Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: HVE+RKuJ21kMHZEkXUtf3vnrOIj6h6JyfrgVeT6EAd4=
Subject key identifier: FF:92:2B:8B:27:63:C2:CF:25:4A:27:29:7E:E7:EC:A9:42:B0:3B:71
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 019873E1F586947E4BBF037F7B43EE778FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 1629
Signing time: Mon 04 Aug 2025 07:00:44 +0000
Manifest this update: Mon 04 Aug 2025 07:00:44 +0000
Manifest next update: Tue 05 Aug 2025 07:00:44 +0000
Files and hashes: 1: 3IRgLqbP_ec1EGoarWc4xpisfyQ.roa (hash: GZRzYUts0dDxW36RNVg638JimijfwAxJcVtkZHDVq/A=)
2: 96CIMKKoqN02QJYrluNPvEhoHEk.roa (hash: PH9kqz02Fz7yivfLv32cVnK1ToPORdX94byNA/yE6eo=)
3: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (hash: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=)
4: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: 9p0jB3tOk3IlPMOq4ZqyCx7i6p8ZkdL8kWfsDjFd19g=)
5: g81BDZuaFjsKwaBqFnyHLcFPLZs.roa (hash: jSl9q0mLuOCF9O2+fEMHTTPvVPdoA/bqHU0pF52USoE=)
6: hVkEcV5BYqMN66hJqLsfxmtD6-I.roa (hash: qGjxxeMK37L3nzimP1DFdWK9NxQEtXmgcd3DzWsOUEg=)
7: i7LPx3k5NSVEBiacqO7vPHaWiwU.roa (hash: gYTLRIvfaUJXoKPS7pQ+Cpl5E8jxQVsdISY+9vzV8lg=)
8: p4_2wcOawugaSj43rAVSkkmPf8k.roa (hash: Y3pbjD0B2GwO/FNWMPam+BoxaGEQd85k797hs416lA8=)
9: t7xFNtek28TRqAwV5AsSOdRcmio.roa (hash: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f5:86:94:7e:4b:bf:03:7f:7b:43:ee:77:8f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Aug 4 07:00:44 2025 GMT
Not After : Aug 5 07:00:44 2025 GMT
Subject: CN=ff922b8b2763c2cf254a27297ee7eca942b03b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:fd:18:3a:23:3d:56:b2:bb:37:bd:6f:15:
c0:96:7c:22:cf:4b:db:e1:5d:a8:55:f2:1e:43:d3:
20:5f:4b:c6:85:c4:65:06:d3:00:56:a0:4b:24:11:
21:df:07:cb:20:82:d1:c9:ca:d3:8a:92:b4:a7:26:
c3:a7:f3:cf:8e:dc:73:83:61:ad:64:54:89:40:81:
60:70:b9:5e:0e:04:c4:06:ec:b6:df:4f:fb:64:18:
26:3a:dd:86:fe:23:54:16:f5:5b:2a:d2:69:a5:33:
bb:3f:a9:9d:56:70:e8:c8:64:f0:8d:78:f1:a7:b0:
78:a2:8e:3a:90:5a:a8:67:e2:dc:42:3b:43:4a:31:
3f:68:34:c1:96:e4:99:b2:a8:f4:58:4c:96:a5:45:
8a:e8:4b:cd:fd:d8:80:68:25:6a:c1:94:8d:2a:99:
69:a1:d1:48:96:1c:51:94:71:9d:8c:8c:9d:fe:75:
79:f7:f1:31:e3:c3:70:27:7f:73:eb:c6:72:ad:d1:
36:2a:11:a3:2d:ee:18:16:40:eb:e8:6a:9c:97:41:
6a:66:77:21:04:04:9d:dc:40:b2:24:57:42:fe:55:
4b:41:f5:74:41:10:c6:ce:64:e3:8a:81:8d:7c:aa:
