:38:c8:27:82:1e:3d:96:50:52:bc:7b:4a:46:ce:fc:
84:8e:05:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWprmfxWZEaf3F3QKjgCWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzQ2Y2NiN2U3M2E5Y2MzMGVmMDRlZGQ3Y2YxNmNjMWQ5
NDY4OTQwHhcNMjUwODExMDEwMjQ1WhcNMjUwODEyMDEwMjQ1WjAzMTEwLwYDVQQD
EyhlZDMzOWIyMDU0Y2FlYWQyNWNiYTQ3M2Q1ODZhODQ0ZThkYWRiZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPB5aC1S8Whd//CG3OJ+QpX+ozON
316N/RWIP7xHkg0bEM3U9dU1zW8lFVQ1K+1+7gpNz4/KOEQJf+uXTnGviA4n2hes
GuHBgx22U2uuZzAIhQe9Y/d1z/VSKRjc4qCbe2cK4l92Zc9ZR9yUZPvXSWxBtHcT
jxuyK9m+8DYvZBuAUg+BTicNXkCmMgY+7YVnlrog/GMb371DL7ieHPY7e+QVW4ZW
vquqqQFxqWJDaIph7QIbol/f4dRjtnDXLqpD818qDod2cHDXib+J8fisunAhpl0W
lJll2sMFDIXE7qzQ1OrZKqSFSmjqGknPxtj5kT968++6oNUF+4PqxtNIFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0zmyBUyurSXLpHPVhqhE6Nrb7fMB8GA1UdIwQY
MBaAFMJ0bMt+c6nMMO8E7dfPFswdlGiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2Et
OTNlOTE4ZDEwZWM1LzEvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2EtOTNlOTE4ZDEwZWM1
LzEvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALse1rFfN
AntjrTD+tpH03YCBEor+bmQkOVDCtK05NNkFASJgpQlQ5a0Kh0Uxz/pPSZLHAmEo
tPx+4j9tXOXvQpFGaB731Y3Ckt8CsQ8hJSh8FmQSoHzt5KFCD7L71wSO6ziIv66C
WCjAIlQ4GMCiGYCFx6fPYIqZLb5tiUB8mFbiq6OcG0Z+ELz5Rs3pjZzdExE6+sYr
B6J6lMlK9krsTrBs7Fm1qeb0/n/KlZPBnFCPKr8+PyIMFaJxLfAFKxwk/tsdVmEo
a0Ea/zoeGhmRYccVdfg4k7boL95y/CEfnpGB6rRLZHtmEcSJp3S+OMgngh49llBS
vHtKRs78hI4FmQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:08 2025 by rpki-client