Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: 6JazqX9cyT+KIn1EqqQUra1DOR6qolVqns8TE7KGWq8=
Subject key identifier: 30:5B:AD:D0:3A:B0:08:E3:4D:B1:74:68:32:E8:FE:74:73:39:03:96
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 0198D5F1B3D0D2BF67E943E1FA0B415BACED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:43 +0000
Manifest this update: Sat 23 Aug 2025 08:00:43 +0000
Manifest next update: Sun 24 Aug 2025 08:00:43 +0000
Files and hashes: 1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: e8M1nmoN8VhW7jz/gTV/gsr0ZSRlf5argkHHJdOhdtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b3:d0:d2:bf:67:e9:43:e1:fa:0b:41:5b:ac:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Aug 23 08:00:43 2025 GMT
Not After : Aug 24 08:00:43 2025 GMT
Subject: CN=305badd03ab008e34db1746832e8fe7473390396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:38:c3:18:35:b0:7b:2a:f0:94:76:2e:9d:
b0:bf:a7:56:7d:9e:98:70:a4:c2:52:bf:0e:b3:a4:
7d:23:d3:fa:d0:a9:7d:60:9b:80:db:f5:a2:d6:06:
12:82:9b:67:36:5c:31:1f:16:fe:65:04:81:03:05:
bf:87:ec:0f:aa:31:e7:d8:3b:2c:1b:e3:da:ba:cc:
32:b3:c3:bb:3f:d8:10:38:24:b9:6b:4b:bc:79:0e:
35:27:02:d5:a2:6a:1f:25:51:9f:35:37:a9:54:eb:
cc:09:b3:9b:be:53:12:19:b9:a1:61:00:dd:06:6a:
a3:97:32:6a:fb:ec:4b:0c:37:b2:3c:1c:96:d0:2b:
c5:1e:ed:35:e2:dd:a4:93:f1:0f:46:e3:e7:79:f2:
d8:10:cb:81:54:e4:90:3b:79:b5:23:a5:ce:45:5e:
46:4c:6f:12:fb:54:2e:9c:a4:6c:55:54:b1:7e:31:
8c:36:bf:67:59:dd:7e:83:97:dd:e4:0a:fa:c5:8c:
d1:f9:82:02:76:b1:0e:3c:2b:94:82:d6:c8:4e:fb:
e5:7e:36:f8:be:36:a5:9d:d7:5a:1c:87:84:f0:12:
b8:56:93:51:06:ee:72:1f:7b:07:f1:04:b9:cb:52:
4e:5d:35:f3:2f:e9:14:00:25:9a:b6:5a:cb:d6:b6:
91:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5B:AD:D0:3A:B0:08:E3:4D:B1:74:68:32:E8:FE:74:73:39:03:96
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f0:20:a4:05:96:97:f6:d1:20:38:a6:f7:95:ec:5a:cb:c8:
de:d7:a1:6a:21:02:b9:f6:cb:e6:df:69:76:5f:65:9b:8a:e7:
87:34:e1:93:3c:e9:32:b4:a6:67:08:4d:3e:a9:7a:7f:3a:d5:
ee:18:7c:26:7f:71:c3:a7:d9:60:04:87:4d:9b:d9:ad:62:16:
53:39:9c:9a:d8:a0:c2:3b:cd:bd:f2:49:15:49:ce:1f:d3:dc:
b1:a9:12:6b:7a:37:2d:69:28:10:4a:5e:9d:61:e5:0d:e8:9d:
a5:d1:97:2e:87:dc:57:14:49:dd:47:51:f0:c7:f1:22:ba:19:
cd:5a:e5:d1:89:ab:d3:9b:9b:61:6a:b3:35:43:2a:3c:54:24:
e2:71:5f:ae:78:37:db:7c:e0:fd:16:8a:b7:e6:a6:95:14:b0:
46:d0:db:39:3c:aa:4a:ba:12:23:a0:60:da:5e:51:f7:a3:fa:
f2:6e:05:cb:0f:af:ee:b2:dd:2c:83:02:11:1c:cd:37:40:32:
b9:d1:be:d7:26:fd:ed:3a:24:c8:73:68:dd:fe:af:26:50:04:
62:12:51:50:98:7a:86:54:9c:4a:bd:85:06:8c:0f:f6:88:0e:
55:9f:f4:be:62:59:68:fd:3d:fa:b4:e1:05:96:30:57:22:fe:
87:a4:83:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8bPQ0r9n6UPh+gtBW6ztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDQ0M2FkMTk0NDQ4MTQxMjJmM2IyN2NiOTNhNTA1YWJl
NTA3OTkwHhcNMjUwODIzMDgwMDQzWhcNMjUwODI0MDgwMDQzWjAzMTEwLwYDVQQD
EygzMDViYWRkMDNhYjAwOGUzNGRiMTc0NjgzMmU4ZmU3NDczMzkwMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo44wxg1sHsq8JR2Lp2wv6dWfZ6Y
cKTCUr8Os6R9I9P60Kl9YJuA2/Wi1gYSgptnNlwxHxb+ZQSBAwW/h+wPqjHn2Dss
G+Pauswys8O7P9gQOCS5a0u8eQ41JwLVomofJVGfNTepVOvMCbObvlMSGbmhYQDd
BmqjlzJq++xLDDeyPByW0CvFHu014t2kk/EPRuPnefLYEMuBVOSQO3m1I6XORV5G
TG8S+1QunKRsVVSxfjGMNr9nWd1+g5fd5Ar6xYzR+YICdrEOPCuUgtbITvvlfjb4
vjalnddaHIeE8BK4VpNRBu5yH3sH8QS5y1JOXTXzL+kUACWatlrL1raRrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBbrdA6sAjjTbF0aDLo/nRzOQOWMB8GA1UdIwQY
MBaAFFrUQ60ZREgUEi87J8uTpQWr5QeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUt
MDI0ZTcyNTczMzVmLzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUtMDI0ZTcyNTczMzVm
LzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/AgpAWW
l/bRIDim95XsWsvI3tehaiECufbL5t9pdl9lm4rnhzThkzzpMrSmZwhNPql6fzrV
7hh8Jn9xw6fZYASHTZvZrWIWUzmcmtigwjvNvfJJFUnOH9PcsakSa3o3LWkoEEpe
nWHlDeidpdGXLofcVxRJ3UdR8MfxIroZzVrl0Ymr05ubYWqzNUMqPFQk4nFfrng3
23zg/RaKt+amlRSwRtDbOTyqSroSI6Bg2l5R96P68m4Fyw+v7rLdLIMCERzNN0Ay
udG+1yb97TokyHNo3f6vJlAEYhJRUJh6hlScSr2FBowP9ogOVZ/0vmJZaP09+rTh
BZYwVyL+h6SDCw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:25 2025 by rpki-client