Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: VM4q4M/XbpiaIURqXNBogCqIFJsCrH3/IGDHDDkDdo0=
Subject key identifier: 23:59:20:8B:31:A1:44:B4:7E:10:B8:6E:B5:0E:35:16:F5:AD:6D:32
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 0197B70F34887F0510815360ADF6008CA014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 1015
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (hash: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=)
2: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (hash: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=)
3: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: PmpeQQMGd/YFcPmIVkBD4JnSh9HZI3qtxtFKbBQ644w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:34:88:7f:05:10:81:53:60:ad:f6:00:8c:a0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=2359208b31a144b47e10b86eb50e3516f5ad6d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:b7:18:a9:c1:b5:20:8f:31:31:5f:bb:9d:
f4:79:77:87:a3:fb:af:61:2c:1c:7b:3d:84:2c:98:
93:e4:44:a1:c6:08:d1:9b:f8:49:db:e2:05:a6:10:
4f:b9:d3:3f:cd:1a:b0:03:8e:49:3e:13:e8:d1:14:
06:3d:e7:69:d9:4e:f4:01:32:2b:f0:56:e5:f9:93:
5a:c0:08:39:ca:e8:3a:b2:47:9e:4e:95:eb:19:70:
40:1c:ef:19:5e:b8:2e:7d:9a:72:f9:34:3a:15:2a:
26:53:5d:13:19:78:ba:f4:29:03:6d:c2:ef:7a:6c:
be:bd:2e:91:72:33:4e:64:94:b4:52:80:39:bc:22:
2f:72:60:b0:dc:01:35:54:8b:17:5a:6f:73:38:19:
27:d9:81:ce:f5:ef:e0:b8:c8:bd:da:53:00:e5:38:
66:a9:48:6e:e1:ca:27:65:84:55:bc:5f:55:d4:fa:
2b:a2:28:bd:99:b6:3a:2e:9b:b7:cd:6c:97:57:81:
ec:e5:7f:69:b9:67:cc:6a:ba:df:ce:40:a3:98:b9:
71:d7:2e:ad:2f:92:92:20:d4:11:8b:9c:0e:14:5f:
d6:c5:ff:1b:aa:f1:8c:fb:2a:b4:fd:b3:59:70:b9:
fe:06:06:a9:a3:aa:a6:b5:a2:7c:ee:7a:7f:35:ea:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:59:20:8B:31:A1:44:B4:7E:10:B8:6E:B5:0E:35:16:F5:AD:6D:32
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:62:66:b5:60:6e:15:7f:6a:d1:03:5d:95:96:d3:ec:7f:89:
60:d5:60:05:0b:b3:81:26:86:6d:cc:de:3c:84:57:9b:a2:7c:
0c:49:53:bf:db:cd:19:a1:e1:d8:74:4e:22:fa:b7:3d:b5:11:
60:97:42:d3:b2:e6:07:fc:5d:5d:55:6a:85:24:98:11:a4:82:
4f:85:c1:f4:d4:bc:b2:e8:54:90:d9:69:87:93:a9:7e:50:d0:
44:fb:89:19:a6:66:d1:9a:bd:91:ac:f7:25:f5:ba:a1:79:e0:
e0:ad:07:8f:dc:4c:a6:ed:62:f1:ec:2e:a2:76:ea:70:a1:54:
5f:6e:e0:26:04:58:8c:f4:fa:17:8d:37:86:85:11:6c:88:5e:
86:d1:bd:42:1b:3e:4a:ad:07:50:b7:13:dd:d6:17:5a:58:30:
f1:2a:b9:60:b0:fe:9a:68:0a:14:18:90:d1:7b:0b:31:29:90:
42:8f:cb:fa:8b:73:0e:eb:41:ef:f5:34:72:80:1b:0b:05:82:
82:37:e8:00:2a:5d:9a:c2:39:08:4c:12:18:3d:aa:8e:ba:28:
81:5f:74:1a:7c:f1:92:29:f1:3c:77:0d:99:d4:aa:ed:c9:6a:
bc:1e:47:d7:1e:2a:da:6e:6d:3d:79:5e:5d:07:7b:72:b3:b1:
85:a6:8e:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DzSIfwUQgVNgrfYAjKAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ODc3NzIwYzAxNDY4ODQ5NGVhNjkxMGM4MzQ3NGRlMTNl
OTk4MDIwHhcNMjUwNjI4MTUwMTU2WhcNMjUwNjI5MTUwMTU2WjAzMTEwLwYDVQQD
EygyMzU5MjA4YjMxYTE0NGI0N2UxMGI4NmViNTBlMzUxNmY1YWQ2ZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopG3GKnBtSCPMTFfu530eXeHo/uv
YSwcez2ELJiT5EShxgjRm/hJ2+IFphBPudM/zRqwA45JPhPo0RQGPedp2U70ATIr
8Fbl+ZNawAg5yug6skeeTpXrGXBAHO8ZXrgufZpy+TQ6FSomU10TGXi69CkDbcLv
emy+vS6RcjNOZJS0UoA5vCIvcmCw3AE1VIsXWm9zOBkn2YHO9e/guMi92lMA5Thm
qUhu4conZYRVvF9V1Poroii9mbY6Lpu3zWyXV4Hs5X9puWfMarrfzkCjmLlx1y6t
L5KSINQRi5wOFF/Wxf8bqvGM+yq0/bNZcLn+Bgapo6qmtaJ87np/NerV9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNZIIsxoUS0fhC4brUONRb1rW0yMB8GA1UdIwQY
MBaAFFmHdyDAFGiElOppEMg0dN4T6ZgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmIt
NzRjY2Q4MjQwYmFkLzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmItNzRjY2Q4MjQwYmFk
LzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGJmtWBu
FX9q0QNdlZbT7H+JYNVgBQuzgSaGbczePIRXm6J8DElTv9vNGaHh2HROIvq3PbUR
YJdC07LmB/xdXVVqhSSYEaSCT4XB9NS8suhUkNlph5OpflDQRPuJGaZm0Zq9kaz3
JfW6oXng4K0Hj9xMpu1i8ewuonbqcKFUX27gJgRYjPT6F403hoURbIhehtG9Qhs+
Sq0HULcT3dYXWlgw8Sq5YLD+mmgKFBiQ0XsLMSmQQo/L+otzDutB7/U0coAbCwWC
gjfoACpdmsI5CEwSGD2qjroogV90GnzxkinxPHcNmdSq7clqvB5H1x4q2m5tPXle
XQd7crOxhaaOTA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:33 2025 by rpki-client