Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
File: w1k5CyF0quIpYaDzwp_EAvH-I8g.mft (raw, json)
Hash identifier: LM8cBHlDldHzqGLgYN7L3BR+RJoY2tCmp0s1t/y1wf0=
Subject key identifier: A4:89:56:1D:80:6D:35:5D:1A:5C:04:86:CC:EC:61:8E:B1:1F:C0:E6
Authority key identifier: C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8
Certificate issuer: /CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
Certificate serial: 0197B70E6D149C8A41FFD8510D3424817C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
Manifest number: 0223
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: roRpX3bRKDuocHxusV0WH0MjbWo.roa (hash: P8a5SzApQjB4G+3G1+p+RkD68unIbIu33oid4GIMvlk=)
2: w1k5CyF0quIpYaDzwp_EAvH-I8g.crl (hash: ig8ic/ZDNOxkGQdpxIL4M6QaBaZ1AM0QDOle+q1r8oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6d:14:9c:8a:41:ff:d8:51:0d:34:24:81:7c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=a489561d806d355d1a5c0486ccec618eb11fc0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:7b:74:95:8f:4d:da:6a:71:3a:6c:7f:1d:
91:03:54:09:45:18:97:61:18:5f:9a:96:5a:53:cc:
ba:31:97:76:c4:de:1c:38:92:ea:0a:a6:9b:3f:f8:
f1:d1:32:cd:e5:c2:2f:0a:52:90:0a:a5:7d:bb:fa:
55:6f:6a:fd:eb:13:b4:af:28:0c:d6:1e:61:6e:bc:
23:dc:0a:41:fc:e2:20:bb:e6:9b:d6:d0:c0:4b:01:
48:25:d4:ec:b8:96:a4:1b:8e:4c:2f:a3:e4:c7:65:
fc:93:01:37:aa:1e:89:38:fe:93:cd:21:1b:b7:a9:
9a:e9:c6:1e:2b:ba:24:d7:a1:55:16:19:11:38:75:
2f:a5:6a:d8:e8:96:79:4e:bd:c6:9b:58:db:12:bf:
3c:c9:f4:ac:e0:a2:21:2a:30:2b:1b:00:c4:21:98:
cb:d1:2f:e5:62:92:f5:11:38:d3:e5:f2:ac:a8:d8:
17:8e:1c:72:2b:3f:37:5e:aa:7d:bb:f6:e6:e6:71:
a8:51:b1:f6:0f:29:0d:cd:59:38:bf:48:03:49:fd:
ec:4f:d4:f3:18:d2:cb:3f:17:14:76:9a:85:31:8a:
32:bc:d4:1c:f4:2e:6b:38:8b:08:44:30:1c:d9:a5:
04:2d:e0:6e:4b:ea:7a:02:c7:b3:a2:fa:52:96:13:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:89:56:1D:80:6D:35:5D:1A:5C:04:86:CC:EC:61:8E:B1:1F:C0:E6
X509v3 Authority Key Identifier:
keyid:C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:19:b7:b8:0e:cd:9f:ae:c7:a4:eb:c8:7d:07:dd:49:5d:71:
39:55:be:f1:7e:30:5a:d5:ff:53:eb:88:2b:e3:c0:eb:db:1d:
44:72:c9:0a:79:a2:33:07:10:fa:ed:ab:bf:1f:ce:c5:af:4f:
e9:f1:56:51:08:be:46:5a:df:37:a6:e6:b2:56:c9:01:c9:68:
bd:02:7e:fa:ed:7c:9d:f7:56:36:6b:ca:66:2c:51:40:55:7c:
a4:ff:0a:0b:d9:91:83:8f:5b:20:d5:05:90:65:d7:1b:d2:49:
bc:9d:12:f5:b6:09:c4:ce:f6:26:90:6a:20:cc:42:86:a8:fe:
0d:4e:bd:29:0f:0f:18:2d:5a:c6:b3:13:c9:81:c3:a8:90:9f:
0e:2d:77:42:8d:30:96:d8:da:4b:2c:cf:fe:43:e2:17:f7:79:
f4:91:b6:85:1d:0e:a0:f2:c4:8a:51:64:dd:e2:f7:0f:d6:6c:
10:e5:34:ae:33:1d:8f:61:de:46:04:50:53:9d:0e:ad:86:d4:
81:77:82:de:52:df:ab:21:43:d7:cc:2a:92:05:9b:1d:6b:b6:
2e:70:61:fa:d3:f0:01:10:d8:12:c8:6b:2f:03:cc:7d:4f:e0:
fa:1e:fa:62:4f:58:77:41:d7:e0:8e:8a:ff:80:8a:eb:35:ea:
92:bf:48:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dm0UnIpB/9hRDTQkgXxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNTkzOTBiMjE3NGFhZTIyOTYxYTBmM2MyOWZjNDAyZjFm
ZTIzYzgwHhcNMjUwNjI4MTUwMTA1WhcNMjUwNjI5MTUwMTA1WjAzMTEwLwYDVQQD
EyhhNDg5NTYxZDgwNmQzNTVkMWE1YzA0ODZjY2VjNjE4ZWIxMWZjMGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN97dJWPTdpqcTpsfx2RA1QJRRiX
YRhfmpZaU8y6MZd2xN4cOJLqCqabP/jx0TLN5cIvClKQCqV9u/pVb2r96xO0rygM
1h5hbrwj3ApB/OIgu+ab1tDASwFIJdTsuJakG45ML6Pkx2X8kwE3qh6JOP6TzSEb
t6ma6cYeK7ok16FVFhkROHUvpWrY6JZ5Tr3Gm1jbEr88yfSs4KIhKjArGwDEIZjL
0S/lYpL1ETjT5fKsqNgXjhxyKz83Xqp9u/bm5nGoUbH2DykNzVk4v0gDSf3sT9Tz
GNLLPxcUdpqFMYoyvNQc9C5rOIsIRDAc2aUELeBuS+p6AsezovpSlhPmuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSJVh2AbTVdGlwEhszsYY6xH8DmMB8GA1UdIwQY
MBaAFMNZOQshdKriKWGg88KfxALx/iPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81YmJhN2ItZGFhNy00NDMyLTkyNzAt
ZWM1YzdkZTdhYWUxLzEvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81YmJhN2ItZGFhNy00NDMyLTkyNzAtZWM1YzdkZTdhYWUx
LzEvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBm3uA7N
n67HpOvIfQfdSV1xOVW+8X4wWtX/U+uIK+PA69sdRHLJCnmiMwcQ+u2rvx/Oxa9P
6fFWUQi+RlrfN6bmslbJAclovQJ++u18nfdWNmvKZixRQFV8pP8KC9mRg49bINUF
kGXXG9JJvJ0S9bYJxM72JpBqIMxChqj+DU69KQ8PGC1axrMTyYHDqJCfDi13Qo0w
ltjaSyzP/kPiF/d59JG2hR0OoPLEilFk3eL3D9ZsEOU0rjMdj2HeRgRQU50OrYbU
gXeC3lLfqyFD18wqkgWbHWu2LnBh+tPwARDYEshrLwPMfU/g+h76Yk9Yd0HX4I6K
/4CK6zXqkr9I+g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:57 2025 by rpki-client