Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json)
Hash identifier: 0p1ze9J+i5LXV1yLGJNHU9buezaRimq6pfFYz8Dsng8=
Subject key identifier: 5B:95:D6:2C:34:E1:41:B7:FA:3D:0A:0F:44:E0:2A:79:FB:AB:EF:02
Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Certificate serial: 019874191C3EAC14352DC1EED2A07CD4B20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
Manifest number: 27
Signing time: Mon 04 Aug 2025 08:00:59 +0000
Manifest this update: Mon 04 Aug 2025 08:00:59 +0000
Manifest next update: Tue 05 Aug 2025 08:00:59 +0000
Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: 8uMZQ+wywDTFwhuLO42q6AGFJmL3V8NQcfDc0l2b/tw=)
2: o0U8osvjVfiUePXARN4QCTizNIY.roa (hash: ya55CYA+rU6mfw44B9MOjIiEFlx2IM7GsmvEpJ7vX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:1c:3e:ac:14:35:2d:c1:ee:d2:a0:7c:d4:b2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Validity
Not Before: Aug 4 08:00:59 2025 GMT
Not After : Aug 5 08:00:59 2025 GMT
Subject: CN=5b95d62c34e141b7fa3d0a0f44e02a79fbabef02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:29:3a:90:c2:9a:3e:d4:53:8c:04:d1:14:
e9:92:02:b0:a1:fa:3c:42:63:2e:c9:45:01:44:fe:
d2:20:16:ee:8f:ac:e3:97:d1:9d:bc:8e:fc:ba:9c:
09:67:7d:94:74:73:02:75:42:08:e0:7f:d6:d1:a6:
ac:2c:16:c1:f8:11:f5:fb:31:bc:9c:87:c6:d7:36:
00:05:d9:41:5a:1c:6e:11:b2:01:47:98:4c:12:a3:
f6:8f:59:c7:c8:35:ae:8d:7f:c7:7b:69:4b:2e:48:
8a:51:37:0e:19:cf:cb:76:37:f1:c4:c3:39:48:22:
40:11:39:3b:79:48:22:45:95:fa:ce:fb:e7:86:21:
b0:bf:7a:3f:b3:1e:95:69:bd:64:67:f0:08:8e:f0:
f2:b3:e8:69:02:42:22:b8:2c:c8:94:da:50:a8:bf:
91:86:6e:67:d6:38:1e:d4:ac:ce:90:8a:76:b9:82:
b5:79:92:a5:6a:6c:50:33:11:ce:10:83:e3:87:3f:
3e:17:c1:fd:14:e1:e6:26:7e:47:66:43:b4:87:eb:
e3:a9:bd:c1:2d:e1:bb:a5:0e:e0:74:6d:c2:aa:a0:
02:57:2c:5e:01:92:e1:24:07:e0:01:a2:56:95:40:
51:61:05:57:b3:75:08:30:37:29:ce:e2:bb:c3:7e:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:95:D6:2C:34:E1:41:B7:FA:3D:0A:0F:44:E0:2A:79:FB:AB:EF:02
X509v3 Authority Key Identifier:
keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7d:fa:10:50:64:a9:f7:89:bf:f7:f8:6b:ae:e1:ac:39:0c:
6e:e1:cc:e3:7c:4a:bd:8d:e2:f3:d3:e1:7d:41:81:64:52:83:
5f:48:aa:9c:d2:7b:cc:56:c7:db:96:84:a9:29:28:83:67:2e:
8f:fc:a9:5d:d8:83:87:cf:07:6a:84:25:77:0f:f2:c0:48:21:
bf:36:d1:35:15:c9:97:6f:91:cb:be:ea:29:a9:07:29:9c:6a:
d8:37:89:35:11:d0:75:d3:52:1c:64:d4:c5:2f:b2:de:e7:90:
25:3d:e0:7f:44:e4:d4:32:07:48:cf:e3:ab:d8:9d:a4:d1:ad:
2e:12:c2:a0:30:a1:bb:4a:f6:7d:65:3f:26:6c:a4:29:3a:2b:
92:8a:f7:d5:6b:c6:04:13:fc:4d:f4:3f:a0:c9:51:bc:05:4b:
8d:81:61:47:e0:55:97:d4:22:29:d5:0e:12:88:20:14:4f:1a:
01:4f:6a:97:09:0c:03:aa:c1:6a:12:d8:7c:de:79:79:2f:05:
14:fd:4d:1c:78:9e:5e:3d:41:69:2d:68:a8:7b:e8:ef:52:66:
6a:df:7d:79:91:cd:52:da:ee:7c:30:fd:d0:d4:71:7c:af:29:
af:58:c5:55:46:b8:32:dd:79:b2:17:06:e0:e0:dc:63:4d:0a:
83:71:42:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GRw+rBQ1LcHu0qB81LIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZmE3MDI3NjYxYWM4YzRhNzdmZjJhYmQ1OTY4NmFmOTlm
MTU5MjgwHhcNMjUwODA0MDgwMDU5WhcNMjUwODA1MDgwMDU5WjAzMTEwLwYDVQQD
Eyg1Yjk1ZDYyYzM0ZTE0MWI3ZmEzZDBhMGY0NGUwMmE3OWZiYWJlZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnwpOpDCmj7UU4wE0RTpkgKwofo8
QmMuyUUBRP7SIBbuj6zjl9GdvI78upwJZ32UdHMCdUII4H/W0aasLBbB+BH1+zG8
nIfG1zYABdlBWhxuEbIBR5hMEqP2j1nHyDWujX/He2lLLkiKUTcOGc/LdjfxxMM5
SCJAETk7eUgiRZX6zvvnhiGwv3o/sx6Vab1kZ/AIjvDys+hpAkIiuCzIlNpQqL+R
hm5n1jge1KzOkIp2uYK1eZKlamxQMxHOEIPjhz8+F8H9FOHmJn5HZkO0h+vjqb3B
LeG7pQ7gdG3CqqACVyxeAZLhJAfgAaJWlUBRYQVXs3UIMDcpzuK7w35hqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuV1iw04UG3+j0KD0TgKnn7q+8CMB8GA1UdIwQY
MBaAFFn6cCdmGsjEp3/yq9WWhq+Z8VkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQt
MDkwNmRhMWIyM2E2LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQtMDkwNmRhMWIyM2E2
LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEH36EFBk
qfeJv/f4a67hrDkMbuHM43xKvY3i89PhfUGBZFKDX0iqnNJ7zFbH25aEqSkog2cu
j/ypXdiDh88HaoQldw/ywEghvzbRNRXJl2+Ry77qKakHKZxq2DeJNRHQddNSHGTU
xS+y3ueQJT3gf0Tk1DIHSM/jq9idpNGtLhLCoDChu0r2fWU/JmykKTorkor31WvG
BBP8TfQ/oMlRvAVLjYFhR+BVl9QiKdUOEoggFE8aAU9qlwkMA6rBahLYfN55eS8F
FP1NHHieXj1BaS1oqHvo71Jmat99eZHNUtrufDD90NRxfK8pr1jFVUa4Mt15shcG
4ODcY00Kg3FCaQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:24 2025 by rpki-client