Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
File: wKqzltZQgmAnwr2KBiByEJIQnik.mft (raw, json)
Hash identifier: 61jB+IVC45VyTuIOIZF1/Qc+tzqs6CrJzkj5XJBNQuk=
Subject key identifier: CE:C4:8C:E7:E3:BA:D1:73:96:65:35:8A:A9:9E:8F:E9:C5:C3:AF:01
Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29
Certificate serial: 019891ECC63F3160246A205317FD227AADF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
Manifest number: DC
Signing time: Sun 10 Aug 2025 03:01:09 +0000
Manifest this update: Sun 10 Aug 2025 03:01:09 +0000
Manifest next update: Mon 11 Aug 2025 03:01:09 +0000
Files and hashes: 1: FQ0Z9CjauF1-N_C29EdkHs_XYtQ.roa (hash: +snXzR2/FfWDx0T5r9Nyn9CPDVn/IvcZNIPrKP0aONw=)
2: wKqzltZQgmAnwr2KBiByEJIQnik.crl (hash: GGfojm/uHRPPFEHlcM+zc6mhPbKFPm0zINJYyC9aNwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:c6:3f:31:60:24:6a:20:53:17:fd:22:7a:ad:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29
Validity
Not Before: Aug 10 03:01:09 2025 GMT
Not After : Aug 11 03:01:09 2025 GMT
Subject: CN=cec48ce7e3bad1739665358aa99e8fe9c5c3af01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2b:2a:74:66:b6:f4:0d:0e:a1:4a:c6:ae:e9:
0a:09:49:33:02:20:50:55:71:a2:45:3b:96:6e:c0:
65:9b:ff:c3:0c:b8:4f:13:6b:b8:3d:b7:b7:65:85:
e5:31:c0:ac:3b:d9:bb:57:a7:ca:85:9f:f5:75:5c:
23:ca:c0:22:af:41:fe:d8:34:e2:ce:2d:b7:c1:d7:
58:75:1f:ef:27:3d:37:6f:55:e8:64:19:d2:01:c6:
32:d5:8c:b6:ef:31:e2:85:8d:9a:b9:ce:6e:56:a6:
47:6b:57:d4:01:4a:fa:40:b9:da:6a:dc:97:02:24:
aa:f5:00:8d:bb:d0:21:b7:2e:6e:9b:60:18:19:98:
cd:11:1f:6c:81:97:dd:4d:d1:82:1c:35:68:6b:20:
e3:0c:aa:7e:1b:e5:f2:eb:f5:f2:27:dc:05:5e:9b:
b2:3a:56:d9:df:8e:ec:25:15:ea:fb:44:55:a0:e4:
df:ba:0c:37:11:ad:ae:ec:c0:9a:b9:5c:92:27:de:
00:c0:99:c2:19:bd:c8:97:05:c4:9f:67:2d:c8:a9:
e7:b5:cf:c5:24:dc:4c:78:7a:ac:ce:a5:0d:6c:e4:
e9:3e:67:cc:d4:e9:3c:8e:71:dc:3b:27:5f:a9:29:
64:e9:75:1a:3e:26:6e:ed:63:a8:a2:88:b5:97:8d:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C4:8C:E7:E3:BA:D1:73:96:65:35:8A:A9:9E:8F:E9:C5:C3:AF:01
X509v3 Authority Key Identifier:
keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f5:79:88:de:7e:50:3a:eb:ab:93:9c:e0:6c:a7:7a:ac:df:
60:7a:53:cb:e2:f4:18:50:31:75:5e:4c:d8:f8:df:2c:93:fd:
d4:a8:3d:6b:92:55:c4:85:7b:6f:73:04:bf:78:ed:8d:69:1a:
fe:05:7b:75:df:a5:49:b8:4a:5f:bc:30:43:8b:7e:d2:c5:53:
04:ca:d3:94:60:1c:86:07:5d:51:d0:60:1e:d0:96:c4:36:ef:
58:cb:c7:95:63:cc:ea:76:20:48:13:6d:70:5e:2f:be:99:78:
5e:b9:5e:9b:3e:75:8c:a5:98:b6:10:41:74:41:6c:28:1c:fc:
b1:0e:53:c9:ba:e9:e4:b9:cd:a9:67:83:98:a6:04:2a:e1:92:
49:01:28:eb:b2:28:f5:00:14:5e:43:9f:f8:0c:e8:71:d0:73:
57:3a:fb:4e:06:7f:08:00:e1:67:14:c5:49:08:db:0b:ab:b0:
f7:a8:f9:27:da:01:3d:63:62:56:62:c1:9e:21:86:87:4b:15:
5f:f2:5d:24:93:8c:eb:a2:45:42:f8:19:05:c9:2b:34:9c:25:
f8:ba:d6:b7:2e:c3:72:80:d4:6b:54:7a:99:af:aa:32:93:0e:
5a:6b:44:e9:b7:df:39:52:4f:21:2f:5e:4c:c6:a5:70:e0:31:
43:df:da:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiR7MY/MWAkaiBTF/0ieq3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYWFiMzk2ZDY1MDgyNjAyN2MyYmQ4YTA2MjA3MjEwOTIx
MDllMjkwHhcNMjUwODEwMDMwMTA5WhcNMjUwODExMDMwMTA5WjAzMTEwLwYDVQQD
EyhjZWM0OGNlN2UzYmFkMTczOTY2NTM1OGFhOTllOGZlOWM1YzNhZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCsqdGa29A0OoUrGrukKCUkzAiBQ
VXGiRTuWbsBlm//DDLhPE2u4Pbe3ZYXlMcCsO9m7V6fKhZ/1dVwjysAir0H+2DTi
zi23wddYdR/vJz03b1XoZBnSAcYy1Yy27zHihY2auc5uVqZHa1fUAUr6QLnaatyX
AiSq9QCNu9Ahty5um2AYGZjNER9sgZfdTdGCHDVoayDjDKp+G+Xy6/XyJ9wFXpuy
OlbZ347sJRXq+0RVoOTfugw3Ea2u7MCauVySJ94AwJnCGb3IlwXEn2ctyKnntc/F
JNxMeHqszqUNbOTpPmfM1Ok8jnHcOydfqSlk6XUaPiZu7WOoooi1l40GCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7EjOfjutFzlmU1iqmej+nFw68BMB8GA1UdIwQY
MBaAFMCqs5bWUIJgJ8K9igYgchCSEJ4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWIt
ZTk1MDY5OTE1N2UxLzEvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWItZTk1MDY5OTE1N2Ux
LzEvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/V5iN5+
UDrrq5Oc4GyneqzfYHpTy+L0GFAxdV5M2PjfLJP91Kg9a5JVxIV7b3MEv3jtjWka
/gV7dd+lSbhKX7wwQ4t+0sVTBMrTlGAchgddUdBgHtCWxDbvWMvHlWPM6nYgSBNt
cF4vvpl4Xrlemz51jKWYthBBdEFsKBz8sQ5Tybrp5LnNqWeDmKYEKuGSSQEo67Io
9QAUXkOf+AzocdBzVzr7TgZ/CADhZxTFSQjbC6uw96j5J9oBPWNiVmLBniGGh0sV
X/JdJJOM66JFQvgZBckrNJwl+LrWty7DcoDUa1R6ma+qMpMOWmtE6bffOVJPIS9e
TMalcOAxQ9/agw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:42:31 2025 by rpki-client