Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File: W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier: QHgUXpw+nRM2m9MM9iZFrdW2HwhnjywcjPMDvIDXSxo=
Subject key identifier: A2:46:32:A0:C8:B9:B3:7B:7A:39:AA:9D:E7:27:16:59:E6:52:16:AF
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 01983FF4042CB04419F6FAC10F251170FDEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number: 127B
Signing time: Fri 25 Jul 2025 05:00:13 +0000
Manifest this update: Fri 25 Jul 2025 05:00:13 +0000
Manifest next update: Sat 26 Jul 2025 05:00:13 +0000
Files and hashes: 1: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: 8TA+4Fh5zmJrZX4+fXOFTS6E3+M/jkk5ynx7/IyZPcA=)
2: k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa (hash: Zg6lE/FaFkljjUzS9qnwhWnpjXkAlp/DGZm1wnoBwyI=)
3: mfyRKyki9KIilboLxZkR4V98u1A.roa (hash: zMj3oFzyTUkut1k37DX3Mbj6z32e3XRjiKGOQwnR7iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:f4:04:2c:b0:44:19:f6:fa:c1:0f:25:11:70:fd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Jul 25 05:00:13 2025 GMT
Not After : Jul 26 05:00:13 2025 GMT
Subject: CN=a24632a0c8b9b37b7a39aa9de7271659e65216af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:d6:b9:5c:e7:12:d7:fe:67:ed:1d:f1:db:
08:3c:0f:4b:85:81:df:e9:cf:a4:f1:c1:2e:84:eb:
df:d0:ab:23:56:d7:91:bc:5a:83:df:2f:ed:95:0e:
bb:20:39:02:9c:e2:f3:48:2f:4b:12:bf:f3:4f:3f:
ba:15:4e:b5:7d:79:2c:8a:28:da:c4:4f:0b:14:20:
74:13:43:e4:b4:8d:44:b0:c5:82:f1:d7:24:fb:dc:
19:7f:01:df:9d:c3:4a:70:8d:81:e2:c4:48:44:3e:
a9:06:b9:9d:b1:19:95:c2:d1:f5:7a:d4:a6:e4:af:
58:e9:3f:b1:34:7c:77:a7:3d:1c:af:2b:83:63:2c:
76:7a:a3:c2:f1:e6:99:d8:72:bf:d7:ea:19:92:79:
7d:b9:45:31:c6:cc:fc:00:78:ba:53:c6:c4:66:47:
e0:3f:d7:6f:67:d3:67:ec:95:42:5d:41:27:6c:59:
24:ce:5d:ce:73:43:46:9b:7d:5d:96:97:44:8f:d2:
1f:ea:3a:75:a1:8d:48:92:f8:1d:97:be:c9:94:b4:
8a:62:4d:dd:de:a6:20:f9:c9:28:6e:e7:4e:f4:2f:
b0:08:55:63:50:8a:e9:20:2a:88:21:ff:c1:95:fe:
f1:7b:62:ad:a1:f3:fc:7b:d6:b5:10:86:f8:ee:47:
97:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:46:32:A0:C8:B9:B3:7B:7A:39:AA:9D:E7:27:16:59:E6:52:16:AF
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f9:7c:c5:33:87:f3:29:87:b5:f1:ce:3c:be:54:c8:b3:5c:
91:6c:94:06:b0:b4:93:06:6d:ab:60:2b:bf:42:d4:c9:a2:db:
22:e7:8e:25:66:72:33:f8:d1:fb:eb:8f:b6:7d:26:27:0a:f4:
1e:46:59:85:04:0e:d1:27:a0:9d:93:ed:88:f4:37:cb:b2:32:
da:68:7a:92:11:3d:8d:f1:c7:a6:13:00:8e:94:dc:52:ac:0c:
19:f7:8d:9a:6f:f1:87:a2:8f:be:a1:f8:5e:9a:fd:ed:60:ea:
42:76:00:6c:14:3b:d9:9c:bf:4a:7f:bd:6c:8b:10:d5:c3:a9:
22:2f:12:83:6e:65:d8:8b:d3:21:73:f4:60:7f:10:91:b4:70:
4d:c2:3f:b4:d2:2b:3b:c0:2c:e3:8e:5a:8b:97:9d:33:b0:a0:
94:94:cd:0f:9c:eb:cf:ed:a5:f6:40:66:ad:3f:43:5e:6d:ee:
1b:03:32:0d:27:18:23:04:7a:93:6e:d6:04:2d:07:9c:2f:c9:
62:56:4b:59:49:ca:dd:f6:98:0b:83:12:c6:51:87:ff:44:b7:
e2:97:bb:c6:4c:73:86:93:36:6f:3e:2a:a9:df:9e:72:d8:e7:
67:62:a7:c8:22:e3:59:04:d8:cc:6f:5e:03:e9:f3:aa:02:56:
b6:8f:a4:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg/9AQssEQZ9vrBDyURcP3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOTA1NTFlM2MxN2UwYTAyZDI4ZDZkY2EyNzlkYjNlNDE0
N2Y5OTEwHhcNMjUwNzI1MDUwMDEzWhcNMjUwNzI2MDUwMDEzWjAzMTEwLwYDVQQD
EyhhMjQ2MzJhMGM4YjliMzdiN2EzOWFhOWRlNzI3MTY1OWU2NTIxNmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqzWuVznEtf+Z+0d8dsIPA9LhYHf
6c+k8cEuhOvf0KsjVteRvFqD3y/tlQ67IDkCnOLzSC9LEr/zTz+6FU61fXksiija
xE8LFCB0E0PktI1EsMWC8dck+9wZfwHfncNKcI2B4sRIRD6pBrmdsRmVwtH1etSm
5K9Y6T+xNHx3pz0cryuDYyx2eqPC8eaZ2HK/1+oZknl9uUUxxsz8AHi6U8bEZkfg
P9dvZ9Nn7JVCXUEnbFkkzl3Oc0NGm31dlpdEj9If6jp1oY1Ikvgdl77JlLSKYk3d
3qYg+ckobudO9C+wCFVjUIrpICqIIf/Blf7xe2KtofP8e9a1EIb47keXPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJGMqDIubN7ejmqnecnFlnmUhavMB8GA1UdIwQY
MBaAFFuQVR48F+CgLSjW3KJ52z5BR/mRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMTkyYTQtNzZiMi00NjVkLTg4MTgt
YTMwZTMzYTcwYjFlLzEvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jMTkyYTQtNzZiMi00NjVkLTg4MTgtYTMwZTMzYTcwYjFl
LzEvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/l8xTOH
8ymHtfHOPL5UyLNckWyUBrC0kwZtq2Arv0LUyaLbIueOJWZyM/jR++uPtn0mJwr0
HkZZhQQO0SegnZPtiPQ3y7Iy2mh6khE9jfHHphMAjpTcUqwMGfeNmm/xh6KPvqH4
Xpr97WDqQnYAbBQ72Zy/Sn+9bIsQ1cOpIi8Sg25l2IvTIXP0YH8QkbRwTcI/tNIr
O8As445ai5edM7CglJTND5zrz+2l9kBmrT9DXm3uGwMyDScYIwR6k27WBC0HnC/J
YlZLWUnK3faYC4MSxlGH/0S34pe7xkxzhpM2bz4qqd+ectjnZ2KnyCLjWQTYzG9e
A+nzqgJWto+kGQ==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:56 2025 by rpki-client