Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: pFy4vBkI2UmDvsBqbcnLUKq3dd1pOu2E2GCY0Q6b1BM=
Subject key identifier: 5C:03:D4:5B:B8:E7:C0:82:BB:13:76:76:CF:E2:90:A8:69:22:88:06
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 0198D472A71F1E94812FFBDEAA391C861074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 0E77
Signing time: Sat 23 Aug 2025 01:02:20 +0000
Manifest this update: Sat 23 Aug 2025 01:02:20 +0000
Manifest next update: Sun 24 Aug 2025 01:02:20 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: KQk1ZA4HQbhZESzhZXg1b5SY8fP4ts0WmzecblkUL9A=)
2: gRqe05O7FJ-3whaf6RiaMKovVHw.roa (hash: Amo4rFyICByEK7RCP/ax/RVJMXu+W6BkFpTvi0xsm7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a7:1f:1e:94:81:2f:fb:de:aa:39:1c:86:10:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Aug 23 01:02:20 2025 GMT
Not After : Aug 24 01:02:20 2025 GMT
Subject: CN=5c03d45bb8e7c082bb137676cfe290a869228806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:7e:ed:08:88:9e:c0:48:46:66:6c:50:69:
66:36:32:8d:39:0a:ee:41:92:a7:9a:a5:f7:b6:9e:
43:22:38:d2:a3:41:80:be:4f:2a:46:4f:c2:cb:3d:
51:1f:3b:63:d0:d7:bd:7b:42:49:74:5d:2b:ee:9a:
7d:b2:d8:17:18:c3:b8:ed:44:8b:e4:06:89:58:52:
fb:42:f5:0d:6c:69:14:5c:c8:75:ae:f8:29:67:f8:
cc:0a:e2:c0:c7:64:76:b6:3d:7d:ec:a5:88:53:6f:
7e:8b:9c:96:da:72:dc:3c:e6:1e:90:51:3e:89:b5:
fc:5d:d7:de:a2:bd:0b:2e:34:69:f1:25:2b:2c:a4:
0c:9b:0a:7d:7b:52:e6:0f:84:a9:97:75:04:bd:1b:
47:19:12:51:88:29:2b:78:48:39:36:79:9b:78:32:
c5:fa:46:66:27:72:f1:6b:07:c0:5c:a3:71:da:b2:
fc:d3:33:74:38:74:9f:8b:e6:23:67:35:0e:d3:9c:
ec:fd:69:75:84:71:47:e7:87:d4:f9:bf:7f:b5:c6:
a5:bf:a0:55:57:fd:f1:51:de:40:df:d8:c1:58:b9:
2f:8a:8c:3b:3a:1d:cd:e2:23:84:29:26:90:e5:f4:
0e:ae:7f:15:b2:39:a3:61:14:7e:fc:d8:a3:43:fa:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:03:D4:5B:B8:E7:C0:82:BB:13:76:76:CF:E2:90:A8:69:22:88:06
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5c:09:eb:67:40:72:24:f8:8f:0c:71:24:8b:cb:48:49:d3:
ca:bb:e4:6a:22:fc:4f:2b:0c:6d:8f:ac:44:fe:78:f6:ae:82:
1b:ad:f5:73:6d:ef:5f:52:22:a9:e0:64:39:bf:d8:2f:d8:f4:
47:20:c2:52:fa:40:bd:4e:f1:d2:8a:24:30:39:d5:61:af:d4:
78:8f:64:fd:32:e6:73:d1:5f:b1:ae:1b:3c:ac:41:11:c3:54:
8e:68:34:47:98:14:34:39:24:7a:e0:2b:9e:32:8d:b5:5c:d5:
31:0d:df:26:b9:f1:b6:e5:4e:33:0b:fb:62:e6:03:55:c2:4f:
52:f1:a7:14:67:d8:a8:a4:b1:db:88:45:36:40:93:1c:89:c9:
47:78:f2:62:20:f8:b4:b9:bc:1c:c4:53:c6:66:e7:06:45:a6:
16:42:7b:93:f5:75:20:bf:66:37:af:6d:31:b0:13:3a:fd:75:
e3:f9:bb:7c:b4:f4:04:9a:ca:cf:5a:d8:a7:48:d5:d1:09:d2:
7b:74:3d:f9:8f:15:6d:9b:76:fb:b7:4b:ea:50:52:88:b6:fd:
72:37:d6:de:07:8e:58:61:53:11:0b:44:50:d4:93:62:ba:d1:
1a:c0:5e:4b:e9:f8:b0:90:1e:51:e0:69:b9:da:2f:16:66:f2:
09:81:53:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcqcfHpSBL/veqjkchhB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViODYyZTIzMWZjYmQ1MzkxYmQ0NzZjNmFiOWFiMmI3MjEw
YTg3YTQwHhcNMjUwODIzMDEwMjIwWhcNMjUwODI0MDEwMjIwWjAzMTEwLwYDVQQD
Eyg1YzAzZDQ1YmI4ZTdjMDgyYmIxMzc2NzZjZmUyOTBhODY5MjI4ODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFd+7QiInsBIRmZsUGlmNjKNOQru
QZKnmqX3tp5DIjjSo0GAvk8qRk/Cyz1RHztj0Ne9e0JJdF0r7pp9stgXGMO47USL
5AaJWFL7QvUNbGkUXMh1rvgpZ/jMCuLAx2R2tj197KWIU29+i5yW2nLcPOYekFE+
ibX8Xdfeor0LLjRp8SUrLKQMmwp9e1LmD4Spl3UEvRtHGRJRiCkreEg5NnmbeDLF
+kZmJ3LxawfAXKNx2rL80zN0OHSfi+YjZzUO05zs/Wl1hHFH54fU+b9/tcalv6BV
V/3xUd5A39jBWLkviow7Oh3N4iOEKSaQ5fQOrn8VsjmjYRR+/NijQ/rUVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwD1Fu458CCuxN2ds/ikKhpIogGMB8GA1UdIwQY
MBaAFFuGLiMfy9U5G9R2xquasrchCoekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTkt
OWJhNmRhNzBmYWRiLzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTktOWJhNmRhNzBmYWRi
LzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1wJ62dA
ciT4jwxxJIvLSEnTyrvkaiL8TysMbY+sRP549q6CG631c23vX1IiqeBkOb/YL9j0
RyDCUvpAvU7x0ookMDnVYa/UeI9k/TLmc9Ffsa4bPKxBEcNUjmg0R5gUNDkkeuAr
njKNtVzVMQ3fJrnxtuVOMwv7YuYDVcJPUvGnFGfYqKSx24hFNkCTHInJR3jyYiD4
tLm8HMRTxmbnBkWmFkJ7k/V1IL9mN69tMbATOv114/m7fLT0BJrKz1rYp0jV0QnS
e3Q9+Y8VbZt2+7dL6lBSiLb9cjfW3geOWGFTEQtEUNSTYrrRGsBeS+n4sJAeUeBp
udovFmbyCYFTVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:56 2025 by rpki-client