Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
File: wFlbbIrobPkGmro-um3fKmgjfwg.mft (raw, json)
Hash identifier: aMpZnjUNe2mN7nu71s3kl10NMRuhkhgE3vT0T99SQHc=
Subject key identifier: BE:C1:99:1A:16:3E:EB:FC:51:8A:86:F9:63:5C:35:8A:F4:29:4C:74
Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
Certificate issuer: /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Certificate serial: 0197B7B2ED8958FDEE516CC9C5A395192A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
Manifest number: 0561
Signing time: Sat 28 Jun 2025 18:00:45 +0000
Manifest this update: Sat 28 Jun 2025 18:00:45 +0000
Manifest next update: Sun 29 Jun 2025 18:00:45 +0000
Files and hashes: 1: 8UgkBAZONepNyI81FukUfi25Kao.roa (hash: rpUHlCnR+nUi3dHMj1nsfDs3V156wUfOtUa+u9zdDrQ=)
2: wFlbbIrobPkGmro-um3fKmgjfwg.crl (hash: VqwOxOK2XoexZFfJGs90NyULgaxomZ4WHzRMXBEh80E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:ed:89:58:fd:ee:51:6c:c9:c5:a3:95:19:2a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Validity
Not Before: Jun 28 18:00:45 2025 GMT
Not After : Jun 29 18:00:45 2025 GMT
Subject: CN=bec1991a163eebfc518a86f9635c358af4294c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:ba:b6:eb:fc:56:8f:d7:64:10:f1:34:d9:
9f:2a:d9:da:a0:77:f1:9a:3e:b3:a0:57:86:de:4d:
8f:0f:07:ee:7f:c2:7f:57:3e:18:34:c0:dd:d1:2a:
e9:9f:2e:fe:94:c4:69:34:e3:46:9f:24:91:36:4c:
6b:d4:52:35:a2:d8:eb:42:d9:67:06:f4:93:85:15:
d9:cc:f7:c1:f2:01:81:5d:c7:84:a4:39:98:ba:85:
d0:a7:92:f8:39:4a:67:d9:2d:6b:53:a6:6f:97:53:
47:a6:72:6d:5e:79:30:ec:41:d8:96:9a:29:c1:5e:
37:ae:69:74:76:cf:8d:65:80:77:31:68:ff:d7:10:
be:ab:b9:1b:11:80:4f:55:bf:b0:52:0a:fa:ea:67:
83:9b:89:75:0c:08:a2:40:9c:0a:af:b2:db:b2:0b:
75:11:51:20:d6:b3:db:14:d2:94:f4:00:b4:63:8c:
e8:fa:80:00:3d:d1:37:ad:a3:86:93:c9:1c:0e:23:
f5:a4:30:3b:65:4c:8b:a8:ee:42:4f:3d:10:ab:0c:
da:57:d3:ea:25:d1:78:f8:e3:00:a9:6a:74:b5:67:
e7:d3:76:e2:c9:1c:0f:2c:52:47:d5:f7:78:d1:9a:
94:91:d5:f1:44:30:c4:6c:64:a2:6e:8d:47:ff:88:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C1:99:1A:16:3E:EB:FC:51:8A:86:F9:63:5C:35:8A:F4:29:4C:74
X509v3 Authority Key Identifier:
keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:00:b4:3d:7b:c8:84:ad:82:54:73:88:09:ae:d7:ae:87:dc:
e1:57:62:89:7a:20:5a:99:15:17:af:e0:dc:7a:90:3b:72:da:
de:84:70:e2:e4:6e:ae:1e:10:32:a9:df:65:0e:6d:93:76:6b:
7e:e7:61:96:2a:c4:e4:f2:ca:5c:85:a7:ea:7a:3d:54:3c:e3:
3f:a7:2c:c1:15:49:d1:f9:78:f3:a1:31:21:a9:c7:cd:d8:7c:
93:c4:2f:4f:16:68:ea:03:32:81:2f:86:2e:0d:88:80:03:ce:
3f:76:89:c7:53:2c:c6:52:3c:32:78:af:a7:48:7b:9b:dc:0c:
bc:23:24:6e:d6:7a:ca:d6:bb:aa:d3:dd:24:70:3c:b1:4b:3e:
4e:86:38:2d:d1:c8:c8:bc:63:f9:7e:53:44:ae:d6:d6:81:50:
ae:14:51:bd:86:80:1a:0e:8b:fb:7c:a7:86:ec:07:4c:f8:56:
5b:23:19:57:41:20:f2:8e:73:bf:a3:e0:c0:56:ac:66:04:eb:
c9:fb:a6:15:84:d3:72:64:b3:0f:b5:00:78:8a:42:e0:4f:5d:
65:bf:84:6e:58:30:a4:5d:5a:3a:44:e9:f4:a4:ff:ec:4e:6c:
96:e0:49:85:a2:a4:32:05:35:80:72:05:f3:e8:6b:cf:e2:ac:
2f:67:8a:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3su2JWP3uUWzJxaOVGSqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTk1YjZjOGFlODZjZjkwNjlhYmEzZWJhNmRkZjJhNjgy
MzdmMDgwHhcNMjUwNjI4MTgwMDQ1WhcNMjUwNjI5MTgwMDQ1WjAzMTEwLwYDVQQD
EyhiZWMxOTkxYTE2M2VlYmZjNTE4YTg2Zjk2MzVjMzU4YWY0Mjk0Yzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogK6tuv8Vo/XZBDxNNmfKtnaoHfx
mj6zoFeG3k2PDwfuf8J/Vz4YNMDd0Srpny7+lMRpNONGnySRNkxr1FI1otjrQtln
BvSThRXZzPfB8gGBXceEpDmYuoXQp5L4OUpn2S1rU6Zvl1NHpnJtXnkw7EHYlpop
wV43rml0ds+NZYB3MWj/1xC+q7kbEYBPVb+wUgr66meDm4l1DAiiQJwKr7Lbsgt1
EVEg1rPbFNKU9AC0Y4zo+oAAPdE3raOGk8kcDiP1pDA7ZUyLqO5CTz0QqwzaV9Pq
JdF4+OMAqWp0tWfn03biyRwPLFJH1fd40ZqUkdXxRDDEbGSibo1H/4hKTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7BmRoWPuv8UYqG+WNcNYr0KUx0MB8GA1UdIwQY
MBaAFMBZW2yK6Gz5Bpq6Prpt3ypoI38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAt
MTkxYjJhZTNmYTVhLzEvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAtMTkxYjJhZTNmYTVh
LzEvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwC0PXvI
hK2CVHOICa7Xrofc4VdiiXogWpkVF6/g3HqQO3La3oRw4uRurh4QMqnfZQ5tk3Zr
fudhlirE5PLKXIWn6no9VDzjP6cswRVJ0fl486ExIanHzdh8k8QvTxZo6gMygS+G
Lg2IgAPOP3aJx1MsxlI8Mnivp0h7m9wMvCMkbtZ6yta7qtPdJHA8sUs+ToY4LdHI
yLxj+X5TRK7W1oFQrhRRvYaAGg6L+3ynhuwHTPhWWyMZV0Eg8o5zv6PgwFasZgTr
yfumFYTTcmSzD7UAeIpC4E9dZb+EblgwpF1aOkTp9KT/7E5sluBJhaKkMgU1gHIF
8+hrz+KsL2eK/A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:56 2025 by rpki-client