Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
File: WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json)
Hash identifier: J4LKR9JpjNCGaZvIpYurm03f0C+16XtOQP3gS7Vbabs=
Subject key identifier: 73:2D:FD:DA:FE:2C:AB:FA:F2:72:7C:05:17:A4:D9:8E:5F:A3:C3:E1
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 0198D66002855F370A7E6DE706DB2B22F063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
Manifest number: 1563
Signing time: Sat 23 Aug 2025 10:01:12 +0000
Manifest this update: Sat 23 Aug 2025 10:01:12 +0000
Manifest next update: Sun 24 Aug 2025 10:01:12 +0000
Files and hashes: 1: LYb-x1oBjYV986-WVWGm87nYs0w.roa (hash: Hdp26qwcmy9Rb38THuQbvn6WpSeZJ3xKyk1AFGilm9k=)
2: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: XxxqUFYKhl6VIh+pwGJZZ6HG3X4tGvd1cEaJXzCtHt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:02:85:5f:37:0a:7e:6d:e7:06:db:2b:22:f0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: Aug 23 10:01:12 2025 GMT
Not After : Aug 24 10:01:12 2025 GMT
Subject: CN=732dfddafe2cabfaf2727c0517a4d98e5fa3c3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:7f:14:96:a0:49:45:fc:6a:83:19:29:e9:
fd:dd:0a:be:ec:14:7e:01:10:db:34:0f:ef:06:f6:
23:e9:0d:db:10:7e:89:5a:e4:63:7f:b4:0f:0b:57:
2f:02:af:6d:dd:c3:b3:3d:96:dc:64:e0:d2:3b:40:
23:a3:ee:13:a9:13:17:06:c2:ec:3d:a5:02:43:75:
79:ee:00:f0:17:a1:3b:af:d4:1f:c0:09:df:06:dd:
3f:87:3d:f4:90:44:45:b1:d1:66:64:1e:cc:16:be:
92:05:48:b9:09:7f:5e:d3:0d:b6:76:17:e6:64:96:
03:4f:16:11:6f:ea:c3:52:76:5a:c9:52:99:66:a0:
43:72:6c:f6:b9:7a:a0:32:ee:13:5e:b9:cc:50:fe:
e2:fe:90:fc:5c:0a:fc:f4:58:75:59:70:19:96:a5:
bf:82:04:b3:ce:3c:8c:23:84:0c:df:cf:62:2e:be:
e2:53:e3:51:fe:92:f3:6e:10:26:c6:eb:37:c5:57:
66:16:3a:92:43:04:4a:cc:8f:b8:e2:52:78:03:00:
38:eb:15:29:38:38:0b:7a:eb:b3:a8:ad:c0:36:69:
9c:41:6a:e1:c4:5a:2f:cf:94:6a:9d:23:20:9f:f3:
50:ee:63:3b:d1:62:bd:fd:ad:0e:09:20:2c:00:00:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2D:FD:DA:FE:2C:AB:FA:F2:72:7C:05:17:A4:D9:8E:5F:A3:C3:E1
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:57:c2:54:10:91:7b:fc:9e:0a:d5:34:64:36:28:5b:24:96:
b5:14:5f:fb:2a:c7:7a:8d:59:00:be:ca:e6:92:11:65:e0:1f:
e7:0e:81:0b:66:ad:5a:d6:f7:f0:bd:ee:99:b1:d7:f5:e0:24:
a8:68:b3:a3:c4:f4:61:fc:60:b4:d3:19:c2:60:cb:b1:e6:ee:
a8:65:b3:b3:07:b2:c5:d9:bd:ed:98:13:0f:6c:8a:4b:40:31:
a0:38:90:2d:8e:16:be:e5:9c:15:10:2e:c3:60:82:76:f1:c9:
fb:d1:fd:58:b8:58:49:69:05:05:ab:f8:81:07:c0:2f:7b:95:
4c:34:69:c9:b1:5a:84:68:d8:bd:80:d7:9b:f6:9f:1d:69:0e:
87:2c:5b:d8:05:6f:ee:e9:bf:3b:a8:a3:ea:99:06:53:1c:9d:
21:dd:d2:aa:3c:55:ec:02:f7:6b:81:da:b0:76:dc:92:94:b3:
da:05:18:e2:fa:ea:66:79:d2:98:cd:80:72:6e:ad:b2:4d:a6:
e9:50:12:cf:5c:6c:85:ec:33:f8:7f:88:0c:98:05:dd:4f:f4:
80:70:32:b1:49:08:eb:5b:a6:cd:9e:98:d7:41:ac:08:7a:ba:
e9:67:7a:86:fb:39:c2:34:e9:f9:2f:61:a8:a9:80:77:0f:0c:
22:19:b6:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYAKFXzcKfm3nBtsrIvBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZmFkMzg4YmVhNzFkYTJmNDNmMzlhNDVlMTAxNDFkNmYy
OWM0MjgwHhcNMjUwODIzMTAwMTEyWhcNMjUwODI0MTAwMTEyWjAzMTEwLwYDVQQD
Eyg3MzJkZmRkYWZlMmNhYmZhZjI3MjdjMDUxN2E0ZDk4ZTVmYTNjM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cl/FJagSUX8aoMZKen93Qq+7BR+
ARDbNA/vBvYj6Q3bEH6JWuRjf7QPC1cvAq9t3cOzPZbcZODSO0Ajo+4TqRMXBsLs
PaUCQ3V57gDwF6E7r9QfwAnfBt0/hz30kERFsdFmZB7MFr6SBUi5CX9e0w22dhfm
ZJYDTxYRb+rDUnZayVKZZqBDcmz2uXqgMu4TXrnMUP7i/pD8XAr89Fh1WXAZlqW/
ggSzzjyMI4QM389iLr7iU+NR/pLzbhAmxus3xVdmFjqSQwRKzI+44lJ4AwA46xUp
ODgLeuuzqK3ANmmcQWrhxFovz5RqnSMgn/NQ7mM70WK9/a0OCSAsAADEHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMt/dr+LKv68nJ8BRek2Y5fo8PhMB8GA1UdIwQY
MBaAFFn604i+px2i9D85pF4QFB1vKcQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZyVGlMNm5IYUwwUHpta1hoQVVIVzhweENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80ZWE0ODEtYmE5Ny00Yjk0LWIwMDAt
MzViZDY1ZjFmMmE0LzEvV2ZyVGlMNm5IYUwwUHpta1hoQVVIVzhweENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80ZWE0ODEtYmE5Ny00Yjk0LWIwMDAtMzViZDY1ZjFmMmE0
LzEvV2ZyVGlMNm5IYUwwUHpta1hoQVVIVzhweENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFfCVBCR
e/yeCtU0ZDYoWySWtRRf+yrHeo1ZAL7K5pIRZeAf5w6BC2atWtb38L3umbHX9eAk
qGizo8T0YfxgtNMZwmDLsebuqGWzsweyxdm97ZgTD2yKS0AxoDiQLY4WvuWcFRAu
w2CCdvHJ+9H9WLhYSWkFBav4gQfAL3uVTDRpybFahGjYvYDXm/afHWkOhyxb2AVv
7um/O6ij6pkGUxydId3SqjxV7AL3a4HasHbckpSz2gUY4vrqZnnSmM2Acm6tsk2m
6VASz1xshewz+H+IDJgF3U/0gHAysUkI61umzZ6Y10GsCHq66Wd6hvs5wjTp+S9h
qKmAdw8MIhm2Rw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:55 2025 by rpki-client