Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
File: Wl5msnWeULtpuwpECe6zukjEbFY.mft (raw, json)
Hash identifier: 23dllrjf725zCdvXIClLg/HoePvjhYN9yakAN3VKzk0=
Subject key identifier: 74:C0:1C:B5:C2:3D:53:27:56:D5:E1:F6:23:54:C5:CB:F4:5E:9F:18
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 0198D73B16E0563C854E9BD890304113837A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
Manifest number: 0A42
Signing time: Sat 23 Aug 2025 14:00:30 +0000
Manifest this update: Sat 23 Aug 2025 14:00:30 +0000
Manifest next update: Sun 24 Aug 2025 14:00:30 +0000
Files and hashes: 1: 7nT7CMWqjPir_XwHKqbnu1ePzNE.roa (hash: rJwmBaZJEsYi70qVqGwJX3XQ1oE4rtGxixdiQCCrNxY=)
2: IsS2ivhmvaY5V7fxNuQHr3dBGyM.roa (hash: yklIQ+z5Qr7H1DFt36Aa2yJc+TZg1VtSgJC8vNRgvAY=)
3: Wl5msnWeULtpuwpECe6zukjEbFY.crl (hash: rKjQdxygc9NReXk3+PlV6pnRYAqhDy8C6AdFLwBYVh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:16:e0:56:3c:85:4e:9b:d8:90:30:41:13:83:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: Aug 23 14:00:30 2025 GMT
Not After : Aug 24 14:00:30 2025 GMT
Subject: CN=74c01cb5c23d532756d5e1f62354c5cbf45e9f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:a3:15:73:67:6e:85:a4:2a:02:ff:0f:19:
70:37:3b:c7:d3:07:77:19:18:70:cc:e8:48:d5:a8:
49:08:d0:32:ff:17:1a:bd:9e:01:95:18:d0:57:0d:
52:a9:5b:92:f4:dc:7f:12:d8:ee:ca:a0:42:ea:06:
72:3a:31:ea:56:a8:62:ca:60:d5:bb:dc:03:f2:31:
2e:fc:54:4a:78:a8:79:8c:b2:9e:6b:ff:22:1b:ff:
20:b2:80:71:06:1e:c9:f5:37:17:d4:a7:3a:33:b8:
f1:dc:d4:c0:62:26:ef:0f:1d:35:a5:f7:ae:06:93:
57:36:b6:e3:24:98:af:93:3c:f9:d2:ca:34:fc:9a:
25:f2:51:1f:c8:3d:f5:59:95:d6:73:08:90:5c:ce:
65:51:48:e4:25:b4:76:91:95:17:78:7a:91:51:e6:
0f:b2:ef:4b:19:b7:5b:e5:ee:9a:26:de:42:3b:2d:
b2:a5:45:24:3b:c5:e1:16:a0:7f:b9:77:6d:4b:4f:
72:54:92:cc:99:52:bd:7a:f2:bc:e2:88:a2:10:0e:
9e:ff:f6:e9:0d:3f:69:75:e4:23:d2:7f:fd:bc:aa:
9b:70:4d:61:36:83:d7:93:56:34:0a:8d:17:23:b4:
3c:5b:b0:21:97:2d:1b:07:41:5c:1e:97:f7:01:53:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C0:1C:B5:C2:3D:53:27:56:D5:E1:F6:23:54:C5:CB:F4:5E:9F:18
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ac:be:94:00:4e:6a:9d:9a:2d:bc:8f:82:51:13:e0:ee:ff:
94:7f:db:5c:ca:45:6d:61:c7:d3:0e:96:64:ca:da:66:2c:15:
37:1b:51:e9:37:5b:33:16:89:aa:ee:cd:53:2b:5b:fb:e8:8b:
