Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: BuQqz+X2tlfXk9L0YrN/4h3WO4tIJbq3ZoxMr+8O8zo=
Subject key identifier: 98:91:2D:D9:F2:0D:65:37:C7:94:3A:72:4E:6F:15:53:39:DE:E3:3F
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 01974A43D46A565F57863D2F4AFC26CB5D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 0DAB
Signing time: Sat 07 Jun 2025 12:00:48 +0000
Manifest this update: Sat 07 Jun 2025 12:00:48 +0000
Manifest next update: Sun 08 Jun 2025 12:00:48 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: QWf8x3QDot53O8Vk+jd15xUGTE1pNB19TIXf44Wmvzc=)
2: gRqe05O7FJ-3whaf6RiaMKovVHw.roa (hash: Amo4rFyICByEK7RCP/ax/RVJMXu+W6BkFpTvi0xsm7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d4:6a:56:5f:57:86:3d:2f:4a:fc:26:cb:5d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Jun 7 12:00:48 2025 GMT
Not After : Jun 8 12:00:48 2025 GMT
Subject: CN=98912dd9f20d6537c7943a724e6f155339dee33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:39:df:83:d7:29:e9:a9:4b:64:3a:4b:0b:
92:7f:6a:d6:f7:1d:81:f5:8d:c9:ac:89:7f:ab:26:
33:d2:c8:1e:71:4e:11:32:1a:cf:ad:c8:a3:d5:1d:
01:6e:a9:5e:d8:b2:5b:e7:53:13:ec:bb:b7:a0:21:
27:96:1d:52:91:a5:59:61:17:2c:59:21:1c:e1:d1:
65:b5:8c:63:70:70:a5:bb:7f:34:e2:e7:6b:82:19:
3f:0c:58:f2:c1:8d:ba:a4:e3:6e:47:45:21:3d:5f:
f8:03:a4:57:98:54:88:af:66:60:15:4c:1b:11:bc:
05:5f:9c:a7:f6:9c:1e:43:4c:9c:9b:17:98:b1:d4:
07:98:34:19:2a:f2:59:74:5e:98:6f:c5:66:c6:3a:
ea:ef:bd:f7:2d:8e:38:ef:9a:f1:51:aa:af:9b:3b:
1d:61:f3:0f:bf:ec:59:83:9a:74:04:9e:c1:73:55:
9e:85:84:18:f2:aa:0d:d5:0e:c5:0b:0c:76:ba:26:
9b:42:68:ed:a0:da:1f:40:20:1e:78:39:09:bb:54:
e4:f5:c3:32:af:0f:87:b5:2c:dd:6b:78:b6:01:41:
05:6d:8b:cd:8e:c4:c7:a9:a5:6f:ed:a0:86:27:1e:
14:81:9d:13:cd:98:3c:25:ba:92:82:fa:08:7b:2e:
26:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:91:2D:D9:F2:0D:65:37:C7:94:3A:72:4E:6F:15:53:39:DE:E3:3F
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f8:81:16:1b:20:75:e0:93:eb:82:54:3a:60:3e:00:6a:c3:
2b:7d:06:88:23:f4:a3:bf:0e:7e:82:64:3d:cf:9b:59:d4:67:
cb:ed:82:a1:c7:63:47:c8:05:c1:31:05:0d:2d:1d:84:1e:9f:
fa:56:0f:e8:d5:af:7f:34:ea:ff:b8:6b:5b:7d:72:7f:7c:81:
cd:29:e8:df:ea:07:13:cf:44:15:c3:49:29:4c:51:42:5f:97:
48:ea:91:1f:16:39:23:2b:af:3c:5e:41:1a:d7:c7:50:65:bd:
34:63:a2:a0:59:ee:3b:a6:02:7b:25:88:96:f4:41:94:16:0b:
e2:22:72:bc:06:fb:53:11:b5:a2:86:4b:3d:34:ac:14:b9:42:
c3:55:e5:ad:91:0e:d2:df:05:ad:99:6c:a7:97:a2:3b:cc:22:
fb:c4:93:cf:4c:f1:d3:52:85:c2:a0:14:a3:23:25:10:44:40:
df:84:dd:fc:15:58:64:82:94:5b:ad:75:2b:c6:7f:69:93:72:
53:ee:b9:09:0a:46:26:1b:cc:a4:06:f5:7c:39:49:8c:b2:05:
bd:ff:a2:6f:80:ab:36:38:72:d6:04:6d:ed:2f:b6:b9:c5:8a:
d8:32:ec:df:dc:ab:d1:e4:68:62:97:f1:4f:65:05:9b:6c:54:
75:9c:fb:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ9RqVl9Xhj0vSvwmy11HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViODYyZTIzMWZjYmQ1MzkxYmQ0NzZjNmFiOWFiMmI3MjEw
YTg3YTQwHhcNMjUwNjA3MTIwMDQ4WhcNMjUwNjA4MTIwMDQ4WjAzMTEwLwYDVQQD
Eyg5ODkxMmRkOWYyMGQ2NTM3Yzc5NDNhNzI0ZTZmMTU1MzM5ZGVlMzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC4534PXKempS2Q6SwuSf2rW9x2B
9Y3JrIl/qyYz0sgecU4RMhrPrcij1R0Bbqle2LJb51MT7Lu3oCEnlh1SkaVZYRcs
WSEc4dFltYxjcHClu3804udrghk/DFjywY26pONuR0UhPV/4A6RXmFSIr2ZgFUwb
EbwFX5yn9pweQ0ycmxeYsdQHmDQZKvJZdF6Yb8Vmxjrq7733LY4475rxUaqvmzsd
YfMPv+xZg5p0BJ7Bc1WehYQY8qoN1Q7FCwx2uiabQmjtoNofQCAeeDkJu1Tk9cMy
rw+HtSzda3i2AUEFbYvNjsTHqaVv7aCGJx4UgZ0TzZg8JbqSgvoIey4muwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiRLdnyDWU3x5Q6ck5vFVM53uM/MB8GA1UdIwQY
MBaAFFuGLiMfy9U5G9R2xquasrchCoekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTkt
OWJhNmRhNzBmYWRiLzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTktOWJhNmRhNzBmYWRi
LzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfviBFhsg
deCT64JUOmA+AGrDK30GiCP0o78OfoJkPc+bWdRny+2CocdjR8gFwTEFDS0dhB6f
+lYP6NWvfzTq/7hrW31yf3yBzSno3+oHE89EFcNJKUxRQl+XSOqRHxY5IyuvPF5B
GtfHUGW9NGOioFnuO6YCeyWIlvRBlBYL4iJyvAb7UxG1ooZLPTSsFLlCw1XlrZEO
0t8FrZlsp5eiO8wi+8STz0zx01KFwqAUoyMlEERA34Td/BVYZIKUW611K8Z/aZNy
U+65CQpGJhvMpAb1fDlJjLIFvf+ib4CrNjhy1gRt7S+2ucWK2DLs39yr0eRoYpfx
T2UFm2xUdZz7Tw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:55:49 2025 by rpki-client