Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
File: WZypahnO8ifMM7NFhZaqRV0rePg.mft (raw, json)
Hash identifier: bGV3Reh6mWTBG1uUzk7TjGDE2/EKrsHFtfzokAR9B0U=
Subject key identifier: C4:86:99:60:2B:42:5B:36:3B:1B:6F:E2:46:8D:2E:8C:8C:1E:95:F6
Authority key identifier: 59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
Certificate issuer: /CN=599ca96a19cef227cc33b3458596aa455d2b78f8
Certificate serial: 0198D4A79C3334CF13E44040C0CD2B8F870B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
Manifest number: 05A7
Signing time: Sat 23 Aug 2025 02:00:10 +0000
Manifest this update: Sat 23 Aug 2025 02:00:10 +0000
Manifest next update: Sun 24 Aug 2025 02:00:10 +0000
Files and hashes: 1: WZypahnO8ifMM7NFhZaqRV0rePg.crl (hash: 8a5+vdRmepIqEEYLN0BATSAemoSGRIiSxTn7NX2uQi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:9c:33:34:cf:13:e4:40:40:c0:cd:2b:8f:87:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599ca96a19cef227cc33b3458596aa455d2b78f8
Validity
Not Before: Aug 23 02:00:10 2025 GMT
Not After : Aug 24 02:00:10 2025 GMT
Subject: CN=c48699602b425b363b1b6fe2468d2e8c8c1e95f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:b4:96:4b:c2:91:60:79:8f:c6:af:8f:e6:
ff:f5:cf:58:84:d1:48:2b:3c:41:85:68:81:59:af:
83:af:b2:02:1c:9b:58:0a:03:6d:51:9f:7d:d5:4e:
8f:fd:38:26:cd:42:94:10:f1:7d:53:61:63:06:6d:
eb:7e:f7:3b:b6:e7:ca:d7:f1:87:68:5c:a5:28:c5:
e8:78:f5:43:28:99:ec:ee:62:00:aa:66:fd:60:b8:
ab:3c:3d:a4:89:d0:2c:3e:0e:ff:93:b7:8e:50:b3:
40:4e:89:19:9c:97:eb:aa:de:23:f8:2f:c5:1d:5f:
48:4e:3a:35:0b:3b:d0:49:cd:f5:c0:0b:b3:bc:c1:
fa:89:1f:d0:65:f9:7e:54:e3:93:85:76:f6:30:dd:
aa:0a:04:6c:5c:f0:7b:47:09:c0:55:a3:10:9c:e2:
64:5b:df:24:b7:0f:e1:5b:ca:da:d6:f3:49:cf:b5:
0f:6a:f4:47:4a:5c:1a:4e:59:5f:42:f9:e0:8e:a7:
e1:4d:6c:ec:61:14:d9:43:57:8f:a4:15:6a:e1:62:
11:22:78:1f:29:00:a8:4b:14:fc:8c:04:c0:3f:02:
27:81:3f:c1:5b:63:50:b0:2d:64:be:80:55:56:b4:
2c:c3:2c:76:84:27:86:63:e3:7b:36:e1:f4:f6:0c:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:86:99:60:2B:42:5B:36:3B:1B:6F:E2:46:8D:2E:8C:8C:1E:95:F6
X509v3 Authority Key Identifier:
keyid:59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ad:87:c4:e7:4f:8d:72:61:b1:47:74:3f:39:e0:2a:b0:c8:
eb:eb:d5:04:40:13:ba:51:fe:94:53:9b:8b:86:a7:6e:fc:1a:
7b:fe:12:3f:d1:fe:d6:28:6a:ab:e1:30:ff:11:24:e5:0b:fd:
