Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
File: W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json)
Hash identifier: YX058cpGghBZb61Nfpx6qv9o/P9X1n4k5Mvvaz1Vep8=
Subject key identifier: C3:70:21:CB:40:7E:69:26:D2:FA:52:9D:17:A5:08:18:99:3C:D9:43
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial: 01984AAEB39B7FA26192F759F053D8F11ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
Manifest number: 0CA5
Signing time: Sun 27 Jul 2025 07:00:19 +0000
Manifest this update: Sun 27 Jul 2025 07:00:19 +0000
Manifest next update: Mon 28 Jul 2025 07:00:19 +0000
Files and hashes: 1: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: j9nqQRssKW+jgIC0kKpIGe9srQBahSJ/qABWrTYIlFk=)
2: rzLK9K7U47FPPeK7ERJASBVVtlU.roa (hash: X91g9n8reIlS29Iuv4BYArQQP2cYDZgj7Nwx0mw9YJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:b3:9b:7f:a2:61:92:f7:59:f0:53:d8:f1:1a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Validity
Not Before: Jul 27 07:00:19 2025 GMT
Not After : Jul 28 07:00:19 2025 GMT
Subject: CN=c37021cb407e6926d2fa529d17a50818993cd943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:09:be:fd:ec:14:e6:45:d8:b4:45:c0:14:
da:f0:ce:18:d3:75:47:b6:2f:75:de:e9:10:07:53:
85:04:d5:54:5a:8b:24:68:c6:11:04:57:6e:da:38:
85:8d:ec:bc:5a:2b:82:da:c7:0b:c2:4c:9f:98:30:
bd:52:27:7a:75:d2:f8:aa:c9:82:f6:e8:89:4a:ca:
7c:af:18:5b:a2:50:19:e5:13:87:be:36:c4:15:4e:
69:b6:46:25:47:35:17:5b:4b:04:a4:bc:1f:aa:67:
40:0d:d2:c4:f1:c4:14:90:19:08:ba:e2:86:f8:9d:
cf:87:da:fa:cc:6b:8e:82:68:0d:d7:18:95:42:e4:
73:ea:f4:86:63:93:56:d0:8d:84:61:6e:06:8b:e4:
fe:2e:7a:0e:af:9b:43:ec:de:15:81:39:86:42:44:
7f:41:04:21:f8:43:dc:7d:c3:88:07:ef:0b:ea:78:
ca:b4:18:03:2d:2b:67:af:13:27:95:c9:34:42:d2:
cb:db:af:5c:80:93:dd:ae:c2:12:0d:5b:da:d7:e6:
58:d2:7c:49:3f:87:00:36:0f:5a:a4:c0:fd:b0:b0:
40:a7:b3:9d:a8:e1:4d:70:e1:fb:09:f8:a5:46:1a:
87:92:97:c1:23:57:c9:d1:ef:8e:c9:20:f3:ae:80:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:70:21:CB:40:7E:69:26:D2:FA:52:9D:17:A5:08:18:99:3C:D9:43
X509v3 Authority Key Identifier:
keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:88:3d:0b:84:4f:35:40:74:54:f3:5d:5f:5e:5d:b3:fa:b6:
3a:32:be:e3:c2:1c:4a:6d:d1:20:61:9a:d6:ae:d2:46:3e:73:
de:c4:f3:43:c0:f1:3c:b8:89:e1:04:db:59:ed:66:5b:21:5d:
f2:27:98:9a:4f:71:d6:ff:00:8c:1b:2f:ff:fb:c4:f8:24:03:
cc:64:f1:12:a7:b1:bc:85:68:40:03:90:e4:de:34:8f:eb:85:
b3:4b:ec:46:9d:89:b3:4e:90:8d:52:ad:cd:59:37:b3:31:87:
7d:ea:dc:00:d3:c3:5f:b7:56:f1:5c:f0:8a:a2:58:8d:1e:82:
1b:5c:35:57:f8:dc:71:49:12:76:4f:be:31:96:87:7d:20:6f:
5b:69:d6:c9:aa:10:cb:3a:82:1c:da:5e:55:17:2c:d7:5d:8f:
46:e4:97:35:47:1c:21:ec:6d:ee:3d:68:a6:38:45:17:7c:25:
54:f6:5e:a5:cd:bd:52:e4:3c:4b:f2:06:02:60:61:f4:e4:76:
1e:c8:76:c4:1f:2e:66:0c:17:67:8b:ce:43:b4:79:d8:98:56:
8c:9b:af:e9:eb:0a:f7:b8:65:58:e7:00:57:2a:fd:37:89:69:
ca:03:c2:59:8a:47:9b:d1:b8:3b:08:11:90:a6:b9:09:3a:2b:
29:57:89:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrrObf6JhkvdZ8FPY8RreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzE1MDM2MTBiZjgyZDg2ODdiN2FlZmI4NzlhNjU3ODcw
NGYzMmEwHhcNMjUwNzI3MDcwMDE5WhcNMjUwNzI4MDcwMDE5WjAzMTEwLwYDVQQD
EyhjMzcwMjFjYjQwN2U2OTI2ZDJmYTUyOWQxN2E1MDgxODk5M2NkOTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApucJvv3sFOZF2LRFwBTa8M4Y03VH
ti913ukQB1OFBNVUWoskaMYRBFdu2jiFjey8WiuC2scLwkyfmDC9Uid6ddL4qsmC
9uiJSsp8rxhbolAZ5ROHvjbEFU5ptkYlRzUXW0sEpLwfqmdADdLE8cQUkBkIuuKG
+J3Ph9r6zGuOgmgN1xiVQuRz6vSGY5NW0I2EYW4Gi+T+LnoOr5tD7N4VgTmGQkR/
QQQh+EPcfcOIB+8L6njKtBgDLStnrxMnlck0QtLL269cgJPdrsISDVva1+ZY0nxJ
P4cANg9apMD9sLBAp7OdqOFNcOH7CfilRhqHkpfBI1fJ0e+OySDzroDF5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNwIctAfmkm0vpSnRelCBiZPNlDMB8GA1UdIwQY
MBaAFFvBUDYQv4LYaHt677h5pleHBPMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zMGEzMDktYjE4ZS00ZjI3LThlN2Ut
ZTdiMzcyZTRjN2M1LzEvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8zMGEzMDktYjE4ZS00ZjI3LThlN2UtZTdiMzcyZTRjN2M1
LzEvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIg9C4RP
NUB0VPNdX15ds/q2OjK+48IcSm3RIGGa1q7SRj5z3sTzQ8DxPLiJ4QTbWe1mWyFd
8ieYmk9x1v8AjBsv//vE+CQDzGTxEqexvIVoQAOQ5N40j+uFs0vsRp2Js06QjVKt
zVk3szGHfercANPDX7dW8VzwiqJYjR6CG1w1V/jccUkSdk++MZaHfSBvW2nWyaoQ
yzqCHNpeVRcs112PRuSXNUccIext7j1opjhFF3wlVPZepc29UuQ8S/IGAmBh9OR2
Hsh2xB8uZgwXZ4vOQ7R52JhWjJuv6esK97hlWOcAVyr9N4lpygPCWYpHm9G4OwgR
kKa5CTorKVeJSw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:04:18 2025 by rpki-client