Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
File: WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft (raw, json)
Hash identifier: QqF8HhfKvJV+CgYX6tgCgDq05vYhiVnVwq+tEgSnKtY=
Subject key identifier: 5C:9A:0B:98:6B:E9:CA:DA:A4:23:AB:33:F0:B3:9D:0F:95:67:58:FB
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 0197499F7152235F9D1722688C81023E02C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
Manifest number: 0AA2
Signing time: Sat 07 Jun 2025 09:01:15 +0000
Manifest this update: Sat 07 Jun 2025 09:01:15 +0000
Manifest next update: Sun 08 Jun 2025 09:01:15 +0000
Files and hashes: 1: 5eabaHyJMZC6xaOfXyNUDeK_Rik.roa (hash: TiX60vap4EuHd5z3yDdwzlNIdcxuV5BI27iNpoK9+cI=)
2: 9IgQeewcmfQZ2of_HORQ6vbbFA8.roa (hash: sNpLBHfgEi3gbYovfnENOUMmh30fF1DezNwtozBcHSM=)
3: FgtwQexIijsiy2UYh5s3NHupI_U.roa (hash: gAA0vHeWOanEfgm4YCjsO5KuF3+dtv6jFZrage6sq5I=)
4: IVogcCidyN1dNuwpsamnpeeBOzo.roa (hash: dkkhuPZPZuxNohscz0NJjTL21i/+81ygggp48FtsTTU=)
5: Iz0OKJRfyer26_x0SY8wqmCTEJs.roa (hash: HkA+qgxdvNNdPmwk6Y1yGdSU/udB+TT9eU5dbnjc99g=)
6: K7_-PsZV6UL3Qz-SZyzWxL0ztrE.roa (hash: Yhb6Fai21E+jsd4/blJv2P5GA32ORQPomY/nTv3MFQg=)
7: WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl (hash: L2LvZP8LXhWELbsL9RnXTSfkpv+g28auZVf7XqZ1EHM=)
8: jm_LwTAsKa9hMc9LKIm0Nv8-66A.roa (hash: GfUSYnSkjh7ptVBb/X/b+7Fylh0BdmY1nbsxoYo2vaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:71:52:23:5f:9d:17:22:68:8c:81:02:3e:02:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Jun 7 09:01:15 2025 GMT
Not After : Jun 8 09:01:15 2025 GMT
Subject: CN=5c9a0b986be9cadaa423ab33f0b39d0f956758fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:25:b2:3d:86:14:e6:ab:ed:41:c5:bd:53:
77:02:b5:45:b8:02:d1:da:51:bc:0c:e4:ba:61:53:
4b:14:fd:fc:31:2d:dc:43:ef:42:a9:92:65:b0:68:
84:5b:24:aa:84:39:83:41:48:3e:c4:fc:8d:5c:27:
40:ff:c1:6e:f8:a3:b2:1f:c4:b8:e7:a5:a3:29:db:
31:c7:15:c9:31:16:5e:fa:0d:e5:b7:c8:7e:37:95:
46:03:36:46:60:7d:c1:a5:9d:9c:b4:a1:2d:49:cb:
21:fe:c6:14:9b:f4:6f:5c:26:96:f4:f8:00:eb:c6:
9a:27:b7:15:00:47:a5:84:91:3c:c7:81:17:99:a5:
a7:c7:d0:fe:26:98:96:34:11:1e:f1:20:5f:c3:83:
9f:c1:f2:a6:36:d0:8a:ae:f2:5f:e1:62:85:50:ea:
f4:df:b1:57:db:b8:76:bb:0f:61:b1:31:17:f7:b2:
a2:94:3b:9e:f1:49:4f:ae:30:bb:ce:aa:75:3c:3f:
58:c8:3d:06:24:e2:a3:ef:f9:72:4d:9d:2c:cd:5f:
f9:5c:db:28:14:7c:ce:71:71:98:af:a6:e0:cf:93:
da:da:28:d1:8d:6e:a2:9b:d2:d7:18:ab:c8:19:d3:
