Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier: jDk06cBbR0vRkXZNvtmOUj91sY6W95pjUZ69IrDKpo4=
Subject key identifier: FA:52:F7:78:56:53:60:55:05:DC:75:21:47:F8:62:A7:DB:FF:8F:A6
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial: 01976D0661D5FB51DA43C803AA3722C911D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number: 0C33
Signing time: Sat 14 Jun 2025 06:00:24 +0000
Manifest this update: Sat 14 Jun 2025 06:00:24 +0000
Manifest next update: Sun 15 Jun 2025 06:00:24 +0000
Files and hashes: 1: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: ZoXYU0Ax4FEXVDarz9k7DxrPgHFz17pRWuGRHfaLVBE=)
2: pBfkqeCcf8kyWik2qeWgXpT9J0w.roa (hash: x6edmQyN+AuRQRVkdUM3z3US8XBwQrqEnFPt4p+BBqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:61:d5:fb:51:da:43:c8:03:aa:37:22:c9:11:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
Validity
Not Before: Jun 14 06:00:24 2025 GMT
Not After : Jun 15 06:00:24 2025 GMT
Subject: CN=fa52f7785653605505dc752147f862a7dbff8fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:c5:5c:95:33:da:7f:d3:89:08:2d:1b:b1:
e6:c6:36:82:a4:03:43:f7:9a:84:22:3b:89:ff:cd:
cd:39:26:3e:9d:15:6c:fc:76:36:86:32:ef:9a:7d:
ed:f6:22:36:14:81:27:93:f4:1d:cd:ab:87:48:df:
0e:63:f7:98:23:c6:ae:7f:ce:bb:a4:96:23:6d:d9:
90:69:9d:ac:0a:9b:fe:b2:f9:88:32:fd:ea:4e:65:
36:6e:21:46:dd:6a:d8:aa:25:6b:97:78:72:88:94:
0a:c3:66:f7:eb:c6:00:63:ca:a3:01:28:d6:8c:9c:
4d:0c:39:c7:ae:41:5e:f8:d4:d8:fc:b0:16:32:fb:
b6:d9:81:d2:f3:f1:46:d7:f1:79:9c:f1:14:4d:a1:
55:e7:ad:c5:b8:27:18:42:94:4f:4d:ad:40:dd:6a:
b9:39:87:f0:77:1a:2f:70:8d:a8:de:aa:a1:86:0e:
55:3d:f6:07:53:90:98:cf:cb:65:99:69:e0:ca:51:
0c:43:41:92:a8:d2:ad:4c:e8:ab:56:e7:59:4a:69:
01:4b:d0:cd:1e:a4:40:10:a5:fa:c7:8c:e8:20:e0:
d2:35:19:e2:b2:bd:15:ab:cb:66:09:75:5c:e1:34:
21:bb:b3:c6:cf:3c:e0:bf:aa:33:68:91:f4:fb:bf:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:52:F7:78:56:53:60:55:05:DC:75:21:47:F8:62:A7:DB:FF:8F:A6
X509v3 Authority Key Identifier:
keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:42:f6:ad:c0:d9:11:a6:e6:db:90:c1:fc:ee:68:bf:5c:9a:
3b:e3:28:95:26:7a:31:19:0c:43:63:5e:30:41:6e:46:ac:6d:
3d:05:9f:5b:ad:1c:f5:9b:f1:4f:e4:dc:12:81:31:16:0b:f6:
c4:0a:d6:1e:c0:eb:3f:d6:e6:05:44:31:2a:4e:ac:25:37:09:
47:cd:08:fb:8e:52:4a:a9:1d:77:27:30:8f:51:35:2e:43:1c:
a2:ee:d3:88:8b:c7:a3:5d:59:4c:9b:c3:7c:b1:b3:02:ed:00:
d0:96:2d:50:c1:ce:31:e5:03:5a:fd:dd:26:8e:fc:f2:c9:32:
39:a7:19:67:80:56:f3:68:db:09:c4:a2:8c:1a:48:52:dd:12:
ab:36:cf:f8:43:0f:d2:82:36:37:c5:30:76:4a:71:38:78:e7:
79:db:77:52:7b:ef:55:56:17:11:02:30:6a:95:1a:de:10:d9:
9a:a0:7f:b0:54:c4:01:64:43:7e:b3:1b:44:38:8f:0e:2b:30:
c2:3b:89:bc:19:8a:9b:0c:37:21:03:14:83:50:dc:6f:5a:2b:
09:d1:02:bf:e5:d4:d9:06:7b:ed:a4:90:3d:9c:10:2b:d4:b3:
11:83:c3:60:a0:25:d3:e3:14:26:15:61:ca:2d:0a:47:b9:96:
0c:98:05:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBmHV+1HaQ8gDqjciyRHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5Nzg1YTIxZTJkMDdjNjhmZjMxNzU1OGM2OWVmMTE4Y2M3
NTgwNWEwHhcNMjUwNjE0MDYwMDI0WhcNMjUwNjE1MDYwMDI0WjAzMTEwLwYDVQQD
EyhmYTUyZjc3ODU2NTM2MDU1MDVkYzc1MjE0N2Y4NjJhN2RiZmY4ZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfrFXJUz2n/TiQgtG7HmxjaCpAND
95qEIjuJ/83NOSY+nRVs/HY2hjLvmn3t9iI2FIEnk/QdzauHSN8OY/eYI8auf867
pJYjbdmQaZ2sCpv+svmIMv3qTmU2biFG3WrYqiVrl3hyiJQKw2b368YAY8qjASjW
jJxNDDnHrkFe+NTY/LAWMvu22YHS8/FG1/F5nPEUTaFV563FuCcYQpRPTa1A3Wq5
OYfwdxovcI2o3qqhhg5VPfYHU5CYz8tlmWngylEMQ0GSqNKtTOirVudZSmkBS9DN
HqRAEKX6x4zoIODSNRnisr0Vq8tmCXVc4TQhu7PGzzzgv6ozaJH0+79l8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpS93hWU2BVBdx1IUf4Yqfb/4+mMB8GA1UdIwQY
MBaAFFl4WiHi0Hxo/zF1WMae8RjMdYBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTct
NzVmNGZjYTg2YWU0LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTctNzVmNGZjYTg2YWU0
LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEL2rcDZ
Eabm25DB/O5ov1yaO+MolSZ6MRkMQ2NeMEFuRqxtPQWfW60c9ZvxT+TcEoExFgv2
xArWHsDrP9bmBUQxKk6sJTcJR80I+45SSqkddycwj1E1LkMcou7TiIvHo11ZTJvD
fLGzAu0A0JYtUMHOMeUDWv3dJo788skyOacZZ4BW82jbCcSijBpIUt0SqzbP+EMP
0oI2N8UwdkpxOHjnedt3UnvvVVYXEQIwapUa3hDZmqB/sFTEAWRDfrMbRDiPDisw
wjuJvBmKmww3IQMUg1Dcb1orCdECv+XU2QZ77aSQPZwQK9SzEYPDYKAl0+MUJhVh
yi0KR7mWDJgFVw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 15:37:04 2025 by rpki-client