Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File: WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier: Z6tV/8D3Vben+0i+8C/yjzmDdVTZLGL7oMFR/b203eQ=
Subject key identifier: 38:C4:39:15:02:E0:F2:00:DF:59:E0:C2:64:70:82:27:C8:05:C8:DF
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 0197B5FC31C0CDD3C2D7480EC658ABC0A848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 10:01:33 +0000
Manifest this update: Sat 28 Jun 2025 10:01:33 +0000
Manifest next update: Sun 29 Jun 2025 10:01:33 +0000
Files and hashes: 1: 02c0qJQBaigaXqN3maDpONIFFAc.roa (hash: vlyVQJ8T6zqr0LECSkvXw3QlmL9Yjq/p8Uw6tjeUbr0=)
2: Pg2gOuPKcxedaD2sl59MmthUm3Y.roa (hash: WZc+oVHpNNLn5e9mOqx5XLubp1FGZ4dlKP4oaNZHVd8=)
3: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: RoH7yD9Ak2/RCLXdMAFbR15hY8TRwgRuzAg+40wSxVk=)
4: ahTFb9S5fLEMmoyGHiPW-vefiaQ.roa (hash: zqpUKAyeaL36v8tPjx+vALU808R28L9YVhwRYuClrAU=)
5: ioEYoSKyEtfdiu8IAgBkdSDUxq0.roa (hash: CEmR3YzuPC7K/CwWVdeEu1K1wp1B5QCNbwR4nRi5bvI=)
6: nIj-C3WdkAFcA4_Ngvkfutdaf_s.roa (hash: yzlIgktfxTBSgISHGYHZ7rHc6AI8aMue2aaA1Dfkxmw=)
7: navET64WjDznMyZwQ_DOauhQ_9c.roa (hash: 0cyJx0VGxqHx5SG278Ye2Mukf1TTlmRpgV9pjTpL9aA=)
8: uQzeyhb_YH9D-fUCEABxF4wv1F8.roa (hash: 8/LP96pPXoanusy0qN7hBVY8daOytWMa0c+vNmNso88=)
9: yMil0VU9iMTJivoi_lPAt-4Ce_g.roa (hash: AOwv0RlV94x3NlTYd1oZANIiYY1kB3TCsu+XGZoajDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:31:c0:cd:d3:c2:d7:48:0e:c6:58:ab:c0:a8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jun 28 10:01:33 2025 GMT
Not After : Jun 29 10:01:33 2025 GMT
Subject: CN=38c4391502e0f200df59e0c264708227c805c8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:90:2f:2c:5f:7f:97:ec:8e:61:bf:87:ef:ce:
31:cb:e6:05:39:93:89:0f:a6:d3:de:1b:af:c0:3e:
ef:82:24:43:88:1a:e8:f9:f4:ec:eb:a7:90:ae:af:
85:4d:25:7f:76:44:7f:e7:c4:e3:71:1e:2c:5a:bc:
26:c3:69:0a:c6:b4:17:2e:ca:f1:09:61:0d:73:71:
3a:fe:1b:41:d9:6b:89:5e:bc:c4:c9:ab:92:c1:69:
20:52:5d:49:37:87:69:7d:f6:92:30:c9:04:b2:13:
41:9b:41:08:d6:be:85:5b:b7:5c:45:19:83:84:89:
5e:ef:6d:e6:cc:8e:3f:ad:26:7f:f0:91:ac:c3:75:
dd:ef:c1:49:3c:01:df:7a:ca:6a:50:f0:e0:17:92:
8c:6e:f0:3a:d1:7f:65:6c:1b:bc:c3:a9:89:d4:d4:
14:ff:cb:3d:3a:9f:d1:f8:ca:6a:ee:0d:c2:ce:9c:
af:2b:e3:1d:90:66:72:8a:d4:da:ad:b0:88:4d:49:
6b:36:ab:2d:f2:d3:9d:72:db:f5:d6:d7:58:42:50:
1e:09:9f:f6:52:9f:d3:ef:ab:79:9b:99:d3:4d:d7:
