Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: d9JZeoprKWQqoOUequVIIFl12ShOO+QN7YT7QiU+lmA=
Subject key identifier: 8A:C9:AD:E0:7B:65:04:F4:06:AA:33:36:1C:99:59:52:74:26:57:B5
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 019750463AC4156CB1300790DD4CF9C3CDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: E9
Signing time: Sun 08 Jun 2025 16:01:09 +0000
Manifest this update: Sun 08 Jun 2025 16:01:09 +0000
Manifest next update: Mon 09 Jun 2025 16:01:09 +0000
Files and hashes: 1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=)
2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: y2IQMYKrhV9TCt9riFGCedjTlb4svMm3CjaAsOE8Fs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:3a:c4:15:6c:b1:30:07:90:dd:4c:f9:c3:cd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Jun 8 16:01:09 2025 GMT
Not After : Jun 9 16:01:09 2025 GMT
Subject: CN=8ac9ade07b6504f406aa33361c995952742657b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:56:21:8b:43:56:af:bb:7d:b3:85:f7:86:
82:0b:7d:de:61:9d:7c:be:04:aa:80:0c:57:51:5c:
0d:3f:10:18:8e:91:54:c7:49:f9:c5:f2:6a:b4:1b:
77:98:e7:7c:3e:63:e4:cf:56:73:57:a8:0b:58:72:
25:8d:56:93:5a:e5:b7:8e:89:9b:a8:e1:83:1c:5e:
82:4f:4b:f8:7f:b8:98:d2:b8:d8:90:cd:a3:3f:5c:
cb:a4:6b:0f:0e:31:b2:5d:7a:62:80:80:82:4b:f1:
13:c1:2a:c4:5c:58:08:ab:f1:46:d4:a5:ff:d2:6b:
dc:7f:01:f8:dc:86:a3:09:4a:c2:92:3c:51:1f:e3:
f8:ec:14:be:92:f4:a0:88:ee:d0:d5:ea:ce:68:4a:
6c:c0:a3:a4:63:04:07:42:61:07:30:71:ec:09:83:
ae:e7:f1:a7:a8:63:f5:cf:fa:da:a3:8a:90:89:03:
52:f6:6d:c3:bd:f1:97:07:12:7f:15:a5:64:b5:de:
25:e8:ae:ab:cd:f7:0c:f2:ba:a2:9e:fc:c7:c2:eb:
b3:a7:ce:46:ee:7f:4e:3b:34:59:07:0b:8c:d4:f2:
bd:9d:1d:24:22:da:25:0c:03:1e:b9:57:a6:3f:d5:
0d:29:b5:af:c4:20:f7:13:13:51:15:09:a1:11:89:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C9:AD:E0:7B:65:04:F4:06:AA:33:36:1C:99:59:52:74:26:57:B5
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3a:ff:33:3a:a1:1e:f0:eb:ad:75:10:77:04:7e:72:f2:d9:
80:7b:38:92:68:8b:f3:2f:ee:d9:f9:2a:d7:a7:fd:13:ec:94:
39:ef:94:a6:09:b6:18:41:e0:46:97:0b:63:36:3a:b2:dd:6e:
c7:16:8b:2d:cc:bc:37:7a:52:35:aa:8d:38:4f:10:25:ee:38:
7e:13:16:d3:d0:6b:0f:45:d4:35:d9:91:0c:96:4e:9c:ca:70:
e6:65:32:1e:27:cd:5d:77:17:05:5d:64:ed:cf:c1:d8:11:7b:
8a:11:32:95:f4:6f:79:67:21:5e:f6:52:b0:42:75:b5:ee:a5:
34:fe:24:2b:9a:af:a2:9d:74:8f:c7:26:e6:d0:56:d3:46:e9:
f5:21:55:84:8a:dd:14:25:97:41:28:8a:fa:24:88:eb:e0:64:
5b:b0:72:0b:21:e5:c3:ec:2d:ae:4a:b6:03:65:2e:3e:fa:02:
bb:57:0b:9b:fa:c5:bc:bf:20:80:c0:c8:3c:58:af:e8:5c:30:
34:a3:ac:73:8d:da:b3:86:4a:e0:51:fb:22:bc:66:e4:29:6b:
a5:1a:aa:3c:7e:1c:40:d9:57:6e:16:3a:a1:f8:39:08:89:9e:
57:71:b0:bf:c0:1b:03:d8:a3:65:50:2e:86:1c:f5:6f:f7:2c:
a9:f5:93:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRjrEFWyxMAeQ3Uz5w83jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDg3ZDkyZjg5MGMyZDM2NTk2ZGVjYTFjYjBiMGJiOGIw
N2ExMjIwHhcNMjUwNjA4MTYwMTA5WhcNMjUwNjA5MTYwMTA5WjAzMTEwLwYDVQQD
Eyg4YWM5YWRlMDdiNjUwNGY0MDZhYTMzMzYxYzk5NTk1Mjc0MjY1N2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm01WIYtDVq+7fbOF94aCC33eYZ18
vgSqgAxXUVwNPxAYjpFUx0n5xfJqtBt3mOd8PmPkz1ZzV6gLWHIljVaTWuW3jomb
qOGDHF6CT0v4f7iY0rjYkM2jP1zLpGsPDjGyXXpigICCS/ETwSrEXFgIq/FG1KX/
0mvcfwH43IajCUrCkjxRH+P47BS+kvSgiO7Q1erOaEpswKOkYwQHQmEHMHHsCYOu
5/GnqGP1z/rao4qQiQNS9m3DvfGXBxJ/FaVktd4l6K6rzfcM8rqinvzHwuuzp85G
7n9OOzRZBwuM1PK9nR0kItolDAMeuVemP9UNKbWvxCD3ExNRFQmhEYmpkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrJreB7ZQT0BqozNhyZWVJ0Jle1MB8GA1UdIwQY
MBaAFFjYfZL4kMLTZZbeyhywsLuLB6EiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMt
YmQ3MzYwOWVlNWRhLzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMtYmQ3MzYwOWVlNWRh
LzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjr/Mzqh
HvDrrXUQdwR+cvLZgHs4kmiL8y/u2fkq16f9E+yUOe+Upgm2GEHgRpcLYzY6st1u
xxaLLcy8N3pSNaqNOE8QJe44fhMW09BrD0XUNdmRDJZOnMpw5mUyHifNXXcXBV1k
7c/B2BF7ihEylfRveWchXvZSsEJ1te6lNP4kK5qvop10j8cm5tBW00bp9SFVhIrd
FCWXQSiK+iSI6+BkW7ByCyHlw+wtrkq2A2UuPvoCu1cLm/rFvL8ggMDIPFiv6Fww
NKOsc43as4ZK4FH7Irxm5ClrpRqqPH4cQNlXbhY6ofg5CImeV3Gwv8AbA9ijZVAu
hhz1b/csqfWTfQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:05:23 2025 by rpki-client