Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier: MM4CyFdJqISYa1x2JL5++F384OdEJWppaPdTIQsvgJQ=
Subject key identifier: 16:54:14:34:B3:90:AB:88:04:7A:9D:F3:5F:4F:C6:1C:FF:01:F1:AB
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial: 019768BBCA42D4E96B1A9DD69B5A726F4D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 10:00:26 +0000
Manifest this update: Fri 13 Jun 2025 10:00:26 +0000
Manifest next update: Sat 14 Jun 2025 10:00:26 +0000
Files and hashes: 1: VI7MbqfUntVnN_kMd5I5Qw5bl-4.roa (hash: yObUZYg1Kq2iUCPpFKIeS8ZVs5ZMohWqBvzb45a6JFM=)
2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: IgVnQvyr018XOzzU+jGQnmIQ+34EK7gBp2SNV2k5voE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:ca:42:d4:e9:6b:1a:9d:d6:9b:5a:72:6f:4d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Validity
Not Before: Jun 13 10:00:26 2025 GMT
Not After : Jun 14 10:00:26 2025 GMT
Subject: CN=16541434b390ab88047a9df35f4fc61cff01f1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:6c:d5:67:0d:8d:ce:4a:1b:e2:a0:af:28:
3b:55:9c:93:88:b6:7a:c2:f7:38:26:75:9d:22:ad:
89:2d:ae:52:d3:bd:a7:25:b8:d4:67:ee:15:ed:5f:
8a:b8:64:40:d1:7e:c3:2d:3a:23:94:16:ec:75:21:
0a:53:77:b9:65:68:34:da:8d:59:be:ac:20:ca:ce:
fa:93:7c:d8:1e:a8:3b:61:de:45:27:03:a9:f2:34:
26:0b:8f:97:5b:65:67:f9:50:84:ac:6d:b1:86:9e:
e3:17:df:1c:e0:a5:92:90:af:ce:c9:4a:f3:62:bc:
0a:33:eb:1e:7f:17:e1:73:ac:06:5f:72:8f:3a:d6:
30:94:56:85:de:98:6e:29:f7:17:8e:78:89:f3:5e:
94:cb:2a:d7:9f:ff:91:ed:60:90:54:4e:ab:27:db:
fd:c1:1e:03:ff:ee:ed:e8:5e:66:d4:19:4f:79:2f:
c9:a7:d9:6a:fc:d1:81:e8:c6:83:ce:e5:43:cf:2c:
55:90:81:61:ed:42:4b:33:21:4e:9a:2f:e5:e8:4e:
0e:0c:95:54:a9:6c:d8:24:bd:fa:36:21:46:a2:d6:
0f:21:2b:54:3a:13:bd:b7:8f:2f:74:13:66:35:96:
94:7c:a3:d5:be:fd:0f:8f:09:61:b5:56:74:20:f4:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:54:14:34:B3:90:AB:88:04:7A:9D:F3:5F:4F:C6:1C:FF:01:F1:AB
X509v3 Authority Key Identifier:
keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:68:ca:cf:bc:00:05:d1:f5:e2:8d:1f:ea:e9:bc:a1:9b:6e:
6e:c4:21:e8:66:13:75:1b:ca:60:aa:09:27:d9:25:3a:e3:78:
23:a4:37:fb:c0:19:1b:f3:14:b4:12:fd:2e:59:4c:e0:08:0b:
34:cc:3c:34:2d:8c:62:ba:42:90:a0:d8:15:de:84:24:e0:e8:
2b:b1:b8:c2:0f:f4:ce:8a:3d:49:8d:50:51:6c:62:35:cf:fb:
b8:e4:5b:14:70:5d:ed:ba:1b:89:73:be:21:84:f2:f5:2f:ed:
4a:c4:fe:dd:14:c6:88:29:ec:ff:b0:d4:a3:51:79:80:e5:8b:
7d:85:8a:1f:3b:1b:1b:18:5f:12:b7:74:cb:28:f6:68:9e:f0:
f7:73:50:c4:d6:08:a6:7d:df:e5:48:c4:71:ec:b2:09:8f:2a:
f7:de:35:57:4d:ef:5a:28:38:8d:df:e0:4f:ca:99:4f:cb:87:
1b:19:1c:fd:a0:99:fa:34:77:b1:4a:7e:60:4b:aa:49:39:07:
94:c3:0d:fd:31:db:a0:cd:a1:9a:85:f8:49:6a:9b:78:d4:58:
df:05:a7:50:f6:b4:40:27:7f:57:f9:b5:a5:96:88:7e:7f:e7:
e4:01:2f:0b:95:33:1b:96:19:f8:33:a9:d0:74:c6:97:08:33:
4f:70:98:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou8pC1OlrGp3Wm1pyb00KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGQxNmMzMzU0MDdiZjBkMGE1MWNlZjliOWMxYzUzMTAy
ODBmNDgwHhcNMjUwNjEzMTAwMDI2WhcNMjUwNjE0MTAwMDI2WjAzMTEwLwYDVQQD
EygxNjU0MTQzNGIzOTBhYjg4MDQ3YTlkZjM1ZjRmYzYxY2ZmMDFmMWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+5s1WcNjc5KG+Kgryg7VZyTiLZ6
wvc4JnWdIq2JLa5S072nJbjUZ+4V7V+KuGRA0X7DLTojlBbsdSEKU3e5ZWg02o1Z
vqwgys76k3zYHqg7Yd5FJwOp8jQmC4+XW2Vn+VCErG2xhp7jF98c4KWSkK/OyUrz
YrwKM+sefxfhc6wGX3KPOtYwlFaF3phuKfcXjniJ816UyyrXn/+R7WCQVE6rJ9v9
wR4D/+7t6F5m1BlPeS/Jp9lq/NGB6MaDzuVDzyxVkIFh7UJLMyFOmi/l6E4ODJVU
qWzYJL36NiFGotYPIStUOhO9t48vdBNmNZaUfKPVvv0PjwlhtVZ0IPT7HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZUFDSzkKuIBHqd819Pxhz/AfGrMB8GA1UdIwQY
MBaAFK9NFsM1QHvw0KUc75ucHFMQKA9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjAwV3d6VkFlX0RRcFJ6dm01d2NVeEFvRDBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kYmMwZTYtMjU1NS00YmYzLTlhYjEt
OTkxNTk5MGJjYjU5LzEvcjAwV3d6VkFlX0RRcFJ6dm01d2NVeEFvRDBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kYmMwZTYtMjU1NS00YmYzLTlhYjEtOTkxNTk5MGJjYjU5
LzEvcjAwV3d6VkFlX0RRcFJ6dm01d2NVeEFvRDBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmjKz7wA
BdH14o0f6um8oZtubsQh6GYTdRvKYKoJJ9klOuN4I6Q3+8AZG/MUtBL9LllM4AgL
NMw8NC2MYrpCkKDYFd6EJODoK7G4wg/0zoo9SY1QUWxiNc/7uORbFHBd7bobiXO+
IYTy9S/tSsT+3RTGiCns/7DUo1F5gOWLfYWKHzsbGxhfErd0yyj2aJ7w93NQxNYI
pn3f5UjEceyyCY8q9941V03vWig4jd/gT8qZT8uHGxkc/aCZ+jR3sUp+YEuqSTkH
lMMN/THboM2hmoX4SWqbeNRY3wWnUPa0QCd/V/m1pZaIfn/n5AEvC5UzG5YZ+DOp
0HTGlwgzT3CYKA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:15 2025 by rpki-client