
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
File: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft (raw, json)
Hash identifier: u24x8/eYsZRAfp3LbxD3yDuFoa6YcC4M+FbrWIfzeUg=
Subject key identifier: 21:6D:BD:05:74:F1:CE:75:9F:72:0D:48:B9:1F:86:80:41:81:AD:78
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Certificate issuer: /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial: 0197B7EA4616C41C09739F273BD6182246F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
Manifest number: 0C61
Signing time: Sat 28 Jun 2025 19:01:13 +0000
Manifest this update: Sat 28 Jun 2025 19:01:13 +0000
Manifest next update: Sun 29 Jun 2025 19:01:13 +0000
Files and hashes: 1: 3iX2jkkHiD5MWdLtUD1Exzmo13Q.roa (hash: 3QNrKYAXHRyi/BOzLIrAyRHDvtVW/W4+B5tMO6HApyM=)
2: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl (hash: ZmkY3MoSReyXRHuiavEUvnV1KbtZMPldUF2PliaZHFo=)
3: ula9jfoyo-Oxj4oQTJhGSM2DQ5o.roa (hash: +U/LkfnqXi7jglNA2KgxDFsmoz1cp5+KfODGzHBZoUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:46:16:c4:1c:09:73:9f:27:3b:d6:18:22:46:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
Validity
Not Before: Jun 28 19:01:13 2025 GMT
Not After : Jun 29 19:01:13 2025 GMT
Subject: CN=216dbd0574f1ce759f720d48b91f86804181ad78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:07:dc:ba:32:8c:30:ac:56:d6:8e:e7:fc:
96:62:95:28:56:d0:4e:55:65:a5:45:48:91:5f:1d:
9b:4b:24:44:69:27:49:1c:c6:15:33:1b:ee:f6:f9:
f0:cf:85:05:fe:da:38:df:1c:59:5a:56:70:33:8a:
42:96:99:71:8c:01:2d:0f:39:1d:64:b8:b3:53:88:
72:6e:1f:18:90:1c:1b:fa:31:3d:c1:42:00:fb:d0:
68:cc:d3:5f:8b:3e:8c:43:3a:a6:dc:90:0d:61:b1:
75:d6:e9:f9:c6:54:0a:e8:06:05:93:78:a5:ba:cc:
4f:71:01:82:52:a0:6f:1b:00:a5:d9:fa:f7:29:b5:
33:5c:52:0f:18:ff:3a:47:3f:ad:c9:ca:8f:a9:2a:
3b:be:14:16:f6:88:d6:08:a5:52:4a:df:fa:db:68:
f5:9b:8c:a9:7f:65:12:88:4c:82:65:7f:1a:d9:1b:
ab:b1:6b:57:70:b4:2a:40:61:b6:31:c7:1a:f6:ff:
b0:32:83:d1:15:28:23:c6:eb:64:89:46:53:2f:ce:
d5:f6:36:58:8a:6c:be:96:5a:33:0e:6e:5c:19:e8:
f0:07:35:86:10:4e:af:36:5e:eb:d4:0b:53:47:e6:
1c:1b:13:5a:06:0a:dc:97:02:28:e3:51:48:e3:3f:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6D:BD:05:74:F1:CE:75:9F:72:0D:48:B9:1F:86:80:41:81:AD:78
X509v3 Authority Key Identifier:
keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:86:9f:76:8e:79:80:96:c2:4c:14:00:71:e8:d4:bb:60:71:
23:7a:2f:a6:0f:7e:ee:f5:ce:7a:b4:07:66:82:27:49:a7:d8:
69:77:6b:6d:d2:dc:d3:af:53:0e:fc:24:c3:34:03:ac:61:20:
e5:0e:b2:66:14:3d:1d:ea:81:29:86:e6:07:91:5b:cb:27:82:
7f:0d:2d:18:89:cb:aa:e2:50:38:6f:31:3b:de:19:40:8d:f8:
90:b8:cf:04:2e:ad:e3:55:5f:bf:7e:53:fc:c1:8c:e7:17:a2:
b8:8d:d0:03:48:8e:aa:c2:cb:17:9f:bd:2e:37:07:fa:eb:a8:
2a:b5:a3:32:b7:20:c2:c1:7d:99:62:96:f5:2e:65:5f:15:70:
75:08:ac:6d:4e:e6:2f:a5:79:0e:0b:ff:74:d0:78:4a:04:20:
9b:e4:10:5d:aa:b0:ed:cc:9d:25:dc:b0:30:d5:38:01:38:5b:
64:7d:9f:a7:e9:7a:55:11:52:68:f1:2c:9d:2a:a8:87:ee:13:
00:1b:d8:37:32:0a:b7:0b:7c:b1:51:b1:f9:4f:1c:95:3a:3e:
2e:a0:ba:cf:7b:b6:10:36:aa:2a:22:0d:71:7f:53:5a:92:f6:
85:5e:6e:a6:f0:28:00:5d:8e:1c:78:a5:af:70:8d:ad:8b:35:
21:4f:29:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36kYWxBwJc58nO9YYIkbyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OTE5NTg0MDMzYzM5MTFhMDA5YmRkZTMxODNmNmM2MGIy
YWZjY2EwHhcNMjUwNjI4MTkwMTEzWhcNMjUwNjI5MTkwMTEzWjAzMTEwLwYDVQQD
EygyMTZkYmQwNTc0ZjFjZTc1OWY3MjBkNDhiOTFmODY4MDQxODFhZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA328H3LoyjDCsVtaO5/yWYpUoVtBO
VWWlRUiRXx2bSyREaSdJHMYVMxvu9vnwz4UF/to43xxZWlZwM4pClplxjAEtDzkd
ZLizU4hybh8YkBwb+jE9wUIA+9BozNNfiz6MQzqm3JANYbF11un5xlQK6AYFk3il
usxPcQGCUqBvGwCl2fr3KbUzXFIPGP86Rz+tycqPqSo7vhQW9ojWCKVSSt/622j1
m4ypf2USiEyCZX8a2RursWtXcLQqQGG2Mcca9v+wMoPRFSgjxutkiUZTL87V9jZY
imy+llozDm5cGejwBzWGEE6vNl7r1AtTR+YcGxNaBgrclwIo41FI4z/oeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFtvQV08c51n3INSLkfhoBBga14MB8GA1UdIwQY
MBaAFFmRlYQDPDkRoAm93jGD9sYLKvzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZmVhMTgtZmI2Mi00Yjk1LTlmZWIt
OWNmODExZTlmYTdhLzEvV1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yZmVhMTgtZmI2Mi00Yjk1LTlmZWItOWNmODExZTlmYTdh
LzEvV1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIafdo55
gJbCTBQAcejUu2BxI3ovpg9+7vXOerQHZoInSafYaXdrbdLc069TDvwkwzQDrGEg
5Q6yZhQ9HeqBKYbmB5FbyyeCfw0tGInLquJQOG8xO94ZQI34kLjPBC6t41Vfv35T
/MGM5xeiuI3QA0iOqsLLF5+9LjcH+uuoKrWjMrcgwsF9mWKW9S5lXxVwdQisbU7m
L6V5Dgv/dNB4SgQgm+QQXaqw7cydJdywMNU4AThbZH2fp+l6VRFSaPEsnSqoh+4T
ABvYNzIKtwt8sVGx+U8clTo+LqC6z3u2EDaqKiINcX9TWpL2hV5upvAoAF2OHHil
r3CNrYs1IU8png==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:54 2025 by rpki-client