Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
File: WwyVAj-g0zsibu8vIsjso5BSa_A.mft (raw, json)
Hash identifier: MRVSmoP+aaq8VWTB8NyaegcCq0QYT1Anfm7FuUScHew=
Subject key identifier: 09:E4:D6:9E:78:08:9A:7B:40:35:8A:42:EF:8B:20:2D:C0:F3:8F:B2
Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Certificate serial: 019922FA9291DD3935B24CE9157147FBEADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
Manifest number: 0DA6
Signing time: Sun 07 Sep 2025 07:01:10 +0000
Manifest this update: Sun 07 Sep 2025 07:01:10 +0000
Manifest next update: Mon 08 Sep 2025 07:01:10 +0000
Files and hashes: 1: WwyVAj-g0zsibu8vIsjso5BSa_A.crl (hash: DQhaegD0jdp6Q8wI3sfOCc3sfwNkYMkFynmJY0R8+vs=)
2: wllNqt1P393lVw_WgHLjVq0jQ3M.roa (hash: BBqAMtasXCpwxv6WN/tQ+Ub2hvQgjIJGzl78O7sCb5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:92:91:dd:39:35:b2:4c:e9:15:71:47:fb:ea:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Validity
Not Before: Sep 7 07:01:10 2025 GMT
Not After : Sep 8 07:01:10 2025 GMT
Subject: CN=09e4d69e78089a7b40358a42ef8b202dc0f38fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:06:83:96:17:ec:24:14:3f:6e:0f:fa:30:
dc:0c:49:9f:8e:ac:22:ef:48:66:39:b4:40:61:fd:
b0:94:3e:2f:68:65:80:4c:da:51:a8:ef:a7:53:f0:
46:5a:36:60:04:b7:24:c6:22:a8:3d:53:aa:c5:af:
49:e4:13:7e:4d:14:b1:63:7b:02:e7:d3:44:33:85:
73:28:c3:8e:d0:cb:4a:c3:bc:d4:df:37:07:27:df:
28:f4:08:d7:16:36:e3:50:c1:4a:4c:c7:40:62:24:
d7:02:9b:03:b8:73:4c:52:08:dd:9a:e0:67:ef:98:
70:0d:b7:56:84:51:da:f0:fb:14:db:cf:82:d2:53:
25:f6:79:54:ef:3a:8a:c2:c7:c9:31:fe:85:90:fe:
bc:51:f3:5c:29:9c:16:9d:6c:dd:69:a4:87:a4:70:
ed:8e:23:78:2b:f0:87:0c:0a:ca:15:ce:27:ab:ca:
69:6a:a2:bb:3a:f8:47:01:c2:f1:0f:6a:8d:0c:39:
fe:77:96:5d:20:3b:d3:6a:1b:b2:14:ac:ea:17:6d:
35:1e:f5:90:9b:4f:50:92:62:d4:d9:ea:7f:3d:ca:
eb:5c:87:ad:6e:70:40:66:cb:9f:f9:d8:a7:0a:a9:
af:b8:fc:a8:5b:9d:02:6e:11:fe:64:f6:68:b5:ba:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E4:D6:9E:78:08:9A:7B:40:35:8A:42:EF:8B:20:2D:C0:F3:8F:B2
X509v3 Authority Key Identifier:
keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b4:a4:a2:f5:4f:dd:ff:d3:01:72:4d:32:ec:a4:66:d5:e8:
f1:3c:ab:d6:09:fd:30:29:0e:d4:82:f6:fe:6a:b2:fb:cd:df:
2b:eb:54:55:b8:8f:38:5c:58:4e:aa:f5:ea:94:08:75:7c:92:
e4:86:ba:74:ff:fc:6c:b2:b2:ca:2f:6d:c1:55:56:77:ab:f0:
a2:56:f6:b4:62:c8:3e:78:bd:79:bb:ee:36:40:2c:93:f4:16:
39:0c:dc:5e:f7:0c:bb:00:2c:b6:18:07:98:fe:e5:29:82:54:
3a:31:e7:bc:f4:ac:97:15:20:98:29:a6:cc:d6:2c:26:d2:30:
38:05:66:29:f4:8a:27:20:37:59:f1:54:00:cb:80:67:30:c6:
34:69:68:6d:65:08:ef:23:98:1d:cf:7e:98:fa:89:3f:3f:70:
d3:de:10:20:ae:80:86:87:d8:45:05:40:d8:9f:3d:b3:6a:64:
fa:df:fb:b7:43:f6:da:fc:db:0c:49:4b:5b:3f:35:62:8a:46:
71:ab:b0:ed:31:5e:68:43:4d:f6:20:cb:03:fc:08:ed:18:98:
2a:c8:a0:96:a8:79:0d:7a:17:f7:68:e7:7b:38:1b:e2:02:ae:
0b:50:31:e0:33:94:37:33:3f:38:ce:ea:cb:36:78:c5:ab:41:
94:db:a7:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+pKR3Tk1skzpFXFH++rcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMGM5NTAyM2ZhMGQzM2IyMjZlZWYyZjIyYzhlY2EzOTA1
MjZiZjAwHhcNMjUwOTA3MDcwMTEwWhcNMjUwOTA4MDcwMTEwWjAzMTEwLwYDVQQD
EygwOWU0ZDY5ZTc4MDg5YTdiNDAzNThhNDJlZjhiMjAyZGMwZjM4ZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscQGg5YX7CQUP24P+jDcDEmfjqwi
70hmObRAYf2wlD4vaGWATNpRqO+nU/BGWjZgBLckxiKoPVOqxa9J5BN+TRSxY3sC
59NEM4VzKMOO0MtKw7zU3zcHJ98o9AjXFjbjUMFKTMdAYiTXApsDuHNMUgjdmuBn
75hwDbdWhFHa8PsU28+C0lMl9nlU7zqKwsfJMf6FkP68UfNcKZwWnWzdaaSHpHDt
jiN4K/CHDArKFc4nq8ppaqK7OvhHAcLxD2qNDDn+d5ZdIDvTahuyFKzqF201HvWQ
m09QkmLU2ep/PcrrXIetbnBAZsuf+dinCqmvuPyoW50CbhH+ZPZotbrvgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnk1p54CJp7QDWKQu+LIC3A84+yMB8GA1UdIwQY
MBaAFFsMlQI/oNM7Im7vLyLI7KOQUmvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEt
ZTBlOTBlMDg0NTA4LzEvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEtZTBlOTBlMDg0NTA4
LzEvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLSkovVP
3f/TAXJNMuykZtXo8Tyr1gn9MCkO1IL2/mqy+83fK+tUVbiPOFxYTqr16pQIdXyS
5Ia6dP/8bLKyyi9twVVWd6vwolb2tGLIPni9ebvuNkAsk/QWOQzcXvcMuwAsthgH
mP7lKYJUOjHnvPSslxUgmCmmzNYsJtIwOAVmKfSKJyA3WfFUAMuAZzDGNGlobWUI
7yOYHc9+mPqJPz9w094QIK6AhofYRQVA2J89s2pk+t/7t0P22vzbDElLWz81YopG
cauw7TFeaENN9iDLA/wI7RiYKsiglqh5DXoX92jnezgb4gKuC1Ax4DOUNzM/OM7q
yzZ4xatBlNunrw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:37 2025 by rpki-client