Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: j/AbJZwZmk6BaibpaBCNXfgiefhuz+6Ka0B0ju9hVcA=
Subject key identifier: B7:4D:E7:17:26:57:07:69:05:6C:FF:10:5F:93:28:24:C0:51:C7:75
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 019750B3CB88F05EA6DFE28F5B0371FD2D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0A00
Signing time: Sun 08 Jun 2025 18:00:49 +0000
Manifest this update: Sun 08 Jun 2025 18:00:49 +0000
Manifest next update: Mon 09 Jun 2025 18:00:49 +0000
Files and hashes: 1: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: nAizDbsKTVDgwe+Ih2foKY8dotHb0b4fsusCwHktS14=)
2: ozGik-9_sBnUMoYXrZRViJEmIeY.roa (hash: 3AnFoieE3CjYtQiFDGskoD5Nyb6r911fFXwGIZ9/+iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:cb:88:f0:5e:a6:df:e2:8f:5b:03:71:fd:2d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Jun 8 18:00:49 2025 GMT
Not After : Jun 9 18:00:49 2025 GMT
Subject: CN=b74de71726570769056cff105f932824c051c775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:32:39:6c:e1:bc:c7:c1:c8:63:f3:ee:e8:
10:f3:cb:d6:c8:48:76:3f:a6:f2:29:a0:5e:32:03:
a2:50:b3:30:18:15:05:01:1b:2e:59:a0:91:d6:ce:
f5:fc:94:f7:6e:d4:2e:9e:5f:18:96:fd:b8:16:e7:
c2:e4:47:0e:c7:d0:9e:5c:21:bd:f5:5f:53:7b:42:
6d:01:d8:d1:98:67:85:cb:69:0b:c5:a5:04:c7:49:
ee:20:92:fd:49:20:da:5c:67:a7:62:f1:38:6a:1d:
66:ed:fa:ef:1d:5f:87:5b:04:85:c8:d0:dc:53:a5:
b7:47:f3:04:6d:81:1e:fd:92:87:a4:44:bc:7a:98:
a2:cc:3a:2f:4a:8e:5f:3d:dd:95:46:03:b7:49:a2:
4d:39:b8:12:82:24:8c:33:36:e5:ef:46:ff:48:8c:
e3:51:d0:97:09:6e:23:cd:72:00:de:94:3a:40:40:
85:0e:51:fa:48:ce:f5:fe:73:ed:e6:26:19:9f:d7:
75:eb:54:70:b8:c5:ff:43:ae:f3:0f:58:e6:b3:6b:
53:ed:e1:53:31:5a:7b:62:16:97:5e:38:4f:08:bf:
04:b0:e2:2c:ad:71:02:52:39:6f:6b:e9:bd:b7:0f:
d7:ce:16:0d:70:2d:8b:78:c4:a5:84:fb:ec:e7:87:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4D:E7:17:26:57:07:69:05:6C:FF:10:5F:93:28:24:C0:51:C7:75
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6f:ce:00:11:2d:34:ed:01:94:8a:98:26:2e:7f:ca:ab:52:
46:cc:83:a6:11:6d:71:d9:1f:0e:09:32:12:29:b9:20:58:e9:
b2:8b:4b:fd:7d:ba:5d:a4:24:50:cc:f3:09:9f:99:cb:9b:e9:
8f:f5:81:cd:46:f5:b7:ee:3f:19:02:60:81:58:9b:74:5f:9d:
30:96:bb:31:31:6f:e3:00:81:f5:56:2d:07:f6:ad:7e:70:58:
21:ee:52:85:6e:74:3f:22:8f:7c:57:e0:7e:68:0a:7a:16:64:
92:76:40:3e:27:ba:b5:0c:03:4e:18:81:2a:aa:39:57:d9:09:
e4:b5:72:e0:60:30:ea:2e:52:cd:36:ac:e9:89:f5:12:b3:b1:
db:40:da:cd:21:18:09:2e:e4:1b:66:24:45:d0:cc:42:3c:f3:
37:d3:51:f3:84:1a:cc:93:de:67:2c:89:a9:2f:e7:92:17:97:
e1:48:34:89:f8:39:c0:18:2f:82:ed:99:e2:9e:60:fa:f7:d9:
f8:70:81:f8:1c:1e:4b:69:11:a7:02:85:1c:63:14:8c:41:22:
05:d6:35:b4:97:6e:c4:55:6b:0a:29:a9:df:78:e2:c4:c3:79:
e7:46:06:80:80:19:fa:36:7b:f9:dc:a3:5f:77:07:f0:58:fb:
ff:5a:89:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQs8uI8F6m3+KPWwNx/S2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OWE3NDBmNGJjMzBhMmMwNGNkY2IzMzQ0YWYwZDZhMmQw
NWE0ODEwHhcNMjUwNjA4MTgwMDQ5WhcNMjUwNjA5MTgwMDQ5WjAzMTEwLwYDVQQD
EyhiNzRkZTcxNzI2NTcwNzY5MDU2Y2ZmMTA1ZjkzMjgyNGMwNTFjNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi8yOWzhvMfByGPz7ugQ88vWyEh2
P6byKaBeMgOiULMwGBUFARsuWaCR1s71/JT3btQunl8Ylv24FufC5EcOx9CeXCG9
9V9Te0JtAdjRmGeFy2kLxaUEx0nuIJL9SSDaXGenYvE4ah1m7frvHV+HWwSFyNDc
U6W3R/MEbYEe/ZKHpES8epiizDovSo5fPd2VRgO3SaJNObgSgiSMMzbl70b/SIzj
UdCXCW4jzXIA3pQ6QECFDlH6SM71/nPt5iYZn9d161RwuMX/Q67zD1jms2tT7eFT
MVp7YhaXXjhPCL8EsOIsrXECUjlva+m9tw/XzhYNcC2LeMSlhPvs54d5IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdN5xcmVwdpBWz/EF+TKCTAUcd1MB8GA1UdIwQY
MBaAFFmadA9LwwosBM3LM0SvDWotBaSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYt
OTEwMmMzYzA1MTM4LzEvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYtOTEwMmMzYzA1MTM4
LzEvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKG/OABEt
NO0BlIqYJi5/yqtSRsyDphFtcdkfDgkyEim5IFjpsotL/X26XaQkUMzzCZ+Zy5vp
j/WBzUb1t+4/GQJggVibdF+dMJa7MTFv4wCB9VYtB/atfnBYIe5ShW50PyKPfFfg
fmgKehZkknZAPie6tQwDThiBKqo5V9kJ5LVy4GAw6i5SzTas6Yn1ErOx20DazSEY
CS7kG2YkRdDMQjzzN9NR84QazJPeZyyJqS/nkheX4Ug0ifg5wBgvgu2Z4p5g+vfZ
+HCB+BweS2kRpwKFHGMUjEEiBdY1tJduxFVrCimp33jixMN550YGgIAZ+jZ7+dyj
X3cH8Fj7/1qJYQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 03:48:30 2025 by rpki-client