Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier: CkAzbLZc98X6UrDk1+BqjD0ZOIF9tGbHvbaY5miuvgE=
Subject key identifier: 65:85:10:46:6B:76:E7:52:DC:F7:EA:10:4D:F8:AF:5B:51:6D:C7:D8
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial: 0198D92BEEE9935600B4CF68A4A8000ADCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number: 01B8
Signing time: Sat 23 Aug 2025 23:03:11 +0000
Manifest this update: Sat 23 Aug 2025 23:03:11 +0000
Manifest next update: Sun 24 Aug 2025 23:03:11 +0000
Files and hashes: 1: 1-DmKYgnKcK0PXEAQVbF_OKc3-qY.roa (hash: A2ZK2n/AK9OAPtM9+Qchv9vt+I10xrYcK4O013Ux+Cs=)
2: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: 6xG0755fEA04RBu2W3wsSmXSXoBX+1cuZZvX0jnIgO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:ee:e9:93:56:00:b4:cf:68:a4:a8:00:0a:dc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Validity
Not Before: Aug 23 23:03:11 2025 GMT
Not After : Aug 24 23:03:11 2025 GMT
Subject: CN=658510466b76e752dcf7ea104df8af5b516dc7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:be:2b:68:0a:6c:1a:06:cf:df:2b:ff:2b:
56:de:c9:56:f7:44:f3:e8:9d:14:d7:7c:1b:71:70:
9f:86:15:14:2d:6c:e5:a2:97:56:ce:4a:8a:f6:66:
ae:86:6d:2c:dc:d5:d9:3f:ad:4c:85:92:e2:6d:4f:
08:e6:f5:a6:d6:76:0f:3d:d3:ff:e8:78:ab:8b:19:
e5:21:23:1a:86:98:cc:ac:1b:47:c2:82:ca:4b:ad:
01:67:f5:67:8d:13:6c:43:9e:71:36:39:87:c5:76:
9a:7f:05:bb:3c:5b:0e:b9:2d:71:a3:6b:9f:ab:d5:
78:30:66:83:52:71:f7:ec:3b:0a:52:be:4e:d5:c7:
22:23:c1:56:c6:a1:46:3b:c4:84:4e:d1:ca:a1:91:
07:04:d3:8f:0a:6d:dd:e8:ed:c8:4c:72:30:f8:0b:
c9:a4:f2:d2:9d:cd:ec:39:04:02:59:0e:c3:02:77:
3d:25:b3:04:2f:ef:7b:67:9c:85:32:13:25:c2:60:
e4:71:ca:20:e6:ab:e7:d3:39:9d:9c:d8:fa:5b:a4:
b0:f0:0f:c4:37:e9:86:bb:2b:a9:b2:aa:21:30:19:
23:62:b7:bc:76:24:4b:97:51:e6:e2:94:cf:31:9c:
d4:5c:eb:86:ba:33:9b:80:14:a9:70:dc:0c:5c:e3:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:85:10:46:6B:76:E7:52:DC:F7:EA:10:4D:F8:AF:5B:51:6D:C7:D8
X509v3 Authority Key Identifier:
keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f9:67:9c:c0:ee:bf:87:f5:54:a5:8f:58:92:82:c3:12:0f:
fd:62:ca:c9:0a:15:1f:94:dc:44:d2:ed:44:71:78:d5:3a:c8:
1a:f2:f1:94:b0:a2:c4:7a:a9:ab:20:e8:82:98:eb:99:ee:00:
4f:49:a6:c2:a7:fc:94:8c:8b:78:11:84:d3:f3:59:13:ff:6d:
c0:ee:1e:ec:2c:ce:e4:c2:b3:96:8d:23:37:d7:e7:f7:a0:63:
e4:2f:ff:d1:93:d7:b8:3f:50:aa:dd:e2:36:8e:b9:53:c6:56:
ae:78:6b:9f:b1:e4:f7:25:ee:93:80:ca:a4:99:10:93:cf:d2:
56:73:4e:21:f8:17:af:34:89:55:ee:b2:90:32:1b:64:2d:12:
f0:05:37:95:de:47:b5:ab:89:22:52:86:2e:02:59:03:13:97:
46:eb:d5:86:46:ba:5d:5e:dd:06:39:99:09:b6:b0:d4:b2:09:
53:72:1b:1b:65:05:c8:8c:57:64:09:df:68:3c:34:ed:f1:7c:
56:7a:b1:cc:d2:f4:b6:a7:9b:75:81:6f:d7:8d:f6:20:9f:36:
e5:2a:8c:2e:15:8d:7d:22:b7:e7:93:74:35:aa:2b:30:74:2d:
18:1f:6f:b9:bd:1b:fc:58:23:87:58:20:69:7b:af:00:80:a6:
5f:3b:75:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZK+7pk1YAtM9opKgACty+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNzk3ZmNkODQzM2IxZjQ4OWY4OTExOTQ4NjJmYzM2YmZi
ZWY2NmIwHhcNMjUwODIzMjMwMzExWhcNMjUwODI0MjMwMzExWjAzMTEwLwYDVQQD
Eyg2NTg1MTA0NjZiNzZlNzUyZGNmN2VhMTA0ZGY4YWY1YjUxNmRjN2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7S+K2gKbBoGz98r/ytW3slW90Tz
6J0U13wbcXCfhhUULWzlopdWzkqK9mauhm0s3NXZP61MhZLibU8I5vWm1nYPPdP/
6HirixnlISMahpjMrBtHwoLKS60BZ/VnjRNsQ55xNjmHxXaafwW7PFsOuS1xo2uf
q9V4MGaDUnH37DsKUr5O1cciI8FWxqFGO8SETtHKoZEHBNOPCm3d6O3ITHIw+AvJ
pPLSnc3sOQQCWQ7DAnc9JbMEL+97Z5yFMhMlwmDkccog5qvn0zmdnNj6W6Sw8A/E
N+mGuyupsqohMBkjYre8diRLl1Hm4pTPMZzUXOuGujObgBSpcNwMXONbUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWFEEZrdudS3PfqEE34r1tRbcfYMB8GA1UdIwQY
MBaAFFt5f82EM7H0ifiRGUhi/Da/vvZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAt
ZTU5NmU1MjRjYWJlLzEvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAtZTU5NmU1MjRjYWJl
LzEvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvlnnMDu
v4f1VKWPWJKCwxIP/WLKyQoVH5TcRNLtRHF41TrIGvLxlLCixHqpqyDogpjrme4A
T0mmwqf8lIyLeBGE0/NZE/9twO4e7CzO5MKzlo0jN9fn96Bj5C//0ZPXuD9Qqt3i
No65U8ZWrnhrn7Hk9yXuk4DKpJkQk8/SVnNOIfgXrzSJVe6ykDIbZC0S8AU3ld5H
tauJIlKGLgJZAxOXRuvVhka6XV7dBjmZCbaw1LIJU3IbG2UFyIxXZAnfaDw07fF8
VnqxzNL0tqebdYFv1432IJ825SqMLhWNfSK355N0NaorMHQtGB9vub0b/Fgjh1gg
aXuvAICmXzt1iw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:09:08 2025 by rpki-client