c2:77:57:71:ba:18:e2:a3:84:a8:23:ad:3b:f0:a9:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:2B:8B:27:63:C2:CF:25:4A:27:29:7E:E7:EC:A9:42:B0:3B:71
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:66:9b:cd:fb:e3:14:f2:e3:ae:35:fe:97:4f:fc:d2:4b:66:
73:ca:5a:3a:60:5c:b4:9a:78:4d:7c:da:67:92:91:29:db:c5:
1c:d6:e5:53:69:9b:e7:c1:8d:0d:d9:af:f9:e7:c2:af:2a:1d:
a5:12:96:d8:0a:ed:ef:53:6b:a2:aa:2c:03:75:1e:f8:30:23:
26:3f:d6:80:63:ce:66:7e:17:ff:f1:88:f1:01:90:97:6d:ab:
03:93:92:9c:01:d2:7e:25:35:0c:7d:e3:13:57:39:c7:01:db:
5d:d4:d6:e4:0c:0f:7b:62:17:ec:68:9c:4f:7d:ab:b1:14:ec:
61:bf:87:cd:9b:8f:14:cf:78:8d:e3:67:06:c5:dd:13:a6:47:
73:c6:d3:1a:af:85:69:8d:37:6d:d6:e5:24:35:52:9b:ec:de:
54:40:1c:24:22:21:37:9b:bf:46:c7:36:d9:f6:5b:74:63:82:
29:d9:5e:c8:81:6c:d4:4f:4e:b8:80:7b:c7:43:60:1a:64:78:
eb:d7:00:1d:99:84:b4:60:a5:a4:91:53:40:5a:2d:3a:5b:12:
0a:9c:ca:31:e8:08:55:6d:05:1b:84:38:dc:5f:b1:85:10:13:
53:08:50:a7:85:57:5c:5d:57:ec:b1:50:f3:ef:f5:ce:30:14:
84:f2:95:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4fWGlH5LvwN/e0Pud4/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2
MDk4YjcwHhcNMjUwODA0MDcwMDQ0WhcNMjUwODA1MDcwMDQ0WjAzMTEwLwYDVQQD
EyhmZjkyMmI4YjI3NjNjMmNmMjU0YTI3Mjk3ZWU3ZWNhOTQyYjAzYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRH9GDojPVayuze9bxXAlnwiz0vb
4V2oVfIeQ9MgX0vGhcRlBtMAVqBLJBEh3wfLIILRycrTipK0pybDp/PPjtxzg2Gt
ZFSJQIFgcLleDgTEBuy230/7ZBgmOt2G/iNUFvVbKtJppTO7P6mdVnDoyGTwjXjx
p7B4oo46kFqoZ+LcQjtDSjE/aDTBluSZsqj0WEyWpUWK6EvN/diAaCVqwZSNKplp
odFIlhxRlHGdjIyd/nV59/Ex48NwJ39z68ZyrdE2KhGjLe4YFkDr6Gqcl0FqZnch
BASd3ECyJFdC/lVLQfV0QRDGzmTjioGNfKrCd1dxuhjio4SoI6078KmKUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+SK4snY8LPJUonKX7n7KlCsDtxMB8GA1UdIwQY
MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt
NDQzYmU2M2ZjMTIzLzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz
LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmabzfvj
FPLjrjX+l0/80ktmc8paOmBctJp4TXzaZ5KRKdvFHNblU2mb58GNDdmv+efCryod
pRKW2Art71NroqosA3Ue+DAjJj/WgGPOZn4X//GI8QGQl22rA5OSnAHSfiU1DH3j
E1c5xwHbXdTW5AwPe2IX7GicT32rsRTsYb+HzZuPFM94jeNnBsXdE6ZHc8bTGq+F
aY03bdblJDVSm+zeVEAcJCIhN5u/Rsc22fZbdGOCKdleyIFs1E9OuIB7x0NgGmR4
69cAHZmEtGClpJFTQFotOlsSCpzKMegIVW0FG4Q43F+xhRATUwhQp4VXXF1X7LFQ
8+/1zjAUhPKVXQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:34 2025 by rpki-client