Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
File: WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json)
Hash identifier: QZFqFnVCo4OO6/dYjvyxYby7BJrDFzxk8r7nAhukFDY=
Subject key identifier: 3F:D0:96:F6:82:3A:F1:F1:16:01:9D:7A:52:09:BA:40:7F:A7:6B:1E
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial: 0197B82149AF206621A9737968481FB163F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
Manifest number: 0F02
Signing time: Sat 28 Jun 2025 20:01:18 +0000
Manifest this update: Sat 28 Jun 2025 20:01:18 +0000
Manifest next update: Sun 29 Jun 2025 20:01:18 +0000
Files and hashes: 1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: uat9HRZrsRhCo9qjcrEQqyUhzT07zqgmK/Vhen9hxi0=)
2: taSqw31_rwZ-hq0xkmTZUp1cyvw.roa (hash: V6lzw9iNkrzm6qgoGO8eVYLPpqNejoCjLT7yaMGPS3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:49:af:20:66:21:a9:73:79:68:48:1f:b1:63:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Validity
Not Before: Jun 28 20:01:18 2025 GMT
Not After : Jun 29 20:01:18 2025 GMT
Subject: CN=3fd096f6823af1f116019d7a5209ba407fa76b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:b9:4b:b2:02:70:03:f1:08:c5:d8:b3:c9:
0c:34:9c:31:1d:5c:08:ed:93:43:91:dd:90:e3:ef:
cc:9d:86:b6:c6:34:65:9f:6e:c1:2e:ee:fc:ea:e9:
93:af:b1:fd:57:f9:fd:9b:17:e1:79:41:99:37:23:
ff:55:a0:b5:9c:02:81:d5:34:ff:93:ea:3b:d9:1f:
87:84:0d:35:14:eb:a0:9e:79:86:e8:55:c7:71:a3:
b2:36:d0:1a:b8:72:75:45:b2:85:03:cf:23:fc:93:
8e:d2:43:e5:3e:f0:1e:c7:a1:5a:57:5d:23:7c:7b:
15:1e:3b:39:8c:67:23:68:e1:ac:bc:8a:82:9d:0f:
e9:ed:81:b6:b2:8d:0d:90:de:a0:54:13:7c:49:00:
77:56:7c:3d:dd:b3:13:0d:e1:2a:0a:0d:99:5e:e3:
42:0f:90:75:38:49:1b:fd:8e:44:8d:7d:e8:a8:c5:
42:af:35:2d:b4:6d:34:77:90:9e:4e:21:54:78:53:
09:cd:84:03:8e:b5:06:66:e0:b2:50:88:bf:51:ee:
72:61:a4:f6:07:ed:ac:f0:31:42:34:e3:7a:f5:94:
58:65:4a:4f:ee:a2:42:fd:76:91:84:29:76:98:2a:
9a:25:3b:b6:f6:0b:8c:6a:22:d7:2f:ae:bb:88:5e:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D0:96:F6:82:3A:F1:F1:16:01:9D:7A:52:09:BA:40:7F:A7:6B:1E
X509v3 Authority Key Identifier:
keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:20:5c:dc:d1:be:a2:6c:05:7e:c5:5e:90:c9:4a:f5:75:4f:
af:6f:8f:c3:c6:37:ee:47:7f:c9:59:b4:29:b6:04:e5:06:c2:
46:77:c5:f7:aa:95:de:e4:33:40:e8:94:29:1e:ef:71:a4:28:
95:8e:ad:b4:53:24:4e:51:e7:69:99:21:b9:3c:5e:f6:3a:1a:
9a:ab:0f:93:0b:43:af:00:d9:f7:f7:21:d8:e2:4c:2d:15:14:
81:f3:1f:dc:92:23:51:32:36:c5:19:74:67:25:39:d1:ef:fe:
42:c8:c2:55:ee:07:7f:38:21:87:7c:1a:70:36:f1:e8:5a:28:
47:97:5f:c8:db:13:be:6a:77:19:ef:68:f2:d7:c6:17:4f:40:
3c:c2:cb:b1:01:fd:61:aa:de:68:07:d8:b1:88:50:17:49:50:
c8:f2:3c:37:44:09:70:92:43:eb:e5:69:94:4c:ae:0c:77:33:
b3:ae:93:29:9d:1b:69:19:b5:9b:0b:61:84:63:69:0f:28:59:
47:8d:c6:c4:85:83:85:3e:2d:c8:64:41:4d:7c:bb:e5:4a:0d:
37:88:c2:4e:2e:69:1a:e4:75:50:1a:80:a6:5e:8d:65:d2:65:
96:2d:b3:d8:d2:4c:90:f6:99:fb:ae:b7:7c:b0:29:16:c1:a3:
6d:77:9e:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IUmvIGYhqXN5aEgfsWP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZGExMTU1NjM5OWUyOGZjNTVkYWIzYmEwNzg2OGZmNDkx
YzZmYjgwHhcNMjUwNjI4MjAwMTE4WhcNMjUwNjI5MjAwMTE4WjAzMTEwLwYDVQQD
EygzZmQwOTZmNjgyM2FmMWYxMTYwMTlkN2E1MjA5YmE0MDdmYTc2YjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSu5S7ICcAPxCMXYs8kMNJwxHVwI
7ZNDkd2Q4+/MnYa2xjRln27BLu786umTr7H9V/n9mxfheUGZNyP/VaC1nAKB1TT/
k+o72R+HhA01FOugnnmG6FXHcaOyNtAauHJ1RbKFA88j/JOO0kPlPvAex6FaV10j
fHsVHjs5jGcjaOGsvIqCnQ/p7YG2so0NkN6gVBN8SQB3Vnw93bMTDeEqCg2ZXuNC
D5B1OEkb/Y5EjX3oqMVCrzUttG00d5CeTiFUeFMJzYQDjrUGZuCyUIi/Ue5yYaT2
B+2s8DFCNON69ZRYZUpP7qJC/XaRhCl2mCqaJTu29guMaiLXL667iF6c/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/QlvaCOvHxFgGdelIJukB/p2seMB8GA1UdIwQY
MBaAFFraEVVjmeKPxV2rO6B4aP9JHG+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84MTIzNTctM2Q3MC00NjhlLWIwNDQt
ODRhZmVhYWJiMzczLzEvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84MTIzNTctM2Q3MC00NjhlLWIwNDQtODRhZmVhYWJiMzcz
LzEvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSBc3NG+
omwFfsVekMlK9XVPr2+Pw8Y37kd/yVm0KbYE5QbCRnfF96qV3uQzQOiUKR7vcaQo
lY6ttFMkTlHnaZkhuTxe9joamqsPkwtDrwDZ9/ch2OJMLRUUgfMf3JIjUTI2xRl0
ZyU50e/+QsjCVe4Hfzghh3wacDbx6FooR5dfyNsTvmp3Ge9o8tfGF09APMLLsQH9
YareaAfYsYhQF0lQyPI8N0QJcJJD6+VplEyuDHczs66TKZ0baRm1mwthhGNpDyhZ
R43GxIWDhT4tyGRBTXy75UoNN4jCTi5pGuR1UBqApl6NZdJlli2z2NJMkPaZ+663
fLApFsGjbXeeFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:29:59 2025 by rpki-client