Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: 2M0OzEGWToU+QYvSVokCDhyDbR4NjscZA3J4SjjMemI=
Subject key identifier: AC:66:17:C7:52:7A:93:CD:61:D0:72:2C:DF:72:8E:49:90:4F:E0:11
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 019786C65BF0606D4B99B5F9E86631EEBE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 07C5
Signing time: Thu 19 Jun 2025 06:00:35 +0000
Manifest this update: Thu 19 Jun 2025 06:00:35 +0000
Manifest next update: Fri 20 Jun 2025 06:00:35 +0000
Files and hashes: 1: 1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa (hash: LOYh8aPG/hc+f2Wb/Cw6QofBs2xxLo7hf2Lj5w8CzgE=)
2: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: 1xcpV8ww3OtvwMwqta9IpcCrXlxn4U4VVDj+llDdkHM=)
3: wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa (hash: JT8633z6qqiHZIgSN23W3yJc2J/8lJJEZ1oYIJiRcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:c6:5b:f0:60:6d:4b:99:b5:f9:e8:66:31:ee:be:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Jun 19 06:00:35 2025 GMT
Not After : Jun 20 06:00:35 2025 GMT
Subject: CN=ac6617c7527a93cd61d0722cdf728e49904fe011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:91:6d:88:5f:bc:8b:9c:d0:fa:b6:ac:7f:
81:82:34:cd:84:89:c8:7e:76:63:e4:39:f3:e1:e6:
51:d3:77:a5:d9:52:f2:30:84:5d:bf:18:e2:69:0e:
d2:12:a9:2d:5d:43:34:61:0c:89:fc:90:46:9b:89:
75:e7:b2:d9:f5:3e:89:99:6c:9c:37:11:ba:e9:1b:
a8:76:03:83:bb:27:25:1d:50:c2:f3:9e:1a:77:ab:
4e:63:11:8e:2b:53:74:74:40:18:f5:5b:7d:83:e1:
3f:63:d1:06:0d:cd:88:09:3e:35:46:69:c8:9d:6b:
6b:a1:c3:4c:d3:5d:53:83:c0:21:2f:c9:9e:ce:26:
53:77:a2:ff:9a:81:e3:02:80:52:6a:b3:d9:a0:14:
5f:bf:ce:f4:19:7b:db:65:75:d3:9d:8f:32:4c:32:
90:75:ab:cc:93:fd:07:c3:df:22:ef:25:25:13:6b:
99:7b:7c:1e:ff:23:b2:98:23:ac:5d:03:f2:ca:c6:
b5:6b:1b:53:be:02:33:ee:d4:ca:92:4c:2d:86:63:
79:50:c3:1e:a9:f6:73:33:d9:1c:b5:86:9f:69:41:
16:d6:8a:4f:09:6a:ab:a4:01:8e:41:a4:0f:83:15:
6d:57:52:33:31:81:06:da:cf:83:08:3e:15:fc:09:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:66:17:C7:52:7A:93:CD:61:D0:72:2C:DF:72:8E:49:90:4F:E0:11
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:44:c4:ae:07:eb:47:bf:e2:54:2d:e0:00:66:1a:ba:64:34:
4c:11:83:7c:f0:c8:82:32:53:e3:3f:5d:2c:2b:26:30:cf:4f:
53:b4:e5:f3:25:33:6a:ae:91:68:b4:40:06:97:ef:de:6d:81:
62:70:98:f0:41:b3:0d:68:9c:8d:cc:5d:6c:8e:f3:ee:9b:f7:
e2:a3:6f:ab:b8:ee:47:63:a8:cc:e8:9d:c7:74:be:cc:c1:14:
21:84:2c:74:a7:31:54:39:83:32:b6:f6:0f:06:26:86:33:de:
11:e4:1c:a0:d4:96:13:83:81:bc:ef:a1:e1:8a:6d:a5:9b:e3:
13:5c:aa:bb:49:48:a6:68:45:6a:6a:a2:09:ad:39:7c:f9:2d:
a7:a3:96:d3:0d:a5:ca:6e:cb:86:ae:29:99:76:08:25:0a:b1:
d4:1a:94:88:00:ec:0e:25:39:ce:2f:df:94:62:8f:60:ff:4d:
f2:b1:ce:0d:08:5f:f4:72:7b:82:a7:5d:34:83:90:e8:b4:50:
83:49:69:f9:fa:3a:ce:df:27:16:8a:4a:21:78:11:94:27:f2:
d9:7f:1a:7f:08:a9:73:c3:fd:b7:95:67:f6:e1:47:97:b7:dc:
a8:d2:d5:a3:cc:17:e9:27:45:59:9c:0a:4f:f6:87:87:ff:fe:
aa:cb:02:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeGxlvwYG1LmbX56GYx7r5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDRjZDdkZjg0YzMxOWQxOWFmMzViMTEwNGYxNzNlYmEy
YzZkYmQwHhcNMjUwNjE5MDYwMDM1WhcNMjUwNjIwMDYwMDM1WjAzMTEwLwYDVQQD
EyhhYzY2MTdjNzUyN2E5M2NkNjFkMDcyMmNkZjcyOGU0OTkwNGZlMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ6RbYhfvIuc0Pq2rH+BgjTNhInI
fnZj5Dnz4eZR03el2VLyMIRdvxjiaQ7SEqktXUM0YQyJ/JBGm4l157LZ9T6JmWyc
NxG66RuodgODuyclHVDC854ad6tOYxGOK1N0dEAY9Vt9g+E/Y9EGDc2ICT41RmnI
nWtrocNM011Tg8AhL8meziZTd6L/moHjAoBSarPZoBRfv870GXvbZXXTnY8yTDKQ
davMk/0Hw98i7yUlE2uZe3we/yOymCOsXQPyysa1axtTvgIz7tTKkkwthmN5UMMe
qfZzM9kctYafaUEW1opPCWqrpAGOQaQPgxVtV1IzMYEG2s+DCD4V/AkQNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxmF8dSepPNYdByLN9yjkmQT+ARMB8GA1UdIwQY
MBaAFMEEzX34TDGdGa81sRBPFz66LG29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQt
N2VmZjhmMWU5MWNkLzEvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQtN2VmZjhmMWU5MWNk
LzEvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUTErgfr
R7/iVC3gAGYaumQ0TBGDfPDIgjJT4z9dLCsmMM9PU7Tl8yUzaq6RaLRABpfv3m2B
YnCY8EGzDWicjcxdbI7z7pv34qNvq7juR2OozOidx3S+zMEUIYQsdKcxVDmDMrb2
DwYmhjPeEeQcoNSWE4OBvO+h4YptpZvjE1yqu0lIpmhFamqiCa05fPktp6OW0w2l
ym7Lhq4pmXYIJQqx1BqUiADsDiU5zi/flGKPYP9N8rHODQhf9HJ7gqddNIOQ6LRQ
g0lp+fo6zt8nFopKIXgRlCfy2X8afwipc8P9t5Vn9uFHl7fcqNLVo8wX6SdFWZwK
T/aHh//+qssCkg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 10:35:13 2025 by rpki-client