Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
File: WPJnqqyZvwydHo5CneAczTzJDsA.mft (raw, json)
Hash identifier: Gi6mgaG6t3PwoVkUOcpOFdq/WKdhMqKl7s5rPOuT+gw=
Subject key identifier: 90:22:1E:B2:BE:01:A5:21:DC:55:3F:7D:F8:A1:EF:FD:51:91:97:96
Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
Certificate issuer: /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Certificate serial: 01987ED3B126DD65893416BCD22710370A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 10:00:59 +0000
Manifest this update: Wed 06 Aug 2025 10:00:59 +0000
Manifest next update: Thu 07 Aug 2025 10:00:59 +0000
Files and hashes: 1: VxmO12w306gaXQmH0gdTcOIKrpc.roa (hash: yL/doTnHVquXpnwAcQ1RYhbKS8XdZRYVklJVmjcOaeU=)
2: WPJnqqyZvwydHo5CneAczTzJDsA.crl (hash: GPCtAdLQ8ySOgh972AY81tYCzRJSETLQS1DWWOle6EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:b1:26:dd:65:89:34:16:bc:d2:27:10:37:0a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Validity
Not Before: Aug 6 10:00:59 2025 GMT
Not After : Aug 7 10:00:59 2025 GMT
Subject: CN=90221eb2be01a521dc553f7df8a1effd51919796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:e1:2b:32:1d:d5:19:e5:48:c4:d5:18:2b:
35:2c:1b:da:b6:0e:49:de:32:7e:ed:69:8d:64:19:
96:f2:4f:2f:45:49:cf:d7:da:6e:58:70:14:c9:5d:
20:bf:50:39:dc:fb:f2:2f:d9:b1:fa:f4:87:59:b4:
c0:ac:b4:9c:68:50:c6:b5:c0:99:db:2b:3e:49:eb:
d2:2a:f3:7e:18:3a:7f:82:77:64:e4:91:54:8f:d7:
cf:cc:60:3b:b8:f9:ee:e8:35:c7:4a:a5:28:0c:8a:
1f:84:05:11:eb:82:95:a2:ba:74:e9:89:ab:4d:f4:
d3:87:ac:ed:2d:cd:e4:cb:6c:9f:a6:2c:7c:bf:56:
d7:5c:63:1e:45:f2:20:95:83:7c:9b:39:b7:22:a6:
d4:28:1c:99:96:fc:ab:1a:28:b4:a3:b0:23:7f:59:
66:e1:65:74:f7:0b:55:f6:ee:09:1e:a9:ff:68:b5:
67:8f:39:27:51:17:6e:b9:60:ac:b3:52:1d:11:09:
cb:c9:22:13:b1:3e:c7:7d:60:05:f0:58:5c:00:27:
93:a1:50:32:5f:58:cc:d4:a6:e6:14:4f:56:c1:1c:
31:3e:4a:3b:53:2b:33:a3:fe:3f:90:a4:98:fe:f3:
20:dd:b6:29:49:95:55:72:c4:69:a7:fa:e4:44:3b:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:22:1E:B2:BE:01:A5:21:DC:55:3F:7D:F8:A1:EF:FD:51:91:97:96
X509v3 Authority Key Identifier:
keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:33:2f:60:d3:59:a5:28:ba:05:eb:44:3a:30:33:88:cb:36:
2d:80:95:73:22:27:0b:d7:f6:64:db:e2:8d:3d:f1:f9:37:32:
7e:79:48:d2:89:48:7e:cd:73:41:c0:6e:83:3e:97:70:d3:90:
50:7d:38:3d:7b:75:43:fc:7a:23:dc:0d:c6:ca:2c:00:80:4f:
15:93:16:57:c6:b2:db:82:f9:0d:e5:de:47:70:65:fd:78:e8:
92:fb:2e:30:83:42:a1:71:75:e6:89:9e:d1:41:1e:8d:54:77:
a8:5c:60:b4:58:c5:bf:66:46:7f:d6:0f:2a:37:09:54:1c:2c:
f4:bb:49:ce:0d:0f:aa:ed:d7:d7:87:00:8d:bb:d9:16:91:7c:
f0:e8:85:1d:bc:84:03:98:29:32:32:8b:6e:43:7e:75:c0:c6:
28:73:b8:dc:a2:08:a1:b7:70:09:a9:d9:f0:55:24:6d:a7:3b:
0c:08:48:44:ab:55:bb:6b:d0:16:a3:ad:ec:a8:28:05:b7:3e:
30:d6:22:54:eb:8e:20:d7:f5:cb:d8:f8:9e:00:30:54:b5:81:
34:f8:41:fb:0e:dd:34:5a:b3:9f:b8:a2:b4:06:f7:7e:e3:90:
01:6f:7a:a4:de:7e:d6:a5:97:96:2e:05:a1:e7:35:cd:11:41:
65:8f:06:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+07Em3WWJNBa80icQNwoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZjI2N2FhYWM5OWJmMGM5ZDFlOGU0MjlkZTAxY2NkM2Nj
OTBlYzAwHhcNMjUwODA2MTAwMDU5WhcNMjUwODA3MTAwMDU5WjAzMTEwLwYDVQQD
Eyg5MDIyMWViMmJlMDFhNTIxZGM1NTNmN2RmOGExZWZmZDUxOTE5Nzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0/hKzId1RnlSMTVGCs1LBvatg5J
3jJ+7WmNZBmW8k8vRUnP19puWHAUyV0gv1A53PvyL9mx+vSHWbTArLScaFDGtcCZ
2ys+SevSKvN+GDp/gndk5JFUj9fPzGA7uPnu6DXHSqUoDIofhAUR64KVorp06Ymr
TfTTh6ztLc3ky2yfpix8v1bXXGMeRfIglYN8mzm3IqbUKByZlvyrGii0o7Ajf1lm
4WV09wtV9u4JHqn/aLVnjzknURduuWCss1IdEQnLySITsT7HfWAF8FhcACeToVAy
X1jM1KbmFE9WwRwxPko7Uyszo/4/kKSY/vMg3bYpSZVVcsRpp/rkRDsTUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAiHrK+AaUh3FU/ffih7/1RkZeWMB8GA1UdIwQY
MBaAFFjyZ6qsmb8MnR6OQp3gHM08yQ7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1BKbnFxeVp2d3lkSG81Q25lQWN6VHpKRHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNGZlOGUtNGI0ZC00YWM3LTlhOTIt
N2EzYjMxYmU3YjM4LzEvV1BKbnFxeVp2d3lkSG81Q25lQWN6VHpKRHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNGZlOGUtNGI0ZC00YWM3LTlhOTItN2EzYjMxYmU3YjM4
LzEvV1BKbnFxeVp2d3lkSG81Q25lQWN6VHpKRHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTMvYNNZ
pSi6BetEOjAziMs2LYCVcyInC9f2ZNvijT3x+TcyfnlI0olIfs1zQcBugz6XcNOQ
UH04PXt1Q/x6I9wNxsosAIBPFZMWV8ay24L5DeXeR3Bl/XjokvsuMINCoXF15ome
0UEejVR3qFxgtFjFv2ZGf9YPKjcJVBws9LtJzg0Pqu3X14cAjbvZFpF88OiFHbyE
A5gpMjKLbkN+dcDGKHO43KIIobdwCanZ8FUkbac7DAhIRKtVu2vQFqOt7KgoBbc+
MNYiVOuOINf1y9j4ngAwVLWBNPhB+w7dNFqzn7iitAb3fuOQAW96pN5+1qWXli4F
oec1zRFBZY8GQA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 19:31:02 2025 by rpki-client