Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
File: wVxXxJbEN46ATCYTOYB11U74qWI.mft (raw, json)
Hash identifier: dtFSoKxoqg4nJlUjDKXz7cdEA5ggnOfgI7XFG3cznNQ=
Subject key identifier: D3:AB:D0:46:08:5C:A6:05:3C:88:4F:30:7E:4D:C4:81:AA:33:F2:F3
Authority key identifier: C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62
Certificate issuer: /CN=c15c57c496c4378e804c2613398075d54ef8a962
Certificate serial: 0197C613D71BCCAFF0689ADD70F135A1A453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
Manifest number: 8F
Signing time: Tue 01 Jul 2025 13:01:18 +0000
Manifest this update: Tue 01 Jul 2025 13:01:18 +0000
Manifest next update: Wed 02 Jul 2025 13:01:18 +0000
Files and hashes: 1: r_DBy6crqhZV3E-t_JBcSU0M1aQ.roa (hash: x0KRqoMjmgWvFfwQSKfZBbO2VD1mpoCn3DkZilOBe/8=)
2: wVxXxJbEN46ATCYTOYB11U74qWI.crl (hash: 1UMf69IlVBG7QgS0lHu0f+f6aNMFdLl67xQiOTLXe9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:d7:1b:cc:af:f0:68:9a:dd:70:f1:35:a1:a4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15c57c496c4378e804c2613398075d54ef8a962
Validity
Not Before: Jul 1 13:01:18 2025 GMT
Not After : Jul 2 13:01:18 2025 GMT
Subject: CN=d3abd046085ca6053c884f307e4dc481aa33f2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:13:f1:35:1a:d8:57:71:fb:0d:c4:32:fe:
52:ff:3c:43:93:fd:e4:42:7b:a0:fe:11:e0:4a:5b:
68:eb:b5:db:dd:17:59:df:01:03:b6:a9:da:18:d2:
35:f4:2c:87:aa:72:e0:42:2d:00:ae:8c:f1:a3:7f:
b1:64:e6:72:6c:93:20:59:5a:c5:39:7b:e6:28:80:
8d:67:ce:92:87:d5:16:93:99:58:0d:dd:f4:27:d0:
82:1c:e4:58:8e:4f:53:fc:8b:05:47:3a:ca:0f:35:
1d:2e:6f:5c:13:d3:5b:e0:29:4d:b7:ce:af:5d:59:
5e:08:3d:94:00:b8:48:84:7e:10:47:fa:74:bb:c0:
ff:bf:9f:dd:bc:6a:b1:69:9e:33:b3:0d:d7:f0:c3:
87:a4:20:e9:90:b6:74:d1:a6:6e:f0:f4:fb:64:86:
e2:80:35:b8:55:9a:c6:03:f7:81:47:c0:7d:48:0f:
13:93:10:d0:42:f0:e8:8b:fb:97:66:aa:82:45:02:
3b:16:c7:9c:df:2b:64:1b:42:cf:8f:b0:ab:98:0c:
b3:41:69:b5:cf:62:e9:5d:8a:ba:1e:8e:0f:f2:02:
e3:2c:97:44:b2:08:84:3b:6f:50:0c:5b:45:33:1c:
c3:5f:70:4f:ff:17:5f:91:dd:ac:b5:75:95:2b:20:
4a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AB:D0:46:08:5C:A6:05:3C:88:4F:30:7E:4D:C4:81:AA:33:F2:F3
X509v3 Authority Key Identifier:
keyid:C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bf:c2:95:27:57:52:d0:ec:fe:c9:04:87:e2:32:aa:cd:67:
ad:60:e3:8c:f6:56:ca:ff:fb:30:20:2e:91:8b:79:d8:75:ca:
