
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
File: P_WH5OB6zfs4niWRYdoYazhrT2M.mft (raw, json)
Hash identifier: pJH3s0lDo8XV64ioTrIfQS9QJzuIaIkGcfXyD3RPQYM=
Subject key identifier: 4C:CD:67:A8:0F:56:31:75:76:BA:EF:B6:4E:2F:AC:E1:A7:90:C0:68
Authority key identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
Certificate issuer: /CN=3ff587e4e07acdfb389e259161da186b386b4f63
Certificate serial: 019750467B01F858969B39A451BF87BE1634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
Manifest number: 2E
Signing time: Sun 08 Jun 2025 16:01:25 +0000
Manifest this update: Sun 08 Jun 2025 16:01:25 +0000
Manifest next update: Mon 09 Jun 2025 16:01:25 +0000
Files and hashes: 1: P_WH5OB6zfs4niWRYdoYazhrT2M.crl (hash: VeSlOcl206LAVoTG73KGRGM2Kej0jyRRj9EOp7eLFcY=)
2: SOJJoBTyyJua9tdu4tZ2B31g56k.roa (hash: YMViz3GkzFQZUT08/Yf5mLb5Z5Bzg+msMTH8wr8BZ0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:7b:01:f8:58:96:9b:39:a4:51:bf:87:be:16:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff587e4e07acdfb389e259161da186b386b4f63
Validity
Not Before: Jun 8 16:01:25 2025 GMT
Not After : Jun 9 16:01:25 2025 GMT
Subject: CN=4ccd67a80f56317576baefb64e2face1a790c068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:f5:61:11:35:2e:65:2b:f0:2b:4c:e7:f7:
46:46:28:3a:ce:48:e4:e0:ba:7d:aa:57:4f:a6:72:
11:9c:b1:15:51:f0:ee:13:51:d0:ed:65:6c:08:87:
b9:51:9b:62:8f:a5:1e:dc:2d:0f:d5:cf:40:93:d2:
fa:13:d0:d3:61:10:91:e3:b0:21:3d:0d:67:1b:99:
b9:19:a1:40:5b:45:1b:ea:e1:46:5d:89:c5:10:0e:
82:e8:ca:73:52:12:f2:91:e8:88:c9:c8:2e:5f:28:
ed:29:b8:8b:88:f8:35:92:16:ad:c1:6c:3f:cf:c7:
54:73:bf:64:3d:c2:e7:b7:c9:47:73:b0:85:88:f3:
c9:c3:14:73:d4:0e:b3:8d:0d:60:bd:ae:13:11:f4:
61:7e:75:94:70:13:1a:24:01:04:5f:ba:7a:e5:d9:
61:91:2b:84:a8:5f:d5:b7:1a:8a:06:1c:4a:79:f3:
cb:ac:d3:3d:3f:a2:ca:0f:e5:f6:a3:40:c1:bc:2a:
e6:3d:e1:bc:65:eb:02:e7:d0:99:22:79:b6:47:2e:
6d:e5:2a:6c:b9:4d:97:7d:70:91:07:8d:da:e1:1c:
90:86:5b:73:0e:ec:a5:21:6f:7a:37:05:b0:0e:7d:
0a:9f:ac:ba:c4:9f:de:04:d8:ed:d9:e6:a8:52:97:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CD:67:A8:0F:56:31:75:76:BA:EF:B6:4E:2F:AC:E1:A7:90:C0:68
X509v3 Authority Key Identifier:
keyid:3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b0:0e:83:4e:74:81:16:80:77:03:38:02:57:9f:c5:1e:56:
