Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
File: WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft (raw, json)
Hash identifier: IUQgytZGtKwmxtxH+wjfdqig970GaS0Puv4/Tja+kQE=
Subject key identifier: EF:9C:7B:93:CB:B9:F1:00:5E:34:CA:73:54:57:3E:B0:63:26:AF:52
Authority key identifier: 5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
Certificate issuer: /CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Certificate serial: 0197B70EDAC56A19F154D02D8CC6988D2409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
Manifest number: 024D
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl (hash: wiHc97swnsD9pGIBtwwQi+DHW9AwGFSC5R5QlenS7Dc=)
2: uKvJupUJsNWoo5ivCG67FugGN0w.roa (hash: GwajJ7n21P+w7t9dfCC8gYHu25fAVce6h/mSVAkHqyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:da:c5:6a:19:f1:54:d0:2d:8c:c6:98:8d:24:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=ef9c7b93cbb9f1005e34ca7354573eb06326af52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:96:4b:6b:12:e0:d3:85:69:4f:b4:85:c3:
69:04:e8:12:73:2a:08:71:2b:6f:3e:0e:22:0c:65:
8f:88:81:10:85:cc:a5:e1:5b:1b:d0:dd:13:b9:6f:
81:35:c6:02:11:e8:58:74:c0:46:ed:d3:ba:0c:ce:
d2:5b:ce:18:1b:70:15:f5:fa:2c:9b:32:f2:55:60:
03:92:6a:22:7d:5f:8a:e2:0f:d5:e7:76:9e:84:a6:
fa:73:e3:bd:d3:c3:00:c9:da:ab:71:0c:d3:c9:6b:
c0:3b:d5:10:bb:2e:96:17:94:95:c8:94:af:b0:5b:
26:b9:cc:49:11:cd:d4:e6:23:bb:aa:73:e7:f7:c5:
5f:ab:94:38:36:68:b6:09:aa:3a:74:29:ec:81:d9:
3d:6b:5f:0f:89:36:45:77:42:c8:a9:a4:51:de:65:
56:e2:a9:42:1b:4a:69:13:cf:c6:c0:c5:14:5a:92:
b1:40:ab:92:8b:d2:55:07:3a:d0:e1:16:83:43:da:
b3:a9:53:d0:56:c3:07:55:43:72:34:f3:f1:9c:e0:
5f:b7:82:6d:12:78:f1:91:fa:ea:ca:76:9b:e1:c8:
50:f5:cd:f7:5d:49:02:a4:5f:a1:ed:51:3a:1a:84:
b2:4f:e0:83:c5:4b:13:2d:3d:4b:6d:1d:13:85:96:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9C:7B:93:CB:B9:F1:00:5E:34:CA:73:54:57:3E:B0:63:26:AF:52
X509v3 Authority Key Identifier:
keyid:5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:16:12:a5:1b:05:e6:c6:f1:d5:18:e4:a4:ac:ca:b7:77:fb:
43:c0:db:24:6b:61:3d:a6:33:7f:da:7e:81:61:30:59:38:9d:
93:68:32:02:6b:d5:8f:de:22:db:de:64:92:2d:17:82:75:fa:
19:f7:42:d7:89:d7:d6:b0:3f:68:6d:6d:70:5c:52:08:e5:5f:
a0:5f:b5:a3:1a:34:fd:e0:97:c3:cb:58:fa:ee:64:a0:b5:5f:
25:8b:53:90:d2:0b:87:c8:d8:f4:93:31:bc:0c:66:dc:77:42:
5e:ad:82:e2:22:91:b3:9b:b9:b2:23:82:71:21:03:99:86:73:
4c:4d:8f:1a:7e:4a:39:b7:ed:87:a3:25:a0:e1:9d:46:2f:fd:
2c:49:2f:97:2f:26:1d:a4:fe:f2:b2:16:17:3e:8d:b1:2f:e5:
95:3f:1b:de:e3:19:10:64:8e:84:a1:81:1c:3f:1f:d6:4b:54:
b7:d5:05:eb:55:7f:7d:17:07:f8:2e:3a:c8:a2:51:c6:56:b3:
9a:8b:b4:e4:5d:5a:2d:5e:4d:1d:08:6f:49:59:be:fc:ff:b4:
ee:de:43:26:19:29:45:c0:e4:db:db:81:08:81:6c:50:6d:db:
ec:34:65:04:50:18:7c:cc:72:fa:4f:66:6c:d1:bd:96:e9:08:
2f:e4:23:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DtrFahnxVNAtjMaYjSQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMzUwMmNkYmQzMzI1NjI4Y2Q2MTU2MDZiN2M3NDMzZWU1
YjIyMDQwHhcNMjUwNjI4MTUwMTMzWhcNMjUwNjI5MTUwMTMzWjAzMTEwLwYDVQQD
EyhlZjljN2I5M2NiYjlmMTAwNWUzNGNhNzM1NDU3M2ViMDYzMjZhZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk+WS2sS4NOFaU+0hcNpBOgScyoI
cStvPg4iDGWPiIEQhcyl4Vsb0N0TuW+BNcYCEehYdMBG7dO6DM7SW84YG3AV9fos
mzLyVWADkmoifV+K4g/V53aehKb6c+O908MAydqrcQzTyWvAO9UQuy6WF5SVyJSv
sFsmucxJEc3U5iO7qnPn98Vfq5Q4Nmi2Cao6dCnsgdk9a18PiTZFd0LIqaRR3mVW
4qlCG0ppE8/GwMUUWpKxQKuSi9JVBzrQ4RaDQ9qzqVPQVsMHVUNyNPPxnOBft4Jt
Enjxkfrqynab4chQ9c33XUkCpF+h7VE6GoSyT+CDxUsTLT1LbR0ThZbk+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+ce5PLufEAXjTKc1RXPrBjJq9SMB8GA1UdIwQY
MBaAFFs1As29MyVijNYVYGt8dDPuWyIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mMjI4YmUtYTNhNi00OGNhLWE0MWEt
YjZiNjcwYjY4MDlhLzEvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mMjI4YmUtYTNhNi00OGNhLWE0MWEtYjZiNjcwYjY4MDlh
LzEvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhYSpRsF
5sbx1RjkpKzKt3f7Q8DbJGthPaYzf9p+gWEwWTidk2gyAmvVj94i295kki0XgnX6
GfdC14nX1rA/aG1tcFxSCOVfoF+1oxo0/eCXw8tY+u5koLVfJYtTkNILh8jY9JMx
vAxm3HdCXq2C4iKRs5u5siOCcSEDmYZzTE2PGn5KObfth6MloOGdRi/9LEkvly8m
HaT+8rIWFz6NsS/llT8b3uMZEGSOhKGBHD8f1ktUt9UF61V/fRcH+C46yKJRxlaz
mou05F1aLV5NHQhvSVm+/P+07t5DJhkpRcDk29uBCIFsUG3b7DRlBFAYfMxy+k9m
bNG9lukIL+QjzQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:51 2025 by rpki-client