Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
File: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json)
Hash identifier: 3a7B5ACqcAkMg1K2Z4LuaTlSgVTv+ud4nogalCbyGJk=
Subject key identifier: 62:1A:E7:08:54:20:83:6E:E8:5A:53:B8:6E:79:D0:AA:91:D9:BF:A5
Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
Certificate issuer: /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Certificate serial: 0197B70EA04775DEAF4E4224D4B1B2E2CC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
Manifest number: 1453
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: 52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa (hash: mEm534ZT6ZgaZ/3v86vVc5+tMaW3MbmkjCPIio5FpX8=)
2: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: sfqh+wtY68iths/Hv1ZGJtafZvM+bUuSCy34ZMWZIlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a0:47:75:de:af:4e:42:24:d4:b1:b2:e2:cc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=621ae7085420836ee85a53b86e79d0aa91d9bfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:2c:92:92:54:60:3c:15:ca:ee:07:32:4a:
e7:0d:f7:27:60:bd:18:87:a1:9d:a8:a7:dd:b8:db:
dd:54:47:53:80:2a:c4:78:3c:00:37:e1:fb:5f:97:
dd:c5:67:7f:2d:fa:66:15:6d:61:84:8b:69:40:f7:
95:8b:80:94:ee:12:68:eb:b8:de:fa:99:54:44:7b:
6d:26:05:df:42:c1:b0:28:0b:c2:56:8a:bf:13:a1:
a1:39:03:74:da:3d:2d:2a:76:d0:65:a5:30:71:4e:
98:99:a7:b8:44:0e:ea:d4:a7:19:74:8d:51:2b:6c:
10:4d:2b:07:17:b6:f4:bf:88:2f:c7:06:5d:27:98:
35:b5:9c:ac:a4:41:56:8e:a4:e0:a5:66:48:f1:33:
90:8b:2f:6a:48:38:2c:1d:fe:46:53:f1:9e:f9:bb:
9c:93:44:1f:21:1f:13:b5:59:d9:4d:73:f5:ba:a8:
55:78:1a:4b:60:20:19:fa:5f:db:19:7f:fc:f4:23:
55:40:7a:32:6d:6e:6a:d3:f4:de:b8:7d:28:c8:61:
e4:96:1e:71:8a:d8:4a:9d:43:4a:6c:e0:4f:b3:38:
2f:41:8b:a9:fb:9a:df:b3:17:02:7e:ef:96:0a:78:
9d:dc:0a:bf:1c:b3:bb:ae:4d:d5:8a:67:43:b2:9e:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1A:E7:08:54:20:83:6E:E8:5A:53:B8:6E:79:D0:AA:91:D9:BF:A5
X509v3 Authority Key Identifier:
keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:90:95:09:53:73:1e:1e:a9:67:16:44:30:20:de:03:37:5b:
63:08:71:4c:e1:01:3a:a2:3f:bd:1c:a1:82:36:8b:24:07:3c:
80:05:eb:bb:3e:06:91:fc:bd:f6:3b:b9:f9:ca:1c:b9:66:2d:
50:3f:29:b3:fd:c8:f3:8f:db:0d:5f:ce:3b:90:33:81:89:12:
c5:db:cd:65:cf:99:a4:ab:6c:34:86:15:e6:0a:dd:6b:33:c1:
a8:39:4b:4e:87:3a:86:9a:4d:7b:ee:02:f3:da:1a:29:aa:ee:
e7:ee:89:19:e5:70:22:d1:ff:01:41:72:7a:22:71:70:d9:22:
80:f5:69:68:37:cf:b8:b8:91:b2:fe:01:d5:d1:87:8e:1b:1c:
54:75:7f:b0:ba:e3:fa:06:5c:80:c4:a6:0f:02:2f:bb:3c:71:
38:5e:3b:51:e2:69:98:28:53:1c:69:82:fa:9c:dd:be:67:35:
83:c2:7c:fe:54:39:5a:34:f5:ab:64:3b:de:a8:86:81:fa:f7:
66:b5:80:b5:a1:b4:95:77:1b:ee:73:94:0b:d6:f0:48:3f:b8:
e9:78:9c:57:00:74:87:54:16:03:73:7a:2c:0d:c4:a3:e0:40:
b0:38:59:61:43:f2:dd:95:66:56:ae:cd:33:b6:c3:4d:8f:c6:
72:32:d3:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DqBHdd6vTkIk1LGy4sw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDY2ZGI4YWUxNjU1ZmMzZDhhNGFhOTllYmJkOTNhM2Zl
MGUzZTQwHhcNMjUwNjI4MTUwMTE4WhcNMjUwNjI5MTUwMTE4WjAzMTEwLwYDVQQD
Eyg2MjFhZTcwODU0MjA4MzZlZTg1YTUzYjg2ZTc5ZDBhYTkxZDliZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLMskpJUYDwVyu4HMkrnDfcnYL0Y
h6GdqKfduNvdVEdTgCrEeDwAN+H7X5fdxWd/LfpmFW1hhItpQPeVi4CU7hJo67je
+plURHttJgXfQsGwKAvCVoq/E6GhOQN02j0tKnbQZaUwcU6Ymae4RA7q1KcZdI1R
K2wQTSsHF7b0v4gvxwZdJ5g1tZyspEFWjqTgpWZI8TOQiy9qSDgsHf5GU/Ge+buc
k0QfIR8TtVnZTXP1uqhVeBpLYCAZ+l/bGX/89CNVQHoybW5q0/TeuH0oyGHklh5x
ithKnUNKbOBPszgvQYup+5rfsxcCfu+WCnid3Aq/HLO7rk3VimdDsp7pCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIa5whUIINu6FpTuG550KqR2b+lMB8GA1UdIwQY
MBaAFFsGbbiuFlX8PYpKqZ672To/4OPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt
OWNlYWExYjdhMTE2LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2
LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZCVCVNz
Hh6pZxZEMCDeAzdbYwhxTOEBOqI/vRyhgjaLJAc8gAXruz4Gkfy99ju5+cocuWYt
UD8ps/3I84/bDV/OO5AzgYkSxdvNZc+ZpKtsNIYV5grdazPBqDlLToc6hppNe+4C
89oaKaru5+6JGeVwItH/AUFyeiJxcNkigPVpaDfPuLiRsv4B1dGHjhscVHV/sLrj
+gZcgMSmDwIvuzxxOF47UeJpmChTHGmC+pzdvmc1g8J8/lQ5WjT1q2Q73qiGgfr3
ZrWAtaG0lXcb7nOUC9bwSD+46XicVwB0h1QWA3N6LA3Eo+BAsDhZYUPy3ZVmVq7N
M7bDTY/GcjLTSg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:40 2025 by rpki-client