
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File: w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier: m1ZjYEqIbnlz7prUorImncNfmB5gKKypBL+JletyAE4=
Subject key identifier: 0A:3C:5D:3A:AE:DF:72:E0:C6:E0:EB:E6:B1:D9:F3:23:CB:27:00:91
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial: 019893A46CD2B49226828EC7F771176DE5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number: 1633
Signing time: Sun 10 Aug 2025 11:01:23 +0000
Manifest this update: Sun 10 Aug 2025 11:01:23 +0000
Manifest next update: Mon 11 Aug 2025 11:01:23 +0000
Files and hashes: 1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
2: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
3: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: qJcZzGhYnXt8BvW3xYF+nZ9MImNWHMO2XGPzAFe0uQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:6c:d2:b4:92:26:82:8e:c7:f7:71:17:6d:e5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Validity
Not Before: Aug 10 11:01:23 2025 GMT
Not After : Aug 11 11:01:23 2025 GMT
Subject: CN=0a3c5d3aaedf72e0c6e0ebe6b1d9f323cb270091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:f7:14:58:31:03:bd:dd:ff:2d:2a:e4:e1:
f7:3c:d2:c2:4d:9a:4e:e5:6d:d5:f3:31:d3:79:a5:
fc:0a:26:a7:4f:de:50:17:95:ae:63:58:d1:bf:ff:
25:0c:ca:ee:24:06:c7:dd:48:89:59:a3:5d:b9:cf:
9b:87:54:9c:25:64:1d:cf:1e:06:63:a7:43:b3:cc:
de:97:1a:f0:85:b3:34:91:9d:47:32:9f:2c:fd:e8:
8a:de:2a:c9:b3:d2:3e:e5:38:9e:8a:a2:81:a8:3f:
05:ac:4d:5c:b4:7b:96:76:7f:26:b1:45:d9:88:7c:
28:a6:c3:49:ec:0a:b9:0c:7e:00:0d:07:4c:0c:27:
46:59:9d:22:6d:7b:43:12:59:78:32:a1:e7:79:5b:
64:45:d5:3a:f4:57:bf:75:c2:b6:2c:68:7b:f7:08:
11:fa:5b:4d:5d:6c:9e:2d:62:ae:98:a8:44:dd:0f:
7c:73:ed:9f:18:53:cf:84:00:22:22:1d:ad:a6:a5:
68:2f:ec:6a:55:6e:1a:37:c6:10:0f:a5:a7:a0:ab:
84:14:fe:da:f9:9f:37:2e:d8:63:5b:8d:a0:b7:e5:
b8:65:63:cf:d1:93:c7:b8:66:c2:46:73:b6:fe:9c:
34:a1:fe:e7:46:0b:16:62:c9:7f:60:39:ac:be:94:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3C:5D:3A:AE:DF:72:E0:C6:E0:EB:E6:B1:D9:F3:23:CB:27:00:91
X509v3 Authority Key Identifier:
keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:68:ec:2e:6a:aa:09:4e:38:6c:d0:37:eb:0c:49:e9:23:93:
6f:c1:9c:15:60:23:bb:d4:02:55:d8:98:9f:a8:80:73:16:62:
5d:e4:ac:c0:f2:73:75:ef:6c:e9:b6:2c:77:75:13:2f:a9:65:
f4:ed:18:ed:5d:7a:c8:7e:c4:87:a0:b6:d2:f6:52:1f:b8:a7:
6e:af:d3:a9:20:76:23:c6:17:67:d7:b9:d9:82:e8:52:38:43:
31:75:50:85:b2:19:41:db:63:fd:8a:f0:d6:43:07:f1:81:e0:
c3:b8:a1:fa:43:ce:c8:e2:15:96:cb:9b:b5:08:a2:02:fc:8e:
54:89:7f:11:08:8c:10:2b:57:1b:06:c0:f1:b2:98:7b:48:cd:
e8:63:9f:55:18:35:b4:93:2b:a4:a4:53:52:b6:33:08:b1:08:
4e:6d:3f:2f:52:03:b4:f9:e0:bd:68:5e:98:5f:f7:46:e3:2c:
63:52:a0:5e:5e:03:97:73:27:a3:d1:15:ac:8d:d3:87:3d:06:
27:d7:52:69:53:c2:93:56:43:db:a5:16:3c:c1:d0:1b:eb:ef:
90:4b:50:3a:6d:f5:a4:0c:f9:3f:3e:52:f5:99:7e:3f:40:4a:
9e:9b:0d:a1:80:9b:37:a8:20:5b:fa:56:df:9e:73:04:e3:5a:
30:09:f7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTpGzStJImgo7H93EXbeX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzA1OTFlMmViNDlkMDU1OWU2ZmNlN2VlMmFhODFmMGY1
OWJhNmYwHhcNMjUwODEwMTEwMTIzWhcNMjUwODExMTEwMTIzWjAzMTEwLwYDVQQD
EygwYTNjNWQzYWFlZGY3MmUwYzZlMGViZTZiMWQ5ZjMyM2NiMjcwMDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDD3FFgxA73d/y0q5OH3PNLCTZpO
5W3V8zHTeaX8CianT95QF5WuY1jRv/8lDMruJAbH3UiJWaNduc+bh1ScJWQdzx4G
Y6dDs8zelxrwhbM0kZ1HMp8s/eiK3irJs9I+5TieiqKBqD8FrE1ctHuWdn8msUXZ
iHwopsNJ7Aq5DH4ADQdMDCdGWZ0ibXtDEll4MqHneVtkRdU69Fe/dcK2LGh79wgR
+ltNXWyeLWKumKhE3Q98c+2fGFPPhAAiIh2tpqVoL+xqVW4aN8YQD6WnoKuEFP7a
+Z83LthjW42gt+W4ZWPP0ZPHuGbCRnO2/pw0of7nRgsWYsl/YDmsvpQvsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAo8XTqu33LgxuDr5rHZ8yPLJwCRMB8GA1UdIwQY
MBaAFMPAWR4utJ0FWeb85+4qqB8PWbpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQt
ZTM0MDcxNzQ2NjNiLzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQtZTM0MDcxNzQ2NjNi
LzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmjsLmqq
CU44bNA36wxJ6SOTb8GcFWAju9QCVdiYn6iAcxZiXeSswPJzde9s6bYsd3UTL6ll
9O0Y7V16yH7Eh6C20vZSH7inbq/TqSB2I8YXZ9e52YLoUjhDMXVQhbIZQdtj/Yrw
1kMH8YHgw7ih+kPOyOIVlsubtQiiAvyOVIl/EQiMECtXGwbA8bKYe0jN6GOfVRg1
tJMrpKRTUrYzCLEITm0/L1IDtPngvWhemF/3RuMsY1KgXl4Dl3Mno9EVrI3Thz0G
J9dSaVPCk1ZD26UWPMHQG+vvkEtQOm31pAz5Pz5S9Zl+P0BKnpsNoYCbN6ggW/pW
355zBONaMAn3/g==
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:08:11 2025 by rpki-client