Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
File: WPde8NYw4dCGeQygt45-744qz7s.mft (raw, json)
Hash identifier: 1zg5ps6X3ngTOOU96k2CFiTxgHDUKAVLteiZfEnzkcE=
Subject key identifier: 19:BD:4E:83:8E:53:AF:89:6C:14:12:D7:69:16:D3:6A:3B:B5:A7:F0
Authority key identifier: 58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
Certificate issuer: /CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Certificate serial: 0198D583926485040CB69D96DAD34405FA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:26 +0000
Manifest this update: Sat 23 Aug 2025 06:00:26 +0000
Manifest next update: Sun 24 Aug 2025 06:00:26 +0000
Files and hashes: 1: WPde8NYw4dCGeQygt45-744qz7s.crl (hash: 1ZqY7vnbyJyBaQ0dRcnWSvOqwPITT+cJS6OX46zVltE=)
2: x5rquIVhJ13GXmSiEvGgLAga1-w.roa (hash: 89X00FnyaHqizMTzCA2kNKHXqUvFiwqZlo80Pxfjk08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:92:64:85:04:0c:b6:9d:96:da:d3:44:05:fa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Validity
Not Before: Aug 23 06:00:26 2025 GMT
Not After : Aug 24 06:00:26 2025 GMT
Subject: CN=19bd4e838e53af896c1412d76916d36a3bb5a7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:de:48:eb:90:cb:15:40:bb:28:ae:7a:f7:
d1:37:46:5e:b3:d4:b7:ad:d3:a9:62:28:95:aa:6a:
2e:6c:50:aa:62:cb:34:64:6a:52:7a:81:ee:3a:22:
2c:2e:d7:9f:35:aa:a9:1f:01:57:55:c3:e6:60:a4:
f9:8b:fb:b9:b0:16:42:47:a6:7e:11:60:df:a4:b0:
b9:97:28:08:32:5c:d5:f1:f3:44:f3:c3:d9:31:3c:
cd:a9:b7:35:f4:b6:ff:54:3b:24:13:76:e2:48:3c:
6e:db:0a:84:22:4a:29:40:52:8a:66:52:51:bc:66:
47:ec:b0:b8:6c:99:8e:cf:0d:7d:f9:e6:c3:6b:fb:
7c:79:28:d9:53:c3:38:40:6a:be:24:8f:46:5d:9e:
ff:d9:3d:6a:f4:d5:b6:ca:dd:0e:40:58:f6:69:02:
0b:81:de:ed:a6:54:4c:82:69:2e:e5:ee:f9:0b:2f:
4e:a1:e3:94:de:1b:7a:f5:11:dd:e7:76:36:b4:45:
b5:56:5c:5b:53:78:83:60:a4:f5:d9:4f:89:a9:aa:
a4:6e:6c:43:8d:31:ff:f6:63:cd:0b:5a:b6:24:12:
71:f7:a4:2e:ff:a4:ef:33:b5:d2:c3:bd:6d:ed:6b:
34:70:27:a7:89:b7:0c:2b:be:61:42:c0:5b:38:69:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BD:4E:83:8E:53:AF:89:6C:14:12:D7:69:16:D3:6A:3B:B5:A7:F0
X509v3 Authority Key Identifier:
keyid:58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b8:9e:78:0a:6d:91:d7:45:99:d4:9e:b0:0e:d3:73:b1:22:
57:da:f3:ef:bb:e8:65:35:1e:67:39:ba:cd:05:07:9e:83:0e:
a8:cf:d9:f4:ed:2d:ab:88:39:f9:80:08:3e:70:b9:a0:ad:f5:
62:53:8b:12:88:a5:f8:1b:2e:9c:84:19:6d:4d:a4:42:34:66:
98:37:c7:88:28:e0:ea:b8:00:4e:fa:c3:34:33:d4:74:16:eb:
d1:52:80:80:28:f9:29:38:0d:30:f6:49:c0:0f:f3:d8:d7:86:
76:2a:15:b5:10:ce:39:63:39:f4:11:8f:24:13:49:e6:36:a5:
33:c9:19:73:cd:4c:66:63:e2:d1:b5:f1:05:b3:b4:c6:21:d5:
91:74:c9:55:6d:ac:e2:24:cf:cd:33:30:fa:6a:6a:19:f6:30:
9f:a3:7f:db:6f:ab:64:db:7f:e4:d8:62:00:c7:ac:f4:ba:4d:
02:e0:95:2f:9a:ed:2d:da:67:45:e4:b3:b3:15:98:9d:a1:c6:
e2:60:4d:aa:5b:87:c5:9c:9f:16:07:f1:ab:80:14:57:3a:80:
29:39:85:78:33:22:42:9a:80:13:57:c8:9b:55:f4:f6:a8:80:
48:6c:32:2a:f9:8f:3e:c5:fc:a4:73:db:6f:9a:58:3d:cf:f7:
ed:0b:68:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg5JkhQQMtp2W2tNEBfpSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Zjc1ZWYwZDYzMGUxZDA4Njc5MGNhMGI3OGU3ZWVmOGUy
YWNmYmIwHhcNMjUwODIzMDYwMDI2WhcNMjUwODI0MDYwMDI2WjAzMTEwLwYDVQQD
EygxOWJkNGU4MzhlNTNhZjg5NmMxNDEyZDc2OTE2ZDM2YTNiYjVhN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ/eSOuQyxVAuyiuevfRN0Zes9S3
rdOpYiiVqmoubFCqYss0ZGpSeoHuOiIsLtefNaqpHwFXVcPmYKT5i/u5sBZCR6Z+
EWDfpLC5lygIMlzV8fNE88PZMTzNqbc19Lb/VDskE3biSDxu2wqEIkopQFKKZlJR
vGZH7LC4bJmOzw19+ebDa/t8eSjZU8M4QGq+JI9GXZ7/2T1q9NW2yt0OQFj2aQIL
gd7tplRMgmku5e75Cy9OoeOU3ht69RHd53Y2tEW1VlxbU3iDYKT12U+JqaqkbmxD
jTH/9mPNC1q2JBJx96Qu/6TvM7XSw71t7Ws0cCenibcMK75hQsBbOGnb8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBm9ToOOU6+JbBQS12kW02o7tafwMB8GA1UdIwQY
MBaAFFj3XvDWMOHQhnkMoLeOfu+OKs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zNGJkNmUtNzlhNy00MTI2LThhMzIt
MmZkMjgwZTBkNTRhLzEvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8zNGJkNmUtNzlhNy00MTI2LThhMzItMmZkMjgwZTBkNTRh
LzEvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbieeApt
kddFmdSesA7Tc7EiV9rz77voZTUeZzm6zQUHnoMOqM/Z9O0tq4g5+YAIPnC5oK31
YlOLEoil+BsunIQZbU2kQjRmmDfHiCjg6rgATvrDNDPUdBbr0VKAgCj5KTgNMPZJ
wA/z2NeGdioVtRDOOWM59BGPJBNJ5jalM8kZc81MZmPi0bXxBbO0xiHVkXTJVW2s
4iTPzTMw+mpqGfYwn6N/22+rZNt/5NhiAMes9LpNAuCVL5rtLdpnReSzsxWYnaHG
4mBNqluHxZyfFgfxq4AUVzqAKTmFeDMiQpqAE1fIm1X09qiASGwyKvmPPsX8pHPb
b5pYPc/37Qtorg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:34:00 2025 by rpki-client