Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
File: WPJnqqyZvwydHo5CneAczTzJDsA.mft (raw, json)
Hash identifier: Qi9+mw1hlepAZWNmoaZ9JFc79F8toRDU5pETbVsXlOQ=
Subject key identifier: E9:49:CD:53:74:E2:B1:46:53:BC:9C:EB:FD:B2:FE:0F:F3:1B:E9:EF
Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
Certificate issuer: /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Certificate serial: 0197C1925ABA83516188C208F24F95F6B3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
Manifest number: 15BE
Signing time: Mon 30 Jun 2025 16:01:23 +0000
Manifest this update: Mon 30 Jun 2025 16:01:23 +0000
Manifest next update: Tue 01 Jul 2025 16:01:23 +0000
Files and hashes: 1: VxmO12w306gaXQmH0gdTcOIKrpc.roa (hash: yL/doTnHVquXpnwAcQ1RYhbKS8XdZRYVklJVmjcOaeU=)
2: WPJnqqyZvwydHo5CneAczTzJDsA.crl (hash: 1cv5uvrCtDLrfMbgXQPn9e3xE/OpBaFI4TW0liokqeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:92:5a:ba:83:51:61:88:c2:08:f2:4f:95:f6:b3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Validity
Not Before: Jun 30 16:01:23 2025 GMT
Not After : Jul 1 16:01:23 2025 GMT
Subject: CN=e949cd5374e2b14653bc9cebfdb2fe0ff31be9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:b7:c5:32:5b:a8:35:e1:49:c6:83:45:78:
5b:6b:a1:87:13:da:f1:77:23:57:20:fb:e3:a3:45:
47:ba:60:c7:e6:a5:b5:71:88:6f:08:85:a8:fd:43:
3e:b9:6b:14:d8:c9:44:fb:03:3f:7a:5f:d9:c3:1d:
89:bd:8c:f6:f7:e3:40:4b:41:3e:a0:97:e5:99:ce:
62:fa:7c:0e:63:5e:15:51:26:b7:2e:24:b5:c4:c9:
45:07:11:f4:ea:cb:a7:d2:78:1e:22:73:27:23:f2:
c9:aa:89:bd:88:47:1e:a1:bd:d5:31:2a:f9:28:81:
9e:a8:4c:28:31:09:7d:53:04:7d:53:87:d7:e9:56:
fe:6b:31:8a:ae:d5:e0:7b:a9:86:c4:a8:76:db:47:
61:0f:5b:bf:7d:dc:1b:fe:8a:3d:a9:09:57:fd:25:
72:df:10:93:ef:65:9e:47:84:15:33:58:da:6f:d3:
1c:4f:15:b2:08:d4:98:70:ee:b2:74:b7:2f:7e:ac:
e6:e3:ff:48:68:d0:40:a9:7b:5b:fa:84:e9:bb:a7:
f2:b5:e4:30:a2:4c:39:66:77:28:b1:6d:58:3c:04:
0c:26:97:5d:eb:56:14:3e:de:9e:d7:8d:75:eb:3b:
9b:05:b4:53:ec:e2:7b:ba:b3:dc:34:d9:9b:10:72:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:49:CD:53:74:E2:B1:46:53:BC:9C:EB:FD:B2:FE:0F:F3:1B:E9:EF
X509v3 Authority Key Identifier:
keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8a:6c:5c:57:f9:ca:ac:79:93:b8:31:4b:5b:b2:a5:98:cb:
35:09:40:d2:03:e1:25:35:f5:82:81:98:34:49:07:79:e1:4c:
1b:20:0e:f8:c5:22:3a:16:6e:3a:63:fa:ad:71:f4:e7:d2:54:
