Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
File: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft (raw, json)
Hash identifier: z1E5ARpOATM13vzx0hg9NKjA07Y90FAplmI/l+VHock=
Subject key identifier: 09:79:01:B0:06:8C:67:4E:0D:59:09:CE:B2:B8:F6:62:50:FF:B0:D4
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 019773E4C66642C1CAFC12350D69122F0871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
Manifest number: 1525
Signing time: Sun 15 Jun 2025 14:01:02 +0000
Manifest this update: Sun 15 Jun 2025 14:01:02 +0000
Manifest next update: Mon 16 Jun 2025 14:01:02 +0000
Files and hashes: 1: Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa (hash: 86/LxqP4QHUXPHN7MeYEfv+SmJ6UpcunDO36GSPvIQQ=)
2: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl (hash: gNzTBRCz7t9zOrtbyJ8HbmtBASN2LU78v/vSowK9F4A=)
3: rdMKkMaHfdWNXSGH8FsWUlQ7D6Q.roa (hash: lGvKyGfhIjanaigrkcQySpZWBGRsLu6frqamWcC0ZCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:c6:66:42:c1:ca:fc:12:35:0d:69:12:2f:08:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: Jun 15 14:01:02 2025 GMT
Not After : Jun 16 14:01:02 2025 GMT
Subject: CN=097901b0068c674e0d5909ceb2b8f66250ffb0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:42:1f:23:a4:69:9b:5a:bb:ab:92:c1:49:07:
bf:de:9d:66:04:a5:87:2c:29:3c:c0:8b:07:c8:03:
b3:cd:b2:0f:dc:db:ca:e2:86:d4:8e:44:bc:cd:5e:
f1:8c:7a:22:bd:6f:8c:fb:92:8a:00:52:93:8f:32:
23:41:a8:f1:6e:ff:0a:5f:41:1a:78:9e:85:5b:75:
dc:45:2d:91:4d:57:62:ea:53:01:60:e8:00:6d:f8:
88:17:86:3b:ff:f7:d5:68:62:39:fa:81:a7:4d:a1:
64:f8:11:e3:b7:16:48:87:f1:a2:05:02:4d:c5:27:
65:65:b5:1b:ad:5e:48:19:a8:99:98:8b:42:e3:aa:
99:a2:84:b2:be:65:a8:6a:a9:b0:34:0c:48:34:af:
e8:13:8b:81:10:31:e8:38:8a:01:6f:df:09:ac:f5:
2f:ce:02:2f:0b:90:81:6b:37:36:c3:b1:e0:db:fa:
b5:7a:b7:68:6f:8a:0e:ad:39:a6:6b:b1:20:f8:59:
f8:fe:83:ba:af:91:07:a3:e7:a5:29:04:5f:e8:9f:
47:ba:b6:0e:5d:aa:1d:8c:9f:ca:21:8e:86:93:f4:
ce:b0:e6:09:91:0a:aa:77:59:50:5a:67:d8:04:21:
df:1a:f0:ef:e0:db:1a:6e:4f:f5:c7:29:c5:72:fd:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:79:01:B0:06:8C:67:4E:0D:59:09:CE:B2:B8:F6:62:50:FF:B0:D4
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:76:31:cc:07:fe:df:94:5d:85:81:da:25:a9:2d:34:0f:32:
bd:ed:ee:11:3c:d8:81:93:6a:9b:c5:bd:42:fd:38:f4:28:f7:
