Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: niYsQdCPm+o9zpO6q3GXeB7Xk2fXhr1i/z3MA3DeIhI=
Subject key identifier: 20:F5:AA:A1:16:BB:3D:E0:3D:04:F1:8A:6D:1E:8E:26:FB:A7:41:4D
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 019933128803312F0A001094CB7F9862F0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 10:01:16 +0000
Manifest this update: Wed 10 Sep 2025 10:01:16 +0000
Manifest next update: Thu 11 Sep 2025 10:01:16 +0000
Files and hashes: 1: MNitg_keBs4dR0_QJsKKFy2jt9w.roa (hash: sEGk1tMGmp6moB/qNZm65GUjuchkzx/EiGw40gyU6pI=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: qGVjE5CY8Et5dcfST3p/pMOKYdl4edlKpE9Sj9Sy0D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:88:03:31:2f:0a:00:10:94:cb:7f:98:62:f0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Sep 10 10:01:16 2025 GMT
Not After : Sep 11 10:01:16 2025 GMT
Subject: CN=20f5aaa116bb3de03d04f18a6d1e8e26fba7414d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:39:54:54:e9:d2:53:f9:12:7d:84:b6:6d:b0:
33:e6:2a:a9:f8:f1:f2:9a:11:85:ae:b6:47:77:99:
12:a2:4b:dc:2a:87:ee:cd:48:c0:af:b6:e6:99:16:
1a:8a:7e:13:b1:7c:e2:40:0d:b5:03:9b:80:c7:8e:
e3:cb:cf:08:13:d8:2a:85:30:05:bd:12:a4:7a:ab:
30:b0:64:5c:32:69:79:ee:08:be:66:e3:39:e9:18:
07:e3:f7:b8:b0:48:ff:e6:7e:b2:aa:19:4f:a0:10:
7d:56:52:4d:a0:84:7e:f8:97:cc:a0:e9:cf:8c:93:
2a:5a:ec:80:ab:f7:dd:a0:86:8f:44:73:06:f6:e2:
5f:0f:da:55:b3:3b:0d:aa:ad:8f:70:fe:51:ca:56:
c7:34:d9:03:d6:f3:e0:13:b1:4b:e4:52:cf:72:7c:
c2:44:a3:a6:7d:83:b7:63:df:e4:75:33:b5:4f:1c:
aa:fe:00:b0:00:56:85:28:d8:76:3e:fa:ff:93:fc:
32:7f:3f:93:75:75:a6:a3:15:a2:ac:25:a8:ce:0f:
4e:82:c0:88:ac:0f:0e:17:9d:11:0a:27:fd:48:df:
f8:6f:68:49:c3:1e:70:e4:4e:7c:ad:b7:ef:06:be:
85:d2:70:bb:b7:fa:71:fe:53:43:d4:da:59:3e:90:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F5:AA:A1:16:BB:3D:E0:3D:04:F1:8A:6D:1E:8E:26:FB:A7:41:4D
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:71:7b:cb:fb:d8:b9:b0:7a:71:93:81:24:6d:4e:d7:da:53:
c1:57:53:8e:62:88:bb:97:2e:25:5c:8a:25:74:00:4f:11:1a:
ec:de:32:59:b8:23:cb:4d:64:06:81:25:2f:9e:bd:08:a5:7e:
1b:2d:d8:2c:ca:8c:a6:25:0c:55:0e:98:a9:83:fb:81:15:a0:
53:00:2e:72:a8:15:d2:52:d3:db:62:1e:48:31:4e:90:85:55:
f4:ef:4c:d5:20:b9:d0:32:15:ad:2b:e0:b9:68:a6:70:20:a4:
41:d5:c1:67:37:4b:73:5c:be:da:40:24:b1:c1:4f:d9:24:82:
bc:9e:43:81:b3:20:70:a7:26:a1:70:f4:7b:60:70:cd:71:50:
31:3b:b8:ef:6b:49:7b:5a:bb:c8:b1:ed:a2:62:0a:6f:35:13:
3e:e0:37:89:ab:e5:8d:71:4c:cd:52:b4:12:cb:3a:ac:31:74:
e6:d6:4a:a0:5b:57:d6:23:53:fe:ce:89:14:32:0f:e7:ae:83:
87:9f:d5:03:2f:b7:a3:f8:53:37:40:cc:54:f8:f1:08:d1:7a:
91:16:0e:18:2d:3b:b8:60:82:63:ca:4a:27:10:76:1b:53:bd:
d2:18:18:80:f8:cd:30:eb:cf:ec:52:e2:f4:8e:f7:2e:98:f3:
b8:88:d1:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzEogDMS8KABCUy3+YYvDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZWU0N2QzMmE1OTkzNDFmNWZmMWE4OGJmMTQyZTE1Mzhk
YTQwZWEwHhcNMjUwOTEwMTAwMTE2WhcNMjUwOTExMTAwMTE2WjAzMTEwLwYDVQQD
EygyMGY1YWFhMTE2YmIzZGUwM2QwNGYxOGE2ZDFlOGUyNmZiYTc0MTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjlUVOnSU/kSfYS2bbAz5iqp+PHy
mhGFrrZHd5kSokvcKofuzUjAr7bmmRYain4TsXziQA21A5uAx47jy88IE9gqhTAF
vRKkeqswsGRcMml57gi+ZuM56RgH4/e4sEj/5n6yqhlPoBB9VlJNoIR++JfMoOnP
jJMqWuyAq/fdoIaPRHMG9uJfD9pVszsNqq2PcP5RylbHNNkD1vPgE7FL5FLPcnzC
RKOmfYO3Y9/kdTO1Txyq/gCwAFaFKNh2Pvr/k/wyfz+TdXWmoxWirCWozg9OgsCI
rA8OF50RCif9SN/4b2hJwx5w5E58rbfvBr6F0nC7t/px/lND1NpZPpBqxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCD1qqEWuz3gPQTxim0ejib7p0FNMB8GA1UdIwQY
MBaAFFjuR9MqWZNB9f8aiL8ULhU42kDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2Ut
YzU2NGI0MGVjYTA1LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2UtYzU2NGI0MGVjYTA1
LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3F7y/vY
ubB6cZOBJG1O19pTwVdTjmKIu5cuJVyKJXQATxEa7N4yWbgjy01kBoElL569CKV+
Gy3YLMqMpiUMVQ6YqYP7gRWgUwAucqgV0lLT22IeSDFOkIVV9O9M1SC50DIVrSvg
uWimcCCkQdXBZzdLc1y+2kAkscFP2SSCvJ5DgbMgcKcmoXD0e2BwzXFQMTu472tJ
e1q7yLHtomIKbzUTPuA3iavljXFMzVK0Ess6rDF05tZKoFtX1iNT/s6JFDIP566D
h5/VAy+3o/hTN0DMVPjxCNF6kRYOGC07uGCCY8pKJxB2G1O90hgYgPjNMOvP7FLi
9I73LpjzuIjRqg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:33:41 2025 by rpki-client