Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
File: W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json)
Hash identifier: m8XzQHOO/3SFywqms/f8XuKxxSda3gji2zFQT5OnHOc=
Subject key identifier: 2A:4B:87:46:A0:89:36:10:58:67:6C:63:AE:A3:4F:5C:16:31:EB:06
Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
Certificate issuer: /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Certificate serial: 01974C69DCF877AB1A16F531E5B9DDA2EF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
Manifest number: 0B20
Signing time: Sat 07 Jun 2025 22:01:35 +0000
Manifest this update: Sat 07 Jun 2025 22:01:35 +0000
Manifest next update: Sun 08 Jun 2025 22:01:35 +0000
Files and hashes: 1: 6Ij32bY1nBHX7vkCzgQ3qR10RDM.roa (hash: S+nJqkN01ff0FHv6Vz2ODAn9dbe51mqTXffZ1Idn4oU=)
2: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: 0MbDmg0Lmz7vQOHuMX18zGeO8B7Xih2jIBgF+lRSs4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:dc:f8:77:ab:1a:16:f5:31:e5:b9:dd:a2:ef:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Validity
Not Before: Jun 7 22:01:35 2025 GMT
Not After : Jun 8 22:01:35 2025 GMT
Subject: CN=2a4b8746a089361058676c63aea34f5c1631eb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:a3:59:a1:2c:ba:40:2c:3e:36:ba:85:71:
55:20:7f:fe:ab:7b:a1:91:73:b1:dd:9a:52:bb:bb:
a9:46:54:0f:92:f6:ce:d4:b4:ac:cb:50:72:1f:4b:
e0:19:00:9d:fc:9a:35:a8:52:5f:e5:c6:0c:0f:84:
63:23:22:74:27:4d:e5:84:48:52:98:27:22:9f:72:
1f:69:3b:de:8b:c1:1c:77:9b:07:67:7e:8b:a9:99:
7a:95:7b:70:f5:99:a0:78:9f:c1:d2:3a:77:19:74:
5b:70:c3:24:55:76:aa:0e:07:2e:02:22:39:84:1e:
02:92:fd:18:82:ea:f1:30:47:a2:10:54:10:9d:77:
79:a1:c6:ec:c7:3b:6f:e6:6f:53:1b:bb:ad:f4:85:
c6:e8:6c:f8:2e:a4:be:52:62:8d:31:ae:c5:1b:1b:
43:0d:6a:38:66:2c:e4:4a:ad:97:e2:31:07:13:51:
6c:09:34:2d:c1:48:df:d4:2d:7f:7b:ba:0c:c3:eb:
0e:bd:e9:48:e6:f9:bc:8d:87:58:60:84:6f:c7:10:
5d:23:9c:60:e8:bb:f0:cc:b3:55:4d:e5:d4:65:b9:
04:bc:d2:f9:62:4d:5e:11:2f:94:08:2c:17:f4:5b:
04:b6:c5:6b:ed:40:bc:11:2e:ed:2b:17:f2:1e:f1:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4B:87:46:A0:89:36:10:58:67:6C:63:AE:A3:4F:5C:16:31:EB:06
X509v3 Authority Key Identifier:
keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6b:a9:3a:f3:00:56:bf:28:75:72:c7:3e:b2:a2:ea:1a:ef:
8f:94:51:8a:7e:d1:73:54:76:bb:84:23:b0:eb:d8:f3:90:a4:
0f:03:8e:da:a7:92:d7:52:1d:79:8b:1a:1a:19:32:a0:2f:d0:
81:fc:a4:15:80:a6:39:33:94:3f:07:1f:54:5f:13:dd:8e:eb:
8b:79:be:dc:c2:40:df:ac:8a:2f:00:00:41:d7:d0:1f:a5:db:
da:52:38:6a:b4:fb:e9:e4:69:1f:d0:92:4b:1e:b3:c6:5f:72:
94:64:48:41:ce:08:1a:21:d4:15:01:42:17:c4:3c:4d:4e:1e:
60:9a:c2:88:2b:65:aa:29:d0:3f:14:7a:3c:f8:43:5d:0b:11:
7b:0e:e9:ea:05:e2:24:5c:a2:7b:05:00:97:99:ad:0d:8f:4d:
43:61:05:31:bb:e6:96:3d:6a:e5:ed:79:6c:a6:26:32:15:35:
d4:24:b5:43:c9:46:1e:3d:6d:de:4c:f9:ef:7f:1f:ac:8b:60:
48:b0:45:e7:90:4c:07:0a:ca:3f:f1:e2:d3:d6:07:54:c2:9b:
bb:66:66:cd:ad:20:3e:2f:91:2b:74:0b:80:93:12:a8:88:cb:
2f:dd:23:f5:bf:59:a2:91:c6:56:09:ce:66:01:78:70:44:25:
87:13:fb:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMadz4d6saFvUx5bndou9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNGI0NTJkYmZkNGM3MDRiZGE5Y2MyYTRlOTE1ZjQ3MTky
YTdmNzEwHhcNMjUwNjA3MjIwMTM1WhcNMjUwNjA4MjIwMTM1WjAzMTEwLwYDVQQD
EygyYTRiODc0NmEwODkzNjEwNTg2NzZjNjNhZWEzNGY1YzE2MzFlYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CujWaEsukAsPja6hXFVIH/+q3uh
kXOx3ZpSu7upRlQPkvbO1LSsy1ByH0vgGQCd/Jo1qFJf5cYMD4RjIyJ0J03lhEhS
mCcin3IfaTvei8Ecd5sHZ36LqZl6lXtw9ZmgeJ/B0jp3GXRbcMMkVXaqDgcuAiI5
hB4Ckv0YgurxMEeiEFQQnXd5ocbsxztv5m9TG7ut9IXG6Gz4LqS+UmKNMa7FGxtD
DWo4ZizkSq2X4jEHE1FsCTQtwUjf1C1/e7oMw+sOvelI5vm8jYdYYIRvxxBdI5xg
6LvwzLNVTeXUZbkEvNL5Yk1eES+UCCwX9FsEtsVr7UC8ES7tKxfyHvF4wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpLh0agiTYQWGdsY66jT1wWMesGMB8GA1UdIwQY
MBaAFFtLRS2/1McEvanMKk6RX0cZKn9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84N2FjNGItYWEyNS00MjhmLWEzNjgt
ZTU4ZWRjNDJmMDRjLzEvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84N2FjNGItYWEyNS00MjhmLWEzNjgtZTU4ZWRjNDJmMDRj
LzEvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWupOvMA
Vr8odXLHPrKi6hrvj5RRin7Rc1R2u4QjsOvY85CkDwOO2qeS11IdeYsaGhkyoC/Q
gfykFYCmOTOUPwcfVF8T3Y7ri3m+3MJA36yKLwAAQdfQH6Xb2lI4arT76eRpH9CS
Sx6zxl9ylGRIQc4IGiHUFQFCF8Q8TU4eYJrCiCtlqinQPxR6PPhDXQsRew7p6gXi
JFyiewUAl5mtDY9NQ2EFMbvmlj1q5e15bKYmMhU11CS1Q8lGHj1t3kz5738frItg
SLBF55BMBwrKP/Hi09YHVMKbu2Zmza0gPi+RK3QLgJMSqIjLL90j9b9ZopHGVgnO
ZgF4cEQlhxP7Ig==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:17:55 2025 by rpki-client