Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
File: W2k88e71-wv3LtXC4ihn0RJK89g.mft (raw, json)
Hash identifier: hllRJRFYvUpRLiE4GhpX1QguMHM/DJXhswiBlMP7/I4=
Subject key identifier: BB:23:2B:13:DD:42:FE:38:43:38:26:7B:C7:B0:F8:2A:E1:FA:67:33
Authority key identifier: 5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
Certificate issuer: /CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Certificate serial: 01974B8D3F8BBFD2756E8A655342AC6AB54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 18:00:37 +0000
Manifest this update: Sat 07 Jun 2025 18:00:37 +0000
Manifest next update: Sun 08 Jun 2025 18:00:37 +0000
Files and hashes: 1: SV9kNq2IEFMcsiU27EYmGZik5t0.roa (hash: 4jyjlSiN/7n2r//5rSK3grDPFtbjn3ApiThCyxJ+2wk=)
2: W2k88e71-wv3LtXC4ihn0RJK89g.crl (hash: +cK1p55QHW0cqkH9YI+xCE7e67aOvepA//61qhcrH2Q=)
3: g9aC_a7wC7cSS4kHbVuXcaoZ9W0.roa (hash: Vtrkb6OsU8qQ3CnvGKXLNE1uPP6pvCa3n/XLcp+xWOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:3f:8b:bf:d2:75:6e:8a:65:53:42:ac:6a:b5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Validity
Not Before: Jun 7 18:00:37 2025 GMT
Not After : Jun 8 18:00:37 2025 GMT
Subject: CN=bb232b13dd42fe384338267bc7b0f82ae1fa6733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:91:98:fd:ad:c4:51:6d:8c:19:86:33:4d:
0b:fd:c3:47:84:de:a5:5a:31:63:2c:4b:33:43:f8:
5a:6f:8f:a3:57:09:df:cf:7b:77:3c:00:5f:3d:73:
8d:f1:f9:72:6f:74:94:43:48:21:e3:3f:5e:4a:06:
12:6f:61:cc:44:55:a7:24:08:59:da:3c:1d:de:92:
35:3d:f2:19:5b:36:ad:05:be:d5:1f:4b:d0:83:41:
d3:3f:c5:bc:4b:fa:cb:1e:3f:18:41:f0:eb:8f:34:
07:ec:dc:e8:0d:39:a3:f2:81:2f:e8:56:a6:48:4d:
ad:6d:e5:83:23:64:86:ed:28:c0:f3:c6:79:68:d0:
d0:66:15:a0:d2:d2:a0:11:c7:39:f7:23:b4:6b:9b:
14:8a:ae:97:a3:fb:7d:80:c3:92:8b:b9:07:ec:f5:
6c:d6:d0:73:35:a2:1a:04:fb:5f:cb:29:91:ac:63:
1e:33:03:89:cc:42:54:24:42:e3:32:c0:67:7f:db:
2d:0a:84:1e:7a:ab:1e:81:df:0e:c2:77:b7:98:31:
45:1c:dc:6e:56:b0:dc:49:97:fb:b7:d6:bb:60:bd:
7d:9e:91:b2:f7:f0:80:02:15:84:63:7f:6c:50:2f:
b0:5d:42:f6:d8:17:46:0c:10:bc:0c:bd:27:f2:cf:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:23:2B:13:DD:42:FE:38:43:38:26:7B:C7:B0:F8:2A:E1:FA:67:33
X509v3 Authority Key Identifier:
keyid:5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0b:b0:01:8d:9e:fb:aa:87:20:4d:f6:df:1b:bb:73:33:ce:
42:1a:2d:42:91:ec:6c:d6:0e:5a:7a:d2:cd:53:62:ae:3d:5a:
