
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
File: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json)
Hash identifier: KL2LD/wquXSEbyMERuUbVYezdh1jpqt3oOMK+rLSpI4=
Subject key identifier: 4F:C2:61:A9:4F:A9:03:18:1B:7F:15:70:4F:2A:B9:1B:24:F5:25:E3
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial: 0198D473E65039EC0CA2828605B1098E6BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
Manifest number: 088A
Signing time: Sat 23 Aug 2025 01:03:41 +0000
Manifest this update: Sat 23 Aug 2025 01:03:41 +0000
Manifest next update: Sun 24 Aug 2025 01:03:41 +0000
Files and hashes: 1: 9VRbY37PKRH0-UJUOvI3sW7GRqg.roa (hash: JnDLn69G2OWz5ad5UI+dtO7s/dZ3uGdaBQeH20/IDXs=)
2: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: eCoeShqGeaMxNHyBE+AItLdolBgi/8ECd6dOs/z5Vmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e6:50:39:ec:0c:a2:82:86:05:b1:09:8e:6b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
Validity
Not Before: Aug 23 01:03:41 2025 GMT
Not After : Aug 24 01:03:41 2025 GMT
Subject: CN=4fc261a94fa903181b7f15704f2ab91b24f525e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f2:61:9e:9d:91:de:75:76:21:38:56:6c:0a:
cd:d6:b4:96:e6:6f:0d:a7:08:7a:1d:35:7e:67:3c:
9f:44:0d:f6:7d:81:24:6d:8b:f5:60:ea:73:f0:5b:
08:e4:fe:25:f1:e2:1a:ce:15:e9:fe:66:05:72:9d:
46:35:be:0e:46:06:66:c6:1a:1d:e5:47:73:6b:93:
d1:9f:b2:94:5e:b0:e4:b7:8d:b1:54:7e:ee:73:2f:
3d:1a:a5:38:05:20:51:46:50:53:58:02:b7:89:8f:
38:23:72:de:d9:d9:78:31:25:50:a9:fc:03:6c:c2:
25:f3:a1:22:b3:c8:e3:bc:ac:54:f7:fe:90:aa:a3:
87:d1:41:36:c6:79:3a:fb:bc:72:2d:a0:fa:1d:fc:
79:57:31:7a:1a:44:b8:e6:23:f9:12:46:2e:aa:18:
69:dd:a6:df:6b:aa:52:9e:6c:5e:f7:42:dc:79:14:
f6:a3:11:27:ed:35:4f:a4:46:43:9e:43:d1:06:82:
7f:3f:ac:c4:92:f0:0b:ca:3b:87:b1:20:5c:5b:92:
d3:1e:08:c8:a5:a0:c3:e3:ba:77:c7:b5:33:dd:01:
9c:b8:e0:0c:5f:70:f5:12:55:b7:5b:eb:49:ab:cb:
60:37:06:f3:fc:13:21:d8:af:02:d1:3d:d2:c1:72:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C2:61:A9:4F:A9:03:18:1B:7F:15:70:4F:2A:B9:1B:24:F5:25:E3
X509v3 Authority Key Identifier:
keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4c:a9:e2:21:05:0e:f8:61:c0:63:01:56:ee:4e:65:58:e7:
77:a7:6a:83:f2:ac:f7:fc:4b:d6:4e:a8:73:d6:a2:ae:c2:f4:
46:67:db:22:a8:9f:e8:b1:f7:ee:df:70:a4:96:16:da:9d:87:
a5:a9:92:f5:a3:d3:51:21:31:9b:2e:89:ad:73:89:4a:37:b5:
0e:8a:13:e5:e6:bc:31:60:08:38:96:8c:05:a5:ca:e6:ae:2a:
be:96:7e:3e:04:72:30:b5:54:0e:f1:4c:30:a2:92:f1:bd:92:
0c:d6:78:23:59:26:ac:4c:d9:11:cd:5b:a6:75:2a:e7:c7:2e:
12:49:da:fe:d0:ea:10:32:5d:f5:16:45:c0:18:71:af:b1:eb:
87:2f:9a:62:0b:35:1a:39:48:fd:fe:c3:2e:2c:03:b3:4a:ac:
64:0c:bd:a0:1d:06:f6:83:12:4b:27:af:f8:c9:c5:60:b0:8d:
79:86:9b:ab:2d:32:df:68:12:38:15:5a:bf:22:f9:36:60:c3:
8f:60:8d:97:fa:79:a2:63:28:5a:9b:e6:db:38:cf:dc:dc:71:
5d:a0:2b:22:72:e6:60:87:60:c7:4e:57:50:76:03:9b:0f:98:
29:98:37:64:89:fa:48:80:f5:2c:a8:c1:73:b4:ea:d6:f0:ba:
af:6f:db:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc+ZQOewMooKGBbEJjmvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNWQ0NTY1NGZhNTk3ZDM1MjJlZGExNjg4MzkxOTNlYmU3
ODJlZWYwHhcNMjUwODIzMDEwMzQxWhcNMjUwODI0MDEwMzQxWjAzMTEwLwYDVQQD
Eyg0ZmMyNjFhOTRmYTkwMzE4MWI3ZjE1NzA0ZjJhYjkxYjI0ZjUyNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PJhnp2R3nV2IThWbArN1rSW5m8N
pwh6HTV+ZzyfRA32fYEkbYv1YOpz8FsI5P4l8eIazhXp/mYFcp1GNb4ORgZmxhod
5Udza5PRn7KUXrDkt42xVH7ucy89GqU4BSBRRlBTWAK3iY84I3Le2dl4MSVQqfwD
bMIl86Eis8jjvKxU9/6QqqOH0UE2xnk6+7xyLaD6Hfx5VzF6GkS45iP5EkYuqhhp
3abfa6pSnmxe90LceRT2oxEn7TVPpEZDnkPRBoJ/P6zEkvALyjuHsSBcW5LTHgjI
paDD47p3x7Uz3QGcuOAMX3D1ElW3W+tJq8tgNwbz/BMh2K8C0T3SwXKcqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/CYalPqQMYG38VcE8quRsk9SXjMB8GA1UdIwQY
MBaAFFpdRWVPpZfTUi7aFog5GT6+eC7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzIt
Yzk2NDBkMjUwYWZjLzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzItYzk2NDBkMjUwYWZj
LzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0yp4iEF
DvhhwGMBVu5OZVjnd6dqg/Ks9/xL1k6oc9airsL0RmfbIqif6LH37t9wpJYW2p2H
pamS9aPTUSExmy6JrXOJSje1DooT5ea8MWAIOJaMBaXK5q4qvpZ+PgRyMLVUDvFM
MKKS8b2SDNZ4I1kmrEzZEc1bpnUq58cuEkna/tDqEDJd9RZFwBhxr7Hrhy+aYgs1
GjlI/f7DLiwDs0qsZAy9oB0G9oMSSyev+MnFYLCNeYabqy0y32gSOBVavyL5NmDD
j2CNl/p5omMoWpvm2zjP3NxxXaArInLmYIdgx05XUHYDmw+YKZg3ZIn6SID1LKjB
c7Tq1vC6r2/bIQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:51 2025 by rpki-client