Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
File: WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft (raw, json)
Hash identifier: OJ38aq3bb1d6vWXTDLmRJS6UOVAe+gCT7FTHhP4xYKM=
Subject key identifier: 30:13:34:E8:EA:A8:2C:B4:42:A8:25:8E:C4:1A:E5:BF:48:68:07:45
Authority key identifier: 5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
Certificate issuer: /CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Certificate serial: 0198D4E08DD1B4209514E7509DF8E3124DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
Manifest number: 02E1
Signing time: Sat 23 Aug 2025 03:02:22 +0000
Manifest this update: Sat 23 Aug 2025 03:02:22 +0000
Manifest next update: Sun 24 Aug 2025 03:02:22 +0000
Files and hashes: 1: WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl (hash: eLhzHW12PuvY1GTPye6TnvTaR/mPXsUZTzYRiYVEtVE=)
2: uKvJupUJsNWoo5ivCG67FugGN0w.roa (hash: GwajJ7n21P+w7t9dfCC8gYHu25fAVce6h/mSVAkHqyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8d:d1:b4:20:95:14:e7:50:9d:f8:e3:12:4d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Validity
Not Before: Aug 23 03:02:22 2025 GMT
Not After : Aug 24 03:02:22 2025 GMT
Subject: CN=301334e8eaa82cb442a8258ec41ae5bf48680745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3d:ea:59:10:d4:5d:de:d3:51:7b:20:29:f3:
f2:5d:64:20:d1:a1:10:2f:42:46:2c:4d:17:c0:f4:
23:2a:c5:c4:de:34:78:81:2d:d5:59:78:98:53:ec:
ae:aa:34:e1:8a:80:53:42:a1:51:81:3e:4e:cd:da:
55:9f:b6:56:66:df:7c:17:c4:fb:fd:17:4d:7e:06:
a5:17:b3:55:f0:1a:40:5c:8d:e9:ae:8d:cb:56:b5:
e7:f1:5c:16:1e:d6:a3:dc:21:e7:a2:de:ef:cc:53:
e9:1d:7e:c0:ad:d6:04:55:09:c0:17:29:2d:d6:f3:
f5:07:bc:fa:a8:c0:29:0d:f8:a4:45:b8:6d:a2:35:
10:ff:2a:5b:02:82:de:76:fc:d1:45:2f:46:48:6e:
88:6d:a1:e9:17:17:03:14:46:c2:f4:ce:fa:9d:44:
0e:c4:e2:ac:00:8c:95:4f:5b:15:e9:81:89:44:98:
a9:e1:bf:f7:4d:3a:0e:9e:97:e0:c1:57:35:67:99:
27:33:d5:d7:08:75:9f:a0:79:f0:ea:45:64:4e:72:
b1:df:88:75:24:ac:7d:fb:2a:b4:3c:b6:60:68:db:
d9:ba:1e:0b:e4:02:98:4b:70:48:b5:83:0c:b0:fb:
6a:d1:cd:0f:d7:44:9c:55:86:e8:14:da:26:8e:2b:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:13:34:E8:EA:A8:2C:B4:42:A8:25:8E:C4:1A:E5:BF:48:68:07:45
X509v3 Authority Key Identifier:
keyid:5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:58:ec:33:ce:27:64:e1:90:a7:ee:62:f9:f6:a9:b7:35:6b:
3e:59:eb:45:e1:e3:01:2f:ba:de:f4:ca:24:75:b5:61:14:75:
b1:ac:ce:31:cd:b3:cd:66:9e:d3:b9:d4:a3:9f:6e:7e:d0:2c:
13:99:b5:03:d7:7c:96:50:d7:01:3c:7c:78:ac:c7:0c:10:ea:
fe:cc:f4:c2:e3:38:5a:23:17:c7:63:b8:20:07:3b:05:1a:a7:
45:e1:b6:92:52:d4:58:c9:7b:d6:2e:75:32:f2:dd:19:60:c7:
32:15:1b:e0:3b:b7:82:cc:0b:c8:46:ae:45:6c:a6:94:91:fa:
53:30:e3:7b:a7:e7:58:bd:bb:0d:02:6d:a3:9f:66:14:a4:5a:
c4:37:ff:79:18:da:57:f1:a6:11:11:f8:fa:65:6d:bc:5f:e7:
f2:5f:44:6c:16:76:4f:7d:26:cd:31:98:b7:10:0f:1c:ac:ee:
62:59:8a:ab:12:de:94:ce:df:7b:c1:49:69:58:e9:e8:2a:27:
ec:de:40:1f:17:fe:f5:ac:14:76:6d:7d:5a:8c:cd:3b:de:48:
e8:72:8d:01:6e:05:cd:0a:0c:02:b7:6a:07:b1:74:46:e4:6d:
ba:41:85:da:38:79:ac:6f:59:02:46:a7:f6:75:9b:8b:7f:fc:
24:c5:6c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4I3RtCCVFOdQnfjjEk2kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMzUwMmNkYmQzMzI1NjI4Y2Q2MTU2MDZiN2M3NDMzZWU1
YjIyMDQwHhcNMjUwODIzMDMwMjIyWhcNMjUwODI0MDMwMjIyWjAzMTEwLwYDVQQD
EygzMDEzMzRlOGVhYTgyY2I0NDJhODI1OGVjNDFhZTViZjQ4NjgwNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T3qWRDUXd7TUXsgKfPyXWQg0aEQ
L0JGLE0XwPQjKsXE3jR4gS3VWXiYU+yuqjThioBTQqFRgT5OzdpVn7ZWZt98F8T7
/RdNfgalF7NV8BpAXI3pro3LVrXn8VwWHtaj3CHnot7vzFPpHX7ArdYEVQnAFykt
1vP1B7z6qMApDfikRbhtojUQ/ypbAoLedvzRRS9GSG6IbaHpFxcDFEbC9M76nUQO
xOKsAIyVT1sV6YGJRJip4b/3TToOnpfgwVc1Z5knM9XXCHWfoHnw6kVkTnKx34h1
JKx9+yq0PLZgaNvZuh4L5AKYS3BItYMMsPtq0c0P10ScVYboFNomjivj1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDATNOjqqCy0QqgljsQa5b9IaAdFMB8GA1UdIwQY
MBaAFFs1As29MyVijNYVYGt8dDPuWyIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mMjI4YmUtYTNhNi00OGNhLWE0MWEt
YjZiNjcwYjY4MDlhLzEvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mMjI4YmUtYTNhNi00OGNhLWE0MWEtYjZiNjcwYjY4MDlh
LzEvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1jsM84n
ZOGQp+5i+faptzVrPlnrReHjAS+63vTKJHW1YRR1sazOMc2zzWae07nUo59uftAs
E5m1A9d8llDXATx8eKzHDBDq/sz0wuM4WiMXx2O4IAc7BRqnReG2klLUWMl71i51
MvLdGWDHMhUb4Du3gswLyEauRWymlJH6UzDje6fnWL27DQJto59mFKRaxDf/eRja
V/GmERH4+mVtvF/n8l9EbBZ2T30mzTGYtxAPHKzuYlmKqxLelM7fe8FJaVjp6Con
7N5AHxf+9awUdm19WozNO95I6HKNAW4FzQoMArdqB7F0RuRtukGF2jh5rG9ZAkan
9nWbi3/8JMVs5g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:50 2025 by rpki-client