Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: 5M0WEFbLvSXvE735hmVVc7q0x01Pxyht5VY3W65hWG0=
Subject key identifier: 58:86:55:32:13:E5:FA:69:27:3D:3D:6A:FD:99:6D:10:14:65:01:D8
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 01989035232BFF6B09307CCAFC2E87EBD910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 15D0
Signing time: Sat 09 Aug 2025 19:00:58 +0000
Manifest this update: Sat 09 Aug 2025 19:00:58 +0000
Manifest next update: Sun 10 Aug 2025 19:00:58 +0000
Files and hashes: 1: FaPK4dABXX1JUG-DgodpiiYFyXk.roa (hash: 8EnGZIA4ScfpCaGufhHcnmIDRY1lMTTgXZqEJ9E7v2g=)
2: bYeYVYEdCXCzK3hGWezO0ZNHveg.roa (hash: UaiyZMeOYv/TRvUCkbZ9PcMP5ygVyQhx0p+DkQtZkYA=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: 959ohLA5xgc0eSchtw7Oq8WWisC2oDQMmOQwtT/lKE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:23:2b:ff:6b:09:30:7c:ca:fc:2e:87:eb:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Aug 9 19:00:58 2025 GMT
Not After : Aug 10 19:00:58 2025 GMT
Subject: CN=5886553213e5fa69273d3d6afd996d10146501d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:1d:0a:54:e0:25:f3:52:8d:03:9c:47:4d:
71:fc:80:3c:13:08:db:1f:1e:1d:e8:ef:99:0b:b1:
01:7e:8c:e3:64:d2:51:9d:6d:26:d5:f1:74:56:bf:
25:34:62:ab:dc:c5:4d:2e:28:30:a2:e0:49:9b:2f:
d6:28:0c:bf:50:f2:ab:91:0b:76:87:ed:af:2d:f4:
1b:25:d3:e4:1b:c5:57:bd:8f:13:25:b6:93:09:e3:
81:2d:09:d9:7c:18:bd:fa:cc:28:b6:ab:6a:e4:bc:
96:ae:0e:a2:fd:e2:6e:44:a0:d9:7f:09:72:a6:a9:
07:51:6e:ab:ea:d8:95:f9:a0:b4:54:8e:9e:42:d7:
90:80:88:75:2a:4b:2d:8a:e5:65:0b:1d:43:13:df:
f0:01:a5:c8:af:68:86:17:43:bd:0b:d8:65:69:ba:
9e:f0:a4:46:c7:33:44:ed:da:92:94:76:c0:c7:86:
78:ee:0d:e7:a6:44:65:a8:33:6d:af:55:25:c2:ee:
03:7a:f8:93:8a:cc:ba:b7:e2:03:88:07:1a:e7:87:
7f:d6:e7:c3:78:a0:5a:e0:ec:31:93:98:d3:ae:8d:
2e:13:49:8e:e0:66:47:8c:45:14:86:5d:e0:17:60:
dc:8d:9b:c9:94:f1:0f:77:f3:df:7f:02:69:ce:ab:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:86:55:32:13:E5:FA:69:27:3D:3D:6A:FD:99:6D:10:14:65:01:D8
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ea:d8:14:3d:82:a0:87:15:c7:63:c3:e6:78:4a:36:b2:cc:
00:58:ef:65:82:4e:41:f1:1d:c2:a6:d4:9f:2c:06:18:b7:0b:
d7:7d:d5:89:a3:bc:57:da:74:bc:8b:ec:de:02:e5:27:d9:a3:
70:9e:33:ed:a6:06:0a:13:dd:27:d5:7b:ec:d4:63:a1:aa:e2:
5c:e6:5c:94:0b:f1:f3:91:b9:e9:f4:db:86:c1:2a:73:24:78:
c1:bf:ec:18:6f:7b:0f:1d:48:70:55:98:4c:42:b0:b8:17:3b:
80:0a:94:42:89:b7:74:9b:a0:f3:d5:e1:9a:26:27:85:63:16:
47:e3:f9:db:34:66:1a:d3:b3:3a:82:16:ed:c7:ee:be:9c:1d:
69:42:44:84:c4:28:93:fc:95:62:7a:0b:f9:81:fb:65:c8:e2:
22:3c:bc:39:1f:78:b1:ae:13:77:42:93:3f:ba:6d:8a:91:72:
8b:fe:30:2a:b7:00:87:53:29:91:05:f1:19:fe:ca:39:63:4e:
d9:72:61:21:2f:e6:88:2a:b1:ab:68:5b:c1:ff:47:d6:ba:37:
57:54:ed:63:55:20:c5:e3:39:cc:d1:be:30:50:9d:df:e6:73:
70:b3:e8:16:5e:7c:ff:26:21:a4:41:ab:4c:07:18:f3:31:24:
1a:f9:13:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNSMr/2sJMHzK/C6H69kQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNTEwYThhNTI1ZGM5YjFlYzBiMTU2MGQwOTBhNjQyNjhk
NDJlYzQwHhcNMjUwODA5MTkwMDU4WhcNMjUwODEwMTkwMDU4WjAzMTEwLwYDVQQD
Eyg1ODg2NTUzMjEzZTVmYTY5MjczZDNkNmFmZDk5NmQxMDE0NjUwMWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX8dClTgJfNSjQOcR01x/IA8Ewjb
Hx4d6O+ZC7EBfozjZNJRnW0m1fF0Vr8lNGKr3MVNLigwouBJmy/WKAy/UPKrkQt2
h+2vLfQbJdPkG8VXvY8TJbaTCeOBLQnZfBi9+swotqtq5LyWrg6i/eJuRKDZfwly
pqkHUW6r6tiV+aC0VI6eQteQgIh1KkstiuVlCx1DE9/wAaXIr2iGF0O9C9hlabqe
8KRGxzNE7dqSlHbAx4Z47g3npkRlqDNtr1Ulwu4DeviTisy6t+IDiAca54d/1ufD
eKBa4Owxk5jTro0uE0mO4GZHjEUUhl3gF2DcjZvJlPEPd/PffwJpzqvJ9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiGVTIT5fppJz09av2ZbRAUZQHYMB8GA1UdIwQY
MBaAFMJRCopSXcmx7AsVYNCQpkJo1C7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZWU5NjktOThkMS00ODFhLWE0ODct
OWE4OTU0NjdkYTg1LzEvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zZWU5NjktOThkMS00ODFhLWE0ODctOWE4OTU0NjdkYTg1
LzEvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+rYFD2C
oIcVx2PD5nhKNrLMAFjvZYJOQfEdwqbUnywGGLcL133ViaO8V9p0vIvs3gLlJ9mj
cJ4z7aYGChPdJ9V77NRjoariXOZclAvx85G56fTbhsEqcyR4wb/sGG97Dx1IcFWY
TEKwuBc7gAqUQom3dJug89XhmiYnhWMWR+P52zRmGtOzOoIW7cfuvpwdaUJEhMQo
k/yVYnoL+YH7ZcjiIjy8OR94sa4Td0KTP7ptipFyi/4wKrcAh1MpkQXxGf7KOWNO
2XJhIS/miCqxq2hbwf9H1ro3V1TtY1UgxeM5zNG+MFCd3+ZzcLPoFl58/yYhpEGr
TAcY8zEkGvkTzQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:23 2025 by rpki-client