6c:92:cb:c0:ad:8f:72:3b:01:9c:89:f0:fb:0b:45:
83:d6:4d:1c:c4:a4:e9:70:36:48:79:85:dd:3f:4d:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C4:39:15:02:E0:F2:00:DF:59:E0:C2:64:70:82:27:C8:05:C8:DF
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:41:22:9d:71:f3:ed:ba:fa:82:e1:05:11:7d:3e:c6:47:7e:
7f:4f:4b:27:3f:06:e0:10:4b:ed:c8:7a:0d:8a:bd:71:4b:1e:
3f:f8:05:3a:f5:89:c6:fc:b9:18:0e:d9:4a:12:6a:2a:19:16:
9a:94:ae:95:1c:62:7d:20:06:9f:1a:97:29:7b:ac:36:ad:e0:
76:19:62:60:67:0c:fa:88:6f:cb:57:cb:f4:32:2a:7a:1a:03:
34:4d:99:64:7a:65:aa:42:7b:8f:6a:c5:33:19:dc:b5:1e:50:
87:9f:a9:ff:04:9d:fa:65:6a:ec:0c:08:b9:db:5a:3a:c1:d9:
42:57:bb:9b:58:83:88:54:03:a2:41:3d:28:4e:12:23:ac:98:
0e:50:4e:3f:8a:20:2e:0c:4f:a8:4b:01:da:64:40:39:c3:7f:
15:ea:9b:5b:07:1c:6c:f3:51:bd:55:43:51:a3:59:99:3c:3d:
6d:5d:bd:ad:3c:3f:c6:a5:20:53:2a:4b:ec:84:35:ed:71:71:
a6:f8:e4:ce:e4:75:ed:6a:4b:3d:38:89:d2:9a:5b:7a:9c:25:
9b:89:25:c2:ec:0f:5c:bd:ba:95:ee:d8:f7:a8:d9:87:a6:b8:
8f:0b:4e:8c:41:5e:d8:e5:03:a9:37:e3:b5:5c:b1:81:a0:1d:
d4:92:f6:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/DHAzdPC10gOxlirwKhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx
MDZkOTcwHhcNMjUwNjI4MTAwMTMzWhcNMjUwNjI5MTAwMTMzWjAzMTEwLwYDVQQD
EygzOGM0MzkxNTAyZTBmMjAwZGY1OWUwYzI2NDcwODIyN2M4MDVjOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpAvLF9/l+yOYb+H784xy+YFOZOJ
D6bT3huvwD7vgiRDiBro+fTs66eQrq+FTSV/dkR/58TjcR4sWrwmw2kKxrQXLsrx
CWENc3E6/htB2WuJXrzEyauSwWkgUl1JN4dpffaSMMkEshNBm0EI1r6FW7dcRRmD
hIle723mzI4/rSZ/8JGsw3Xd78FJPAHfespqUPDgF5KMbvA60X9lbBu8w6mJ1NQU
/8s9Op/R+Mpq7g3CzpyvK+MdkGZyitTarbCITUlrNqst8tOdctv11tdYQlAeCZ/2
Up/T76t5m5nTTddsksvArY9yOwGcifD7C0WD1k0cxKTpcDZIeYXdP005dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjEORUC4PIA31ngwmRwgifIBcjfMB8GA1UdIwQY
MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt
ZTE4NjAyNzM5Y2Q1LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1
LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEEinXHz
7br6guEFEX0+xkd+f09LJz8G4BBL7ch6DYq9cUseP/gFOvWJxvy5GA7ZShJqKhkW
mpSulRxifSAGnxqXKXusNq3gdhliYGcM+ohvy1fL9DIqehoDNE2ZZHplqkJ7j2rF
MxnctR5Qh5+p/wSd+mVq7AwIudtaOsHZQle7m1iDiFQDokE9KE4SI6yYDlBOP4og
LgxPqEsB2mRAOcN/FeqbWwccbPNRvVVDUaNZmTw9bV29rTw/xqUgUypL7IQ17XFx
pvjkzuR17WpLPTiJ0ppbepwlm4klwuwPXL26le7Y96jZh6a4jwtOjEFe2OUDqTfj
tVyxgaAd1JL2jw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:08 2025 by rpki-client