Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json)
Hash identifier: dCD1kuJD8xQIFMNNQdMzt/jYTnsULEivlnpYmXKrjHE=
Subject key identifier: 1F:7B:A2:2E:CA:40:31:F8:95:25:FB:E5:0F:2C:1C:96:E9:53:35:1E
Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Certificate serial: 01984AAEC2772FF47F734002C59DE9DA93B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 07:00:23 +0000
Manifest this update: Sun 27 Jul 2025 07:00:23 +0000
Manifest next update: Mon 28 Jul 2025 07:00:23 +0000
Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: T7omsHTla8sSZ38L7Ti+SQuDDJwUmaxt9hKkQUo0L1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:c2:77:2f:f4:7f:73:40:02:c5:9d:e9:da:93:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Validity
Not Before: Jul 27 07:00:23 2025 GMT
Not After : Jul 28 07:00:23 2025 GMT
Subject: CN=1f7ba22eca4031f89525fbe50f2c1c96e953351e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:d0:2e:2f:8b:3e:0f:70:4d:89:d0:de:9a:
58:aa:3e:db:c1:7f:0e:d5:56:a2:cb:a7:86:7e:e1:
2b:8c:71:6f:c9:34:ef:bb:3c:40:9f:88:a4:00:f4:
d6:a5:78:ac:e5:9d:19:9a:ab:07:c9:83:19:8c:ac:
8d:14:2c:11:35:01:3b:b2:24:76:55:45:36:3a:81:
ec:4c:f3:b0:da:7e:e3:9a:5c:eb:04:c7:e6:48:46:
38:06:2c:41:c6:dc:6b:30:33:a6:3b:40:70:f2:df:
37:d6:98:fc:97:c2:1e:e7:d9:db:8a:67:75:0b:45:
f0:95:e8:73:1a:a4:9b:7b:7a:a0:89:85:c4:48:00:
2e:fa:e8:6e:a5:c2:73:88:00:b4:45:68:1b:d2:da:
e9:3d:a3:72:57:c4:14:91:9a:68:12:b2:5b:7b:a0:
28:c1:e9:0d:2a:ef:0e:20:63:15:fe:19:18:81:af:
70:a3:bd:22:1b:e9:5e:c9:76:a4:c1:f8:4d:fb:97:
c6:4f:51:68:65:fb:cc:d8:c4:84:38:5f:71:e0:2b:
94:2a:5e:17:88:9e:5f:87:b0:2d:78:fc:18:ca:6a:
04:97:b4:0e:5b:11:52:13:82:8c:02:38:fe:9f:46:
f2:b2:6a:e2:d5:d3:58:5c:fa:d1:ce:f2:68:b1:a1:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7B:A2:2E:CA:40:31:F8:95:25:FB:E5:0F:2C:1C:96:E9:53:35:1E
X509v3 Authority Key Identifier:
keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ac:89:95:90:71:7f:b7:5d:cd:d7:74:96:7d:eb:53:55:e3:
8e:06:20:6d:fd:b7:9b:ac:af:c8:72:d4:b0:e5:b3:5c:2c:44:
50:bf:74:72:d3:15:f2:55:68:b1:8a:6c:17:d6:c0:97:da:d4:
58:01:6f:e6:ee:b5:92:a3:18:99:3d:b4:fa:3e:e0:ee:93:ee:
82:0f:64:45:30:94:49:1d:ad:96:54:e5:78:b8:f9:a2:7e:87:
2b:10:d0:3f:82:58:c0:cc:18:41:5a:f8:26:57:41:24:80:54:
0b:e1:a5:15:de:10:7f:77:2d:91:a5:ab:32:40:97:38:1b:2a:
87:a9:ab:f8:2b:9e:8c:ee:51:d8:c4:56:f5:14:51:f7:bf:4f:
f6:e7:db:23:6b:d0:25:67:6b:b9:3c:f2:06:82:be:0b:e3:e1:
7c:d0:b8:a2:4f:61:67:38:5c:9b:16:34:ce:97:79:91:d6:02:
d4:01:eb:b0:0b:d3:5d:f7:d4:e2:55:63:0f:47:3d:b4:c2:88:
02:6d:aa:53:dd:06:77:46:6a:a0:b3:0b:1a:ce:ec:b9:b4:ca:
16:06:a1:50:36:9d:50:3d:32:66:15:76:b5:0c:2c:26:25:7d:
c6:b4:d0:ca:f1:8b:11:15:82:47:a9:87:35:a7:b5:89:93:2f:
a6:51:de:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrsJ3L/R/c0ACxZ3p2pO5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzNjYTBkNjNhOGZjY2RjMGU5MmE4OGE2YmFjZWZmMjc1
ZTcwNDYwHhcNMjUwNzI3MDcwMDIzWhcNMjUwNzI4MDcwMDIzWjAzMTEwLwYDVQQD
EygxZjdiYTIyZWNhNDAzMWY4OTUyNWZiZTUwZjJjMWM5NmU5NTMzNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvzQLi+LPg9wTYnQ3ppYqj7bwX8O
1Vaiy6eGfuErjHFvyTTvuzxAn4ikAPTWpXis5Z0ZmqsHyYMZjKyNFCwRNQE7siR2
VUU2OoHsTPOw2n7jmlzrBMfmSEY4BixBxtxrMDOmO0Bw8t831pj8l8Ie59nbimd1
C0XwlehzGqSbe3qgiYXESAAu+uhupcJziAC0RWgb0trpPaNyV8QUkZpoErJbe6Ao
wekNKu8OIGMV/hkYga9wo70iG+leyXakwfhN+5fGT1FoZfvM2MSEOF9x4CuUKl4X
iJ5fh7AtePwYymoEl7QOWxFSE4KMAjj+n0bysmri1dNYXPrRzvJosaFnDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB97oi7KQDH4lSX75Q8sHJbpUzUeMB8GA1UdIwQY
MBaAFFvDyg1jqPzNwOkqiKa6zv8nXnBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMDczZTYtYzQ4Ny00NzhmLWI5ZDkt
M2MxZTA1MThmOWU1LzEvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xMDczZTYtYzQ4Ny00NzhmLWI5ZDktM2MxZTA1MThmOWU1
LzEvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKyJlZBx
f7ddzdd0ln3rU1XjjgYgbf23m6yvyHLUsOWzXCxEUL90ctMV8lVosYpsF9bAl9rU
WAFv5u61kqMYmT20+j7g7pPugg9kRTCUSR2tllTleLj5on6HKxDQP4JYwMwYQVr4
JldBJIBUC+GlFd4Qf3ctkaWrMkCXOBsqh6mr+CuejO5R2MRW9RRR979P9ufbI2vQ
JWdruTzyBoK+C+PhfNC4ok9hZzhcmxY0zpd5kdYC1AHrsAvTXffU4lVjD0c9tMKI
Am2qU90Gd0ZqoLMLGs7subTKFgahUDadUD0yZhV2tQwsJiV9xrTQyvGLERWCR6mH
Nae1iZMvplHeWg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 16:32:02 2025 by rpki-client