Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
File: WwyVAj-g0zsibu8vIsjso5BSa_A.mft (raw, json)
Hash identifier: aDWORvwxnbsoMWhynClXvP7Lv/Mp411kFfFtimNEVSM=
Subject key identifier: 40:DA:5C:E1:AA:46:7B:41:AE:B2:F3:33:38:46:81:D4:17:1E:2B:A3
Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Certificate serial: 0197B7EA72B43F7567249B4821CFDE63A419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
Manifest number: 0CEA
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: WwyVAj-g0zsibu8vIsjso5BSa_A.crl (hash: UQn7XtfsZsqeLyrcoM436SwlkZ3Yb63GEmjYW7klqQo=)
2: wllNqt1P393lVw_WgHLjVq0jQ3M.roa (hash: BBqAMtasXCpwxv6WN/tQ+Ub2hvQgjIJGzl78O7sCb5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:72:b4:3f:75:67:24:9b:48:21:cf:de:63:a4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=40da5ce1aa467b41aeb2f333384681d4171e2ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:8d:43:3e:c3:ca:33:8f:ea:5d:bd:6d:1b:
4b:41:59:d6:2a:7e:08:50:f0:4c:9f:f9:3d:75:c6:
10:29:9f:a1:a0:4a:cf:49:f8:b0:a4:51:23:2b:b4:
3f:c6:d0:1a:fd:a0:1c:0f:3c:51:56:8c:13:5d:fe:
5f:89:ce:f2:ab:0a:cb:f0:7e:2a:7b:f5:1f:bf:22:
82:07:12:b9:9c:39:78:04:d2:b6:92:09:ea:8e:a1:
71:89:dc:0d:47:f3:58:39:ba:26:3a:4f:be:09:8c:
bc:8a:08:2c:fe:9e:5d:ef:86:ba:5b:60:95:f2:06:
18:5b:90:d5:30:8b:c7:f1:d5:d3:ec:cf:c0:89:39:
02:a9:d8:4a:1f:64:b8:50:79:22:3f:83:6c:78:a0:
74:24:70:54:dc:53:30:94:24:ae:2b:59:f9:e0:57:
37:f5:00:e8:46:94:27:95:45:06:48:94:e4:bd:da:
52:f4:4d:77:2f:06:34:8a:8f:38:b7:2e:ac:a9:a9:
d5:ff:10:6e:82:2e:d6:74:03:8c:51:26:4a:bd:54:
18:d4:5e:15:fd:db:48:85:a7:96:08:a1:d7:80:92:
30:1b:0e:22:b4:d8:3a:7f:48:c5:be:93:91:5a:3b:
52:9a:e4:23:32:63:0d:aa:ec:b9:2f:f5:ef:2a:e3:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:5C:E1:AA:46:7B:41:AE:B2:F3:33:38:46:81:D4:17:1E:2B:A3
X509v3 Authority Key Identifier:
keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:30:36:3e:d2:87:89:94:05:1a:cf:fc:e3:87:50:c9:9b:90:
8b:0c:95:27:39:62:9c:83:ec:bd:f7:29:b2:70:0c:20:2b:9a:
87:18:00:95:41:88:87:b1:c2:d1:d5:f1:6e:3a:2d:2d:24:fc:
da:58:71:eb:2d:ad:19:aa:cc:75:9a:9e:a6:65:e9:c0:2b:77:
04:f2:8f:2d:0a:4d:8e:82:52:21:08:c8:96:a8:df:43:be:9f:
19:b1:d9:e4:89:21:0e:f9:ca:92:5a:d8:3a:08:28:b4:ef:78:
95:30:d6:81:d3:79:ff:46:12:98:70:de:49:95:1d:b1:e9:ec:
f7:12:fb:7b:5a:03:4d:ab:5e:92:34:cb:e0:2b:81:84:f3:c0:
c7:bb:67:30:b6:18:ee:7f:e5:41:92:5c:54:21:99:c0:c0:da:
63:6a:20:46:85:e5:ea:09:d8:02:26:ea:22:9b:a3:4f:4b:3b:
75:34:a4:be:a7:b5:f8:be:85:62:7e:03:c5:d1:bd:46:1f:56:
89:11:8e:85:6f:28:f5:71:48:18:41:c9:c6:74:9d:32:9d:68:
2c:99:80:41:8f:aa:f5:8b:32:47:bf:19:e5:be:03:2c:26:5a:
2c:03:91:97:6b:db:cb:cd:74:2e:9e:e8:fc:c0:cb:bd:87:a3:
45:2f:b4:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36nK0P3VnJJtIIc/eY6QZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMGM5NTAyM2ZhMGQzM2IyMjZlZWYyZjIyYzhlY2EzOTA1
MjZiZjAwHhcNMjUwNjI4MTkwMTI0WhcNMjUwNjI5MTkwMTI0WjAzMTEwLwYDVQQD
Eyg0MGRhNWNlMWFhNDY3YjQxYWViMmYzMzMzODQ2ODFkNDE3MWUyYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHiNQz7DyjOP6l29bRtLQVnWKn4I
UPBMn/k9dcYQKZ+hoErPSfiwpFEjK7Q/xtAa/aAcDzxRVowTXf5fic7yqwrL8H4q
e/UfvyKCBxK5nDl4BNK2kgnqjqFxidwNR/NYObomOk++CYy8iggs/p5d74a6W2CV
8gYYW5DVMIvH8dXT7M/AiTkCqdhKH2S4UHkiP4NseKB0JHBU3FMwlCSuK1n54Fc3
9QDoRpQnlUUGSJTkvdpS9E13LwY0io84ty6sqanV/xBugi7WdAOMUSZKvVQY1F4V
/dtIhaeWCKHXgJIwGw4itNg6f0jFvpORWjtSmuQjMmMNquy5L/XvKuMS5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDaXOGqRntBrrLzMzhGgdQXHiujMB8GA1UdIwQY
MBaAFFsMlQI/oNM7Im7vLyLI7KOQUmvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEt
ZTBlOTBlMDg0NTA4LzEvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEtZTBlOTBlMDg0NTA4
LzEvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDA2PtKH
iZQFGs/844dQyZuQiwyVJzlinIPsvfcpsnAMICuahxgAlUGIh7HC0dXxbjotLST8
2lhx6y2tGarMdZqepmXpwCt3BPKPLQpNjoJSIQjIlqjfQ76fGbHZ5IkhDvnKklrY
OggotO94lTDWgdN5/0YSmHDeSZUdsens9xL7e1oDTatekjTL4CuBhPPAx7tnMLYY
7n/lQZJcVCGZwMDaY2ogRoXl6gnYAibqIpujT0s7dTSkvqe1+L6FYn4DxdG9Rh9W
iRGOhW8o9XFIGEHJxnSdMp1oLJmAQY+q9YsyR78Z5b4DLCZaLAORl2vby810Lp7o
/MDLvYejRS+0pg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:18 2025 by rpki-client