Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
File: W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft (raw, json)
Hash identifier: D2VhngtihYs0Wn3fQArj9yzUzOZa4/iK+pBph4Oeh4I=
Subject key identifier: B4:00:9F:DA:95:2C:31:77:9F:C4:2B:05:D1:CE:B5:EE:F8:7F:2B:4D
Authority key identifier: 5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
Certificate issuer: /CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Certificate serial: 0197B5C4E62FA0BF351AB2889EBDA0AFAE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 09:01:09 +0000
Manifest this update: Sat 28 Jun 2025 09:01:09 +0000
Manifest next update: Sun 29 Jun 2025 09:01:09 +0000
Files and hashes: 1: W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl (hash: nG6xdhqOmPkOdLAFWgBaA2H5EXWMMxeaePEsxzrnFRc=)
2: YSvlEI-QwRaOJVEKhPo-n7hFfMs.roa (hash: 2D47YFaNK7fea1JKhXlBWUic8EXXrjyXZMVK5ghBVPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:e6:2f:a0:bf:35:1a:b2:88:9e:bd:a0:af:ae:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Validity
Not Before: Jun 28 09:01:09 2025 GMT
Not After : Jun 29 09:01:09 2025 GMT
Subject: CN=b4009fda952c31779fc42b05d1ceb5eef87f2b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:9c:b6:e6:eb:b2:9f:89:05:81:9f:e3:c6:
da:8b:76:dc:a1:c8:03:58:02:53:cc:92:83:36:38:
66:b8:7c:cb:00:a3:35:70:68:60:bd:f9:b3:ee:23:
ed:c2:bb:77:22:31:08:01:05:01:28:85:a0:eb:31:
a1:b9:65:36:1b:c1:29:9d:9f:2b:3a:e0:72:1b:17:
73:df:81:84:71:20:a0:1b:cb:93:07:73:0d:9d:cc:
74:c3:15:36:19:73:49:0b:4c:a6:71:8b:53:fd:16:
f7:39:b3:ee:e6:55:1d:d4:a4:a7:ec:db:b5:ac:82:
6f:b4:11:e0:15:a8:75:c5:86:36:66:ac:8f:b6:a9:
3e:b3:1f:49:90:9e:8c:63:1d:8d:3a:96:7b:f3:1b:
a9:5f:bb:05:e9:47:9f:fb:02:2d:ae:b3:29:55:89:
29:88:b6:0d:ff:d4:d1:f7:51:f2:05:ba:2a:77:f6:
fb:35:74:7c:7f:7a:b1:d4:6e:26:78:b3:0e:ce:0b:
da:d7:a4:16:05:47:e2:a2:a1:31:5d:df:9c:1e:be:
78:3f:fd:0a:ce:bc:62:18:73:c7:76:5c:6b:3a:26:
b5:28:da:b8:52:6d:cf:06:26:f2:5e:5e:6f:4f:1c:
57:33:44:87:3b:57:f7:fa:c8:04:47:e0:b6:5e:d8:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:00:9F:DA:95:2C:31:77:9F:C4:2B:05:D1:CE:B5:EE:F8:7F:2B:4D
X509v3 Authority Key Identifier:
keyid:5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4e:24:f7:6d:4b:c3:60:f7:1b:a1:84:7b:34:09:39:77:f3:
31:d3:a4:e6:57:aa:d9:b2:b7:12:1a:bc:aa:7b:95:d5:1c:7c:
ec:68:53:8c:08:9a:00:ac:ce:d7:61:bc:60:c7:1c:e2:70:92:
14:84:fc:55:82:24:b5:d7:2f:d8:cb:f8:5e:9a:dd:93:b8:93:
41:1a:85:c6:ba:1f:f5:cc:ca:b6:e1:da:b8:b4:56:9a:fc:f5:
0f:57:2d:c4:1e:a5:3f:8e:96:1e:43:e6:98:0d:60:f0:c9:eb:
57:db:a7:6d:13:90:71:a0:59:ae:1b:1a:2d:24:64:28:9e:36:
76:b2:54:0a:db:6e:b6:d6:f4:62:a5:a8:e4:bf:6a:f1:6e:04:
ba:a3:3c:57:69:71:78:1c:12:e0:d1:17:f9:58:48:79:7c:39:
50:45:9b:bf:33:c8:1c:4a:fe:50:72:79:08:47:b3:53:74:ad:
3f:57:f6:61:b8:47:ed:38:17:27:ed:9c:f6:7a:3f:8f:8a:72:
8a:34:3b:78:f6:d7:5f:a7:62:c0:40:e9:0d:f3:0d:ee:89:1e:
40:01:45:ce:5e:cd:aa:7a:e8:9a:36:3f:b2:ee:58:a5:61:c5:
dc:19:7a:70:66:ba:56:ca:71:c5:48:39:16:08:48:05:dc:28:
6b:cd:4b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xOYvoL81GrKInr2gr65vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDNlODQ4YzU4YTY0NTFjYTg3NGNkY2ZjMzdlOWJjMGY1
ZDlhYzcwHhcNMjUwNjI4MDkwMTA5WhcNMjUwNjI5MDkwMTA5WjAzMTEwLwYDVQQD
EyhiNDAwOWZkYTk1MmMzMTc3OWZjNDJiMDVkMWNlYjVlZWY4N2YyYjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Gctubrsp+JBYGf48bai3bcocgD
WAJTzJKDNjhmuHzLAKM1cGhgvfmz7iPtwrt3IjEIAQUBKIWg6zGhuWU2G8EpnZ8r
OuByGxdz34GEcSCgG8uTB3MNncx0wxU2GXNJC0ymcYtT/Rb3ObPu5lUd1KSn7Nu1
rIJvtBHgFah1xYY2ZqyPtqk+sx9JkJ6MYx2NOpZ78xupX7sF6Uef+wItrrMpVYkp
iLYN/9TR91HyBboqd/b7NXR8f3qx1G4meLMOzgva16QWBUfioqExXd+cHr54P/0K
zrxiGHPHdlxrOia1KNq4Um3PBibyXl5vTxxXM0SHO1f3+sgER+C2XtiYBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQAn9qVLDF3n8QrBdHOte74fytNMB8GA1UdIwQY
MBaAFFvT6EjFimRRyodM3Pw36bwPXZrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzlQb1NNV0taRkhLaDB6Y19EZnB2QTlkbXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYjg3ZjUtZTVkMi00NTZmLWFiZTAt
NDg0ZDQ1ODZlZTdiLzEvVzlQb1NNV0taRkhLaDB6Y19EZnB2QTlkbXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wYjg3ZjUtZTVkMi00NTZmLWFiZTAtNDg0ZDQ1ODZlZTdi
LzEvVzlQb1NNV0taRkhLaDB6Y19EZnB2QTlkbXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ04k921L
w2D3G6GEezQJOXfzMdOk5leq2bK3Ehq8qnuV1Rx87GhTjAiaAKzO12G8YMcc4nCS
FIT8VYIktdcv2Mv4Xprdk7iTQRqFxrof9czKtuHauLRWmvz1D1ctxB6lP46WHkPm
mA1g8MnrV9unbROQcaBZrhsaLSRkKJ42drJUCttuttb0YqWo5L9q8W4EuqM8V2lx
eBwS4NEX+VhIeXw5UEWbvzPIHEr+UHJ5CEezU3StP1f2YbhH7TgXJ+2c9no/j4py
ijQ7ePbXX6diwEDpDfMN7okeQAFFzl7NqnromjY/su5YpWHF3Bl6cGa6VspxxUg5
FghIBdwoa81LXg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:46 2025 by rpki-client