54:78:2e:4e:d7:fe:80:0b:75:7e:21:57:a1:50:6d:cd:ac:45:
93:ce:f6:12:5b:3c:46:bd:5f:8c:4d:81:f4:04:4c:05:c0:b1:
dc:80:a5:a5:17:f1:44:36:e6:39:a1:11:89:7f:86:b0:44:02:
8f:3e:cd:6d:47:55:35:f7:32:bb:93:8f:54:0e:d5:7c:75:49:
1b:ee:cd:67:23:df:6a:d3:80:a7:b1:73:f5:34:79:fd:1e:1d:
c2:0f:7c:df:ee:41:43:fd:33:c5:a8:7b:c3:a8:e6:c0:b3:95:
1a:fa:54:7d:b1:76:19:2a:cd:d9:e9:7a:07:0a:72:e3:2d:04:
08:3d:5e:5f:8d:ca:39:34:b4:bd:47:ff:fb:54:8e:b1:dd:01:
13:01:79:88:59:05:f5:f9:48:51:3a:61:3d:79:c2:2a:e5:57:
72:6c:2e:51:3e:0f:37:b6:fb:d9:f8:a1:71:b6:c6:62:7c:9f:
5e:39:bb:dd:54:9a:27:a6:81:67:25:71:9c:f3:70:5f:38:b3:
05:32:40:5c:2f:94:ab:58:10:ae:a0:19:4c:d5:d6:69:46:1b:
d8:f9:a5:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdz5MZmQsHK/BI1DWkSLwhxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWQyMjhiNmFjYmQxODAzY2ZmNTYwZmE0YjQyZjgzMmQy
ODMyNGYwHhcNMjUwNjE1MTQwMTAyWhcNMjUwNjE2MTQwMTAyWjAzMTEwLwYDVQQD
EygwOTc5MDFiMDA2OGM2NzRlMGQ1OTA5Y2ViMmI4ZjY2MjUwZmZiMGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60IfI6Rpm1q7q5LBSQe/3p1mBKWH
LCk8wIsHyAOzzbIP3NvK4obUjkS8zV7xjHoivW+M+5KKAFKTjzIjQajxbv8KX0Ea
eJ6FW3XcRS2RTVdi6lMBYOgAbfiIF4Y7//fVaGI5+oGnTaFk+BHjtxZIh/GiBQJN
xSdlZbUbrV5IGaiZmItC46qZooSyvmWoaqmwNAxINK/oE4uBEDHoOIoBb98JrPUv
zgIvC5CBazc2w7Hg2/q1erdob4oOrTmma7Eg+Fn4/oO6r5EHo+elKQRf6J9HurYO
XaodjJ/KIY6Gk/TOsOYJkQqqd1lQWmfYBCHfGvDv4Nsabk/1xynFcv222wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAl5AbAGjGdODVkJzrK49mJQ/7DUMB8GA1UdIwQY
MBaAFFsdIotqy9GAPP9WD6S0L4MtKDJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3gwaWkyckwwWUE4XzFZUHBMUXZneTBvTWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZWVkMDUtMTQ3Ny00ZjA1LThhZTMt
NjE4ZTg5YjEyYzQxLzEvV3gwaWkyckwwWUE4XzFZUHBMUXZneTBvTWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85ZWVkMDUtMTQ3Ny00ZjA1LThhZTMtNjE4ZTg5YjEyYzQx
LzEvV3gwaWkyckwwWUE4XzFZUHBMUXZneTBvTWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHYxzAf+
35RdhYHaJaktNA8yve3uETzYgZNqm8W9Qv049Cj3VHguTtf+gAt1fiFXoVBtzaxF
k872Els8Rr1fjE2B9ARMBcCx3IClpRfxRDbmOaERiX+GsEQCjz7NbUdVNfcyu5OP
VA7VfHVJG+7NZyPfatOAp7Fz9TR5/R4dwg983+5BQ/0zxah7w6jmwLOVGvpUfbF2
GSrN2el6Bwpy4y0ECD1eX43KOTS0vUf/+1SOsd0BEwF5iFkF9flIUTphPXnCKuVX
cmwuUT4PN7b72fihcbbGYnyfXjm73VSaJ6aBZyVxnPNwXzizBTJAXC+Uq1gQrqAZ
TNXWaUYb2Pml8w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:52:43 2025 by rpki-client