Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier: 5N/Fl452H+GULZq1jb3Obop84C8A2l3JuCzWhZ7aYKQ=
Subject key identifier: 44:10:36:B3:4B:B3:BB:D7:CE:D4:09:82:76:27:5B:95:01:6A:24:FB
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 0197DA7629D227D993FC15CB4A5B6A78F2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number: 0973
Signing time: Sat 05 Jul 2025 12:01:06 +0000
Manifest this update: Sat 05 Jul 2025 12:01:06 +0000
Manifest next update: Sun 06 Jul 2025 12:01:06 +0000
Files and hashes: 1: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: Hj7NNT1uICUTn681encC+HOwtBjPIp6ffYf4ooxYuyU=)
2: gS4jeqALacaf51dl93Py-I7kfls.roa (hash: OBdPPMpWE3pFYQDOuw6u5rVnnXeeNEwg98LVQA2Wi/s=)
3: gfhu0UMjPTGrZruaeirhOo04QTw.roa (hash: HYAZtY2G7JxVkFUj22KQMYwy01JLPX5+ssTDK0gFTRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:da:76:29:d2:27:d9:93:fc:15:cb:4a:5b:6a:78:f2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Jul 5 12:01:06 2025 GMT
Not After : Jul 6 12:01:06 2025 GMT
Subject: CN=441036b34bb3bbd7ced4098276275b95016a24fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:04:99:73:23:c1:74:98:8c:52:96:f0:32:
d0:b8:5b:9c:4e:9c:41:92:27:f3:51:de:c0:57:64:
ea:8e:50:f2:6a:e9:93:52:8c:e8:b6:ce:d7:2a:60:
e8:0a:b5:d9:c7:95:05:a9:7e:e8:63:e9:59:3f:72:
10:71:3c:71:c0:0b:e0:6d:00:3e:f2:4a:c4:27:37:
5e:28:88:88:32:3b:54:64:3b:91:8b:10:f7:cc:4d:
09:d1:fd:61:6e:cf:fe:fd:e9:59:3a:15:2b:f1:ee:
b7:03:77:de:32:1e:10:b6:fb:6a:18:cd:ce:78:57:
f9:44:78:e5:f3:25:c8:ba:88:39:45:94:5f:a5:16:
f8:26:44:60:f9:bf:a9:f8:bb:27:00:29:97:ff:6d:
41:0c:7b:c5:0f:f0:29:ef:5d:5d:92:df:5f:3f:e4:
c9:5c:a0:90:54:e3:8c:20:2d:12:20:3e:28:99:c8:
0d:00:11:12:de:fb:e7:fb:54:f1:8b:1a:59:d7:a0:
69:44:82:7c:9f:77:fe:c7:51:ec:03:db:be:85:08:
e8:b3:35:93:45:4c:85:15:fa:d0:71:45:35:d8:33:
41:78:09:47:d1:56:80:85:57:1f:ce:05:7d:b5:f9:
da:87:90:52:ef:45:99:41:ac:55:ad:bc:ef:e0:e6:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:10:36:B3:4B:B3:BB:D7:CE:D4:09:82:76:27:5B:95:01:6A:24:FB
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d1:b5:d2:b0:ef:c3:cc:e0:9b:d4:38:cc:4f:f7:1f:0c:a6:
ac:be:cf:33:94:90:90:4c:9f:6f:26:49:ad:83:61:d2:d2:21:
ef:cb:d6:9a:f0:76:23:03:d2:94:25:4d:c9:d9:83:17:61:50:
f8:a6:4d:50:11:cb:e1:14:bc:e4:ce:f0:13:5c:fd:33:b4:b6:
4f:83:a9:c6:b7:35:9b:b5:94:cd:74:11:6d:1b:99:aa:71:a1:
64:be:57:97:5c:5d:cd:00:04:14:29:b6:37:12:ed:4e:28:f5:
ac:1d:23:4d:f4:12:f1:c7:60:73:6c:ab:88:c1:1e:44:68:0a:
c5:1f:c5:58:46:5f:72:ee:68:4e:20:65:09:30:21:fa:ee:97:
05:9e:4d:b5:d5:50:70:48:bf:70:58:b6:f4:77:b9:4f:22:44:
2d:cc:d4:a9:39:c8:56:9f:11:37:95:65:93:56:1b:e5:7c:06:
cc:00:f2:42:0a:25:3e:50:77:e9:c1:cb:46:44:24:2a:d3:74:
fc:3b:01:b8:bd:20:6c:b2:ce:48:33:2a:59:ee:78:a5:6d:eb:
9d:cf:dc:d6:1f:62:83:ff:de:ff:58:8d:b6:57:b1:61:ef:a8:
4e:1c:be:f7:98:6e:e3:09:04:f3:f2:04:04:f7:06:7d:60:2e:
fa:ae:89:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfadinSJ9mT/BXLSltqePLgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGMzMjAyNzQ2NWEyOWZiODRmMmRkMDVmM2YwYmU4MDQy
N2IwYzkwHhcNMjUwNzA1MTIwMTA2WhcNMjUwNzA2MTIwMTA2WjAzMTEwLwYDVQQD
Eyg0NDEwMzZiMzRiYjNiYmQ3Y2VkNDA5ODI3NjI3NWI5NTAxNmEyNGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoQEmXMjwXSYjFKW8DLQuFucTpxB
kifzUd7AV2TqjlDyaumTUozots7XKmDoCrXZx5UFqX7oY+lZP3IQcTxxwAvgbQA+
8krEJzdeKIiIMjtUZDuRixD3zE0J0f1hbs/+/elZOhUr8e63A3feMh4QtvtqGM3O
eFf5RHjl8yXIuog5RZRfpRb4JkRg+b+p+LsnACmX/21BDHvFD/Ap711dkt9fP+TJ
XKCQVOOMIC0SID4omcgNABES3vvn+1TxixpZ16BpRIJ8n3f+x1HsA9u+hQjoszWT
RUyFFfrQcUU12DNBeAlH0VaAhVcfzgV9tfnah5BS70WZQaxVrbzv4Oa1PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQQNrNLs7vXztQJgnYnW5UBaiT7MB8GA1UdIwQY
MBaAFFiMMgJ0ZaKfuE8t0F8/C+gEJ7DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMt
OWE4MDNmNzM2YzRhLzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMtOWE4MDNmNzM2YzRh
LzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtG10rDv
w8zgm9Q4zE/3HwymrL7PM5SQkEyfbyZJrYNh0tIh78vWmvB2IwPSlCVNydmDF2FQ
+KZNUBHL4RS85M7wE1z9M7S2T4Opxrc1m7WUzXQRbRuZqnGhZL5Xl1xdzQAEFCm2
NxLtTij1rB0jTfQS8cdgc2yriMEeRGgKxR/FWEZfcu5oTiBlCTAh+u6XBZ5NtdVQ
cEi/cFi29He5TyJELczUqTnIVp8RN5Vlk1Yb5XwGzADyQgolPlB36cHLRkQkKtN0
/DsBuL0gbLLOSDMqWe54pW3rnc/c1h9ig//e/1iNtlexYe+oThy+95hu4wkE8/IE
BPcGfWAu+q6JSA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 21:12:51 2025 by rpki-client