Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: A97xLvZsX3SzXzvOIQioKDu8Z/u4uG2fZoL3U6W7gOI=
Subject key identifier: BD:F1:F2:F5:C0:8D:C1:02:B1:F3:0C:B5:3D:03:BA:02:C7:1A:13:97
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 0198D404607AB91532D1343DA76AE71299A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 11C5
Signing time: Fri 22 Aug 2025 23:01:53 +0000
Manifest this update: Fri 22 Aug 2025 23:01:53 +0000
Manifest next update: Sat 23 Aug 2025 23:01:53 +0000
Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: EEjMw065dBz0BCTyILBbVzWx112QihLpnNx1Q1KVmwk=)
2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:60:7a:b9:15:32:d1:34:3d:a7:6a:e7:12:99:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Aug 22 23:01:53 2025 GMT
Not After : Aug 23 23:01:53 2025 GMT
Subject: CN=bdf1f2f5c08dc102b1f30cb53d03ba02c71a1397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:30:65:c8:3a:75:10:54:16:34:53:d7:40:
4e:20:cd:ff:cc:7d:92:a9:07:d3:5c:ca:53:a6:af:
6e:72:da:10:88:ed:7c:fc:8c:1e:0b:44:42:15:ed:
de:aa:e8:91:17:d3:ff:b2:67:45:35:61:b5:94:c2:
c2:48:da:81:df:2d:48:c6:6a:62:1f:46:4e:d9:de:
84:d3:40:68:ba:a4:a7:53:be:0e:85:6d:66:73:8c:
13:67:d0:40:a5:de:bb:71:6f:25:71:4c:85:0f:57:
c8:f5:b6:a1:61:d7:28:12:a0:ce:24:da:1f:bb:24:
0f:0a:37:a4:68:56:d3:37:2f:bb:98:22:c1:ce:3a:
a2:59:5a:14:d9:f3:17:af:e8:43:ba:26:69:aa:86:
9f:d4:d1:43:c7:e6:fd:17:0d:be:8b:19:72:94:84:
26:4b:f9:09:2b:a3:73:db:f0:74:ae:5f:2f:66:36:
53:e8:11:f4:64:4e:ed:4f:7b:97:98:7a:e1:43:bf:
47:fd:56:15:d9:51:bf:33:11:41:55:2e:c7:14:71:
56:32:b8:0d:7b:2f:94:bb:70:f4:be:97:a5:d5:c1:
47:09:f4:38:85:f8:3a:f7:b5:f0:cc:52:82:85:3a:
e7:66:bd:9d:ad:cc:3c:1e:de:d9:0c:7c:78:dc:01:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F1:F2:F5:C0:8D:C1:02:B1:F3:0C:B5:3D:03:BA:02:C7:1A:13:97
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f2:15:db:8f:16:5b:a0:8f:8f:ae:04:1c:aa:71:ef:70:dd:
48:07:23:68:de:ef:a9:09:7e:db:ed:2d:0c:8a:22:ee:52:18:
d0:0c:52:23:a6:5f:5f:08:5b:bc:e9:65:48:05:54:32:02:a6:
8e:a5:6e:96:49:b2:74:17:2e:1c:f1:fe:67:17:4e:2b:22:f5:
ea:9e:b2:d6:4a:e6:a8:be:3f:47:41:7f:9d:07:0a:02:0e:9b:
ba:1f:7d:0c:f0:40:ba:c5:08:52:f8:b1:b5:b4:6c:aa:cf:b8:
04:9a:1e:0e:9c:ff:5c:bf:51:d6:de:af:58:00:6e:3e:80:2a:
84:b4:19:e5:20:4a:ba:31:55:82:c1:4c:90:c2:a4:2e:9b:ae:
01:91:59:a8:74:c3:48:c8:cf:13:3e:ad:47:ab:70:ea:c0:55:
86:15:11:95:b6:7a:59:cb:41:44:2e:34:6a:6f:ba:4d:24:f7:
6e:21:91:4c:38:48:56:24:aa:cc:95:54:ee:29:5e:95:cc:46:
5d:7a:cc:0f:8b:fd:a1:55:3c:5c:8d:f1:9d:ae:25:71:e9:47:
57:ed:6e:ef:b9:3b:68:6f:4e:14:42:e4:d6:bc:ff:bf:0d:70:
7d:e8:79:19:82:6b:31:cc:20:99:d9:15:1b:1f:fc:90:5c:d7:
9c:c2:b4:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBGB6uRUy0TQ9p2rnEpmoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1
NTcyODgwHhcNMjUwODIyMjMwMTUzWhcNMjUwODIzMjMwMTUzWjAzMTEwLwYDVQQD
EyhiZGYxZjJmNWMwOGRjMTAyYjFmMzBjYjUzZDAzYmEwMmM3MWExMzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTUwZcg6dRBUFjRT10BOIM3/zH2S
qQfTXMpTpq9uctoQiO18/IweC0RCFe3equiRF9P/smdFNWG1lMLCSNqB3y1Ixmpi
H0ZO2d6E00BouqSnU74OhW1mc4wTZ9BApd67cW8lcUyFD1fI9bahYdcoEqDOJNof
uyQPCjekaFbTNy+7mCLBzjqiWVoU2fMXr+hDuiZpqoaf1NFDx+b9Fw2+ixlylIQm
S/kJK6Nz2/B0rl8vZjZT6BH0ZE7tT3uXmHrhQ79H/VYV2VG/MxFBVS7HFHFWMrgN
ey+Uu3D0vpel1cFHCfQ4hfg697XwzFKChTrnZr2drcw8Ht7ZDHx43AGRjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3x8vXAjcECsfMMtT0DugLHGhOXMB8GA1UdIwQY
MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt
OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh
LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPIV248W
W6CPj64EHKpx73DdSAcjaN7vqQl+2+0tDIoi7lIY0AxSI6ZfXwhbvOllSAVUMgKm
jqVulkmydBcuHPH+ZxdOKyL16p6y1krmqL4/R0F/nQcKAg6buh99DPBAusUIUvix
tbRsqs+4BJoeDpz/XL9R1t6vWABuPoAqhLQZ5SBKujFVgsFMkMKkLpuuAZFZqHTD
SMjPEz6tR6tw6sBVhhURlbZ6WctBRC40am+6TST3biGRTDhIViSqzJVU7ilelcxG
XXrMD4v9oVU8XI3xna4lcelHV+1u77k7aG9OFELk1rz/vw1wfeh5GYJrMcwgmdkV
Gx/8kFzXnMK0hw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:52 2025 by rpki-client