Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json)
Hash identifier: nakANi9ulEiO6I/EpeP5n7Z89z4PMhAkI5LK90nAnSs=
Subject key identifier: 24:80:37:95:DD:CF:A0:A4:D1:1C:A7:FC:A8:BE:D9:3A:8B:75:46:3C
Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Certificate serial: 0197499F5C1C66C02938D5C2CCE3079CEBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 09:01:09 +0000
Manifest this update: Sat 07 Jun 2025 09:01:09 +0000
Manifest next update: Sun 08 Jun 2025 09:01:09 +0000
Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: 3Xdldr392xIp/KubE8c41GfDV9dPfrI45mprhpMEu0I=)
2: g4DPD_TlI2jk4YtUIO3nppJCypo.roa (hash: 1cUob6Ttj1c9mZCdpqGoW3x2UVNqUiWBsqfqlcDpGkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:5c:1c:66:c0:29:38:d5:c2:cc:e3:07:9c:eb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Validity
Not Before: Jun 7 09:01:09 2025 GMT
Not After : Jun 8 09:01:09 2025 GMT
Subject: CN=24803795ddcfa0a4d11ca7fca8bed93a8b75463c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:d7:3b:8f:c3:84:be:b2:61:81:fc:9b:aa:
c3:dc:d2:15:12:96:c2:27:51:22:3d:73:8a:dd:12:
ca:44:c8:1f:4a:b3:7c:e2:f2:8c:3e:e8:eb:e8:b3:
0f:e1:53:a1:6a:67:9d:72:9a:12:25:d3:ad:32:eb:
46:7d:2c:fd:b2:40:8e:b0:a6:e8:f9:a8:6f:d8:45:
5c:9d:31:78:61:fc:78:16:22:bf:24:86:9b:92:42:
e4:3e:a7:b1:46:89:03:13:0a:0c:86:06:1c:c3:e4:
a4:69:48:ec:f1:01:8d:b8:ba:82:25:02:07:9f:e5:
51:48:06:b1:7e:ba:28:b7:ab:f1:19:c0:5c:94:4f:
46:37:5d:0d:1b:7a:a9:af:fb:07:3b:6c:84:73:f3:
f7:64:50:77:7c:d0:15:68:99:a7:d5:07:83:57:ef:
a9:63:21:b5:11:4d:c4:32:13:e5:df:f6:0d:db:80:
2c:66:a6:63:16:07:64:12:17:09:9e:32:9d:09:d6:
af:a0:84:08:1b:9f:eb:29:da:00:94:f4:9b:0a:6b:
33:d1:8a:bf:bd:02:5c:57:ab:be:49:ea:c9:e4:1b:
0a:17:f3:61:25:a5:b8:db:b5:88:64:16:4d:57:d7:
fd:0d:6f:d0:a3:4b:f6:77:1a:1b:49:81:1d:5f:7e:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:80:37:95:DD:CF:A0:A4:D1:1C:A7:FC:A8:BE:D9:3A:8B:75:46:3C
X509v3 Authority Key Identifier:
keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:86:00:72:85:04:d1:1e:23:5b:8b:cc:e1:98:66:f7:4b:96:
0f:bc:47:48:9b:c5:f3:e4:6a:54:5d:d3:81:2a:7c:7e:88:bb:
e1:6a:f8:45:9e:92:6f:2a:84:bd:ab:1f:c9:26:df:8c:6d:94:
79:01:1d:fe:a9:29:63:da:ca:2e:19:7e:45:7c:86:e4:b1:94:
bf:00:5a:ae:8e:e7:12:82:41:99:25:eb:fa:ba:87:56:95:80:
9a:ef:e8:a6:58:d1:08:b4:a7:4d:56:f7:01:c6:0f:a9:9e:a1:
72:bd:21:87:a7:5c:49:ef:c8:45:d3:bc:c2:82:b0:9b:c5:a7:
ea:8b:30:f9:db:8f:4d:41:a3:ad:cd:4e:81:de:1d:61:f6:7a:
3e:cf:49:13:79:a1:e0:c4:f6:0f:89:bc:8c:45:ab:92:14:40:
cb:ac:87:b5:0d:70:e0:7b:be:ac:5b:1e:0d:9a:ad:5f:89:27:
e5:93:d0:0c:b7:3f:ec:a8:39:77:21:47:8c:60:d1:ec:24:c0:
53:9b:33:c2:cb:ce:52:c4:f8:bd:95:65:f3:00:15:b9:83:59:
38:f6:bf:dd:99:49:28:4d:96:7c:c9:a5:d3:0c:c6:96:b8:e0:
0c:b5:ad:60:d1:2f:32:07:54:6f:d6:8d:fa:b1:aa:eb:61:5d:
e2:d4:c6:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn1wcZsApONXCzOMHnOvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDJhMzU2YTU0NzgxNTViZWFhOGJjNjI1NmE4NmY2ZDVi
M2Y3M2MwHhcNMjUwNjA3MDkwMTA5WhcNMjUwNjA4MDkwMTA5WjAzMTEwLwYDVQQD
EygyNDgwMzc5NWRkY2ZhMGE0ZDExY2E3ZmNhOGJlZDkzYThiNzU0NjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox7XO4/DhL6yYYH8m6rD3NIVEpbC
J1EiPXOK3RLKRMgfSrN84vKMPujr6LMP4VOhamedcpoSJdOtMutGfSz9skCOsKbo
+ahv2EVcnTF4Yfx4FiK/JIabkkLkPqexRokDEwoMhgYcw+SkaUjs8QGNuLqCJQIH
n+VRSAaxfroot6vxGcBclE9GN10NG3qpr/sHO2yEc/P3ZFB3fNAVaJmn1QeDV++p
YyG1EU3EMhPl3/YN24AsZqZjFgdkEhcJnjKdCdavoIQIG5/rKdoAlPSbCmsz0Yq/
vQJcV6u+SerJ5BsKF/NhJaW427WIZBZNV9f9DW/Qo0v2dxobSYEdX34DEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSAN5Xdz6Ck0Ryn/Ki+2TqLdUY8MB8GA1UdIwQY
MBaAFFjSo1alR4FVvqqLxiVqhvbVs/c8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQt
OTA1MzA1NGE1Y2FiLzEvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQtOTA1MzA1NGE1Y2Fi
LzEvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYYAcoUE
0R4jW4vM4Zhm90uWD7xHSJvF8+RqVF3TgSp8foi74Wr4RZ6SbyqEvasfySbfjG2U
eQEd/qkpY9rKLhl+RXyG5LGUvwBaro7nEoJBmSXr+rqHVpWAmu/opljRCLSnTVb3
AcYPqZ6hcr0hh6dcSe/IRdO8woKwm8Wn6osw+duPTUGjrc1Ogd4dYfZ6Ps9JE3mh
4MT2D4m8jEWrkhRAy6yHtQ1w4Hu+rFseDZqtX4kn5ZPQDLc/7Kg5dyFHjGDR7CTA
U5szwsvOUsT4vZVl8wAVuYNZOPa/3ZlJKE2WfMml0wzGlrjgDLWtYNEvMgdUb9aN
+rGq62Fd4tTGKw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:04:28 2025 by rpki-client