
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: Crw8vrv+/kXxcu01V2Bi7tLn1gCLCjhLgACbpsNM94k=
Subject key identifier: B0:12:4E:53:F4:26:75:B3:90:36:E7:65:6A:BA:EE:4E:AF:EF:FF:B0
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 01983BE0720C54E5B86660BB2724EFAE76F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 160C
Signing time: Thu 24 Jul 2025 10:00:21 +0000
Manifest this update: Thu 24 Jul 2025 10:00:21 +0000
Manifest next update: Fri 25 Jul 2025 10:00:21 +0000
Files and hashes: 1: 3IRgLqbP_ec1EGoarWc4xpisfyQ.roa (hash: GZRzYUts0dDxW36RNVg638JimijfwAxJcVtkZHDVq/A=)
2: 96CIMKKoqN02QJYrluNPvEhoHEk.roa (hash: PH9kqz02Fz7yivfLv32cVnK1ToPORdX94byNA/yE6eo=)
3: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (hash: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=)
4: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: r5Avp7ZwqxtChjtBgPe+2p6L0/4YaWWnm2Jls8BEc1Y=)
5: g81BDZuaFjsKwaBqFnyHLcFPLZs.roa (hash: jSl9q0mLuOCF9O2+fEMHTTPvVPdoA/bqHU0pF52USoE=)
6: hVkEcV5BYqMN66hJqLsfxmtD6-I.roa (hash: qGjxxeMK37L3nzimP1DFdWK9NxQEtXmgcd3DzWsOUEg=)
7: i7LPx3k5NSVEBiacqO7vPHaWiwU.roa (hash: gYTLRIvfaUJXoKPS7pQ+Cpl5E8jxQVsdISY+9vzV8lg=)
8: p4_2wcOawugaSj43rAVSkkmPf8k.roa (hash: Y3pbjD0B2GwO/FNWMPam+BoxaGEQd85k797hs416lA8=)
9: t7xFNtek28TRqAwV5AsSOdRcmio.roa (hash: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:e0:72:0c:54:e5:b8:66:60:bb:27:24:ef:ae:76:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jul 24 10:00:21 2025 GMT
Not After : Jul 25 10:00:21 2025 GMT
Subject: CN=b0124e53f42675b39036e7656abaee4eafefffb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:7b:88:b0:fe:d1:00:8d:c5:be:b9:fb:78:
6e:af:4b:fc:43:50:ab:2f:9b:53:35:a9:32:b9:42:
48:ab:89:65:e5:b7:8c:47:f5:3e:33:19:fd:90:4d:
f7:8f:4d:01:6c:07:2f:ab:05:87:08:0c:3f:0b:4f:
6e:c9:d3:31:78:bc:0c:32:33:36:34:92:5b:ff:72:
42:3a:1f:7a:34:ce:50:2d:d2:ad:d6:76:e3:66:3a:
5d:08:b7:9b:77:a3:48:81:96:60:68:f2:4b:04:dc:
dd:9d:74:ea:0d:b6:85:61:ae:80:d4:07:f2:46:dc:
15:60:dc:ea:8e:2c:c3:3b:b5:31:c6:50:cc:cc:87:
82:44:f1:23:06:3a:d5:5e:ae:79:72:6e:5f:cc:ed:
4f:cc:ae:c7:2c:2c:1a:08:9a:43:4b:1b:8c:2c:8a:
d7:10:08:90:5b:96:92:3c:4e:48:26:73:1d:3d:c1:
47:ff:af:31:bc:c8:d5:f9:11:1a:d9:fa:32:42:ef:
8f:aa:84:20:eb:c7:09:5c:0e:a2:84:7d:ce:da:5f:
54:3a:58:b9:19:2e:4a:0b:bd:7c:d3:b0:b0:ea:50:
a5:7b:58:99:64:d8:83:82:d2:0d:06:3f:f7:49:97:
