Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: OAFpCJMkh2a4aUFJAvTdcz0bJ7WtZhPwUIoF7egAB4U=
Subject key identifier: 4B:CA:87:5B:3C:5D:3A:26:53:01:52:86:FE:EC:0B:AA:CD:7D:4E:57
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 01974B1F261011C27C0B2D30CC0979E26F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 078B
Signing time: Sat 07 Jun 2025 16:00:21 +0000
Manifest this update: Sat 07 Jun 2025 16:00:21 +0000
Manifest next update: Sun 08 Jun 2025 16:00:21 +0000
Files and hashes: 1: CrZg-KF8Q9A22OHJJHctF4UJ8vA.roa (hash: TgN9LzFg5B6mAl/H8RLYxQOgYmdpxQcOV4fT/DnUDn0=)
2: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: Px99UHEO4eGKnssVC7vajuP1v/B8oE5HmR6ExQfC2SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:26:10:11:c2:7c:0b:2d:30:cc:09:79:e2:6f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Jun 7 16:00:21 2025 GMT
Not After : Jun 8 16:00:21 2025 GMT
Subject: CN=4bca875b3c5d3a2653015286feec0baacd7d4e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:ca:e2:3f:9c:ae:78:ad:0f:c1:10:e7:32:
66:0d:92:cd:ea:89:ce:c2:9d:74:57:17:5a:d6:49:
d5:64:6e:21:53:d2:e3:c5:56:55:c2:85:96:74:da:
03:fb:1c:c5:e1:16:ee:b8:40:f9:ef:08:7a:13:1f:
d9:e3:ba:ea:9b:17:69:2c:2b:5d:eb:76:fd:e9:b7:
05:7a:8a:ab:fb:f8:15:07:8d:ae:f9:20:8b:4f:dc:
12:8b:5c:14:e2:b5:fe:6b:e1:f5:7e:f6:0f:16:3c:
1c:31:ed:fe:78:73:cb:6b:a8:87:6c:d5:55:54:ac:
79:26:d2:91:f2:8c:92:2a:10:2e:7e:c1:af:3e:c4:
59:16:ac:83:f5:48:a5:49:a0:86:0b:02:ef:d8:fb:
09:b9:87:6a:7a:c1:4b:ee:70:ac:89:cc:21:22:f7:
fb:c5:e9:d7:a8:60:fc:31:fc:c5:74:c0:b8:44:90:
e4:ff:ed:35:d3:20:f4:e1:4d:e7:bb:b0:ae:fb:9a:
9a:33:7e:84:7f:2f:ae:df:a2:e9:42:19:a0:7f:72:
53:47:ba:1c:cf:dd:d9:1b:d8:1b:d5:a6:95:49:4e:
7c:10:31:fa:f5:a3:aa:dc:45:2e:e9:61:58:47:a6:
40:60:78:4d:58:4a:9a:72:bd:d8:d4:08:6a:c5:38:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CA:87:5B:3C:5D:3A:26:53:01:52:86:FE:EC:0B:AA:CD:7D:4E:57
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2a:36:50:f5:be:dc:9e:47:91:fc:2e:e6:e2:73:76:45:a8:
95:50:4c:54:3f:e2:c9:cf:32:9a:2d:2a:f6:71:93:a3:8a:02:
fd:39:51:3f:15:20:71:85:16:7d:a3:e0:79:95:eb:a3:6f:f1:
50:f9:e4:e9:ac:57:d2:8b:ff:4e:09:4a:c4:ec:b7:9a:e3:3b:
cb:c8:86:e2:56:37:ad:74:35:2e:70:b0:76:aa:50:bb:77:de:
4e:59:b3:49:0d:cf:b3:99:f6:aa:03:12:3a:51:d2:6d:c7:d2:
8d:c1:45:7f:4a:dc:58:07:b7:21:a2:4e:56:4f:85:33:e7:e8:
bb:b0:f3:e7:a8:8d:55:2e:29:dc:a0:ae:f8:77:33:e6:d9:04:
34:7a:12:b0:36:c5:4b:7f:07:93:07:7f:2b:3b:c9:63:db:8f:
6a:df:ae:c0:cb:8a:9c:e6:de:88:8f:cf:5f:4c:4a:60:3d:0b:
08:29:1a:9d:80:f3:d7:c6:2e:67:58:c2:69:b9:1d:f3:8f:cc:
bb:46:2c:d0:70:27:bf:ea:b1:c1:32:83:ee:da:54:7b:9e:7a:
ba:ac:e4:ed:d4:e9:c4:5e:dc:e0:fe:6b:9d:14:09:84:ab:95:
1b:00:66:bf:ed:5b:93:7a:d5:a9:ae:45:c0:05:6b:55:d2:30:
7a:8f:6b:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLHyYQEcJ8Cy0wzAl54m8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDk0M2E0MWNlMjdlN2I3YmNmZGZmNjlhODljM2UzMzdl
YTYzYjUwHhcNMjUwNjA3MTYwMDIxWhcNMjUwNjA4MTYwMDIxWjAzMTEwLwYDVQQD
Eyg0YmNhODc1YjNjNWQzYTI2NTMwMTUyODZmZWVjMGJhYWNkN2Q0ZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5LK4j+crnitD8EQ5zJmDZLN6onO
wp10Vxda1knVZG4hU9LjxVZVwoWWdNoD+xzF4RbuuED57wh6Ex/Z47rqmxdpLCtd
63b96bcFeoqr+/gVB42u+SCLT9wSi1wU4rX+a+H1fvYPFjwcMe3+eHPLa6iHbNVV
VKx5JtKR8oySKhAufsGvPsRZFqyD9UilSaCGCwLv2PsJuYdqesFL7nCsicwhIvf7
xenXqGD8MfzFdMC4RJDk/+010yD04U3nu7Cu+5qaM36Efy+u36LpQhmgf3JTR7oc
z93ZG9gb1aaVSU58EDH69aOq3EUu6WFYR6ZAYHhNWEqacr3Y1AhqxTjEUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvKh1s8XTomUwFShv7sC6rNfU5XMB8GA1UdIwQY
MBaAFFrZQ6Qc4n57e8/f9pqJw+M36mO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQt
ODRmOTA1OTM5MTNjLzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQtODRmOTA1OTM5MTNj
LzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyo2UPW+
3J5Hkfwu5uJzdkWolVBMVD/iyc8ymi0q9nGTo4oC/TlRPxUgcYUWfaPgeZXro2/x
UPnk6axX0ov/TglKxOy3muM7y8iG4lY3rXQ1LnCwdqpQu3feTlmzSQ3Ps5n2qgMS
OlHSbcfSjcFFf0rcWAe3IaJOVk+FM+fou7Dz56iNVS4p3KCu+Hcz5tkENHoSsDbF
S38Hkwd/KzvJY9uPat+uwMuKnObeiI/PX0xKYD0LCCkanYDz18YuZ1jCabkd84/M
u0Ys0HAnv+qxwTKD7tpUe556uqzk7dTpxF7c4P5rnRQJhKuVGwBmv+1bk3rVqa5F
wAVrVdIweo9rnA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:35 2025 by rpki-client