Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: a1dwiFLNfyCsekOEkheD928hRGMFuBQ6pcB4FW6F7Rs=
Subject key identifier: A0:0C:77:CD:8D:83:48:68:4E:68:AE:EB:12:1E:FC:7E:E8:26:66:D3
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 01976CCF8A00B970D884C2F6372E8FC6E735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 0372
Signing time: Sat 14 Jun 2025 05:00:29 +0000
Manifest this update: Sat 14 Jun 2025 05:00:29 +0000
Manifest next update: Sun 15 Jun 2025 05:00:29 +0000
Files and hashes: 1: RhPTeugmZDfkfUBJoLhRret8XmI.roa (hash: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: ZOeQq3OwPcHIDXBSA9sOXL+APcISjT3DNmz/xLxYs5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:8a:00:b9:70:d8:84:c2:f6:37:2e:8f:c6:e7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Jun 14 05:00:29 2025 GMT
Not After : Jun 15 05:00:29 2025 GMT
Subject: CN=a00c77cd8d8348684e68aeeb121efc7ee82666d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:fd:a4:ba:98:9e:b5:ea:84:dd:8a:2d:e9:
1c:0a:1b:a5:70:b2:f6:eb:8e:5b:45:52:7b:4a:26:
62:54:68:6c:b2:c2:f4:9b:6b:58:40:14:a1:c9:2c:
75:34:9c:b8:90:16:65:51:b9:ab:c8:9d:9e:08:a7:
08:a4:50:3d:64:c6:9e:ad:ad:41:bc:6c:2e:ee:84:
92:6c:ad:e1:54:5a:2d:31:f7:ed:b6:99:8c:57:4a:
58:5e:10:c5:b0:8a:42:fe:7c:d4:3c:50:a0:d6:e7:
0c:bc:0c:31:01:61:c7:78:76:ab:bc:4a:55:8b:ef:
1e:77:13:cb:08:32:e9:ab:b3:c7:dd:1e:c8:fa:18:
52:1c:83:8e:0f:cd:41:b1:b2:41:f9:83:8c:16:ea:
4b:6b:d0:0a:1a:86:41:43:64:af:70:66:50:06:fd:
86:b8:bd:f3:49:70:b2:bd:b3:22:ca:ab:3d:0c:5b:
53:95:a6:52:9e:8c:35:d5:8c:81:42:62:fb:89:89:
90:c7:c7:11:1a:e3:99:8e:11:18:04:50:97:7b:bb:
6a:52:e7:65:ca:31:67:7d:76:93:a1:9c:74:b2:43:
27:4a:12:84:15:21:68:13:6f:1d:9a:49:52:99:2d:
71:bd:17:54:ed:1b:db:98:ce:2a:26:56:56:2c:12:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0C:77:CD:8D:83:48:68:4E:68:AE:EB:12:1E:FC:7E:E8:26:66:D3
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2f:ef:0f:65:53:49:76:81:e9:79:1c:b7:31:89:60:48:77:
8c:fa:f3:c0:b5:f4:92:ba:09:ea:38:56:5f:57:b2:23:55:f1:
22:97:71:d4:56:e7:1c:be:b0:b4:73:4c:f6:4f:a4:0e:8c:37:
85:d7:b4:a1:39:24:d2:a5:ad:ee:cd:c6:ed:16:7b:2e:fc:50:
28:a6:7f:10:c3:71:f5:c0:5f:c9:36:02:c3:d0:04:bb:d9:fe:
81:34:bb:c8:82:81:e5:45:2c:a3:b9:cb:c5:28:13:34:c9:22:
f2:51:60:3b:dc:6b:e6:0d:c7:8f:27:b6:dd:b3:fc:4b:56:b2:
f2:64:e0:79:45:77:f0:95:41:52:87:51:27:1f:9b:55:57:f5:
96:e7:b6:8f:0b:71:6c:da:88:cc:3a:13:ac:aa:ce:a7:9a:f7:
04:9b:0e:53:d9:8e:d7:8e:bc:f2:f9:02:88:97:f7:55:b1:91:
8d:5e:aa:6c:f4:33:5d:48:41:b2:93:2b:77:de:af:23:12:fa:
ad:6e:30:2d:33:16:49:1f:21:59:75:74:5e:8c:03:b8:b0:d4:
8c:6c:3e:3c:1d:e7:19:e6:8e:16:10:f2:0f:de:2d:8d:48:5e:
5a:49:0f:3a:68:d1:ac:f9:b9:fb:e2:93:a3:c6:55:e2:83:e7:
b1:b5:af:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz4oAuXDYhML2Ny6Pxuc1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGJhODRjZGRlYTQzZmNiZTQxZTk4NmIxZmM3ODEzN2Rj
ZmVmZDcwHhcNMjUwNjE0MDUwMDI5WhcNMjUwNjE1MDUwMDI5WjAzMTEwLwYDVQQD
EyhhMDBjNzdjZDhkODM0ODY4NGU2OGFlZWIxMjFlZmM3ZWU4MjY2NmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwz9pLqYnrXqhN2KLekcChulcLL2
645bRVJ7SiZiVGhsssL0m2tYQBShySx1NJy4kBZlUbmryJ2eCKcIpFA9ZMaera1B
vGwu7oSSbK3hVFotMffttpmMV0pYXhDFsIpC/nzUPFCg1ucMvAwxAWHHeHarvEpV
i+8edxPLCDLpq7PH3R7I+hhSHIOOD81BsbJB+YOMFupLa9AKGoZBQ2SvcGZQBv2G
uL3zSXCyvbMiyqs9DFtTlaZSnow11YyBQmL7iYmQx8cRGuOZjhEYBFCXe7tqUudl
yjFnfXaToZx0skMnShKEFSFoE28dmklSmS1xvRdU7RvbmM4qJlZWLBI5xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAMd82Ng0hoTmiu6xIe/H7oJmbTMB8GA1UdIwQY
MBaAFFnbqEzd6kP8vkHphrH8eBN9z+/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEt
MDVkMDhjZWEwMmE5LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEtMDVkMDhjZWEwMmE5
LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMS/vD2VT
SXaB6XkctzGJYEh3jPrzwLX0kroJ6jhWX1eyI1XxIpdx1FbnHL6wtHNM9k+kDow3
hde0oTkk0qWt7s3G7RZ7LvxQKKZ/EMNx9cBfyTYCw9AEu9n+gTS7yIKB5UUso7nL
xSgTNMki8lFgO9xr5g3Hjye23bP8S1ay8mTgeUV38JVBUodRJx+bVVf1lue2jwtx
bNqIzDoTrKrOp5r3BJsOU9mO14688vkCiJf3VbGRjV6qbPQzXUhBspMrd96vIxL6
rW4wLTMWSR8hWXV0XowDuLDUjGw+PB3nGeaOFhDyD94tjUheWkkPOmjRrPm5++KT
o8ZV4oPnsbWvew==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:35:48 2025 by rpki-client