Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
File: WPde8NYw4dCGeQygt45-744qz7s.mft (raw, json)
Hash identifier: qbPLyHNAiWXm4fFxZDOHrP9Zn3gVVm2BbvVx02xVu4s=
Subject key identifier: 1A:7D:8B:7C:E0:E6:0C:9D:47:DF:D1:7C:8D:4F:F4:60:5C:49:AA:6C
Authority key identifier: 58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
Certificate issuer: /CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Certificate serial: 01974D7BFBEB01FB7528A464F9F6437084B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 03:01:00 +0000
Manifest this update: Sun 08 Jun 2025 03:01:00 +0000
Manifest next update: Mon 09 Jun 2025 03:01:00 +0000
Files and hashes: 1: WPde8NYw4dCGeQygt45-744qz7s.crl (hash: vRbjjctnI0J5jBdBN+9tqUf4QRTrxNhm+Lds3ZCsDTo=)
2: x5rquIVhJ13GXmSiEvGgLAga1-w.roa (hash: 89X00FnyaHqizMTzCA2kNKHXqUvFiwqZlo80Pxfjk08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:fb:eb:01:fb:75:28:a4:64:f9:f6:43:70:84:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Validity
Not Before: Jun 8 03:01:00 2025 GMT
Not After : Jun 9 03:01:00 2025 GMT
Subject: CN=1a7d8b7ce0e60c9d47dfd17c8d4ff4605c49aa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:85:5b:fc:f9:d9:eb:ef:53:54:2f:23:79:
d4:f7:d7:f5:68:31:2f:d8:e4:64:bb:f9:7f:87:23:
2e:67:bd:cb:ce:35:43:9c:3b:0c:9a:18:33:fd:d1:
5f:a8:5e:06:2f:f6:f8:55:b7:3d:03:86:0e:1b:6b:
a2:77:66:8c:fe:02:11:00:46:a4:9b:42:b1:2a:61:
6b:92:89:30:0f:21:e1:ba:9f:e7:01:ce:8f:8d:0c:
38:aa:29:a1:37:86:9f:2e:82:b0:69:41:c5:95:eb:
79:00:2a:16:50:1c:48:c1:34:2a:2a:69:a1:53:58:
0b:d6:e0:c2:f2:66:57:63:2f:12:0b:3e:20:a8:13:
75:2a:a4:74:07:b7:c0:e5:e3:45:52:5c:24:82:f0:
36:b8:76:d0:33:0a:58:54:62:92:a0:98:c0:a7:18:
82:f1:89:ba:48:03:80:5c:64:32:43:05:65:f0:f3:
95:2a:9f:a3:27:3d:e4:0f:01:15:fb:e9:6e:c0:72:
a5:b5:7f:7f:29:ea:a1:0d:eb:1a:4b:13:79:42:95:
a1:f6:83:ad:9f:70:c4:e9:79:42:81:53:77:a0:a8:
81:7a:4c:39:91:8f:3f:ae:96:c4:85:c3:74:dd:b8:
63:27:e9:b7:dc:64:bd:84:84:f9:0e:0f:d6:d8:1c:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7D:8B:7C:E0:E6:0C:9D:47:DF:D1:7C:8D:4F:F4:60:5C:49:AA:6C
X509v3 Authority Key Identifier:
keyid:58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ad:10:be:79:ef:e4:3a:cb:0e:aa:69:f5:17:24:85:dd:28:
61:61:a7:42:27:1b:e0:96:98:3c:38:f8:fa:46:48:d7:f2:2a:
ca:16:fe:1e:18:c6:84:85:97:13:f7:72:71:4e:04:47:66:ba:
6c:b9:e8:92:9a:00:28:19:eb:f0:c8:ad:f5:a0:da:16:f4:57:
2f:db:64:2a:0b:08:1b:21:2f:ab:94:85:1e:20:d9:25:98:28:
27:fb:f6:6c:59:73:89:f6:f2:71:8a:19:b3:b2:55:21:36:07:
13:fc:e3:7d:c0:58:15:78:e3:4b:51:c0:d6:2c:fd:49:1d:6a:
07:24:64:24:ab:c3:2f:05:82:9a:40:aa:b5:c2:ce:e6:f6:4d:
46:ba:52:e5:d2:e0:dc:77:79:92:fb:65:0e:a6:b3:97:49:43:
51:2e:2a:22:c4:df:c8:c4:6c:87:d1:2a:c8:90:42:74:18:6a:
ea:87:15:be:26:3f:2e:35:b6:9b:93:f9:8b:27:ee:16:73:40:
89:a2:1f:d1:67:f0:d5:0b:f7:37:09:d6:b4:2c:04:ea:04:9a:
41:80:b5:d4:14:1a:67:08:2c:98:56:73:dd:af:fa:63:ae:92:
bd:5c:6f:21:2d:85:3b:5b:a1:29:97:a7:89:eb:4b:32:97:44:
18:80:52:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe/vrAft1KKRk+fZDcISyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Zjc1ZWYwZDYzMGUxZDA4Njc5MGNhMGI3OGU3ZWVmOGUy
YWNmYmIwHhcNMjUwNjA4MDMwMTAwWhcNMjUwNjA5MDMwMTAwWjAzMTEwLwYDVQQD
EygxYTdkOGI3Y2UwZTYwYzlkNDdkZmQxN2M4ZDRmZjQ2MDVjNDlhYTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvueFW/z52evvU1QvI3nU99f1aDEv
2ORku/l/hyMuZ73LzjVDnDsMmhgz/dFfqF4GL/b4Vbc9A4YOG2uid2aM/gIRAEak
m0KxKmFrkokwDyHhup/nAc6PjQw4qimhN4afLoKwaUHFlet5ACoWUBxIwTQqKmmh
U1gL1uDC8mZXYy8SCz4gqBN1KqR0B7fA5eNFUlwkgvA2uHbQMwpYVGKSoJjApxiC
8Ym6SAOAXGQyQwVl8POVKp+jJz3kDwEV++luwHKltX9/KeqhDesaSxN5QpWh9oOt
n3DE6XlCgVN3oKiBekw5kY8/rpbEhcN03bhjJ+m33GS9hIT5Dg/W2BwEQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBp9i3zg5gydR9/RfI1P9GBcSapsMB8GA1UdIwQY
MBaAFFj3XvDWMOHQhnkMoLeOfu+OKs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zNGJkNmUtNzlhNy00MTI2LThhMzIt
MmZkMjgwZTBkNTRhLzEvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8zNGJkNmUtNzlhNy00MTI2LThhMzItMmZkMjgwZTBkNTRh
LzEvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS60Qvnnv
5DrLDqpp9Rckhd0oYWGnQicb4JaYPDj4+kZI1/Iqyhb+HhjGhIWXE/dycU4ER2a6
bLnokpoAKBnr8Mit9aDaFvRXL9tkKgsIGyEvq5SFHiDZJZgoJ/v2bFlzifbycYoZ
s7JVITYHE/zjfcBYFXjjS1HA1iz9SR1qByRkJKvDLwWCmkCqtcLO5vZNRrpS5dLg
3Hd5kvtlDqazl0lDUS4qIsTfyMRsh9EqyJBCdBhq6ocVviY/LjW2m5P5iyfuFnNA
iaIf0Wfw1Qv3NwnWtCwE6gSaQYC11BQaZwgsmFZz3a/6Y66SvVxvIS2FO1uhKZen
ietLMpdEGIBSfA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:55:15 2025 by rpki-client