69:27:b9:3a:11:0c:b0:f2:31:a2:f9:0a:db:6f:de:68:95:de:
08:9b:c6:41:31:a7:12:f4:18:73:e2:d6:4c:28:f5:13:d3:aa:
0d:e4:04:43:e5:71:97:4e:49:6b:99:c4:32:61:f9:a2:bd:56:
4b:5c:e1:3a:fa:32:6c:d6:a2:cd:ba:4b:ac:5a:9f:1b:e9:2c:
bc:2b:eb:c2:ac:89:eb:dd:6c:34:e3:29:b2:3d:33:61:af:77:
61:47:e3:0d:f9:79:3b:56:8a:68:bd:74:fb:a1:2d:5d:38:0b:
9a:15:82:a3:e0:6a:ca:d7:1d:75:6d:f4:07:b4:b9:b2:89:17:
a8:7b:4d:fd:0d:f0:11:65:a4:ae:0c:05:e6:76:d4:c9:1d:8a:
76:1d:03:1a:ba:3e:ec:a9:2a:8f:90:2f:f5:5b:19:55:f6:80:
04:f1:a7:bf:f9:b5:08:fa:58:37:1b:33:f1:5d:30:b3:83:5b:
a4:cf:4a:b3:ae:f5:fd:b4:96:2d:6a:40:51:53:49:0b:fe:8a:
4c:47:d7:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOxbgVjyFTpvYkDBBE4N6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNWU2NmIyNzU5ZTUwYmI2OWJiMGE0NDA5ZWViM2JhNDhj
NDZjNTYwHhcNMjUwODIzMTQwMDMwWhcNMjUwODI0MTQwMDMwWjAzMTEwLwYDVQQD
Eyg3NGMwMWNiNWMyM2Q1MzI3NTZkNWUxZjYyMzU0YzVjYmY0NWU5ZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEajFXNnboWkKgL/DxlwNzvH0wd3
GRhwzOhI1ahJCNAy/xcavZ4BlRjQVw1SqVuS9Nx/EtjuyqBC6gZyOjHqVqhiymDV
u9wD8jEu/FRKeKh5jLKea/8iG/8gsoBxBh7J9TcX1Kc6M7jx3NTAYibvDx01pfeu
BpNXNrbjJJivkzz50so0/Jol8lEfyD31WZXWcwiQXM5lUUjkJbR2kZUXeHqRUeYP
su9LGbdb5e6aJt5COy2ypUUkO8XhFqB/uXdtS09yVJLMmVK9evK84oiiEA6e//bp
DT9pdeQj0n/9vKqbcE1hNoPXk1Y0Co0XI7Q8W7Ahly0bB0FcHpf3AVNqRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTAHLXCPVMnVtXh9iNUxcv0Xp8YMB8GA1UdIwQY
MBaAFFpeZrJ1nlC7absKRAnus7pIxGxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2w1bXNuV2VVTHRwdXdwRUNlNnp1a2pFYkZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80Zjc2YjQtN2Q1Ni00N2EwLWFjNWIt
NjUzZjIzOWZlOWEwLzEvV2w1bXNuV2VVTHRwdXdwRUNlNnp1a2pFYkZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi80Zjc2YjQtN2Q1Ni00N2EwLWFjNWItNjUzZjIzOWZlOWEw
LzEvV2w1bXNuV2VVTHRwdXdwRUNlNnp1a2pFYkZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6y+lABO
ap2aLbyPglET4O7/lH/bXMpFbWHH0w6WZMraZiwVNxtR6TdbMxaJqu7NUytb++iL
aSe5OhEMsPIxovkK22/eaJXeCJvGQTGnEvQYc+LWTCj1E9OqDeQEQ+Vxl05Ja5nE
MmH5or1WS1zhOvoybNaizbpLrFqfG+ksvCvrwqyJ691sNOMpsj0zYa93YUfjDfl5
O1aKaL10+6EtXTgLmhWCo+BqytcddW30B7S5sokXqHtN/Q3wEWWkrgwF5nbUyR2K
dh0DGro+7Kkqj5Av9VsZVfaABPGnv/m1CPpYNxsz8V0ws4NbpM9Ks671/bSWLWpA
UVNJC/6KTEfXUA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:54 2025 by rpki-client