40:9b:9b:c7:db:ba:b0:eb:5e:4d:09:3d:5a:25:e0:b4:ed:31:
31:6d:7f:ce:6c:0c:a0:86:51:bc:62:bb:8b:14:22:bb:a7:94:
73:4a:5a:0d:b2:fa:84:eb:f4:e4:94:5d:1e:82:b6:91:8f:d6:
e2:5d:fa:b0:43:88:b2:b7:25:a9:24:6f:31:99:9f:f2:48:f1:
01:fe:2e:89:65:cc:79:6a:1d:f0:b4:4b:d3:e9:d3:07:ba:c5:
39:1e:3d:11:57:66:4c:77:cc:77:5d:b2:01:cb:ad:1c:f1:21:
82:3c:61:97:ef:4e:ef:da:50:ef:ad:28:37:6a:fe:11:ac:19:
d4:ae:75:57:c7:03:b2:97:df:f0:cd:49:57:5b:7f:d0:a8:97:
f2:c8:99:c4:28:cc:af:0b:2f:e6:e1:38:1f:9b:eb:8a:55:1f:
90:80:fb:fb:b1:1e:b3:9c:10:af:69:65:16:93:00:d4:5a:a9:
0f:f2:ca:ec:86:ff:be:8a:62:a1:38:f6:7d:c1:80:d9:55:ff:
44:03:48:f4:0b:25:83:cd:3d:07:d2:e0:56:7b:1c:30:d8:13:
78:82:ae:96:95:ea:55:62:5e:35:ff:51:a2:35:5b:b7:b8:69:
22:0b:5b:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRnsB+FiWmzmkUb+HvhY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZjU4N2U0ZTA3YWNkZmIzODllMjU5MTYxZGExODZiMzg2
YjRmNjMwHhcNMjUwNjA4MTYwMTI1WhcNMjUwNjA5MTYwMTI1WjAzMTEwLwYDVQQD
Eyg0Y2NkNjdhODBmNTYzMTc1NzZiYWVmYjY0ZTJmYWNlMWE3OTBjMDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZf1YRE1LmUr8CtM5/dGRig6zkjk
4Lp9qldPpnIRnLEVUfDuE1HQ7WVsCIe5UZtij6Ue3C0P1c9Ak9L6E9DTYRCR47Ah
PQ1nG5m5GaFAW0Ub6uFGXYnFEA6C6MpzUhLykeiIycguXyjtKbiLiPg1khatwWw/
z8dUc79kPcLnt8lHc7CFiPPJwxRz1A6zjQ1gva4TEfRhfnWUcBMaJAEEX7p65dlh
kSuEqF/VtxqKBhxKefPLrNM9P6LKD+X2o0DBvCrmPeG8ZesC59CZInm2Ry5t5Sps
uU2XfXCRB43a4RyQhltzDuylIW96NwWwDn0Kn6y6xJ/eBNjt2eaoUpfUwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzNZ6gPVjF1drrvtk4vrOGnkMBoMB8GA1UdIwQY
MBaAFD/1h+Tges37OJ4lkWHaGGs4a09jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mOTE3YzItZmM2ZC00NDY4LWExMjEt
NTZmYTA2YzQzMTgwLzEvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9mOTE3YzItZmM2ZC00NDY4LWExMjEtNTZmYTA2YzQzMTgw
LzEvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7AOg050
gRaAdwM4AlefxR5WQJubx9u6sOteTQk9WiXgtO0xMW1/zmwMoIZRvGK7ixQiu6eU
c0paDbL6hOv05JRdHoK2kY/W4l36sEOIsrclqSRvMZmf8kjxAf4uiWXMeWod8LRL
0+nTB7rFOR49EVdmTHfMd12yAcutHPEhgjxhl+9O79pQ760oN2r+EawZ1K51V8cD
spff8M1JV1t/0KiX8siZxCjMrwsv5uE4H5vrilUfkID7+7Ees5wQr2llFpMA1Fqp
D/LK7Ib/vopioTj2fcGA2VX/RANI9Aslg809B9LgVnscMNgTeIKulpXqVWJeNf9R
ojVbt7hpIgtbxw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:51 2025 by rpki-client