d8:9d:a0:60:ab:0b:b6:b5:a8:cf:97:1a:db:0e:9f:d4:7a:e2:
e2:6d:74:3d:46:f9:9e:0b:ed:6c:81:da:73:a8:25:23:25:08:
a1:58:95:52:72:65:c6:f2:60:a7:09:68:41:2b:8f:8f:38:ce:
5c:ac:44:06:b1:61:fd:a5:0b:eb:68:3c:c0:61:a5:e7:be:ab:
dd:2f:73:d2:af:65:76:20:4a:b2:b7:2f:59:25:df:3f:cf:bb:
e7:40:49:49:2c:77:ae:06:cd:c3:57:ce:b3:5a:b8:ed:e3:35:
16:ba:8e:cc:67:c4:e5:d5:25:41:31:db:0e:2c:72:61:49:33:
1c:ae:29:ac:50:9d:78:16:88:c3:37:9f:c2:28:d6:6b:cb:3c:
8c:50:4e:6b:c9:1b:57:63:95:9a:88:dd:66:2e:d1:2c:0d:65:
1f:94:df:08:5f:a1:2b:34:e6:76:fd:50:fe:25:60:76:2f:1b:
fd:62:c7:7c:ff:20:c1:9f:09:dc:a8:9c:9f:ad:02:e9:e3:c9:
45:b6:68:18:65:fb:81:e4:bc:93:08:33:cb:b2:ff:9f:e8:5e:
a8:71:2f:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGE9cbzK/waJrdcPE1oaRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNWM1N2M0OTZjNDM3OGU4MDRjMjYxMzM5ODA3NWQ1NGVm
OGE5NjIwHhcNMjUwNzAxMTMwMTE4WhcNMjUwNzAyMTMwMTE4WjAzMTEwLwYDVQQD
EyhkM2FiZDA0NjA4NWNhNjA1M2M4ODRmMzA3ZTRkYzQ4MWFhMzNmMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthAT8TUa2Fdx+w3EMv5S/zxDk/3k
Qnug/hHgSlto67Xb3RdZ3wEDtqnaGNI19CyHqnLgQi0Arozxo3+xZOZybJMgWVrF
OXvmKICNZ86Sh9UWk5lYDd30J9CCHORYjk9T/IsFRzrKDzUdLm9cE9Nb4ClNt86v
XVleCD2UALhIhH4QR/p0u8D/v5/dvGqxaZ4zsw3X8MOHpCDpkLZ00aZu8PT7ZIbi
gDW4VZrGA/eBR8B9SA8TkxDQQvDoi/uXZqqCRQI7Fsec3ytkG0LPj7CrmAyzQWm1
z2LpXYq6Ho4P8gLjLJdEsgiEO29QDFtFMxzDX3BP/xdfkd2stXWVKyBK3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOr0EYIXKYFPIhPMH5NxIGqM/LzMB8GA1UdIwQY
MBaAFMFcV8SWxDeOgEwmEzmAddVO+KliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Z4WHhKYkVONDZBVENZVE9ZQjExVTc0cVdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kODQ3NTgtZjI1ZC00YjNkLTkxNzYt
YTg4MTU2Mzc5NWQzLzEvd1Z4WHhKYkVONDZBVENZVE9ZQjExVTc0cVdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kODQ3NTgtZjI1ZC00YjNkLTkxNzYtYTg4MTU2Mzc5NWQz
LzEvd1Z4WHhKYkVONDZBVENZVE9ZQjExVTc0cVdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7/ClSdX
UtDs/skEh+Iyqs1nrWDjjPZWyv/7MCAukYt52HXK2J2gYKsLtrWoz5ca2w6f1Hri
4m10PUb5ngvtbIHac6glIyUIoViVUnJlxvJgpwloQSuPjzjOXKxEBrFh/aUL62g8
wGGl576r3S9z0q9ldiBKsrcvWSXfP8+750BJSSx3rgbNw1fOs1q47eM1FrqOzGfE
5dUlQTHbDixyYUkzHK4prFCdeBaIwzefwijWa8s8jFBOa8kbV2OVmojdZi7RLA1l
H5TfCF+hKzTmdv1Q/iVgdi8b/WLHfP8gwZ8J3Kicn60C6ePJRbZoGGX7geS8kwgz
y7L/n+heqHEvsg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:54:43 2025 by rpki-client