Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier: PI1QoJnkjaoqXbDn+ni8qwEVnyLKjoFrM9TRoz/9eqc=
Subject key identifier: 17:C0:1A:1B:83:74:7B:06:A3:A6:9D:22:99:2A:C9:72:5B:3B:7F:66
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 0197B7453553F41E5A7037FD2F113B1F50FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number: 12AA
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: T4eXTqD8qMkY5DY9RCIRmYEaW64.roa (hash: E3LBQ2rpYHnPvo7DUVa09ZVv6KEvA9HMX0+KhVuVzuY=)
2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: 6K4dI8QLzU3jwdDcHw9lBy6hJl146V5A/dZbDSn4Is0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:35:53:f4:1e:5a:70:37:fd:2f:11:3b:1f:50:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=17c01a1b83747b06a3a69d22992ac9725b3b7f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d4:63:6e:3d:14:7a:6e:67:46:72:dd:89:34:
f1:49:81:75:cd:c2:29:e0:13:39:a4:5b:aa:ca:01:
a0:e4:a1:8b:4d:70:c0:83:fb:d4:2d:33:ef:b5:5f:
b9:da:e6:28:94:c7:79:8a:07:5d:e5:7b:7d:e8:63:
2d:38:03:a5:7a:c4:65:3c:2b:47:f4:76:86:c5:14:
9c:aa:7f:b3:04:ad:8a:e6:87:d9:a0:64:8e:f7:e1:
6d:5d:1d:c1:93:b8:eb:8f:65:9a:6e:51:8c:01:a5:
1b:75:0a:84:55:23:ae:97:e3:77:ee:4b:71:fb:0e:
57:d8:21:b7:06:3f:ce:4e:e7:3c:be:ad:fd:6a:15:
cd:11:88:3b:91:da:28:1a:23:14:bd:b7:97:29:6b:
13:3c:91:6d:14:c6:75:6f:35:ff:ed:9f:37:bd:b9:
b5:85:6c:d4:da:e6:05:a4:28:36:db:4f:c4:14:2a:
29:c6:cd:8b:5a:58:82:6f:d3:5f:e2:53:e0:a9:54:
fa:ce:a2:aa:9e:57:1f:59:04:73:9c:14:f9:5f:e4:
b5:e6:b1:96:35:6b:3c:a5:65:61:d4:2b:b9:bd:af:
fe:5e:15:32:ba:9b:22:00:de:70:c2:4f:60:0b:f8:
a4:62:f7:73:93:7c:a8:4c:10:9b:dd:b2:59:5b:64:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C0:1A:1B:83:74:7B:06:A3:A6:9D:22:99:2A:C9:72:5B:3B:7F:66
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:85:a9:9f:ea:da:fd:9e:da:89:2e:fe:86:77:f2:08:ef:f0:
fb:bd:3b:8a:c2:db:26:45:c3:c4:6b:aa:f4:d8:cf:b4:9c:ac:
ce:cd:25:93:bb:e0:43:52:e7:22:d4:f2:80:cc:58:36:6a:e2:
b7:4f:ea:35:24:55:b7:69:25:ac:19:95:5f:8e:56:6c:a0:d2:
90:8e:6b:a0:ed:3c:75:eb:4e:cc:c1:dd:db:b9:e9:10:12:5b:
8e:c4:04:11:38:ab:d0:00:10:35:ad:34:b2:e6:d7:5c:d0:cc:
80:51:a1:05:2e:ae:49:24:4f:33:6a:71:54:51:e1:0f:e7:a3:
98:e2:a7:2d:2a:6d:1d:1a:2c:07:7a:a0:61:10:5d:23:d5:9b:
3a:1f:a6:c3:f1:4c:60:4e:e5:13:bf:6c:da:03:9c:a1:92:7c:
5c:e5:67:6d:15:bc:0a:cb:a7:e6:af:21:59:17:5e:33:d2:31:
5f:07:73:3f:6a:43:a3:cc:03:6f:a8:27:ac:c2:d9:ea:d1:7f:
b6:d7:10:9c:f4:85:b7:01:db:cd:d4:4b:4c:df:78:50:0d:c7:
d8:99:76:ae:b3:63:24:be:bc:4d:3e:4e:c0:e9:16:9d:ed:6f:
0b:a6:65:c7:e7:be:77:1f:19:c7:c0:b4:c0:8b:3b:09:cd:29:
11:02:de:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RTVT9B5acDf9LxE7H1D/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMDE3Zjg3ODQzMmIyZmUzMWY1ODE1M2I0NGE4MTY1OWQ1
MGJhMjAwHhcNMjUwNjI4MTYwMDU1WhcNMjUwNjI5MTYwMDU1WjAzMTEwLwYDVQQD
EygxN2MwMWExYjgzNzQ3YjA2YTNhNjlkMjI5OTJhYzk3MjViM2I3ZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49Rjbj0Uem5nRnLdiTTxSYF1zcIp
4BM5pFuqygGg5KGLTXDAg/vULTPvtV+52uYolMd5igdd5Xt96GMtOAOlesRlPCtH
9HaGxRScqn+zBK2K5ofZoGSO9+FtXR3Bk7jrj2WablGMAaUbdQqEVSOul+N37ktx
+w5X2CG3Bj/OTuc8vq39ahXNEYg7kdooGiMUvbeXKWsTPJFtFMZ1bzX/7Z83vbm1
hWzU2uYFpCg220/EFCopxs2LWliCb9Nf4lPgqVT6zqKqnlcfWQRznBT5X+S15rGW
NWs8pWVh1Cu5va/+XhUyupsiAN5wwk9gC/ikYvdzk3yoTBCb3bJZW2TsIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfAGhuDdHsGo6adIpkqyXJbO39mMB8GA1UdIwQY
MBaAFP8Bf4eEMrL+MfWBU7RKgWWdULogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3dGX2g0UXlzdjR4OVlGVHRFcUJaWjFRdWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YTRmZmItMDI4OS00NjZjLWEyZjUt
MzAyMDc3NzNmNzYwLzEvX3dGX2g0UXlzdjR4OVlGVHRFcUJaWjFRdWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YTRmZmItMDI4OS00NjZjLWEyZjUtMzAyMDc3NzNmNzYw
LzEvX3dGX2g0UXlzdjR4OVlGVHRFcUJaWjFRdWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIWpn+ra
/Z7aiS7+hnfyCO/w+707isLbJkXDxGuq9NjPtJyszs0lk7vgQ1LnItTygMxYNmri
t0/qNSRVt2klrBmVX45WbKDSkI5roO08detOzMHd27npEBJbjsQEETir0AAQNa00
subXXNDMgFGhBS6uSSRPM2pxVFHhD+ejmOKnLSptHRosB3qgYRBdI9WbOh+mw/FM
YE7lE79s2gOcoZJ8XOVnbRW8Csun5q8hWRdeM9IxXwdzP2pDo8wDb6gnrMLZ6tF/
ttcQnPSFtwHbzdRLTN94UA3H2Jl2rrNjJL68TT5OwOkWne1vC6Zlx+e+dx8Zx8C0
wIs7Cc0pEQLeXg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:14 2025 by rpki-client