Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier: E0lFvS2QzXmwveRZV6xAg63tauFICkG2bfqI6NvoMRE=
Subject key identifier: 40:EE:22:38:93:57:0F:A4:5A:61:A2:76:A5:1F:61:51:8C:39:F1:68
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial: 0199228CFC83A423D98728DFC948F5F8053C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number: 01DE
Signing time: Sun 07 Sep 2025 05:01:28 +0000
Manifest this update: Sun 07 Sep 2025 05:01:28 +0000
Manifest next update: Mon 08 Sep 2025 05:01:28 +0000
Files and hashes: 1: 1-DmKYgnKcK0PXEAQVbF_OKc3-qY.roa (hash: A2ZK2n/AK9OAPtM9+Qchv9vt+I10xrYcK4O013Ux+Cs=)
2: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: fkIe9RruLv+ezYUn2kJjT4GpHGtwv23NZCzyI8ssVtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:fc:83:a4:23:d9:87:28:df:c9:48:f5:f8:05:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Validity
Not Before: Sep 7 05:01:28 2025 GMT
Not After : Sep 8 05:01:28 2025 GMT
Subject: CN=40ee223893570fa45a61a276a51f61518c39f168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:da:ab:06:60:15:04:26:38:75:c5:4e:7a:
b9:05:f9:41:c9:28:7b:8e:fa:22:85:e0:2b:d7:a3:
8e:d4:5e:db:18:bd:b8:a3:a0:7e:38:0e:b2:98:48:
3c:6d:3c:be:c6:1c:0f:07:06:7a:11:a3:91:1c:ad:
76:aa:22:03:c2:96:f3:16:22:37:31:4b:48:0f:40:
d6:74:e5:26:78:8a:fb:18:6d:dc:5f:9d:49:f1:99:
1f:11:ee:99:66:f7:20:df:8f:0e:81:6b:90:f7:bc:
fa:4e:86:e5:5f:02:f2:51:e9:7d:11:67:78:3f:24:
c0:b3:a7:75:3c:aa:03:82:0c:ba:50:f3:d8:15:8b:
97:00:31:46:98:1c:6d:95:57:e9:83:e3:dc:80:4a:
13:20:ed:d8:3c:7d:38:30:bd:c8:f8:ad:3b:5f:52:
1a:34:75:f9:d8:d7:8e:54:2f:18:42:4f:14:d2:85:
b6:64:76:95:40:fa:68:74:cc:66:25:be:32:6e:37:
23:94:34:15:1b:e0:b6:25:61:c5:51:b4:7f:ed:b4:
9d:b8:77:ee:f2:49:8e:61:39:0a:f7:9f:82:b1:ca:
66:d6:3c:16:45:cd:68:9e:10:3a:59:f8:ad:ed:be:
5a:e6:b3:3a:3c:4d:e8:6a:e5:95:d6:0c:33:7d:95:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EE:22:38:93:57:0F:A4:5A:61:A2:76:A5:1F:61:51:8C:39:F1:68
X509v3 Authority Key Identifier:
keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:80:6f:09:26:16:84:8f:c8:62:bb:11:1a:7a:96:0e:f4:ab:
00:e7:78:a0:5f:7c:7d:f9:21:6e:75:c7:bc:58:7a:64:2a:5c:
68:b8:0e:3d:44:dd:01:17:63:aa:27:75:91:9a:dc:f8:89:fa:
87:51:ca:98:65:8e:09:85:e8:b3:2a:8e:c6:4e:76:08:d9:4d:
6b:5e:46:e6:0e:ea:8a:77:fd:68:ed:bd:fe:e1:d8:7e:c3:a1:
11:73:02:df:c1:5f:12:95:72:a1:4c:ac:84:08:79:37:8c:6b:
6a:72:bc:51:70:cc:24:b0:fc:b7:a2:74:a9:e5:eb:2c:9b:9e:
80:d9:75:4c:42:c7:7a:4f:f2:7b:c7:af:ab:35:39:1f:e2:e9:
f9:13:17:8f:c3:90:6d:06:8b:62:88:89:11:ee:ba:c7:d1:4d:
17:63:33:97:ce:03:0c:f4:96:94:ff:cc:fc:16:f3:cf:f6:39:
dc:f3:ac:0f:09:98:93:f4:8b:ce:19:80:ac:87:fc:54:d5:13:
09:a3:4c:00:37:a9:c4:4b:05:03:01:1b:2c:3d:3f:29:91:fc:
62:b0:0d:f1:2d:8f:82:1d:16:84:47:95:54:ce:f1:b4:2f:b4:
2c:a9:f2:ec:b6:82:03:5b:16:b3:44:3b:38:b5:21:d5:6a:86:
51:4c:18:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijPyDpCPZhyjfyUj1+AU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNzk3ZmNkODQzM2IxZjQ4OWY4OTExOTQ4NjJmYzM2YmZi
ZWY2NmIwHhcNMjUwOTA3MDUwMTI4WhcNMjUwOTA4MDUwMTI4WjAzMTEwLwYDVQQD
Eyg0MGVlMjIzODkzNTcwZmE0NWE2MWEyNzZhNTFmNjE1MThjMzlmMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3vaqwZgFQQmOHXFTnq5BflBySh7
jvoiheAr16OO1F7bGL24o6B+OA6ymEg8bTy+xhwPBwZ6EaORHK12qiIDwpbzFiI3
MUtID0DWdOUmeIr7GG3cX51J8ZkfEe6ZZvcg348OgWuQ97z6ToblXwLyUel9EWd4
PyTAs6d1PKoDggy6UPPYFYuXADFGmBxtlVfpg+PcgEoTIO3YPH04ML3I+K07X1Ia
NHX52NeOVC8YQk8U0oW2ZHaVQPpodMxmJb4ybjcjlDQVG+C2JWHFUbR/7bSduHfu
8kmOYTkK95+Cscpm1jwWRc1onhA6Wfit7b5a5rM6PE3oauWV1gwzfZXohwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDuIjiTVw+kWmGidqUfYVGMOfFoMB8GA1UdIwQY
MBaAFFt5f82EM7H0ifiRGUhi/Da/vvZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAt
ZTU5NmU1MjRjYWJlLzEvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAtZTU5NmU1MjRjYWJl
LzEvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoBvCSYW
hI/IYrsRGnqWDvSrAOd4oF98ffkhbnXHvFh6ZCpcaLgOPUTdARdjqid1kZrc+In6
h1HKmGWOCYXosyqOxk52CNlNa15G5g7qinf9aO29/uHYfsOhEXMC38FfEpVyoUys
hAh5N4xranK8UXDMJLD8t6J0qeXrLJuegNl1TELHek/ye8evqzU5H+Lp+RMXj8OQ
bQaLYoiJEe66x9FNF2Mzl84DDPSWlP/M/Bbzz/Y53POsDwmYk/SLzhmArIf8VNUT
CaNMADepxEsFAwEbLD0/KZH8YrAN8S2Pgh0WhEeVVM7xtC+0LKny7LaCA1sWs0Q7
OLUh1WqGUUwYLA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:46 2025 by rpki-client