b5:1a:11:70:a8:b7:b3:24:4a:70:3a:25:63:4d:4e:84:1a:c3:
74:0f:2b:82:43:95:48:cb:72:8e:0d:0d:99:2f:61:48:be:47:
ca:20:99:4f:55:8f:75:ff:9c:25:d1:00:8e:fd:35:e3:ae:e0:
ab:c4:1b:42:ce:87:d9:89:d9:a4:08:c1:74:e1:ca:61:82:f1:
e1:dd:34:fb:e6:b9:ad:30:a2:3c:c5:e3:1e:a6:56:cb:90:26:
f1:42:c2:ee:9f:82:4e:da:75:c6:91:94:a0:a5:c4:a5:40:67:
1b:e0:93:a4:f7:a5:7b:96:20:f9:86:54:b2:a8:40:42:6b:f5:
8d:db:ba:27:68:76:f3:93:71:38:1e:0b:1c:f3:00:0b:53:53:
a9:4f:e6:7b:ad:d9:bb:f0:e8:3a:fe:61:9f:f8:a1:79:40:5e:
d1:a2:da:dc:5d:3a:7c:bd:13:12:b1:36:77:ee:32:fd:23:82:
c6:c6:6b:64:a4:f9:50:f6:0d:a2:2b:02:75:f1:98:69:52:09:
f9:d2:5a:45:0b:20:c2:0f:20:27:27:81:a7:76:8c:be:15:b1:
bf:86:4e:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjT+Lv9J1boplU0KsarVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjkzY2YxZWVmNWZiMGJmNzJlZDVjMmUyMjg2N2QxMTI0
YWYzZDgwHhcNMjUwNjA3MTgwMDM3WhcNMjUwNjA4MTgwMDM3WjAzMTEwLwYDVQQD
EyhiYjIzMmIxM2RkNDJmZTM4NDMzODI2N2JjN2IwZjgyYWUxZmE2NzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M2RmP2txFFtjBmGM00L/cNHhN6l
WjFjLEszQ/hab4+jVwnfz3t3PABfPXON8flyb3SUQ0gh4z9eSgYSb2HMRFWnJAhZ
2jwd3pI1PfIZWzatBb7VH0vQg0HTP8W8S/rLHj8YQfDrjzQH7NzoDTmj8oEv6Fam
SE2tbeWDI2SG7SjA88Z5aNDQZhWg0tKgEcc59yO0a5sUiq6Xo/t9gMOSi7kH7PVs
1tBzNaIaBPtfyymRrGMeMwOJzEJUJELjMsBnf9stCoQeeqsegd8Owne3mDFFHNxu
VrDcSZf7t9a7YL19npGy9/CAAhWEY39sUC+wXUL22BdGDBC8DL0n8s91YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsjKxPdQv44Qzgme8ew+Crh+mczMB8GA1UdIwQY
MBaAFFtpPPHu9fsL9y7VwuIoZ9ESSvPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJrODhlNzEtd3YzTHRYQzRpaG4wUkpLODlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lZmYxOGQtNWNjNC00MjNmLTk1MTgt
ZWI4NDNlMTdjMDVlLzEvVzJrODhlNzEtd3YzTHRYQzRpaG4wUkpLODlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lZmYxOGQtNWNjNC00MjNmLTk1MTgtZWI4NDNlMTdjMDVl
LzEvVzJrODhlNzEtd3YzTHRYQzRpaG4wUkpLODlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAuwAY2e
+6qHIE323xu7czPOQhotQpHsbNYOWnrSzVNirj1atRoRcKi3syRKcDolY01OhBrD
dA8rgkOVSMtyjg0NmS9hSL5HyiCZT1WPdf+cJdEAjv01467gq8QbQs6H2YnZpAjB
dOHKYYLx4d00++a5rTCiPMXjHqZWy5Am8ULC7p+CTtp1xpGUoKXEpUBnG+CTpPel
e5Yg+YZUsqhAQmv1jdu6J2h285NxOB4LHPMAC1NTqU/me63Zu/DoOv5hn/iheUBe
0aLa3F06fL0TErE2d+4y/SOCxsZrZKT5UPYNoisCdfGYaVIJ+dJaRQsgwg8gJyeB
p3aMvhWxv4ZO2w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:34 2025 by rpki-client