dc:71:fa:07:96:1f:3f:e9:31:f5:b7:b0:6a:43:aa:3e:dc:e2:
bd:74:1e:e6:99:d0:a3:f0:65:41:c0:3d:28:67:e3:28:93:7e:
ea:a5:9b:8f:10:19:d2:1e:2c:5c:bd:2f:23:e2:ec:c7:87:dd:
89:09:18:f2:90:80:cb:a9:82:71:5e:0a:7e:6a:f5:cc:a9:88:
7f:d9:40:46:c8:d9:ca:2d:81:2a:cd:05:25:5c:93:8e:ee:57:
53:bf:55:01:fb:ad:3c:9f:f3:af:50:02:8e:9a:3e:91:0a:63:
f2:13:4f:e3:cc:92:4c:c0:f5:cf:f7:9e:34:0e:bb:33:54:f0:
67:8e:8e:9f:cc:50:89:91:10:41:fa:f0:4a:15:9d:bf:e7:0a:
05:f1:c5:d5:b9:b3:a5:d8:d9:22:ac:ca:03:90:e0:23:4f:61:
15:db:f5:b8:b9:5e:a2:54:dc:9e:4f:19:e7:3f:99:ec:93:96:
2d:f4:57:8c:bb:79:b5:f1:16:25:b8:a4:a1:00:ec:da:c0:f7:
65:37:70:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfBklq6g1FhiMII8k+V9rO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZjI2N2FhYWM5OWJmMGM5ZDFlOGU0MjlkZTAxY2NkM2Nj
OTBlYzAwHhcNMjUwNjMwMTYwMTIzWhcNMjUwNzAxMTYwMTIzWjAzMTEwLwYDVQQD
EyhlOTQ5Y2Q1Mzc0ZTJiMTQ2NTNiYzljZWJmZGIyZmUwZmYzMWJlOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz23xTJbqDXhScaDRXhba6GHE9rx
dyNXIPvjo0VHumDH5qW1cYhvCIWo/UM+uWsU2MlE+wM/el/Zwx2JvYz29+NAS0E+
oJflmc5i+nwOY14VUSa3LiS1xMlFBxH06sun0ngeInMnI/LJqom9iEceob3VMSr5
KIGeqEwoMQl9UwR9U4fX6Vb+azGKrtXge6mGxKh220dhD1u/fdwb/oo9qQlX/SVy
3xCT72WeR4QVM1jab9McTxWyCNSYcO6ydLcvfqzm4/9IaNBAqXtb+oTpu6fyteQw
okw5ZncosW1YPAQMJpdd61YUPt6e14116zubBbRT7OJ7urPcNNmbEHLkGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlJzVN04rFGU7yc6/2y/g/zG+nvMB8GA1UdIwQY
MBaAFFjyZ6qsmb8MnR6OQp3gHM08yQ7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1BKbnFxeVp2d3lkSG81Q25lQWN6VHpKRHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNGZlOGUtNGI0ZC00YWM3LTlhOTIt
N2EzYjMxYmU3YjM4LzEvV1BKbnFxeVp2d3lkSG81Q25lQWN6VHpKRHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNGZlOGUtNGI0ZC00YWM3LTlhOTItN2EzYjMxYmU3YjM4
LzEvV1BKbnFxeVp2d3lkSG81Q25lQWN6VHpKRHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAopsXFf5
yqx5k7gxS1uypZjLNQlA0gPhJTX1goGYNEkHeeFMGyAO+MUiOhZuOmP6rXH059JU
3HH6B5YfP+kx9bewakOqPtzivXQe5pnQo/BlQcA9KGfjKJN+6qWbjxAZ0h4sXL0v
I+Lsx4fdiQkY8pCAy6mCcV4Kfmr1zKmIf9lARsjZyi2BKs0FJVyTju5XU79VAfut
PJ/zr1ACjpo+kQpj8hNP48ySTMD1z/eeNA67M1TwZ46On8xQiZEQQfrwShWdv+cK
BfHF1bmzpdjZIqzKA5DgI09hFdv1uLleolTcnk8Z5z+Z7JOWLfRXjLt5tfEWJbik
oQDs2sD3ZTdwTg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:23:13 2025 by rpki-client