Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
File: Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft (raw, json)
Hash identifier: Z2G27bP8H+EXBdNL7BiJTkOfJg0TXNFI+ou2U1xW9oE=
Subject key identifier: DC:EE:E6:BD:A8:3D:27:F5:38:74:A7:C6:CF:01:FC:9A:C3:83:70:74
Authority key identifier: 5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
Certificate issuer: /CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
Certificate serial: 0197B70EAB041BEDF09EBF33022434F9CA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
Manifest number: 1022
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: ORzdYgpKmwSJL1fVNUo6LmyhjSk.roa (hash: LmFlM+n+lX0yoflgNqGYgZ3G5C5DbphEooeee/wY1iM=)
2: Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl (hash: rWbDKH+ZvOG3FY8Saz28pTI1BPX1HPLJ3QXyJl4+xcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ab:04:1b:ed:f0:9e:bf:33:02:24:34:f9:ca:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=dceee6bda83d27f53874a7c6cf01fc9ac3837074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:a7:36:3c:14:eb:84:e9:47:d0:a0:4a:b6:
43:f9:c1:5e:67:d0:da:58:ce:e9:80:55:10:cc:4b:
36:ed:bb:3b:c1:f5:80:9c:6b:78:35:a7:cd:6b:00:
07:51:32:9c:f1:3b:6e:39:eb:b9:e5:26:cb:a7:99:
b6:76:c5:8f:ef:6d:22:36:71:d5:57:2a:2b:a9:f6:
de:5b:07:c8:41:1f:00:d4:cd:98:6f:0a:60:bc:d0:
a0:83:1f:89:03:a9:72:d1:00:13:39:ea:8d:64:f4:
b4:c7:05:ca:8d:10:8a:27:ec:99:7b:20:35:31:56:
06:1f:53:6e:50:02:92:4d:12:24:98:f0:ad:b5:56:
70:3b:53:1a:fb:6d:ca:27:70:f2:66:79:87:24:e3:
58:0b:17:34:a9:14:88:86:c9:55:1b:11:53:47:bb:
83:5c:06:1b:99:b3:39:bd:b6:b1:ba:89:62:6a:1a:
d7:48:03:7c:c0:76:50:c6:69:86:ba:b6:bd:b0:fa:
26:2a:0b:0a:c4:3e:be:7e:f1:ef:07:99:3d:c3:6c:
95:14:c1:8b:71:55:48:4c:17:7e:a2:08:ba:53:51:
d7:51:08:ff:c6:ff:17:80:f8:bc:1c:e0:fb:db:a0:
8f:e8:49:db:85:63:26:4f:ce:8f:2d:96:4a:f2:66:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EE:E6:BD:A8:3D:27:F5:38:74:A7:C6:CF:01:FC:9A:C3:83:70:74
X509v3 Authority Key Identifier:
keyid:5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:06:64:bd:dc:2e:e5:e7:0d:af:ae:f1:83:38:0b:f2:8d:0a:
e6:0e:70:23:55:dc:8d:fb:fc:3d:6e:34:94:49:fa:30:5d:59:
0a:42:e8:9d:b1:91:62:d3:b1:3a:45:ff:73:1d:ef:cc:e5:cd:
95:2d:44:b8:80:f3:52:10:8d:a5:cb:b0:56:67:3e:77:68:db:
7d:2e:51:2e:db:a1:45:96:2d:94:9a:b2:7d:d9:e0:8b:85:18:
91:37:77:2d:6e:a2:22:f0:a8:73:00:27:c7:99:6e:31:8d:e5:
41:82:0d:c1:47:bc:e5:79:68:b5:86:b9:b9:a8:76:f0:68:a7:
9e:fb:46:cb:6b:13:b4:76:2a:b1:52:c3:e7:3e:8e:62:41:00:
d4:38:e2:d7:73:b7:9c:14:b0:7c:72:60:d4:ec:8b:f0:e3:92:
99:3a:23:13:8f:31:e5:a0:25:b0:0f:a8:d9:a8:ae:f5:76:0e:
86:b4:e3:fd:61:0c:e8:72:f6:9a:29:18:3f:cb:fd:af:b4:a8:
40:9c:99:a3:79:8b:18:01:37:fa:0e:aa:4b:fe:28:5d:61:33:
c4:3b:75:08:c7:cc:dd:59:40:4c:5f:0d:a8:bb:24:1d:37:69:
a1:65:4e:73:c1:6d:72:21:9f:ad:a1:06:a0:06:4e:4b:ca:ec:
c1:fc:f7:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DqsEG+3wnr8zAiQ0+cpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZmRiZjk4ODNjMThjNGNlMTY1ZDhiODUwM2M2MjAxNzQ1
ZDY4ODcwHhcNMjUwNjI4MTUwMTIxWhcNMjUwNjI5MTUwMTIxWjAzMTEwLwYDVQQD
EyhkY2VlZTZiZGE4M2QyN2Y1Mzg3NGE3YzZjZjAxZmM5YWMzODM3MDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM+nNjwU64TpR9CgSrZD+cFeZ9Da
WM7pgFUQzEs27bs7wfWAnGt4NafNawAHUTKc8TtuOeu55SbLp5m2dsWP720iNnHV
VyorqfbeWwfIQR8A1M2YbwpgvNCggx+JA6ly0QATOeqNZPS0xwXKjRCKJ+yZeyA1
MVYGH1NuUAKSTRIkmPCttVZwO1Ma+23KJ3DyZnmHJONYCxc0qRSIhslVGxFTR7uD
XAYbmbM5vbaxuoliahrXSAN8wHZQxmmGura9sPomKgsKxD6+fvHvB5k9w2yVFMGL
cVVITBd+ogi6U1HXUQj/xv8XgPi8HOD726CP6EnbhWMmT86PLZZK8mYamwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzu5r2oPSf1OHSnxs8B/JrDg3B0MB8GA1UdIwQY
MBaAFFr9v5iDwYxM4WXYuFA8YgF0XWiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3YyX21JUEJqRXpoWmRpNFVEeGlBWFJkYUljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yOTQ0MGItYzU5YS00NjA4LWJjNjMt
YTRjYTMzNjNkNzAxLzEvV3YyX21JUEJqRXpoWmRpNFVEeGlBWFJkYUljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yOTQ0MGItYzU5YS00NjA4LWJjNjMtYTRjYTMzNjNkNzAx
LzEvV3YyX21JUEJqRXpoWmRpNFVEeGlBWFJkYUljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgZkvdwu
5ecNr67xgzgL8o0K5g5wI1Xcjfv8PW40lEn6MF1ZCkLonbGRYtOxOkX/cx3vzOXN
lS1EuIDzUhCNpcuwVmc+d2jbfS5RLtuhRZYtlJqyfdngi4UYkTd3LW6iIvCocwAn
x5luMY3lQYINwUe85XlotYa5uah28GinnvtGy2sTtHYqsVLD5z6OYkEA1Dji13O3
nBSwfHJg1OyL8OOSmTojE48x5aAlsA+o2aiu9XYOhrTj/WEM6HL2mikYP8v9r7So
QJyZo3mLGAE3+g6qS/4oXWEzxDt1CMfM3VlATF8NqLskHTdpoWVOc8FtciGfraEG
oAZOS8rswfz3Qw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:08 2025 by rpki-client