Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json)
Hash identifier: AZSBlbfkR9Wo2MehbTvqbs/cUBisGaTRD31d940ooMc=
Subject key identifier: 01:09:9F:9E:48:3A:E0:1A:6D:D4:21:1C:79:FA:DF:E2:72:CA:86:00
Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Certificate serial: 0198D5BBC454B61E9B8112542CEF29FEA9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: Na0zv9hIL06fzFxSYoSu1/th+9gEfJQEJzMG4aAclj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c4:54:b6:1e:9b:81:12:54:2c:ef:29:fe:a9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=01099f9e483ae01a6dd4211c79fadfe272ca8600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:75:6e:3c:00:db:cc:0a:76:7e:2f:a8:80:
32:e1:1d:95:e2:cf:51:91:a6:ac:95:10:9b:03:83:
81:c0:85:81:11:c4:bd:2c:b3:1c:30:f9:e0:48:b2:
ad:09:bb:07:ea:7a:27:d7:42:ff:73:76:85:0e:83:
4c:77:7c:4b:e2:52:c1:77:9f:29:92:a0:7f:d0:1d:
84:a9:37:79:2e:e4:53:f6:9f:f3:38:10:71:33:5f:
45:01:e2:bb:18:a6:63:bf:88:00:ea:d6:98:20:23:
b1:fa:39:bf:fc:50:c9:bf:e5:f1:02:fe:77:bd:c5:
43:b1:54:d2:e8:a6:95:14:b5:be:40:9e:21:8b:97:
38:d0:69:e0:66:91:79:e7:6a:f9:5e:ec:bc:67:55:
5d:9f:c3:4b:8f:dc:19:eb:9a:35:45:d0:2c:04:40:
4b:08:8e:d2:0b:55:21:06:35:c8:17:f7:4e:1b:ea:
d9:e9:aa:df:66:76:63:81:e3:fa:eb:d6:87:20:df:
ed:8e:20:8d:e5:02:0e:4b:28:e7:91:b5:9f:15:be:
9f:fe:6f:4a:39:21:53:c3:82:c0:3b:9c:10:16:44:
3d:f1:d9:1a:80:9a:6e:1d:9d:c9:07:17:70:0a:bb:
af:ce:56:6b:12:5f:39:0b:94:f6:09:9a:ef:51:97:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:09:9F:9E:48:3A:E0:1A:6D:D4:21:1C:79:FA:DF:E2:72:CA:86:00
X509v3 Authority Key Identifier:
keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:51:d9:80:d2:50:86:c2:81:28:c6:1a:6e:ee:e5:17:d9:ab:
91:f6:3f:f6:8f:f9:63:7a:50:61:93:e2:e0:de:26:a8:81:01:
e1:31:8a:20:af:87:b4:dd:b8:83:3b:c1:99:ec:ca:3c:f9:1d:
b9:66:49:75:14:5f:ad:6b:2a:46:00:28:66:14:98:76:2d:8a:
78:b1:c5:f1:e0:68:4e:58:cc:fd:1d:6c:4e:d1:48:d4:15:00:
39:3f:8f:e9:63:c9:f6:1b:3f:fe:f6:72:68:6d:21:e7:ca:06:
1f:7a:5e:23:08:0a:c9:86:83:12:dd:c5:5b:cf:bd:e2:1c:c5:
a1:3f:9e:3a:39:aa:7f:72:20:32:db:cf:d0:d1:47:f8:20:35:
0e:af:75:c7:fa:a0:55:99:77:6e:a4:f2:d7:7e:6d:a5:43:1d:
e7:1b:04:ec:d0:06:71:6a:a5:35:8e:98:8a:a9:4e:4b:42:db:
69:99:6c:b1:24:77:ce:5d:88:9d:d2:b7:20:98:f5:a4:7b:e0:
29:68:54:11:e2:1b:bd:49:d2:8b:5d:cf:f4:90:8b:2f:b9:45:
d1:30:4b:40:83:a9:2b:14:06:1b:f7:9d:f7:a1:97:aa:6f:10:
df:32:30:4d:65:ac:8c:2c:a0:70:97:1a:af:40:4f:2d:01:4d:
ec:8d:d3:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8RUth6bgRJULO8p/qmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzNjYTBkNjNhOGZjY2RjMGU5MmE4OGE2YmFjZWZmMjc1
ZTcwNDYwHhcNMjUwODIzMDcwMTQ5WhcNMjUwODI0MDcwMTQ5WjAzMTEwLwYDVQQD
EygwMTA5OWY5ZTQ4M2FlMDFhNmRkNDIxMWM3OWZhZGZlMjcyY2E4NjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyZ1bjwA28wKdn4vqIAy4R2V4s9R
kaaslRCbA4OBwIWBEcS9LLMcMPngSLKtCbsH6non10L/c3aFDoNMd3xL4lLBd58p
kqB/0B2EqTd5LuRT9p/zOBBxM19FAeK7GKZjv4gA6taYICOx+jm//FDJv+XxAv53
vcVDsVTS6KaVFLW+QJ4hi5c40GngZpF552r5Xuy8Z1Vdn8NLj9wZ65o1RdAsBEBL
CI7SC1UhBjXIF/dOG+rZ6arfZnZjgeP669aHIN/tjiCN5QIOSyjnkbWfFb6f/m9K
OSFTw4LAO5wQFkQ98dkagJpuHZ3JBxdwCruvzlZrEl85C5T2CZrvUZf3UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEJn55IOuAabdQhHHn63+JyyoYAMB8GA1UdIwQY
MBaAFFvDyg1jqPzNwOkqiKa6zv8nXnBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMDczZTYtYzQ4Ny00NzhmLWI5ZDkt
M2MxZTA1MThmOWU1LzEvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xMDczZTYtYzQ4Ny00NzhmLWI5ZDktM2MxZTA1MThmOWU1
LzEvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFHZgNJQ
hsKBKMYabu7lF9mrkfY/9o/5Y3pQYZPi4N4mqIEB4TGKIK+HtN24gzvBmezKPPkd
uWZJdRRfrWsqRgAoZhSYdi2KeLHF8eBoTljM/R1sTtFI1BUAOT+P6WPJ9hs//vZy
aG0h58oGH3peIwgKyYaDEt3FW8+94hzFoT+eOjmqf3IgMtvP0NFH+CA1Dq91x/qg
VZl3bqTy135tpUMd5xsE7NAGcWqlNY6YiqlOS0LbaZlssSR3zl2IndK3IJj1pHvg
KWhUEeIbvUnSi13P9JCLL7lF0TBLQIOpKxQGG/ed96GXqm8Q3zIwTWWsjCygcJca
r0BPLQFN7I3TNQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:42 2025 by rpki-client