Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
File: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json)
Hash identifier: gr8U1Q6aQsk1w8RNPZOPP7vL1o3pcAhse89Lsm+ihH0=
Subject key identifier: 4D:B7:6A:40:67:B2:02:17:E9:F4:40:E0:67:DC:81:B9:6A:15:1F:F9
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial: 0197488C59CD46E0EB96B26799C71698068F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
Manifest number: 07BD
Signing time: Sat 07 Jun 2025 04:00:46 +0000
Manifest this update: Sat 07 Jun 2025 04:00:46 +0000
Manifest next update: Sun 08 Jun 2025 04:00:46 +0000
Files and hashes: 1: 9VRbY37PKRH0-UJUOvI3sW7GRqg.roa (hash: JnDLn69G2OWz5ad5UI+dtO7s/dZ3uGdaBQeH20/IDXs=)
2: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: qDPK4LrJaW+D9Q++fN3xcaoq0xqAqaMc7gK9AP+KeX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:59:cd:46:e0:eb:96:b2:67:99:c7:16:98:06:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
Validity
Not Before: Jun 7 04:00:46 2025 GMT
Not After : Jun 8 04:00:46 2025 GMT
Subject: CN=4db76a4067b20217e9f440e067dc81b96a151ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:8d:e5:60:bc:90:a6:5d:13:64:61:64:1b:
3e:56:da:86:34:56:c8:50:4a:97:0d:df:f3:57:da:
cb:65:10:65:6b:cd:80:14:78:30:16:d3:45:f4:ba:
55:cc:6e:fa:8c:12:6c:a6:dc:ec:de:ab:a3:bd:0e:
99:85:53:62:89:90:b7:e9:60:6d:e8:cc:8d:33:95:
b5:3e:13:2a:fe:52:b5:13:ba:0c:9c:48:2b:21:b4:
cf:38:85:fa:12:d8:6e:a8:1a:99:fd:3b:3b:53:27:
fd:6e:b2:e3:92:17:fd:da:4d:a5:5d:f9:d2:53:ee:
c7:2f:10:bf:d5:4f:0c:e8:9c:f2:41:4b:ba:f4:92:
09:8a:f1:5c:c7:ca:6f:35:13:c4:de:cd:c8:20:aa:
a1:1d:c6:fb:9e:f3:1a:9d:69:33:ab:65:9f:2e:72:
38:6b:38:e5:a5:81:60:9b:f0:85:4b:93:52:d7:4e:
c1:07:52:04:46:62:88:70:d3:8f:23:f9:b7:5d:c8:
2d:bd:13:0c:a7:31:ca:28:ec:a3:0c:d2:2a:e1:cf:
8a:b5:5f:3a:4f:01:c6:de:c0:75:bc:77:b2:d7:c5:
ee:bf:e5:c4:e6:90:d2:68:ff:13:75:58:88:a7:9a:
cc:3b:a0:59:f0:df:01:e4:d8:18:ed:e3:42:bc:2f:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B7:6A:40:67:B2:02:17:E9:F4:40:E0:67:DC:81:B9:6A:15:1F:F9
X509v3 Authority Key Identifier:
keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e3:ab:64:a0:a9:8c:79:4f:f0:96:6f:c7:f8:24:e9:84:41:
d2:87:a1:0c:fa:5f:90:57:81:da:f1:8c:bd:de:a7:7a:b9:18:
ed:c6:97:66:f8:e3:f1:48:2c:ed:f4:38:8d:cc:e3:ff:a1:20:
7b:6e:94:78:03:d6:37:56:3f:92:32:e1:8d:e4:59:53:34:82:
e0:24:c9:82:29:0a:0d:31:a6:e2:86:c7:ae:c6:fe:0d:94:bc:
70:b0:2b:06:5e:5c:fe:ca:79:59:80:89:95:de:36:62:f1:fe:
99:90:4f:a4:8f:14:cc:1c:14:66:c8:fe:85:15:a3:15:45:b7:
ea:f9:7b:0f:b1:9b:8c:66:ea:c7:64:07:7c:c7:34:f7:5d:20:
4b:c6:83:f1:46:7a:a0:a9:1e:47:84:c8:40:02:9a:ff:a8:6f:
ba:d8:7c:93:a5:2f:78:66:d8:63:b9:9f:dd:f8:25:ef:76:4c:
e0:f3:05:6c:0b:20:7a:f4:24:89:51:9b:2b:7f:bb:f7:75:70:
5a:cd:23:1d:1e:14:9e:e0:ab:54:ee:9a:26:39:9e:f3:06:70:
54:63:11:ac:20:5c:2f:3f:10:09:ae:19:19:f4:85:50:1f:1d:
5a:47:91:a3:0e:c5:50:dd:3f:07:d4:8d:6d:a7:2b:96:71:9b:
af:07:b1:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjFnNRuDrlrJnmccWmAaPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNWQ0NTY1NGZhNTk3ZDM1MjJlZGExNjg4MzkxOTNlYmU3
ODJlZWYwHhcNMjUwNjA3MDQwMDQ2WhcNMjUwNjA4MDQwMDQ2WjAzMTEwLwYDVQQD
Eyg0ZGI3NmE0MDY3YjIwMjE3ZTlmNDQwZTA2N2RjODFiOTZhMTUxZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqraN5WC8kKZdE2RhZBs+VtqGNFbI
UEqXDd/zV9rLZRBla82AFHgwFtNF9LpVzG76jBJsptzs3qujvQ6ZhVNiiZC36WBt
6MyNM5W1PhMq/lK1E7oMnEgrIbTPOIX6EthuqBqZ/Ts7Uyf9brLjkhf92k2lXfnS
U+7HLxC/1U8M6JzyQUu69JIJivFcx8pvNRPE3s3IIKqhHcb7nvManWkzq2WfLnI4
azjlpYFgm/CFS5NS107BB1IERmKIcNOPI/m3XcgtvRMMpzHKKOyjDNIq4c+KtV86
TwHG3sB1vHey18Xuv+XE5pDSaP8TdViIp5rMO6BZ8N8B5NgY7eNCvC+avQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE23akBnsgIX6fRA4GfcgblqFR/5MB8GA1UdIwQY
MBaAFFpdRWVPpZfTUi7aFog5GT6+eC7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzIt
Yzk2NDBkMjUwYWZjLzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzItYzk2NDBkMjUwYWZj
LzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOOrZKCp
jHlP8JZvx/gk6YRB0oehDPpfkFeB2vGMvd6nerkY7caXZvjj8Ugs7fQ4jczj/6Eg
e26UeAPWN1Y/kjLhjeRZUzSC4CTJgikKDTGm4obHrsb+DZS8cLArBl5c/sp5WYCJ
ld42YvH+mZBPpI8UzBwUZsj+hRWjFUW36vl7D7GbjGbqx2QHfMc0910gS8aD8UZ6
oKkeR4TIQAKa/6hvuth8k6UveGbYY7mf3fgl73ZM4PMFbAsgevQkiVGbK3+793Vw
Ws0jHR4UnuCrVO6aJjme8wZwVGMRrCBcLz8QCa4ZGfSFUB8dWkeRow7FUN0/B9SN
bacrlnGbrwexAA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:41 2025 by rpki-client