Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
File: WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json)
Hash identifier: 89ctv9aTnAT8skgaNS7/L7ryixgKyEL9JLs3pS5y4Lk=
Subject key identifier: 20:E6:03:82:64:6C:C4:CD:78:57:34:64:29:FE:E2:C6:80:46:48:A1
Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
Certificate issuer: /CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Certificate serial: 019873E294B794BD7241528D9878520972EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
Manifest number: 0CF7
Signing time: Mon 04 Aug 2025 07:01:25 +0000
Manifest this update: Mon 04 Aug 2025 07:01:25 +0000
Manifest next update: Tue 05 Aug 2025 07:01:25 +0000
Files and hashes: 1: PrK_NQRYp13y-DfvxtWGnq4X0dE.roa (hash: ZI/puUUas0tVvfAZ0vd46exqVsLLctxI+01KKUrwu2o=)
2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: e40bwJS9f+33PHlEI/z25gEo1NtsZ2NAlDHnhRli3nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:94:b7:94:bd:72:41:52:8d:98:78:52:09:72:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Validity
Not Before: Aug 4 07:01:25 2025 GMT
Not After : Aug 5 07:01:25 2025 GMT
Subject: CN=20e60382646cc4cd7857346429fee2c6804648a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f6:d3:4b:a6:20:3a:c7:68:cf:82:ef:4b:ba:
54:51:53:bf:f8:a6:ad:6b:d6:2f:e1:0b:69:4a:09:
6b:3a:3d:01:89:0d:c7:74:5f:87:b8:35:20:72:12:
74:65:ef:e6:7a:93:7f:4c:24:eb:ea:14:a8:24:63:
b3:f3:42:10:c5:2b:04:6c:e9:0f:0d:06:88:0e:bc:
f8:c9:e5:86:2b:95:fe:ad:ac:8c:eb:c4:cf:54:42:
3f:f9:d1:75:62:bf:01:1d:24:56:fc:cc:6a:80:1d:
68:d5:0b:8d:23:55:8b:69:fa:39:42:1c:4d:55:3f:
26:c7:a5:7b:f0:0e:5f:cf:82:49:b3:be:97:a9:1f:
d1:be:ed:c4:ac:9f:43:e3:4e:01:c9:bf:4c:4b:f0:
f5:c1:13:06:35:e7:7c:e8:0d:e7:bd:69:95:a0:ce:
9c:e8:93:12:a6:b3:9f:9f:52:b0:ab:dc:c0:fa:1e:
93:52:23:99:35:17:92:40:91:72:33:42:d7:0a:56:
30:cd:c7:05:98:43:6f:cb:15:96:5b:20:b5:02:c2:
af:87:4b:76:4f:4e:88:37:80:74:48:c9:8b:7e:30:
4d:a0:0d:c7:aa:70:9a:4a:12:9e:aa:91:fa:16:26:
58:4e:06:1d:69:20:84:3a:4a:7a:0b:2e:c8:d3:88:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E6:03:82:64:6C:C4:CD:78:57:34:64:29:FE:E2:C6:80:46:48:A1
X509v3 Authority Key Identifier:
keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:05:9b:64:14:e0:7b:3f:12:70:9b:16:64:61:75:c9:61:6f:
95:55:29:90:7d:de:37:c9:83:6b:05:62:d5:da:8a:21:94:90:
bd:8a:de:3d:3a:c9:67:dd:de:ac:0d:0e:47:a5:aa:f1:c7:cd:
46:8a:50:00:53:ff:9a:a8:ba:60:14:01:a3:61:bf:fd:44:2f:
7f:87:55:f5:d4:61:4b:f1:08:19:e6:b5:2d:01:1e:16:aa:d2:
1c:3e:23:0b:16:af:73:b0:32:e7:fe:53:40:ec:7f:90:5e:e3:
9c:10:92:90:d6:14:96:02:2f:11:27:30:19:4d:da:08:67:31:
5e:74:fc:b2:b0:31:62:7e:2f:6b:38:66:26:b3:11:a2:c2:96:
22:fd:49:07:50:bc:ba:1f:4d:29:72:2d:95:dd:31:c7:ab:b8:
db:52:6d:64:ce:f1:a3:45:5f:2f:20:1d:45:54:b5:23:b1:f0:
28:71:b9:a7:18:ed:92:22:dd:26:5b:0b:83:43:ee:3a:b5:67:
0d:eb:c2:09:aa:0d:31:8d:d4:e0:da:8d:51:cc:5e:9b:57:3c:
20:b1:fe:c0:96:3f:eb:9c:a5:bc:91:df:8f:07:26:7a:f0:17:
5c:c3:77:d7:e2:69:5a:d7:b5:8b:51:47:28:8c:95:9e:c2:57:
c4:a7:38:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4pS3lL1yQVKNmHhSCXLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MjBkNjcwNjQ5YTRhNGE5Y2IyZTY2NzcyMTcwNzQxYWRm
N2M1MWEwHhcNMjUwODA0MDcwMTI1WhcNMjUwODA1MDcwMTI1WjAzMTEwLwYDVQQD
EygyMGU2MDM4MjY0NmNjNGNkNzg1NzM0NjQyOWZlZTJjNjgwNDY0OGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vbTS6YgOsdoz4LvS7pUUVO/+Kat
a9Yv4QtpSglrOj0BiQ3HdF+HuDUgchJ0Ze/mepN/TCTr6hSoJGOz80IQxSsEbOkP
DQaIDrz4yeWGK5X+rayM68TPVEI/+dF1Yr8BHSRW/MxqgB1o1QuNI1WLafo5QhxN
VT8mx6V78A5fz4JJs76XqR/Rvu3ErJ9D404Byb9MS/D1wRMGNed86A3nvWmVoM6c
6JMSprOfn1Kwq9zA+h6TUiOZNReSQJFyM0LXClYwzccFmENvyxWWWyC1AsKvh0t2
T06IN4B0SMmLfjBNoA3HqnCaShKeqpH6FiZYTgYdaSCEOkp6Cy7I04gKeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDmA4JkbMTNeFc0ZCn+4saARkihMB8GA1UdIwQY
MBaAFFkg1nBkmkpKnLLmZ3IXB0Gt98UaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yYjhlNmQtYTJjOC00ZTdkLTk2Y2Et
YWM3NjRjOTUyMzU3LzEvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8yYjhlNmQtYTJjOC00ZTdkLTk2Y2EtYWM3NjRjOTUyMzU3
LzEvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgWbZBTg
ez8ScJsWZGF1yWFvlVUpkH3eN8mDawVi1dqKIZSQvYrePTrJZ93erA0OR6Wq8cfN
RopQAFP/mqi6YBQBo2G//UQvf4dV9dRhS/EIGea1LQEeFqrSHD4jCxavc7Ay5/5T
QOx/kF7jnBCSkNYUlgIvEScwGU3aCGcxXnT8srAxYn4vazhmJrMRosKWIv1JB1C8
uh9NKXItld0xx6u421JtZM7xo0VfLyAdRVS1I7HwKHG5pxjtkiLdJlsLg0PuOrVn
DevCCaoNMY3U4NqNUcxem1c8ILH+wJY/65ylvJHfjwcmevAXXMN31+JpWte1i1FH
KIyVnsJXxKc4XQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:56 2025 by rpki-client