Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
File: WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json)
Hash identifier: jT4IU3ug6u9HPFJIoIg6Wz1x+SwRKZqb29CLJRoX+jc=
Subject key identifier: 26:92:A8:BD:38:49:BF:35:1D:4F:8D:FE:30:52:62:C6:CA:7D:61:32
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Certificate issuer: /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial: 01988CFDE9896D7095DEF8B34766153D1E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
Manifest number: 09AE
Signing time: Sat 09 Aug 2025 04:01:47 +0000
Manifest this update: Sat 09 Aug 2025 04:01:47 +0000
Manifest next update: Sun 10 Aug 2025 04:01:47 +0000
Files and hashes: 1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: 7Gzk0Wb/x3rMScRTKS6WlOwAYyo+4MCigzuHX2xCldQ=)
2: wIsKAJrVffRqz6laEWhWTAS6tTY.roa (hash: V1Qapun8icHJI/Zpv+MiEjbXSsE72DuavneqFQZT08I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:e9:89:6d:70:95:de:f8:b3:47:66:15:3d:1e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Validity
Not Before: Aug 9 04:01:47 2025 GMT
Not After : Aug 10 04:01:47 2025 GMT
Subject: CN=2692a8bd3849bf351d4f8dfe305262c6ca7d6132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d4:c9:4b:14:51:9e:b7:ad:11:13:fe:5a:1a:
34:89:fb:d3:93:84:32:7e:3f:3c:19:79:68:c4:4d:
7d:98:50:fa:ff:2e:87:40:40:a8:d1:4c:9a:53:86:
1c:ae:3d:ad:30:70:27:d3:12:53:3c:96:97:4d:4e:
28:e6:84:bd:5e:18:a7:f8:e0:45:16:b7:82:5f:e0:
40:07:87:19:45:c5:ea:4d:20:14:0b:6b:18:2c:9b:
63:4b:3d:fd:c4:f3:63:92:33:f2:83:69:c5:38:a7:
11:72:b4:00:2c:7b:c3:5d:ba:ff:8c:55:91:a8:9c:
05:d6:17:29:cd:9b:1b:e8:51:bc:ed:35:a5:b6:ba:
67:fb:36:8c:84:5f:41:c1:39:68:f3:e2:03:cd:0b:
c7:8c:c7:43:3a:31:2f:dd:19:4d:79:8f:c1:f1:71:
d6:dd:70:14:c3:1e:9c:28:2e:2e:11:a3:3b:5d:40:
5e:3e:40:80:f1:7f:8c:13:e8:20:4a:1d:4c:45:71:
2c:30:b6:41:bd:0d:02:9d:56:78:d4:fe:7e:15:dc:
c4:b5:78:f6:67:41:c9:10:b6:83:d0:08:48:2b:e1:
4d:64:b7:9d:a9:cf:05:b2:dd:47:70:d8:1c:93:10:
85:eb:e9:4d:e3:42:da:f6:74:69:07:7f:8a:d8:3c:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:92:A8:BD:38:49:BF:35:1D:4F:8D:FE:30:52:62:C6:CA:7D:61:32
X509v3 Authority Key Identifier:
keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:eb:bc:a7:03:fb:2a:8e:da:64:d1:d1:55:0a:2a:08:a3:fe:
ea:b7:a8:68:e2:20:37:d2:ce:82:d9:f1:06:2e:69:bf:58:65:
ea:09:c2:ef:e8:cc:8d:d6:8c:30:83:25:f6:29:ab:60:03:12:
e6:1d:27:18:57:1b:7d:f9:87:6a:f1:ba:ab:9e:27:33:6d:da:
f0:2a:86:1a:6f:51:c9:be:3a:59:96:fb:84:10:96:b7:4c:d0:
5d:38:d8:79:46:d4:8f:d2:63:f0:e4:bf:5c:21:01:f0:9f:9b:
92:b2:58:bf:77:15:8e:b2:5f:d7:a9:9c:82:d0:da:41:76:79:
b3:29:c7:48:d1:32:4f:0d:b5:ac:25:e2:28:28:5d:eb:64:fe:
ae:0a:76:3f:a8:4f:07:81:b8:0a:82:5d:b8:9e:eb:54:4a:25:
40:71:f1:32:c5:2b:de:5c:b3:7e:57:8a:d7:65:b2:51:98:ac:
40:3e:2e:17:e0:49:60:a6:dc:1c:34:09:95:8f:dd:6b:79:ed:
0a:ad:ee:13:8a:13:de:71:0e:91:4c:80:34:99:ee:b0:bd:d4:
30:14:2e:5a:fe:3b:5b:69:a7:74:ba:cc:80:84:e3:d6:76:93:
03:9d:13:bc:00:7d:e3:63:09:42:e0:7a:b3:cd:27:4d:a0:38:
f9:3c:f0:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/emJbXCV3vizR2YVPR4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NDdmMWY0ZjZiY2IyYTQ3NThhYzhhOTk3YmMxMDgwMDBl
NDE4ZDEwHhcNMjUwODA5MDQwMTQ3WhcNMjUwODEwMDQwMTQ3WjAzMTEwLwYDVQQD
EygyNjkyYThiZDM4NDliZjM1MWQ0ZjhkZmUzMDUyNjJjNmNhN2Q2MTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdTJSxRRnretERP+Who0ifvTk4Qy
fj88GXloxE19mFD6/y6HQECo0UyaU4Ycrj2tMHAn0xJTPJaXTU4o5oS9Xhin+OBF
FreCX+BAB4cZRcXqTSAUC2sYLJtjSz39xPNjkjPyg2nFOKcRcrQALHvDXbr/jFWR
qJwF1hcpzZsb6FG87TWltrpn+zaMhF9BwTlo8+IDzQvHjMdDOjEv3RlNeY/B8XHW
3XAUwx6cKC4uEaM7XUBePkCA8X+ME+ggSh1MRXEsMLZBvQ0CnVZ41P5+FdzEtXj2
Z0HJELaD0AhIK+FNZLedqc8Fst1HcNgckxCF6+lN40La9nRpB3+K2DxQHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaSqL04Sb81HU+N/jBSYsbKfWEyMB8GA1UdIwQY
MBaAFFhH8fT2vLKkdYrIqZe8EIAA5BjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zODAwNmYtZmJmYy00OGFhLTg1ZWYt
MDY1YmMyOGMyYTUyLzEvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zODAwNmYtZmJmYy00OGFhLTg1ZWYtMDY1YmMyOGMyYTUy
LzEvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuu8pwP7
Ko7aZNHRVQoqCKP+6reoaOIgN9LOgtnxBi5pv1hl6gnC7+jMjdaMMIMl9imrYAMS
5h0nGFcbffmHavG6q54nM23a8CqGGm9Ryb46WZb7hBCWt0zQXTjYeUbUj9Jj8OS/
XCEB8J+bkrJYv3cVjrJf16mcgtDaQXZ5synHSNEyTw21rCXiKChd62T+rgp2P6hP
B4G4CoJduJ7rVEolQHHxMsUr3lyzfleK12WyUZisQD4uF+BJYKbcHDQJlY/da3nt
Cq3uE4oT3nEOkUyANJnusL3UMBQuWv47W2mndLrMgITj1naTA50TvAB942MJQuB6
s80nTaA4+Tzw4w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:40 2025 by rpki-client