Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
File: WpVcpFhGjFd2uNmTbf6bCyZocxw.mft (raw, json)
Hash identifier: YOTzcOtgIMjXdL/8k77m1lshS7Bct0fOd3pqFEhNI3o=
Subject key identifier: A1:66:91:61:5D:2B:0A:92:02:6D:F4:C0:00:BB:51:A4:21:79:26:78
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 0198D5F1D683DDE1618C9120CC1DC43AA2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
Manifest number: 10B4
Signing time: Sat 23 Aug 2025 08:00:52 +0000
Manifest this update: Sat 23 Aug 2025 08:00:52 +0000
Manifest next update: Sun 24 Aug 2025 08:00:52 +0000
Files and hashes: 1: WpVcpFhGjFd2uNmTbf6bCyZocxw.crl (hash: eALO/buw16OP60xsByNuCc37Tm6ZB5VUZUVpEvZYigg=)
2: pYvKtWHjQL1axAyemHXasjizsXI.roa (hash: +saRg/F7RlIOLGe+6CACF+gl/0HmxqxN1SsKDNk6n+M=)
3: qBYlovJkfJHkvUcB5hy59ysLvBI.roa (hash: rhUQ7eemuasO/N/vCeryMqfVlnZzFbMH9k0Lde5p9sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d6:83:dd:e1:61:8c:91:20:cc:1d:c4:3a:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Aug 23 08:00:52 2025 GMT
Not After : Aug 24 08:00:52 2025 GMT
Subject: CN=a16691615d2b0a92026df4c000bb51a421792678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f8:37:75:0e:71:20:21:4a:6c:a0:e4:3e:60:
b3:45:62:e4:06:92:3c:7d:08:c5:93:b6:ea:bf:35:
51:25:11:5a:f1:1d:5d:6d:c8:e6:ea:9d:d2:e2:02:
66:7b:79:49:70:bc:bb:f5:5a:7d:d5:40:04:81:f0:
ff:27:03:cf:3f:8d:c4:fd:d2:e3:30:36:10:a8:39:
3a:0e:97:df:27:82:d9:6d:32:c0:c7:59:c7:ff:a2:
96:8e:d9:10:27:51:8b:ca:3f:29:b6:69:b0:b0:3a:
11:b5:da:df:70:31:7c:b9:ca:a9:59:38:e2:a7:ad:
2f:a6:6e:d3:8c:90:78:7a:5d:e8:07:29:7d:8a:22:
52:c1:c1:1e:12:58:f2:c0:0c:66:32:a8:30:4c:48:
4c:29:5b:96:e9:8a:3f:b3:53:a6:45:63:f1:66:62:
86:ea:af:ec:65:0d:0d:26:ab:11:3d:09:c7:a0:ed:
73:2e:53:b7:1c:e7:23:3d:cd:8b:88:93:1a:7d:18:
bc:c4:9f:a8:2a:da:e7:c6:f3:2e:0a:4a:07:09:1c:
57:a7:78:f8:1c:a3:f9:e6:96:b8:de:03:ec:d8:28:
a5:46:ff:5c:c9:81:eb:c7:2c:13:a2:4e:a5:4e:89:
33:c9:eb:8b:f0:0f:76:d2:61:71:89:09:ba:96:45:
b2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:66:91:61:5D:2B:0A:92:02:6D:F4:C0:00:BB:51:A4:21:79:26:78
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:42:43:73:d5:3c:54:71:5a:06:ed:f2:e3:40:ec:24:27:80:
21:bb:01:39:30:1f:c6:81:5c:0b:bc:e9:80:8d:33:3d:bf:32:
68:23:93:2a:09:c0:aa:f3:a4:7f:ad:c6:b0:5e:fd:6f:c1:8d:
a2:95:31:e2:75:72:72:3b:08:0f:1c:c0:c4:8f:42:4d:44:8c:
b6:7d:8e:5b:8b:d1:0a:3f:21:0c:1b:e9:2d:d7:9a:8b:91:a6:
e1:01:5e:96:0a:d3:30:bb:11:63:7d:7f:24:6d:c4:fc:5d:b9:
63:4d:d0:17:4e:9c:2e:43:b4:83:a6:47:f4:fd:ee:6b:08:45:
a7:2d:1f:44:36:9e:85:90:5f:9b:8f:6e:e0:bd:da:f1:b2:b0:
5f:96:9a:81:c6:0d:a9:5b:de:ba:3b:f0:56:ff:87:24:84:0b:
5b:80:f1:f9:b5:1f:a4:72:e7:92:9f:62:e3:1f:1e:b8:01:e2:
21:da:cf:42:15:79:38:7f:0d:a7:fe:e1:cc:33:89:43:0a:b4:
2a:d0:c6:f3:f6:2d:d9:3f:c8:6c:10:92:2d:a9:ab:66:e4:7d:
7d:9c:09:27:cf:1f:f0:d9:e1:9a:62:b1:16:b3:18:21:88:96:
f1:49:42:c8:8b:fe:62:e9:33:14:be:3b:25:f2:2e:73:15:f8:
e5:a9:57:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8daD3eFhjJEgzB3EOqK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOTU1Y2E0NTg0NjhjNTc3NmI4ZDk5MzZkZmU5YjBiMjY2
ODczMWMwHhcNMjUwODIzMDgwMDUyWhcNMjUwODI0MDgwMDUyWjAzMTEwLwYDVQQD
EyhhMTY2OTE2MTVkMmIwYTkyMDI2ZGY0YzAwMGJiNTFhNDIxNzkyNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/g3dQ5xICFKbKDkPmCzRWLkBpI8
fQjFk7bqvzVRJRFa8R1dbcjm6p3S4gJme3lJcLy79Vp91UAEgfD/JwPPP43E/dLj
MDYQqDk6DpffJ4LZbTLAx1nH/6KWjtkQJ1GLyj8ptmmwsDoRtdrfcDF8ucqpWTji
p60vpm7TjJB4el3oByl9iiJSwcEeEljywAxmMqgwTEhMKVuW6Yo/s1OmRWPxZmKG
6q/sZQ0NJqsRPQnHoO1zLlO3HOcjPc2LiJMafRi8xJ+oKtrnxvMuCkoHCRxXp3j4
HKP55pa43gPs2CilRv9cyYHrxywTok6lTokzyeuL8A920mFxiQm6lkWyDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFmkWFdKwqSAm30wAC7UaQheSZ4MB8GA1UdIwQY
MBaAFFqVXKRYRoxXdrjZk23+mwsmaHMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYt
MTM4NThkYTg1ZjUzLzEvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYtMTM4NThkYTg1ZjUz
LzEvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkJDc9U8
VHFaBu3y40DsJCeAIbsBOTAfxoFcC7zpgI0zPb8yaCOTKgnAqvOkf63GsF79b8GN
opUx4nVycjsIDxzAxI9CTUSMtn2OW4vRCj8hDBvpLdeai5Gm4QFelgrTMLsRY31/
JG3E/F25Y03QF06cLkO0g6ZH9P3uawhFpy0fRDaehZBfm49u4L3a8bKwX5aagcYN
qVveujvwVv+HJIQLW4Dx+bUfpHLnkp9i4x8euAHiIdrPQhV5OH8Np/7hzDOJQwq0
KtDG8/Yt2T/IbBCSLamrZuR9fZwJJ88f8NnhmmKxFrMYIYiW8UlCyIv+YukzFL47
JfIucxX45alXRw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:52 2025 by rpki-client