Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
File: WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json)
Hash identifier: w22+1wZZAJCyQsHIVKrmavhT+qLN3idqUoGelBSrfXc=
Subject key identifier: EA:A1:3A:39:E5:61:96:F7:7A:AD:91:36:B6:D1:96:1A:81:D4:58:1A
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial: 0198D65F9BCDBC93979C919DCD09A13C2C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
Manifest number: 05CD
Signing time: Sat 23 Aug 2025 10:00:46 +0000
Manifest this update: Sat 23 Aug 2025 10:00:46 +0000
Manifest next update: Sun 24 Aug 2025 10:00:46 +0000
Files and hashes: 1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: xHlF0zjK6COWKjR+Hyk8+N0iauL2V0iqwx0Cdt9lGTM=)
2: ibsagXyULK6_yzLYa3pXOko3XKU.roa (hash: 03/iKlKS42XpS4t49YCxIL0w2I8iyQ6yxzMTAdH/Ztc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9b:cd:bc:93:97:9c:91:9d:cd:09:a1:3c:2c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Validity
Not Before: Aug 23 10:00:46 2025 GMT
Not After : Aug 24 10:00:46 2025 GMT
Subject: CN=eaa13a39e56196f77aad9136b6d1961a81d4581a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:1a:ea:31:7a:ed:6f:69:9b:73:c3:24:e0:
bf:18:a6:2a:9e:d6:4b:81:51:ec:6b:29:de:d9:10:
94:71:77:e8:5e:a7:69:86:5b:1f:a1:48:05:7e:3d:
e8:75:c3:4e:7f:67:50:64:23:8f:1a:84:87:b7:9a:
fa:f8:03:78:36:15:e1:e2:1e:0f:dc:bc:ec:6b:53:
06:08:95:05:20:c0:45:6d:32:b1:b7:bf:e3:6b:20:
da:6b:19:0f:f3:d3:5d:f5:55:43:aa:a2:a3:51:9d:
41:f4:21:33:cc:ac:09:fa:c5:03:b7:51:7f:4c:f0:
92:2f:e0:0b:a5:6e:e8:00:88:83:9a:82:6e:5b:1b:
3d:9b:79:a6:c8:6d:64:98:1e:d5:15:97:92:49:b7:
f3:f2:da:d1:ce:62:00:09:75:76:9a:ac:d6:0c:3b:
58:c0:6d:77:84:9d:2e:b3:ee:fc:1a:f7:b5:96:ad:
9e:73:e0:53:98:64:27:3a:a8:19:8c:dd:b9:04:89:
c1:73:bb:36:8a:53:92:f6:90:58:6e:3f:87:3d:7f:
b5:06:ce:80:45:ac:a2:2e:43:5f:39:c8:55:1d:47:
bf:b2:c9:d4:91:9a:14:f2:e3:bc:13:e4:77:6b:39:
4c:00:e4:46:f0:e4:a0:ca:76:8a:5f:0d:5e:11:26:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A1:3A:39:E5:61:96:F7:7A:AD:91:36:B6:D1:96:1A:81:D4:58:1A
X509v3 Authority Key Identifier:
keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ff:51:30:e8:fb:62:48:74:9e:5d:91:cf:ad:7d:c7:00:49:
c2:d0:d1:cf:3b:57:38:df:02:20:a6:ff:3b:c9:1b:1c:cd:96:
0e:f0:ee:14:3f:83:86:5e:55:d6:3e:78:d7:88:34:96:02:34:
8e:b4:90:f8:30:18:c3:7f:71:1d:ee:7d:3f:c4:35:e6:05:10:
3b:de:ca:11:57:10:3a:2f:f0:2e:b3:17:63:95:ef:19:15:2a:
72:67:28:c6:35:a4:04:fc:85:48:c3:6e:46:1b:21:d4:16:96:
5b:28:ca:a4:ff:7f:72:15:74:2e:d6:1c:04:3f:78:b2:86:cf:
19:89:43:95:a0:9e:e9:64:85:2e:91:39:e8:c7:1d:b9:8e:cf:
d8:14:d0:a3:92:7c:db:d4:7e:d5:f5:ac:cf:62:a0:1a:e2:26:
8d:45:f4:86:79:88:3c:f2:01:76:25:18:5d:65:d4:be:f8:f1:
1d:f9:42:5e:37:f9:6c:9b:60:d4:16:7f:71:9a:ad:7e:b2:8c:
17:cc:98:93:44:c4:f4:d9:5b:a3:7b:38:3d:d3:14:f7:ff:69:
ba:50:67:21:f7:b3:8b:dc:f4:7d:82:08:21:8d:f2:5d:53:86:
3d:98:bb:ed:07:c6:4b:37:18:f3:4a:1a:7c:5b:8f:ca:2d:c7:
1a:bb:70:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX5vNvJOXnJGdzQmhPCwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YjYwMjA5OTBlYjEwYjA1M2Q1NmI0N2UyYzgzNGE1YTYy
NmI1ZDMwHhcNMjUwODIzMTAwMDQ2WhcNMjUwODI0MTAwMDQ2WjAzMTEwLwYDVQQD
EyhlYWExM2EzOWU1NjE5NmY3N2FhZDkxMzZiNmQxOTYxYTgxZDQ1ODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz4a6jF67W9pm3PDJOC/GKYqntZL
gVHsayne2RCUcXfoXqdphlsfoUgFfj3odcNOf2dQZCOPGoSHt5r6+AN4NhXh4h4P
3Lzsa1MGCJUFIMBFbTKxt7/jayDaaxkP89Nd9VVDqqKjUZ1B9CEzzKwJ+sUDt1F/
TPCSL+ALpW7oAIiDmoJuWxs9m3mmyG1kmB7VFZeSSbfz8trRzmIACXV2mqzWDDtY
wG13hJ0us+78Gve1lq2ec+BTmGQnOqgZjN25BInBc7s2ilOS9pBYbj+HPX+1Bs6A
RayiLkNfOchVHUe/ssnUkZoU8uO8E+R3azlMAORG8OSgynaKXw1eESZXyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqhOjnlYZb3eq2RNrbRlhqB1FgaMB8GA1UdIwQY
MBaAFFm2AgmQ6xCwU9VrR+LINKWmJrXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgt
OTgyM2I3ZWE0ZGIzLzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgtOTgyM2I3ZWE0ZGIz
LzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEP9RMOj7
Ykh0nl2Rz619xwBJwtDRzztXON8CIKb/O8kbHM2WDvDuFD+Dhl5V1j5414g0lgI0
jrSQ+DAYw39xHe59P8Q15gUQO97KEVcQOi/wLrMXY5XvGRUqcmcoxjWkBPyFSMNu
Rhsh1BaWWyjKpP9/chV0LtYcBD94sobPGYlDlaCe6WSFLpE56McduY7P2BTQo5J8
29R+1fWsz2KgGuImjUX0hnmIPPIBdiUYXWXUvvjxHflCXjf5bJtg1BZ/cZqtfrKM
F8yYk0TE9Nlbo3s4PdMU9/9pulBnIfezi9z0fYIIIY3yXVOGPZi77QfGSzcY80oa
fFuPyi3HGrtwJw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:44 2025 by rpki-client