9a:3d:39:e5:dc:e9:ff:ff:b1:fd:eb:42:3f:34:e9:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:12:4E:53:F4:26:75:B3:90:36:E7:65:6A:BA:EE:4E:AF:EF:FF:B0
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a3:a2:1f:86:3a:3a:e9:a8:95:49:56:b5:6d:c4:07:47:3c:
bb:35:49:72:c2:c3:e3:48:c9:20:ae:ba:75:46:ed:cb:c7:1b:
ba:56:f7:4e:e3:4a:15:b2:b9:8b:4e:b4:6a:ec:ab:dc:8e:27:
16:64:56:aa:c5:be:13:0c:e1:30:b0:49:4b:90:3a:c3:9c:0e:
bf:a3:08:90:84:34:32:5b:e1:ac:c8:b0:31:ff:af:fa:cf:20:
bf:c3:d9:6d:73:ff:00:e5:b4:89:aa:57:2e:e3:07:2e:f2:1c:
5e:46:08:16:0a:0c:b9:0d:6f:9d:76:50:2d:c0:70:e3:5e:f0:
9a:48:71:fd:c6:2b:ef:e4:30:4f:f3:f4:de:08:d9:9c:df:5f:
16:f0:4e:3c:a6:14:a4:54:d0:64:8c:41:5f:ed:02:69:37:a5:
fd:9f:73:f7:9a:01:3f:30:83:b1:c6:3e:fb:85:17:90:d5:e9:
61:5b:1e:7d:f2:c1:3d:ef:3f:cc:a3:10:3f:71:a7:8c:3f:6c:
17:93:da:a5:30:d8:a5:07:36:e3:12:0f:24:3f:be:1e:87:3f:
c0:05:fd:3f:7c:6b:da:5f:96:3d:66:db:73:c0:a3:6a:8a:8c:
5c:c6:64:65:3f:78:34:4f:8b:f7:0b:9c:d9:5f:7e:86:07:27:
aa:cd:70:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg74HIMVOW4ZmC7JyTvrnb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2
MDk4YjcwHhcNMjUwNzI0MTAwMDIxWhcNMjUwNzI1MTAwMDIxWjAzMTEwLwYDVQQD
EyhiMDEyNGU1M2Y0MjY3NWIzOTAzNmU3NjU2YWJhZWU0ZWFmZWZmZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTR7iLD+0QCNxb65+3hur0v8Q1Cr
L5tTNakyuUJIq4ll5beMR/U+Mxn9kE33j00BbAcvqwWHCAw/C09uydMxeLwMMjM2
NJJb/3JCOh96NM5QLdKt1nbjZjpdCLebd6NIgZZgaPJLBNzdnXTqDbaFYa6A1Afy
RtwVYNzqjizDO7UxxlDMzIeCRPEjBjrVXq55cm5fzO1PzK7HLCwaCJpDSxuMLIrX
EAiQW5aSPE5IJnMdPcFH/68xvMjV+REa2foyQu+PqoQg68cJXA6ihH3O2l9UOli5
GS5KC71807Cw6lCle1iZZNiDgtINBj/3SZeaPTnl3On//7H960I/NOk+owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLASTlP0JnWzkDbnZWq67k6v7/+wMB8GA1UdIwQY
MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt
NDQzYmU2M2ZjMTIzLzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz
LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaOiH4Y6
OumolUlWtW3EB0c8uzVJcsLD40jJIK66dUbty8cbulb3TuNKFbK5i060auyr3I4n
FmRWqsW+EwzhMLBJS5A6w5wOv6MIkIQ0MlvhrMiwMf+v+s8gv8PZbXP/AOW0iapX
LuMHLvIcXkYIFgoMuQ1vnXZQLcBw417wmkhx/cYr7+QwT/P03gjZnN9fFvBOPKYU
pFTQZIxBX+0CaTel/Z9z95oBPzCDscY++4UXkNXpYVseffLBPe8/zKMQP3GnjD9s
F5PapTDYpQc24xIPJD++Hoc/wAX9P3xr2l+WPWbbc8CjaoqMXMZkZT94NE+L9wuc
2V9+hgcnqs1wCQ==
-----END CERTIFICATE-----
Generated at Thu Jul 24 17:08:40 2025 by rpki-client