Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
File: wZtaLEnhxkinDHCK4b3kC2RMeAI.mft (raw, json)
Hash identifier: s4A3hqDqHOosbeA4SxJ6hr5X+dPPhiFQdMlsvwfod8s=
Subject key identifier: 46:BD:1C:52:10:43:A4:92:9D:E0:3E:FC:09:5E:4C:87:08:3F:D3:FF
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial: 0197B77C48CA630700CCCDEBBD5994ECB5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: ifWK_iN7Ay8QBp6l-CCna4Qxy8Y.roa (hash: a8BYVN01+QzzRYrawK1TfdRTG9b4FCkotHQL9E9gZ7Q=)
2: wZtaLEnhxkinDHCK4b3kC2RMeAI.crl (hash: Kzukn2vzM5YVLWqbO5nwNXHn7gdZikeNOdRjvHzD5f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:48:ca:63:07:00:cc:cd:eb:bd:59:94:ec:b5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=46bd1c521043a4929de03efc095e4c87083fd3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:60:03:91:92:db:55:8b:bf:9f:7e:1e:46:
f4:d4:eb:6b:7b:20:c4:27:16:ed:b4:64:97:1b:bb:
d6:a2:85:f3:3a:44:2a:08:23:38:3b:79:fc:95:c0:
68:f3:19:e3:73:80:19:50:d6:e4:d7:63:b0:31:4f:
49:5d:1e:7d:3b:f1:d2:d4:f0:aa:41:e8:9a:99:8c:
09:fb:59:61:c3:b5:e9:cc:68:e9:ff:4f:db:34:d4:
d2:4e:99:e3:e5:15:e2:4f:20:f6:85:cc:4a:2b:65:
db:e4:a3:6b:6f:28:3c:b0:88:9a:12:cd:c3:19:65:
1e:a5:ed:b6:cf:88:8d:f0:9c:94:0f:04:fc:a7:32:
dc:4f:bd:c6:04:5f:36:17:d1:ac:66:b8:2a:20:fe:
ff:38:61:81:3f:bf:c2:47:d1:fc:b5:2d:3c:e3:83:
f7:04:f4:b6:ac:da:b0:18:69:06:09:de:5a:6b:ef:
05:82:12:c9:52:d1:ab:e6:ee:0c:f1:10:52:00:6b:
cf:55:bf:9d:3f:2c:5d:4d:3a:5a:92:40:da:7d:22:
a7:fe:ca:19:44:5d:88:5d:9c:9e:6f:ef:5c:3d:bb:
24:72:b5:29:8f:39:f3:9a:de:a0:44:87:b5:75:6d:
ec:fc:79:76:b6:15:89:e6:c6:5e:a3:60:1d:5a:7e:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BD:1C:52:10:43:A4:92:9D:E0:3E:FC:09:5E:4C:87:08:3F:D3:FF
X509v3 Authority Key Identifier:
keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2b:13:18:ae:29:18:46:71:65:3f:aa:3f:90:f3:98:a7:e1:
1d:56:79:2f:01:16:b7:00:00:97:ac:a6:a3:a5:b7:e5:45:9e:
6f:ea:a6:85:fb:0f:ea:92:63:87:db:18:7b:5c:69:90:8a:65:
62:cb:cd:fc:85:9d:50:f7:15:f6:74:01:33:2d:87:37:86:88:
3a:6d:d8:4c:08:e8:6c:f1:72:99:4b:99:67:a9:06:10:51:55:
ce:b1:d9:49:32:d8:e0:c7:af:fe:06:c3:fb:a6:21:c0:b7:aa:
e3:9c:20:e0:ae:e0:68:4f:bf:a5:85:2d:d4:24:bf:d2:95:06:
2d:e5:da:15:54:de:00:47:7c:74:a0:d9:9c:3a:f8:05:3a:8b:
ba:15:9c:ba:76:54:63:f8:89:eb:aa:44:94:0a:f9:50:1d:bc:
66:57:61:7c:ef:de:53:d5:34:4b:d8:a5:19:5d:07:7e:da:a6:
75:6e:5a:b9:d9:3a:cc:ce:96:66:4a:aa:4c:ec:9d:65:2e:b8:
5e:f4:5e:a3:ee:69:ec:f9:3d:ff:e6:7d:10:16:ed:d1:f3:05:
d0:9a:f2:5c:89:0d:2b:16:b8:d8:b0:78:42:1c:26:65:f9:1b:
47:07:36:0c:de:ff:48:01:e3:86:b5:e7:45:fd:82:11:26:9d:
58:df:55:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fEjKYwcAzM3rvVmU7LW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOWI1YTJjNDllMWM2NDhhNzBjNzA4YWUxYmRlNDBiNjQ0
Yzc4MDIwHhcNMjUwNjI4MTcwMTA0WhcNMjUwNjI5MTcwMTA0WjAzMTEwLwYDVQQD
Eyg0NmJkMWM1MjEwNDNhNDkyOWRlMDNlZmMwOTVlNGM4NzA4M2ZkM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyStgA5GS21WLv59+Hkb01OtreyDE
JxbttGSXG7vWooXzOkQqCCM4O3n8lcBo8xnjc4AZUNbk12OwMU9JXR59O/HS1PCq
QeiamYwJ+1lhw7XpzGjp/0/bNNTSTpnj5RXiTyD2hcxKK2Xb5KNrbyg8sIiaEs3D
GWUepe22z4iN8JyUDwT8pzLcT73GBF82F9GsZrgqIP7/OGGBP7/CR9H8tS0844P3
BPS2rNqwGGkGCd5aa+8FghLJUtGr5u4M8RBSAGvPVb+dPyxdTTpakkDafSKn/soZ
RF2IXZyeb+9cPbskcrUpjznzmt6gRIe1dW3s/Hl2thWJ5sZeo2AdWn6WtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa9HFIQQ6SSneA+/AleTIcIP9P/MB8GA1UdIwQY
MBaAFMGbWixJ4cZIpwxwiuG95AtkTHgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wMzVlOGEtNzBlMy00ODdiLWEwNGQt
M2Q0NjFkYWRlNGE5LzEvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8wMzVlOGEtNzBlMy00ODdiLWEwNGQtM2Q0NjFkYWRlNGE5
LzEvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICsTGK4p
GEZxZT+qP5DzmKfhHVZ5LwEWtwAAl6ymo6W35UWeb+qmhfsP6pJjh9sYe1xpkIpl
YsvN/IWdUPcV9nQBMy2HN4aIOm3YTAjobPFymUuZZ6kGEFFVzrHZSTLY4Mev/gbD
+6YhwLeq45wg4K7gaE+/pYUt1CS/0pUGLeXaFVTeAEd8dKDZnDr4BTqLuhWcunZU
Y/iJ66pElAr5UB28ZldhfO/eU9U0S9ilGV0HftqmdW5audk6zM6WZkqqTOydZS64
XvReo+5p7Pk9/+Z9EBbt0fMF0JryXIkNKxa42LB4QhwmZfkbRwc2DN7/SAHjhrXn
Rf2CESadWN9VHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:51 2025 by rpki-client