Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
File: w4w6HAXImev-FdI2GQmmNZfGgHg.mft (raw, json)
Hash identifier: gO+kNNy+V2rFNVEfAiByx3KH1Eh2zpMrEFRf+QfrsZU=
Subject key identifier: 01:EF:8F:EF:AB:21:EA:1E:E9:86:DD:CF:58:10:76:31:89:5D:71:52
Authority key identifier: C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
Certificate issuer: /CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Certificate serial: 0197C1247520A2E4C32E3AF75CF421492E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
Manifest number: 15B9
Signing time: Mon 30 Jun 2025 14:01:21 +0000
Manifest this update: Mon 30 Jun 2025 14:01:21 +0000
Manifest next update: Tue 01 Jul 2025 14:01:21 +0000
Files and hashes: 1: 3fbk5KZ8ThDjTTk1HUs_F8dpBIQ.roa (hash: QSUPjZJR7N2hLAV4a9vMxf89Cyng2AUNsEsGu9jShnE=)
2: q75v5EqZWH70d3-zw1Mz9lAhrNA.roa (hash: 42QWIn0E5NYeaE/XqOKgGlGrf3JcLpIWupxVplExU4g=)
3: w4w6HAXImev-FdI2GQmmNZfGgHg.crl (hash: yujaXhb+6k1Nl2LDYXcc0AXnRCn7O6Ob9W2+NPpyJ6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:75:20:a2:e4:c3:2e:3a:f7:5c:f4:21:49:2e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Validity
Not Before: Jun 30 14:01:21 2025 GMT
Not After : Jul 1 14:01:21 2025 GMT
Subject: CN=01ef8fefab21ea1ee986ddcf58107631895d7152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:34:a3:29:2e:42:11:2f:dc:ce:67:dc:e1:
14:fa:65:bc:91:f1:37:37:f5:16:49:b5:91:5f:cc:
8e:be:35:bf:63:cf:49:1f:0b:dd:77:ea:d2:59:86:
0f:c2:14:d2:df:14:c0:53:a3:58:6d:15:c4:2f:a7:
cc:9c:b8:4f:00:89:1e:47:ec:f9:be:46:3e:7d:16:
58:d9:fa:0e:40:f7:e8:47:b9:a1:f1:36:da:dd:bb:
3e:9b:81:2f:c0:7a:0e:27:1b:c6:53:7d:56:59:f6:
73:28:16:c0:a8:5b:23:8a:96:de:dc:c8:0b:1a:96:
48:02:a4:0c:95:58:08:6e:25:5d:c6:52:a9:0e:cf:
45:13:bb:da:b7:c6:7b:36:52:7e:d1:85:e2:03:bf:
bc:87:5e:44:09:4f:59:b3:dc:a5:3d:45:4a:66:4a:
50:08:84:a0:70:8b:62:98:5b:a4:0c:8e:04:23:dd:
15:69:30:d1:ce:11:e1:3e:44:4e:f1:76:81:b2:92:
9b:d4:25:0d:34:da:8c:10:d8:dc:36:ee:94:b6:33:
89:08:f7:ab:00:e9:cc:ac:b7:f9:3e:63:58:a0:06:
2c:49:6e:ee:5d:51:c1:63:5d:b9:13:44:b1:2d:9d:
a7:81:1d:3d:09:2a:9d:3f:95:30:2d:6e:07:43:b1:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:8F:EF:AB:21:EA:1E:E9:86:DD:CF:58:10:76:31:89:5D:71:52
X509v3 Authority Key Identifier:
keyid:C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1f:ea:33:63:42:7b:c2:85:0b:92:fb:54:ee:3f:fc:06:8e:
6e:22:5c:e3:04:73:30:0f:23:5c:60:e0:51:14:8c:8f:61:dc:
