Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
File: W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json)
Hash identifier: /+emctS23Fsb/dSQfHfY+/1V74CnvzaMSh5n5TtL9p8=
Subject key identifier: 5F:81:E1:1C:2F:F2:6A:1D:E5:1F:38:96:EB:9D:3C:66:F6:6D:F6:1E
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial: 01976C98EB80D643A2DC3A4FB8CB616D055D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
Manifest number: 0C32
Signing time: Sat 14 Jun 2025 04:00:50 +0000
Manifest this update: Sat 14 Jun 2025 04:00:50 +0000
Manifest next update: Sun 15 Jun 2025 04:00:50 +0000
Files and hashes: 1: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: 7BfI9gaRJ6sMmy8l/V994ej10MtOXHqAun5c279B16E=)
2: rzLK9K7U47FPPeK7ERJASBVVtlU.roa (hash: X91g9n8reIlS29Iuv4BYArQQP2cYDZgj7Nwx0mw9YJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:eb:80:d6:43:a2:dc:3a:4f:b8:cb:61:6d:05:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Validity
Not Before: Jun 14 04:00:50 2025 GMT
Not After : Jun 15 04:00:50 2025 GMT
Subject: CN=5f81e11c2ff26a1de51f3896eb9d3c66f66df61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:40:ae:14:cd:71:cd:06:ff:c5:c9:63:15:
17:6c:76:c3:a7:65:23:b9:90:3e:c8:35:1b:cf:c6:
31:2d:06:05:08:5e:42:a1:28:9e:1f:7e:20:c2:4a:
a8:d7:36:1d:fb:ed:d5:02:55:47:f5:99:bc:2e:7f:
a0:4e:24:be:a9:6a:82:60:d5:11:8f:73:02:3a:34:
f5:15:cc:1d:71:75:e9:f1:f3:65:1a:99:8d:fd:8d:
67:df:01:b8:98:18:33:53:2d:d9:eb:99:0e:cf:32:
b1:b1:86:bc:91:cd:1c:d2:a7:49:f6:6f:0f:c9:39:
26:e2:00:2e:c5:98:95:c2:15:68:0a:90:81:59:b3:
b5:ba:ec:85:94:e6:25:c9:f3:0d:b7:c3:5a:7e:b2:
2e:ed:a0:51:5e:87:9f:4f:52:b0:b1:6f:e1:f9:92:
fd:fd:3a:48:bf:37:1b:1f:ef:1b:8a:3b:5d:a5:3e:
0e:87:1d:d9:5f:da:b7:f3:43:43:8c:a7:c6:35:2f:
f2:31:e0:d9:fa:00:cb:e5:d5:34:30:db:aa:4a:bd:
68:87:44:7a:fb:36:5d:5d:f7:5f:dd:40:31:5b:90:
07:2b:2f:78:f1:73:ed:02:70:24:20:c5:8f:83:c3:
03:13:c9:67:dd:38:8f:2b:f5:c1:9d:0b:14:11:90:
bf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:81:E1:1C:2F:F2:6A:1D:E5:1F:38:96:EB:9D:3C:66:F6:6D:F6:1E
X509v3 Authority Key Identifier:
keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:83:f7:5e:8d:43:18:10:dd:fe:d6:be:d7:fe:06:64:8e:e4:
17:37:df:ec:d3:5b:cd:e5:55:ea:12:75:2c:9e:13:68:f8:0b:
48:79:7e:9f:0a:fe:6a:c5:76:78:c3:30:b0:f1:0a:72:50:3b:
a8:40:ec:53:97:0b:b0:b4:35:b0:ac:79:54:ad:d0:64:71:a2:
58:cc:13:16:02:a8:9f:b5:d2:f4:64:10:15:fb:81:05:ac:ce:
65:fc:67:a2:38:76:b6:16:54:28:56:f9:a0:59:32:5a:4d:95:
a9:0f:c5:77:4f:ff:78:3e:cf:cc:c9:89:ab:34:0d:72:6a:46:
52:7c:f9:ca:0a:25:7c:a6:04:d5:0b:bc:79:e2:42:d0:61:fb:
05:4e:53:35:2d:96:44:f5:cf:dd:17:b8:44:f0:8c:09:b9:d9:
a3:e4:24:59:39:7e:03:d1:93:58:44:f8:3b:65:62:8b:2b:4c:
0f:63:41:6c:b7:b4:c4:8f:95:94:7e:55:d6:67:ea:5f:f1:84:
4b:69:44:86:40:fc:86:da:88:a3:31:fd:b9:08:ef:29:7c:c6:
d0:9e:fa:fc:9e:cb:43:29:dd:11:a4:5d:6a:a8:8f:67:ea:60:
77:53:ea:29:bf:f0:5f:df:72:af:e3:14:96:e1:7c:ff:de:ba:
41:e4:99:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmOuA1kOi3DpPuMthbQVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzE1MDM2MTBiZjgyZDg2ODdiN2FlZmI4NzlhNjU3ODcw
NGYzMmEwHhcNMjUwNjE0MDQwMDUwWhcNMjUwNjE1MDQwMDUwWjAzMTEwLwYDVQQD
Eyg1ZjgxZTExYzJmZjI2YTFkZTUxZjM4OTZlYjlkM2M2NmY2NmRmNjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9JArhTNcc0G/8XJYxUXbHbDp2Uj
uZA+yDUbz8YxLQYFCF5CoSieH34gwkqo1zYd++3VAlVH9Zm8Ln+gTiS+qWqCYNUR
j3MCOjT1FcwdcXXp8fNlGpmN/Y1n3wG4mBgzUy3Z65kOzzKxsYa8kc0c0qdJ9m8P
yTkm4gAuxZiVwhVoCpCBWbO1uuyFlOYlyfMNt8NafrIu7aBRXoefT1KwsW/h+ZL9
/TpIvzcbH+8bijtdpT4Ohx3ZX9q380NDjKfGNS/yMeDZ+gDL5dU0MNuqSr1oh0R6
+zZdXfdf3UAxW5AHKy948XPtAnAkIMWPg8MDE8ln3TiPK/XBnQsUEZC/TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+B4Rwv8mod5R84luudPGb2bfYeMB8GA1UdIwQY
MBaAFFvBUDYQv4LYaHt677h5pleHBPMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zMGEzMDktYjE4ZS00ZjI3LThlN2Ut
ZTdiMzcyZTRjN2M1LzEvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8zMGEzMDktYjE4ZS00ZjI3LThlN2UtZTdiMzcyZTRjN2M1
LzEvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYP3Xo1D
GBDd/ta+1/4GZI7kFzff7NNbzeVV6hJ1LJ4TaPgLSHl+nwr+asV2eMMwsPEKclA7
qEDsU5cLsLQ1sKx5VK3QZHGiWMwTFgKon7XS9GQQFfuBBazOZfxnojh2thZUKFb5
oFkyWk2VqQ/Fd0//eD7PzMmJqzQNcmpGUnz5ygolfKYE1Qu8eeJC0GH7BU5TNS2W
RPXP3Re4RPCMCbnZo+QkWTl+A9GTWET4O2ViiytMD2NBbLe0xI+VlH5V1mfqX/GE
S2lEhkD8htqIozH9uQjvKXzG0J76/J7LQyndEaRdaqiPZ+pgd1PqKb/wX99yr+MU
luF8/966QeSZXw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:42 2025 by rpki-client