Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
File: WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json)
Hash identifier: yDI2YtBPkZwSxAN1ikCRSJ5v6BrQzAT2PGEi7FNhD9Y=
Subject key identifier: 70:8A:84:AE:96:37:6E:9E:32:92:10:F8:B2:C3:77:3A:56:76:A1:08
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial: 0197463022A5DAFCC894C9459740F6F6651A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
Manifest number: 0D1A
Signing time: Fri 06 Jun 2025 17:00:49 +0000
Manifest this update: Fri 06 Jun 2025 17:00:49 +0000
Manifest next update: Sat 07 Jun 2025 17:00:49 +0000
Files and hashes: 1: Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa (hash: 6OpDkd4to1irtWv8vpsm2jxisQw9dR70exo6gT09Ccs=)
2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: SN2LiBNFkldRneVmucwWdg84UG9pjElnW58w8P1tBWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:22:a5:da:fc:c8:94:c9:45:97:40:f6:f6:65:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Validity
Not Before: Jun 6 17:00:49 2025 GMT
Not After : Jun 7 17:00:49 2025 GMT
Subject: CN=708a84ae96376e9e329210f8b2c3773a5676a108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:b5:36:58:a3:d7:f0:57:bc:bd:eb:b8:dc:
a9:bd:5a:7f:95:de:0c:84:7d:2d:73:fe:5d:6c:ad:
7f:6f:e0:61:39:e5:0d:97:bf:ea:d3:8f:05:68:18:
20:9b:1e:60:fb:ba:a6:06:b9:c2:8a:1a:db:16:bd:
8e:48:c2:86:6e:cd:39:99:4c:a1:3e:d7:fb:d2:1c:
d4:15:74:fd:89:76:7f:37:03:e0:5f:f5:d1:18:ce:
c9:b0:4e:bc:de:2e:d7:d4:e1:5f:bb:3f:98:62:d9:
88:40:83:53:5e:97:84:0d:9b:8e:31:a6:ea:fb:75:
7b:af:e8:d0:be:62:11:33:3e:25:97:bc:50:82:55:
18:c1:cf:21:dc:19:d5:2d:3a:23:15:15:03:ed:68:
41:6a:1b:ab:3b:4d:f2:d2:1b:36:c9:24:1f:d7:46:
f4:19:aa:48:7a:26:36:ee:ae:25:16:d7:c0:f8:d6:
fe:31:de:eb:0c:ed:ae:90:74:bf:10:5a:14:5d:37:
bd:cf:b0:8d:2f:67:d9:4f:89:c4:b9:58:4e:61:49:
81:43:75:aa:69:64:d5:70:e9:33:5c:00:9c:6e:77:
44:5a:8c:fe:76:8a:21:82:c5:b1:4a:9f:cb:9d:c2:
ec:38:20:c9:c7:aa:ee:ae:f3:80:0c:ca:af:dd:67:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8A:84:AE:96:37:6E:9E:32:92:10:F8:B2:C3:77:3A:56:76:A1:08
X509v3 Authority Key Identifier:
keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f6:92:d0:ae:3a:bf:c7:94:8b:13:32:86:a9:a0:86:4f:76:
87:89:0d:65:66:75:d9:f4:11:86:f1:bd:01:cc:fa:f7:91:b4:
5c:72:2d:b3:4c:34:ca:6f:e0:8f:56:95:dc:a4:1a:d9:de:cc:
1a:51:6f:7a:1a:3a:d6:e0:11:98:6a:72:e9:bd:7f:f3:6a:8c:
1b:ad:f8:16:92:20:b4:f9:83:67:fa:8b:ea:5a:9d:14:36:e1:
90:12:32:4c:21:21:e5:af:49:9d:20:d5:41:83:6b:e0:5c:91:
89:5c:ff:44:25:e8:67:d1:15:ac:3e:0a:1c:c7:4b:63:9c:81:
6e:de:f2:73:bf:d9:83:64:ef:01:8f:4a:92:59:28:9a:a6:62:
5a:77:f4:b8:c5:3f:91:29:e0:43:37:76:f2:ca:96:5b:59:b5:
57:53:ff:46:78:c3:52:32:77:90:e8:b5:68:19:2f:b6:4b:eb:
42:31:11:20:07:61:2f:f9:95:3c:b0:06:e2:bb:69:9b:12:31:
3c:12:69:92:89:96:a7:ce:79:50:04:48:52:e1:61:51:34:2a:
01:fe:ac:62:56:41:58:0c:df:6e:89:17:dc:5e:10:09:b0:c3:
04:32:87:4d:4c:a1:b8:a6:5d:36:1f:6a:e5:1a:1f:ee:7a:d3:
08:05:c1:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGMCKl2vzIlMlFl0D29mUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNGM0Zjk2YWE1YTAyY2FkYTgzZDRiODhkNDllNmE3M2Fi
ZDI1ZjAwHhcNMjUwNjA2MTcwMDQ5WhcNMjUwNjA3MTcwMDQ5WjAzMTEwLwYDVQQD
Eyg3MDhhODRhZTk2Mzc2ZTllMzI5MjEwZjhiMmMzNzczYTU2NzZhMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBi1Nlij1/BXvL3ruNypvVp/ld4M
hH0tc/5dbK1/b+BhOeUNl7/q048FaBggmx5g+7qmBrnCihrbFr2OSMKGbs05mUyh
Ptf70hzUFXT9iXZ/NwPgX/XRGM7JsE683i7X1OFfuz+YYtmIQINTXpeEDZuOMabq
+3V7r+jQvmIRMz4ll7xQglUYwc8h3BnVLTojFRUD7WhBahurO03y0hs2ySQf10b0
GapIeiY27q4lFtfA+Nb+Md7rDO2ukHS/EFoUXTe9z7CNL2fZT4nEuVhOYUmBQ3Wq
aWTVcOkzXACcbndEWoz+doohgsWxSp/LncLsOCDJx6rurvOADMqv3WdfxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCKhK6WN26eMpIQ+LLDdzpWdqEIMB8GA1UdIwQY
MBaAFFpMT5aqWgLK2oPUuI1J5qc6vSXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMt
OGE5MjEwOTk4OWVmLzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMtOGE5MjEwOTk4OWVm
LzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfaS0K46
v8eUixMyhqmghk92h4kNZWZ12fQRhvG9Acz695G0XHIts0w0ym/gj1aV3KQa2d7M
GlFveho61uARmGpy6b1/82qMG634FpIgtPmDZ/qL6lqdFDbhkBIyTCEh5a9JnSDV
QYNr4FyRiVz/RCXoZ9EVrD4KHMdLY5yBbt7yc7/Zg2TvAY9KklkomqZiWnf0uMU/
kSngQzd28sqWW1m1V1P/RnjDUjJ3kOi1aBkvtkvrQjERIAdhL/mVPLAG4rtpmxIx
PBJpkomWp855UARIUuFhUTQqAf6sYlZBWAzfbokX3F4QCbDDBDKHTUyhuKZdNh9q
5Rof7nrTCAXBjg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:51:20 2025 by rpki-client