e5:46:89:2e:eb:d6:61:ad:f7:eb:21:56:4e:82:26:7a:a3:21:
94:03:bd:1f:f0:a8:99:01:93:c2:f3:24:26:ba:3a:e6:d8:34:
55:c5:51:45:0e:03:17:7e:f3:56:a0:7b:a2:d0:d2:1f:2a:3c:
f2:7e:51:ce:4e:e5:3d:a7:62:d7:8c:f3:90:88:09:c6:be:8e:
68:fd:ba:2d:2e:db:11:9a:ec:de:b6:fc:9a:c7:70:fc:98:42:
a9:33:6c:37:7b:e2:ba:02:7d:cf:ba:c4:6f:db:8f:9e:53:1b:
14:0d:b0:50:87:70:9f:57:9a:a9:e1:91:ba:bd:42:a3:88:7e:
38:ae:02:33:27:d1:3f:e9:c1:97:15:8c:6b:7a:17:57:93:f1:
d8:67:3b:05:d7:b2:52:03:bf:e2:f3:ba:68:bd:6c:41:07:8e:
e6:58:94:36:8b:bc:c2:3a:2c:3d:a8:b8:bc:b5:e8:e3:9f:df:
df:15:c9:12:2d:e2:7e:3a:eb:f4:ee:dd:c2:7c:9c:f7:4e:82:
3f:96:f7:2a:39:ed:d9:28:c2:ed:ca:06:d2:6e:b6:b1:60:a0:
4d:b5:43:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfBJHUgouTDLjr3XPQhSS4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOGMzYTFjMDVjODk5ZWJmZTE1ZDIzNjE5MDlhNjM1OTdj
NjgwNzgwHhcNMjUwNjMwMTQwMTIxWhcNMjUwNzAxMTQwMTIxWjAzMTEwLwYDVQQD
EygwMWVmOGZlZmFiMjFlYTFlZTk4NmRkY2Y1ODEwNzYzMTg5NWQ3MTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq80oykuQhEv3M5n3OEU+mW8kfE3
N/UWSbWRX8yOvjW/Y89JHwvdd+rSWYYPwhTS3xTAU6NYbRXEL6fMnLhPAIkeR+z5
vkY+fRZY2foOQPfoR7mh8Tba3bs+m4EvwHoOJxvGU31WWfZzKBbAqFsjipbe3MgL
GpZIAqQMlVgIbiVdxlKpDs9FE7vat8Z7NlJ+0YXiA7+8h15ECU9Zs9ylPUVKZkpQ
CISgcItimFukDI4EI90VaTDRzhHhPkRO8XaBspKb1CUNNNqMENjcNu6UtjOJCPer
AOnMrLf5PmNYoAYsSW7uXVHBY125E0SxLZ2ngR09CSqdP5UwLW4HQ7GiAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHvj++rIeoe6Ybdz1gQdjGJXXFSMB8GA1UdIwQY
MBaAFMOMOhwFyJnr/hXSNhkJpjWXxoB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzR3NkhBWEltZXYtRmRJMkdRbW1OWmZHZ0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85ZTg2YWItYmM3Zi00YmM0LWIxMjct
NDIyNjIxNjFlOTQwLzEvdzR3NkhBWEltZXYtRmRJMkdRbW1OWmZHZ0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85ZTg2YWItYmM3Zi00YmM0LWIxMjctNDIyNjIxNjFlOTQw
LzEvdzR3NkhBWEltZXYtRmRJMkdRbW1OWmZHZ0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWh/qM2NC
e8KFC5L7VO4//AaObiJc4wRzMA8jXGDgURSMj2Hc5UaJLuvWYa336yFWToImeqMh
lAO9H/ComQGTwvMkJro65tg0VcVRRQ4DF37zVqB7otDSHyo88n5Rzk7lPadi14zz
kIgJxr6OaP26LS7bEZrs3rb8msdw/JhCqTNsN3viugJ9z7rEb9uPnlMbFA2wUIdw
n1eaqeGRur1Co4h+OK4CMyfRP+nBlxWMa3oXV5Px2Gc7BdeyUgO/4vO6aL1sQQeO
5liUNou8wjosPai4vLXo45/f3xXJEi3ifjrr9O7dwnyc906CP5b3Kjnt2SjC7coG
0m62sWCgTbVD+w==
-----END CERTIFICATE-----
Generated at Mon Jun 30 17:19:04 2025 by rpki-client