Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: ad+vLzSTaclxP8q1XByrmm5ss4pzgOpcW774b0iQVwM=
Subject key identifier: 9B:32:0F:8E:D1:E5:0F:57:1F:E2:7D:F1:A5:4E:34:10:F2:6E:3D:B2
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 0197469E0B520F62F74546BD389E3BF950B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 19:00:52 +0000
Manifest this update: Fri 06 Jun 2025 19:00:52 +0000
Manifest next update: Sat 07 Jun 2025 19:00:52 +0000
Files and hashes: 1: 9rnqD1RU0JdMjSu8BzguZaGfvTA.roa (hash: GMQdSU1ONVtRLJ/ahFPu6uQVjVVqJu2bd95QqZUAXII=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: bMpXWid21rSPml8RiAvAt8oZyYLYL634/khTBx6Nll8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:0b:52:0f:62:f7:45:46:bd:38:9e:3b:f9:50:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Jun 6 19:00:52 2025 GMT
Not After : Jun 7 19:00:52 2025 GMT
Subject: CN=9b320f8ed1e50f571fe27df1a54e3410f26e3db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7c:be:d2:92:f1:59:b1:50:1b:d1:e9:e4:92:
c2:2d:e5:ff:30:38:7e:49:c2:cf:ae:bc:9e:10:e2:
b1:a4:46:a3:f8:9b:2d:82:58:79:6e:93:d7:2d:d3:
d5:28:97:e7:0f:8c:fa:14:af:9a:b6:c8:9c:2e:bb:
5d:53:d1:4f:66:d9:52:17:d2:00:55:f4:fa:ec:cf:
19:4b:c0:7a:93:2a:e0:36:2f:55:a9:5c:bf:d6:9a:
b0:27:07:53:92:8e:f0:03:39:0c:c9:ce:08:6e:b2:
e1:d6:cc:c4:32:62:c6:c7:6d:a6:7a:42:40:cc:ac:
8b:ca:c8:db:d9:29:dc:ab:16:0e:fc:b8:c6:36:82:
74:45:79:b1:ba:df:b6:e4:c8:83:c9:b8:1e:9a:b7:
38:22:cf:49:06:b6:0c:46:fc:7a:5d:f6:3d:25:1a:
a8:35:93:5d:89:d6:a4:e0:38:cd:37:ec:90:9e:ae:
68:89:31:02:44:ef:14:e6:60:c3:c4:66:20:2f:bb:
23:7b:86:31:d6:8a:ef:3f:32:92:04:91:78:b7:6c:
d5:54:c2:0b:8c:d9:30:60:37:48:07:61:6e:b4:54:
7a:d7:33:b3:2f:4d:bb:90:4a:96:e2:2c:54:88:a6:
8a:9b:a3:e3:4e:2d:dc:05:60:0b:35:43:d4:07:7f:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:32:0F:8E:D1:E5:0F:57:1F:E2:7D:F1:A5:4E:34:10:F2:6E:3D:B2
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:12:fd:5d:d9:1c:d7:5d:80:cb:f9:cd:56:db:47:4b:ec:e2:
0d:64:93:a0:b2:b7:8b:47:6a:1c:e3:75:9e:31:6c:43:50:70:
c8:7f:81:01:20:49:39:dc:4f:f8:fa:e6:9e:e2:71:8f:1b:f8:
52:bf:c0:8d:85:fe:e2:c8:13:ce:99:6a:07:88:d7:4e:f0:6b:
be:8d:44:c0:29:45:82:52:cc:54:06:c8:a3:d3:32:3c:88:28:
58:f9:9e:f3:f9:10:64:24:5a:26:67:0a:8d:1c:03:3d:68:a7:
8e:86:cf:24:29:6e:97:c4:fa:96:38:a4:9f:e4:2f:e2:5a:30:
78:cf:20:0d:88:27:98:84:fa:b1:c7:1d:11:f6:db:ce:81:8a:
f8:88:e4:3e:dc:1f:dc:06:0e:c4:4a:a2:a1:56:4e:f7:d0:a7:
e7:42:1f:42:5f:1a:7a:9f:81:ea:9d:e3:9d:0c:76:26:c9:4c:
a9:28:42:44:ce:ec:2d:4d:f0:a0:bb:1b:f1:e7:de:34:b1:12:
d8:a7:83:3c:cf:91:c7:0d:30:61:03:37:5d:7d:82:be:8d:2e:
fb:29:0f:a5:71:a3:b2:63:a6:53:f0:30:48:2f:df:4f:13:b0:
26:31:2d:00:5d:30:c3:33:ea:8e:af:40:d4:4d:d1:b7:5a:52:
88:97:c7:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGngtSD2L3RUa9OJ47+VCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDFjNWJjMDkxNWEyZjdjYjE2NWIwYjdkNzEzMjEyZmE1
NzMzMmQwHhcNMjUwNjA2MTkwMDUyWhcNMjUwNjA3MTkwMDUyWjAzMTEwLwYDVQQD
Eyg5YjMyMGY4ZWQxZTUwZjU3MWZlMjdkZjFhNTRlMzQxMGYyNmUzZGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ny+0pLxWbFQG9Hp5JLCLeX/MDh+
ScLPrryeEOKxpEaj+Jstglh5bpPXLdPVKJfnD4z6FK+atsicLrtdU9FPZtlSF9IA
VfT67M8ZS8B6kyrgNi9VqVy/1pqwJwdTko7wAzkMyc4IbrLh1szEMmLGx22mekJA
zKyLysjb2SncqxYO/LjGNoJ0RXmxut+25MiDybgemrc4Is9JBrYMRvx6XfY9JRqo
NZNdidak4DjNN+yQnq5oiTECRO8U5mDDxGYgL7sje4Yx1orvPzKSBJF4t2zVVMIL
jNkwYDdIB2FutFR61zOzL027kEqW4ixUiKaKm6PjTi3cBWALNUPUB3++qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsyD47R5Q9XH+J98aVONBDybj2yMB8GA1UdIwQY
MBaAFMEBxbwJFaL3yxZbC31xMhL6VzMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4Zjct
OTI4ZDkxNzkxOTA3LzEvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4ZjctOTI4ZDkxNzkxOTA3
LzEvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehL9Xdkc
112Ay/nNVttHS+ziDWSToLK3i0dqHON1njFsQ1BwyH+BASBJOdxP+PrmnuJxjxv4
Ur/AjYX+4sgTzplqB4jXTvBrvo1EwClFglLMVAbIo9MyPIgoWPme8/kQZCRaJmcK
jRwDPWinjobPJClul8T6ljikn+Qv4loweM8gDYgnmIT6sccdEfbbzoGK+IjkPtwf
3AYOxEqioVZO99Cn50IfQl8aep+B6p3jnQx2JslMqShCRM7sLU3woLsb8efeNLES
2KeDPM+Rxw0wYQM3XX2Cvo0u+ykPpXGjsmOmU/AwSC/fTxOwJjEtAF0wwzPqjq9A
1E3Rt1pSiJfH0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:07:31 2025 by rpki-client