Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
File: WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json)
Hash identifier: wNz0kTkwOjGdY/kfPYSHb/vDpk61gogj70wXA9WkK+4=
Subject key identifier: 7F:F4:7E:F8:8D:A0:2B:A5:51:E2:46:23:99:C6:E6:67:05:06:32:DB
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial: 01974FD7E99DE8B2A935A5AA2187DB82A67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
Manifest number: 0ECC
Signing time: Sun 08 Jun 2025 14:00:39 +0000
Manifest this update: Sun 08 Jun 2025 14:00:39 +0000
Manifest next update: Mon 09 Jun 2025 14:00:39 +0000
Files and hashes: 1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: gELBMihC8BuhGuNuIRcYQwypeTH0Sz7Auk4a+4g0tCo=)
2: taSqw31_rwZ-hq0xkmTZUp1cyvw.roa (hash: V6lzw9iNkrzm6qgoGO8eVYLPpqNejoCjLT7yaMGPS3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:e9:9d:e8:b2:a9:35:a5:aa:21:87:db:82:a6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Validity
Not Before: Jun 8 14:00:39 2025 GMT
Not After : Jun 9 14:00:39 2025 GMT
Subject: CN=7ff47ef88da02ba551e2462399c6e667050632db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:45:00:7d:dc:64:ef:56:b2:e8:8e:ea:1d:
b8:ec:98:a8:62:df:e8:0a:cc:a1:59:8c:a1:7a:22:
9d:9d:c6:56:12:e4:e2:fb:71:e5:e0:d2:78:d7:84:
dc:74:0c:72:54:b4:2d:56:e0:ca:54:45:bc:76:f6:
75:88:1f:c4:2f:4c:da:c8:57:fb:18:59:e4:8f:98:
8c:63:b0:b0:26:c5:96:77:22:e3:ed:90:56:c4:b6:
7e:a8:a9:5a:7a:84:41:59:1e:46:ce:c5:a9:83:b4:
fb:b7:f9:e6:46:c6:00:59:e3:09:cf:70:c5:3d:98:
9b:1a:eb:d2:c8:ad:5b:9e:ba:ca:04:ed:5a:86:99:
4a:27:f6:a3:35:cf:7b:0e:f9:64:16:b7:f1:02:87:
a1:72:3f:c1:56:b6:24:32:55:df:3b:41:20:ae:d1:
26:ea:a3:0f:68:c1:58:c4:d0:2c:12:00:3d:91:90:
31:f0:5b:2d:ea:85:63:4e:f1:0e:75:d0:0d:d3:f6:
12:08:ef:36:83:99:51:3c:49:e2:9b:cc:35:c8:21:
07:79:dd:76:b6:f2:ca:dc:9d:fa:49:f2:80:74:49:
50:d5:5f:80:cd:1b:8b:3f:65:56:26:30:e5:3b:39:
04:44:38:91:ae:e1:0a:42:f0:11:bb:e1:77:96:fc:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:7E:F8:8D:A0:2B:A5:51:E2:46:23:99:C6:E6:67:05:06:32:DB
X509v3 Authority Key Identifier:
keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:64:3a:4d:2c:12:f3:8e:db:70:9f:74:b5:d8:ce:86:12:9e:
55:25:41:34:49:44:de:cd:3c:f8:05:41:cb:8e:0e:57:56:b8:
da:ce:ca:ac:97:b9:65:19:13:f9:a1:1c:8f:e2:b5:d2:d4:27:
af:91:57:c8:30:8f:fd:ee:a9:b4:b6:78:2e:54:a7:9e:b0:0d:
8f:44:69:1d:f4:51:89:54:fd:91:e0:be:c0:70:3c:58:3a:16:
11:32:39:2e:d3:a7:bc:51:c7:10:c4:5f:1d:35:d2:ed:3a:00:
73:c4:aa:d7:5e:bd:ed:4a:10:a2:1b:f2:b7:d2:e7:08:6e:15:
6a:19:9e:e7:6e:fc:ac:22:ed:eb:d7:a6:9b:fb:33:6e:28:1a:
da:46:4d:eb:83:db:79:c5:55:dc:16:90:87:57:88:bb:c4:18:
be:2f:cd:46:b1:f8:4d:0b:3f:27:e1:d7:39:9b:95:6d:fe:82:
f8:93:87:08:15:72:7c:05:ca:06:82:31:de:4e:21:79:1a:8c:
7f:40:49:4e:1e:1c:e9:32:15:b8:a2:97:13:10:38:13:b7:17:
9f:22:13:11:e0:d6:ce:74:de:c1:c5:50:6a:59:f5:97:38:4c:
5d:0f:60:0f:6e:7e:e2:df:b6:42:d4:78:bf:3b:62:11:cf:9c:
e0:3d:e7:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdP1+md6LKpNaWqIYfbgqZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZGExMTU1NjM5OWUyOGZjNTVkYWIzYmEwNzg2OGZmNDkx
YzZmYjgwHhcNMjUwNjA4MTQwMDM5WhcNMjUwNjA5MTQwMDM5WjAzMTEwLwYDVQQD
Eyg3ZmY0N2VmODhkYTAyYmE1NTFlMjQ2MjM5OWM2ZTY2NzA1MDYzMmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQBFAH3cZO9WsuiO6h247JioYt/o
CsyhWYyheiKdncZWEuTi+3Hl4NJ414TcdAxyVLQtVuDKVEW8dvZ1iB/EL0zayFf7
GFnkj5iMY7CwJsWWdyLj7ZBWxLZ+qKlaeoRBWR5GzsWpg7T7t/nmRsYAWeMJz3DF
PZibGuvSyK1bnrrKBO1ahplKJ/ajNc97DvlkFrfxAoehcj/BVrYkMlXfO0EgrtEm
6qMPaMFYxNAsEgA9kZAx8Fst6oVjTvEOddAN0/YSCO82g5lRPEnim8w1yCEHed12
tvLK3J36SfKAdElQ1V+AzRuLP2VWJjDlOzkERDiRruEKQvARu+F3lvwMPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/0fviNoCulUeJGI5nG5mcFBjLbMB8GA1UdIwQY
MBaAFFraEVVjmeKPxV2rO6B4aP9JHG+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84MTIzNTctM2Q3MC00NjhlLWIwNDQt
ODRhZmVhYWJiMzczLzEvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84MTIzNTctM2Q3MC00NjhlLWIwNDQtODRhZmVhYWJiMzcz
LzEvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemQ6TSwS
847bcJ90tdjOhhKeVSVBNElE3s08+AVBy44OV1a42s7KrJe5ZRkT+aEcj+K10tQn
r5FXyDCP/e6ptLZ4LlSnnrANj0RpHfRRiVT9keC+wHA8WDoWETI5LtOnvFHHEMRf
HTXS7ToAc8Sq11697UoQohvyt9LnCG4Vahme5278rCLt69emm/szbiga2kZN64Pb
ecVV3BaQh1eIu8QYvi/NRrH4TQs/J+HXOZuVbf6C+JOHCBVyfAXKBoIx3k4heRqM
f0BJTh4c6TIVuKKXExA4E7cXnyITEeDWznTewcVQaln1lzhMXQ9gD25+4t+2QtR4
vztiEc+c4D3nQw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:06:02 2025 by rpki-client