Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: vSOs4L3pFrlh1gcnML4zhaXu885jlwPeYorbVFJ/SfQ=
Subject key identifier: 65:15:1A:8E:FC:80:8E:73:79:AE:08:14:E9:F5:5B:7F:E2:52:0C:50
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 0197CBDE9A38ED554F8E2FBC7A4E05F812C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 16:00:52 +0000
Manifest this update: Wed 02 Jul 2025 16:00:52 +0000
Manifest next update: Thu 03 Jul 2025 16:00:52 +0000
Files and hashes: 1: kRQmIjZUZcW_fI2_4gYw0CKPjk8.roa (hash: GuGEs/myNDqnLNvt1oCueG5pjZk/wU9SkbqBX0DdzIw=)
2: kZ91QLg0xrut8heY5oLTREuaDCo.roa (hash: MHAbqSvE1IAdHrt1bDct/PVOIuPEBRkSyGqv/6pjqdI=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: nJlQGpfC6QgxHOWGFjmt/bydyPhTNHJVE0Q2P2vXJ+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:9a:38:ed:55:4f:8e:2f:bc:7a:4e:05:f8:12:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Jul 2 16:00:52 2025 GMT
Not After : Jul 3 16:00:52 2025 GMT
Subject: CN=65151a8efc808e7379ae0814e9f55b7fe2520c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:41:e5:f1:c0:72:c7:cf:1c:3f:f2:e0:29:fa:
b2:90:e1:e0:1f:25:d1:d4:6d:90:90:44:c7:4d:82:
4e:d5:75:96:f1:9a:1b:52:35:2b:b8:1e:1a:f7:43:
77:db:97:7a:b7:5b:5e:7e:05:ce:5f:ce:25:2a:14:
b2:43:b6:25:37:7c:d2:be:fb:16:1d:5f:cb:38:48:
77:9e:be:6d:a0:85:5c:0d:be:5e:76:26:3e:a2:a7:
a5:5a:6e:bd:7d:81:0a:14:a1:92:1d:96:a7:93:89:
55:44:72:62:65:7b:20:77:4e:b6:d9:d7:44:f9:a4:
ee:69:35:0c:23:fa:4a:de:76:af:21:ee:59:d1:9c:
18:5f:1a:81:b0:d2:04:50:d9:7f:66:f6:b3:70:c3:
19:f9:0e:d1:43:c2:4c:8b:d9:de:42:b3:4f:95:95:
2e:0b:fa:1c:55:ba:44:ad:09:d9:d5:62:03:00:0d:
71:cb:d5:15:eb:38:fe:f2:54:3d:31:1e:6d:e7:19:
f0:3c:d6:a7:53:9b:21:cf:c4:c1:14:c7:bf:27:83:
4d:fa:e4:0c:fb:57:06:43:29:30:2c:b2:0f:31:69:
29:c5:0d:4b:be:20:22:2a:f8:d6:e4:57:fc:97:7f:
ea:8c:d1:ae:6e:8e:37:97:ed:84:6f:6b:b4:35:95:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:15:1A:8E:FC:80:8E:73:79:AE:08:14:E9:F5:5B:7F:E2:52:0C:50
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:25:b5:03:58:30:20:c0:02:6e:d3:0f:81:b9:bc:3a:91:2d:
f7:aa:7c:70:16:2d:fe:e0:c1:86:28:f5:42:c4:bb:7f:d6:1c:
dd:0c:64:f1:0e:7a:2d:71:0c:77:47:73:04:b8:e0:6d:fb:6d:
f3:38:af:49:48:1a:b7:db:71:60:bf:1e:f7:ab:ea:fb:20:5e:
b5:12:b9:2c:f1:42:ed:60:18:17:82:06:d2:e0:ac:96:ea:27:
8e:7e:5f:4f:1b:6a:86:85:53:05:14:91:72:7e:a6:f4:bd:58:
3b:91:16:47:58:6a:88:38:5e:e5:99:7d:b3:af:76:52:33:af:
d2:d1:93:4d:35:a2:74:df:6c:6d:a3:fb:f8:1d:fe:b8:33:e4:
bd:25:6c:de:b6:75:d0:3b:e6:c2:df:b1:5b:fa:9f:a6:2e:7c:
56:ce:e1:2a:09:6e:f7:ac:a5:66:e7:7c:da:6a:52:1e:2f:35:
b4:3f:72:65:be:a3:50:d5:44:a4:a5:65:4f:57:7c:5c:5e:58:
58:90:f2:f0:c1:e4:81:60:15:80:e1:3f:a2:10:e4:cf:3d:ac:
0a:1f:32:0e:54:67:7f:7e:3c:d8:cf:b7:ef:c7:26:c9:e4:5f:
f3:c6:6b:73:33:df:c6:2b:57:9c:a9:db:d7:6f:7b:21:38:ed:
38:43:e6:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfL3po47VVPji+8ek4F+BLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzJjNWFlZjMzYzA2YzRhZWYyZGFjOGYwNTAzZmNiZGQ5
YTcyODcwHhcNMjUwNzAyMTYwMDUyWhcNMjUwNzAzMTYwMDUyWjAzMTEwLwYDVQQD
Eyg2NTE1MWE4ZWZjODA4ZTczNzlhZTA4MTRlOWY1NWI3ZmUyNTIwYzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kHl8cByx88cP/LgKfqykOHgHyXR
1G2QkETHTYJO1XWW8ZobUjUruB4a90N325d6t1tefgXOX84lKhSyQ7YlN3zSvvsW
HV/LOEh3nr5toIVcDb5ediY+oqelWm69fYEKFKGSHZank4lVRHJiZXsgd0622ddE
+aTuaTUMI/pK3navIe5Z0ZwYXxqBsNIEUNl/ZvazcMMZ+Q7RQ8JMi9neQrNPlZUu
C/ocVbpErQnZ1WIDAA1xy9UV6zj+8lQ9MR5t5xnwPNanU5shz8TBFMe/J4NN+uQM
+1cGQykwLLIPMWkpxQ1LviAiKvjW5Ff8l3/qjNGubo43l+2Eb2u0NZWMWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUVGo78gI5zea4IFOn1W3/iUgxQMB8GA1UdIwQY
MBaAFMFyxa7zPAbErvLayPBQP8vdmnKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDIt
ZWE1ODcwNjUzMDc2LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDItZWE1ODcwNjUzMDc2
LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiW1A1gw
IMACbtMPgbm8OpEt96p8cBYt/uDBhij1QsS7f9Yc3Qxk8Q56LXEMd0dzBLjgbftt
8zivSUgat9txYL8e96vq+yBetRK5LPFC7WAYF4IG0uCsluonjn5fTxtqhoVTBRSR
cn6m9L1YO5EWR1hqiDhe5Zl9s692UjOv0tGTTTWidN9sbaP7+B3+uDPkvSVs3rZ1
0Dvmwt+xW/qfpi58Vs7hKglu96ylZud82mpSHi81tD9yZb6jUNVEpKVlT1d8XF5Y
WJDy8MHkgWAVgOE/ohDkzz2sCh8yDlRnf3482M+378cmyeRf88ZrczPfxitXnKnb
1297ITjtOEPm1w==
-----END CERTIFICATE-----
Generated at Wed Jul 2 21:53:11 2025 by rpki-client