Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
File: WtYtZLAg5sARSELydiZePAfT6lw.mft (raw, json)
Hash identifier: an6ax6uT8R4ULrK6D2tq5abykRzunP++rrbu9K3hY5g=
Subject key identifier: F1:6E:D4:01:70:10:EF:0E:B1:6D:3B:FB:DD:BF:35:E9:22:9C:C8:0F
Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Certificate serial: 0198D515DA497516BD1CD762A9C397D07B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
Manifest number: 025B
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: WtYtZLAg5sARSELydiZePAfT6lw.crl (hash: +OTypT9E/qobMgvXuaflo7nS4Wy62/T6WPX9b9DiGMQ=)
2: lZfbUbYtdAwEvAPz9QgaQ6AiUzc.roa (hash: 95YPoU3EnMBScsmNlHgLSHa16IwnjsnV9FN8H0xyPaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:da:49:75:16:bd:1c:d7:62:a9:c3:97:d0:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=f16ed4017010ef0eb16d3bfbddbf35e9229cc80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f1:01:60:35:5e:0b:2a:76:78:b5:41:f3:1f:
56:78:95:d8:ca:76:6d:d8:8a:e9:b0:4d:36:79:ca:
91:3f:23:a8:74:0e:6c:8c:e4:01:8c:06:ae:2c:f1:
14:1a:c9:49:e4:b8:f5:a4:2f:f4:70:fd:df:b4:c1:
24:ed:d5:42:a6:94:25:ce:f2:7e:15:9a:ab:2c:51:
97:49:0c:ab:e8:31:04:b2:11:63:7c:32:88:74:1d:
38:40:75:df:78:15:0d:c1:dc:ac:4d:86:ea:26:b3:
4e:1e:30:a0:af:22:0a:36:44:16:15:3a:db:67:6b:
ff:7f:b2:be:5a:53:e1:06:2e:0d:5c:ee:18:4b:62:
a5:a2:1c:c2:5f:c6:bc:df:fd:83:27:a4:48:06:e5:
ef:3d:25:57:dc:59:c0:39:63:11:1e:1d:af:00:43:
e7:e8:82:86:4b:17:a5:d0:0f:53:c8:6b:4e:35:e4:
23:2b:44:31:35:53:58:6b:11:12:ff:02:f1:66:09:
18:55:02:5b:5a:a6:01:20:d0:2c:7f:b3:d9:6a:6f:
c3:2d:03:4e:e7:02:38:e0:84:39:cf:ae:da:c8:a2:
13:da:31:53:22:7a:38:f2:c5:c0:4b:2b:53:12:3e:
fd:9d:ab:c8:f9:49:b3:8a:3c:9a:cb:0c:aa:36:9e:
9e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6E:D4:01:70:10:EF:0E:B1:6D:3B:FB:DD:BF:35:E9:22:9C:C8:0F
X509v3 Authority Key Identifier:
keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:1d:db:42:b5:32:7a:51:c5:db:e5:d3:1f:50:9a:57:b2:dc:
a8:db:d5:70:6b:54:13:03:66:83:c0:ab:34:1c:7e:04:1f:94:
4c:58:2a:77:45:a4:6e:d3:6d:c3:3d:66:c5:29:9c:ef:3f:d3:
dc:8c:24:24:fe:2e:2f:98:0a:bb:9a:4a:25:fe:23:6f:f0:ad:
5f:06:29:56:33:68:35:cf:60:83:9b:24:ac:7e:e0:17:b1:ce:
7e:7d:13:81:9f:b4:83:a7:ff:e7:68:67:69:a4:3f:a2:23:bc:
05:25:60:27:8c:20:09:e6:f9:dc:8f:f7:e3:80:5c:57:4a:06:
99:e1:ef:17:3b:1a:fc:36:be:9a:5c:6d:82:e6:a7:6e:ad:ee:
44:c4:1c:a7:31:ea:82:b1:63:9e:19:52:3e:8c:2d:bd:14:b3:
3f:8f:8a:a4:56:37:b5:96:56:e2:cd:f9:ac:19:20:c8:71:02:
e5:af:ed:61:6c:25:c7:79:9c:10:e5:c0:a4:50:07:93:59:65:
b2:c9:8d:3e:cb:62:4a:9b:c4:ec:f4:e0:78:02:15:d9:f7:a8:
ed:55:e7:a9:a0:f6:d8:ec:84:33:26:2e:a0:5f:6f:d2:15:e0:
22:27:ea:b3:e7:9c:fe:30:ca:33:1d:5a:2c:b5:58:5b:a1:ed:
b1:9a:8c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFdpJdRa9HNdiqcOX0HsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDYyZDY0YjAyMGU2YzAxMTQ4NDJmMjc2MjY1ZTNjMDdk
M2VhNWMwHhcNMjUwODIzMDQwMDM1WhcNMjUwODI0MDQwMDM1WjAzMTEwLwYDVQQD
EyhmMTZlZDQwMTcwMTBlZjBlYjE2ZDNiZmJkZGJmMzVlOTIyOWNjODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/EBYDVeCyp2eLVB8x9WeJXYynZt
2IrpsE02ecqRPyOodA5sjOQBjAauLPEUGslJ5Lj1pC/0cP3ftMEk7dVCppQlzvJ+
FZqrLFGXSQyr6DEEshFjfDKIdB04QHXfeBUNwdysTYbqJrNOHjCgryIKNkQWFTrb
Z2v/f7K+WlPhBi4NXO4YS2KlohzCX8a83/2DJ6RIBuXvPSVX3FnAOWMRHh2vAEPn
6IKGSxel0A9TyGtONeQjK0QxNVNYaxES/wLxZgkYVQJbWqYBINAsf7PZam/DLQNO
5wI44IQ5z67ayKIT2jFTIno48sXASytTEj79navI+UmzijyaywyqNp6efQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFu1AFwEO8OsW07+92/NekinMgPMB8GA1UdIwQY
MBaAFFrWLWSwIObAEUhC8nYmXjwH0+pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RZdFpMQWc1c0FSU0VMeWRpWmVQQWZUNmx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMTE5NWMtNTY2YS00ZmYwLTk0OTYt
NTA4MDgxNDk5YmU3LzEvV3RZdFpMQWc1c0FSU0VMeWRpWmVQQWZUNmx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMTE5NWMtNTY2YS00ZmYwLTk0OTYtNTA4MDgxNDk5YmU3
LzEvV3RZdFpMQWc1c0FSU0VMeWRpWmVQQWZUNmx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvB3bQrUy
elHF2+XTH1CaV7LcqNvVcGtUEwNmg8CrNBx+BB+UTFgqd0WkbtNtwz1mxSmc7z/T
3IwkJP4uL5gKu5pKJf4jb/CtXwYpVjNoNc9gg5skrH7gF7HOfn0TgZ+0g6f/52hn
aaQ/oiO8BSVgJ4wgCeb53I/344BcV0oGmeHvFzsa/Da+mlxtguanbq3uRMQcpzHq
grFjnhlSPowtvRSzP4+KpFY3tZZW4s35rBkgyHEC5a/tYWwlx3mcEOXApFAHk1ll
ssmNPstiSpvE7PTgeAIV2feo7VXnqaD22OyEMyYuoF9v0hXgIifqs+ec/jDKMx1a
LLVYW6HtsZqM6A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:14 2025 by rpki-client