a3:6e:d3:dc:20:ad:c5:5e:98:42:4e:58:95:87:ad:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9A:0B:98:6B:E9:CA:DA:A4:23:AB:33:F0:B3:9D:0F:95:67:58:FB
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1b:4e:fc:1e:20:7b:77:3c:fb:68:45:70:d6:24:ad:55:11:
04:9d:d5:b8:1e:bf:55:db:bc:24:0a:a6:7e:d2:42:9e:13:be:
d6:38:ea:51:06:1a:d3:00:8e:ac:ef:e1:a6:31:1f:2f:f4:77:
ba:ea:f1:5c:dc:c1:d3:c4:cc:b2:b3:bf:62:44:60:d3:66:35:
f5:09:81:6c:a3:ea:31:e8:44:6e:9c:7b:6b:52:82:0a:8b:9a:
a1:3b:1a:18:46:96:da:e9:6a:99:1d:2c:41:f0:5d:72:75:d7:
50:c8:b7:a4:cf:38:42:51:00:9a:ab:08:3b:8a:66:66:7b:b9:
cc:51:fc:98:c9:cf:bf:e8:53:0f:13:9c:52:14:b7:3e:16:a8:
63:0d:6e:ea:fc:d4:0b:2b:d4:b4:74:74:b1:a8:70:51:35:0a:
77:d7:04:2a:7f:cc:93:38:86:a2:57:b1:30:28:5d:32:cb:ef:
e1:8a:5f:c1:86:73:f8:8c:05:80:3c:1d:91:63:7c:e2:10:b2:
cb:96:d3:ea:b4:ed:b8:7a:d6:39:55:c4:cf:91:ac:41:ce:25:
07:9b:3c:69:84:7f:2e:a2:04:4d:f5:d5:f6:41:88:91:c8:87:
94:05:f0:37:fa:0f:21:11:43:75:d0:e8:ce:02:8e:78:33:4a:
e4:5f:25:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn3FSI1+dFyJojIECPgLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh
ZWYyNTQwHhcNMjUwNjA3MDkwMTE1WhcNMjUwNjA4MDkwMTE1WjAzMTEwLwYDVQQD
Eyg1YzlhMGI5ODZiZTljYWRhYTQyM2FiMzNmMGIzOWQwZjk1Njc1OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrglsj2GFOar7UHFvVN3ArVFuALR
2lG8DOS6YVNLFP38MS3cQ+9CqZJlsGiEWySqhDmDQUg+xPyNXCdA/8Fu+KOyH8S4
56WjKdsxxxXJMRZe+g3lt8h+N5VGAzZGYH3BpZ2ctKEtScsh/sYUm/RvXCaW9PgA
68aaJ7cVAEelhJE8x4EXmaWnx9D+JpiWNBEe8SBfw4OfwfKmNtCKrvJf4WKFUOr0
37FX27h2uw9hsTEX97KilDue8UlPrjC7zqp1PD9YyD0GJOKj7/lyTZ0szV/5XNso
FHzOcXGYr6bgz5Pa2ijRjW6im9LXGKvIGdOjbtPcIK3FXphCTliVh61JRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyaC5hr6crapCOrM/CznQ+VZ1j7MB8GA1UdIwQY
MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt
MmNjNjc1NzI2OTc1LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1
LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhtO/B4g
e3c8+2hFcNYkrVURBJ3VuB6/Vdu8JAqmftJCnhO+1jjqUQYa0wCOrO/hpjEfL/R3
uurxXNzB08TMsrO/YkRg02Y19QmBbKPqMehEbpx7a1KCCouaoTsaGEaW2ulqmR0s
QfBdcnXXUMi3pM84QlEAmqsIO4pmZnu5zFH8mMnPv+hTDxOcUhS3PhaoYw1u6vzU
CyvUtHR0sahwUTUKd9cEKn/MkziGolexMChdMsvv4YpfwYZz+IwFgDwdkWN84hCy
y5bT6rTtuHrWOVXEz5GsQc4lB5s8aYR/LqIETfXV9kGIkciHlAXwN/oPIRFDddDo
zgKOeDNK5F8lIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:06:24 2025 by rpki-client