59:b8:93:c3:44:84:61:13:f7:26:8a:07:2e:6b:2a:69:75:d5:
03:f5:2d:a6:3a:7b:55:16:fd:99:5f:37:6c:83:12:2f:8a:c9:
db:44:f2:92:c0:34:76:4d:1a:0c:5c:1d:61:c7:22:db:2e:65:
23:a4:9e:11:57:58:0c:31:88:cc:7e:11:4d:35:a2:5c:50:04:
47:6a:da:c4:12:fe:8d:5d:9e:fb:98:66:48:60:3f:8f:45:70:
be:c2:24:0e:93:f2:13:a0:ed:a5:57:1f:d4:28:0f:c3:42:dd:
f0:8a:05:5b:a0:38:7b:bc:0e:bb:95:87:d2:3a:4a:16:f9:a5:
3d:df:9d:c9:b6:ee:0f:66:44:16:c7:72:6f:89:4f:f6:46:68:
ee:a9:9e:3c:bc:85:74:3b:8a:9b:c9:f4:96:cf:d5:dc:4e:d6:
8c:81:76:d1:78:5e:cf:03:88:de:1c:20:ef:de:10:a5:38:3f:
b2:a4:29:2e:b8:26:2c:18:94:07:ec:15:b1:34:7d:aa:92:1d:
91:2a:3b:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp5wzNM8T5EBAwM0rj4cLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OWNhOTZhMTljZWYyMjdjYzMzYjM0NTg1OTZhYTQ1NWQy
Yjc4ZjgwHhcNMjUwODIzMDIwMDEwWhcNMjUwODI0MDIwMDEwWjAzMTEwLwYDVQQD
EyhjNDg2OTk2MDJiNDI1YjM2M2IxYjZmZTI0NjhkMmU4YzhjMWU5NWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLq0lkvCkWB5j8avj+b/9c9YhNFI
KzxBhWiBWa+Dr7ICHJtYCgNtUZ991U6P/TgmzUKUEPF9U2FjBm3rfvc7tufK1/GH
aFylKMXoePVDKJns7mIAqmb9YLirPD2kidAsPg7/k7eOULNATokZnJfrqt4j+C/F
HV9ITjo1CzvQSc31wAuzvMH6iR/QZfl+VOOThXb2MN2qCgRsXPB7RwnAVaMQnOJk
W98ktw/hW8ra1vNJz7UPavRHSlwaTllfQvngjqfhTWzsYRTZQ1ePpBVq4WIRIngf
KQCoSxT8jATAPwIngT/BW2NQsC1kvoBVVrQswyx2hCeGY+N7NuH09gwxmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSGmWArQls2Oxtv4kaNLoyMHpX2MB8GA1UdIwQY
MBaAFFmcqWoZzvInzDOzRYWWqkVdK3j4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1p5cGFobk84aWZNTTdORmhaYXFSVjByZVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hZjJkZDUtM2Y2ZS00NWQ1LWIxMGUt
YjU1ZjcwZmIxMTQyLzEvV1p5cGFobk84aWZNTTdORmhaYXFSVjByZVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9hZjJkZDUtM2Y2ZS00NWQ1LWIxMGUtYjU1ZjcwZmIxMTQy
LzEvV1p5cGFobk84aWZNTTdORmhaYXFSVjByZVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHq2HxOdP
jXJhsUd0PzngKrDI6+vVBEATulH+lFObi4anbvwae/4SP9H+1ihqq+Ew/xEk5Qv9
WbiTw0SEYRP3JooHLmsqaXXVA/Utpjp7VRb9mV83bIMSL4rJ20TyksA0dk0aDFwd
Ycci2y5lI6SeEVdYDDGIzH4RTTWiXFAER2raxBL+jV2e+5hmSGA/j0VwvsIkDpPy
E6DtpVcf1CgPw0Ld8IoFW6A4e7wOu5WH0jpKFvmlPd+dybbuD2ZEFsdyb4lP9kZo
7qmePLyFdDuKm8n0ls/V3E7WjIF20XhezwOI3hwg794QpTg/sqQpLrgmLBiUB+wV
sTR9qpIdkSo7+w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:20 2025 by rpki-client