Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File: WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier: lEp5YmaAKe8wgDUaH7tAgAiSH+gcWX+7DmHED8QKsqc=
Subject key identifier: 1F:A7:8E:06:9C:B6:8B:31:E9:B9:F0:7A:8F:C5:F5:A7:20:84:71:BE
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer: /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial: 0198808AFD147F0FDDBBED7F0553204C782F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 18:00:49 +0000
Manifest this update: Wed 06 Aug 2025 18:00:49 +0000
Manifest next update: Thu 07 Aug 2025 18:00:49 +0000
Files and hashes: 1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: SuhHPWaLjh2HwSDpuPTUPnrj0Tgb7SFJ9uHTbdKm8bk=)
2: vt15ABy3zJP47x5DikC4lY7LNe4.roa (hash: IdpTO09MEQGHcGdgBzndMJHenkqW9uYtr/gnL2zPkrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8a:fd:14:7f:0f:dd:bb:ed:7f:05:53:20:4c:78:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Validity
Not Before: Aug 6 18:00:49 2025 GMT
Not After : Aug 7 18:00:49 2025 GMT
Subject: CN=1fa78e069cb68b31e9b9f07a8fc5f5a7208471be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:c3:57:ed:16:69:31:63:b8:8e:c3:a4:aa:
f6:e1:ca:f8:a8:53:d2:3c:3e:8a:01:83:68:d8:3a:
0a:5e:06:34:d7:84:39:e5:fa:e8:e7:a9:ce:ae:2d:
10:83:d1:85:1b:31:c6:db:6c:c0:0c:7f:0f:17:7f:
d1:fd:6e:6b:89:ae:48:ba:19:8f:6a:3d:fd:83:08:
33:0c:a0:e6:9e:7f:ae:41:da:b6:38:36:73:c0:9e:
4d:28:04:fe:c7:5e:70:04:66:d6:17:e3:02:53:32:
84:1f:5b:89:6c:ff:4e:34:b2:93:29:1c:15:1a:47:
17:ab:ae:6b:b3:f1:c6:18:77:f5:ba:73:b3:62:96:
fd:f4:95:05:22:b2:4c:c7:47:5e:48:17:09:8e:10:
b0:94:8d:c0:c0:51:56:10:03:8d:00:0d:d4:50:83:
86:d6:c4:dd:80:56:da:c5:3b:07:36:3b:3d:2a:0e:
59:c2:90:13:23:45:91:ed:e5:02:e2:46:9c:28:d3:
fe:ad:6a:e7:22:9c:96:31:67:a7:6e:ee:9d:d8:cc:
18:8a:52:52:55:8b:0a:54:f2:1c:1e:4c:04:89:66:
4b:61:8d:51:f7:00:a8:30:8d:af:fa:0f:99:db:f3:
84:b6:b9:f7:38:34:38:b8:92:b6:7c:d3:8c:d1:fd:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A7:8E:06:9C:B6:8B:31:E9:B9:F0:7A:8F:C5:F5:A7:20:84:71:BE
X509v3 Authority Key Identifier:
keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ab:57:7e:0a:fa:ce:eb:ba:a4:d9:45:e0:6e:59:40:ab:ca:
37:41:65:a9:fb:37:d9:84:6f:4c:1e:33:d3:d4:6d:98:f6:a9:
5a:59:f9:1b:a8:c0:d6:ee:7d:59:22:a5:c5:cf:62:6d:b0:21:
b3:91:47:4b:2e:72:65:01:d9:40:bd:dc:d1:8b:d4:0e:ea:75:
0d:a2:79:aa:40:34:1a:9d:a8:8d:09:72:c1:86:84:e2:3d:46:
74:89:cd:0e:48:d9:af:51:4e:8e:ef:78:6d:bf:b0:08:38:1f:
c5:06:c6:15:e6:cb:8a:90:53:7e:41:4c:38:fe:c6:0d:0d:8c:
e9:9e:42:1d:f2:59:76:29:b4:6d:dd:c1:2c:6e:da:e5:95:9b:
2c:7a:15:bf:c6:13:84:2a:44:6b:b0:0e:a6:7a:96:2e:e5:60:
27:97:60:22:0e:1d:1b:5a:b8:85:7a:48:0f:b4:af:c6:54:e1:
8a:eb:28:8a:20:81:f1:81:d6:fd:0f:8c:fe:11:5b:35:cb:14:
c5:11:8f:eb:f4:db:10:de:01:23:c9:79:0d:30:e6:8c:7b:12:
de:60:90:a2:bb:44:12:9b:72:3c:c2:f8:9e:d6:69:7a:b0:6c:
1f:7b:49:86:36:5b:4e:02:4a:6f:8f:bc:cd:23:90:6b:d0:51:
d1:85:7a:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAiv0Ufw/du+1/BVMgTHgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDk2OThiYmNkMjRmYzllMWE5ZjVmNDE0ODZjMzFhZjE5
YTRiYzgwHhcNMjUwODA2MTgwMDQ5WhcNMjUwODA3MTgwMDQ5WjAzMTEwLwYDVQQD
EygxZmE3OGUwNjljYjY4YjMxZTliOWYwN2E4ZmM1ZjVhNzIwODQ3MWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygDDV+0WaTFjuI7DpKr24cr4qFPS
PD6KAYNo2DoKXgY014Q55fro56nOri0Qg9GFGzHG22zADH8PF3/R/W5ria5IuhmP
aj39gwgzDKDmnn+uQdq2ODZzwJ5NKAT+x15wBGbWF+MCUzKEH1uJbP9ONLKTKRwV
GkcXq65rs/HGGHf1unOzYpb99JUFIrJMx0deSBcJjhCwlI3AwFFWEAONAA3UUIOG
1sTdgFbaxTsHNjs9Kg5ZwpATI0WR7eUC4kacKNP+rWrnIpyWMWenbu6d2MwYilJS
VYsKVPIcHkwEiWZLYY1R9wCoMI2v+g+Z2/OEtrn3ODQ4uJK2fNOM0f31hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+njgactosx6bnweo/F9acghHG+MB8GA1UdIwQY
MBaAFFlJaYu80k/J4an19BSGwxrxmkvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2Mt
NTgzZmJlNjRhOTU1LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2MtNTgzZmJlNjRhOTU1
LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6tXfgr6
zuu6pNlF4G5ZQKvKN0Flqfs32YRvTB4z09RtmPapWln5G6jA1u59WSKlxc9ibbAh
s5FHSy5yZQHZQL3c0YvUDup1DaJ5qkA0Gp2ojQlywYaE4j1GdInNDkjZr1FOju94
bb+wCDgfxQbGFebLipBTfkFMOP7GDQ2M6Z5CHfJZdim0bd3BLG7a5ZWbLHoVv8YT
hCpEa7AOpnqWLuVgJ5dgIg4dG1q4hXpID7SvxlThiusoiiCB8YHW/Q+M/hFbNcsU
xRGP6/TbEN4BI8l5DTDmjHsS3mCQortEEptyPML4ntZperBsH3tJhjZbTgJKb4+8
zSOQa9BR0YV6XQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:00:06 2025 by rpki-client