Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File: WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier: geVx7jSYT535Nzb/laKvH8zAl0vke/3hUAXNArgFEYM=
Subject key identifier: 3E:EE:0E:10:BB:B6:09:A1:1B:9B:64:09:60:5B:F6:C5:B1:A8:35:57
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial: 01988CFE8BE65C230A03EA8D7017E7F8AC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number: 0C3F
Signing time: Sat 09 Aug 2025 04:02:28 +0000
Manifest this update: Sat 09 Aug 2025 04:02:28 +0000
Manifest next update: Sun 10 Aug 2025 04:02:28 +0000
Files and hashes: 1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: ZpZ8LFhrPfRvG9NPpTlemNbainmN9kOLhQ9LSMUCj68=)
2: eTD5X7eUVxPbE-bCRH9QGxLRZDs.roa (hash: IG853MFkGaq1sWpTd3DWggMITF7We7r2IbsZKj9lAZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:8b:e6:5c:23:0a:03:ea:8d:70:17:e7:f8:ac:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Validity
Not Before: Aug 9 04:02:28 2025 GMT
Not After : Aug 10 04:02:28 2025 GMT
Subject: CN=3eee0e10bbb609a11b9b6409605bf6c5b1a83557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:21:09:33:2c:55:7c:2f:a8:d8:42:89:6a:f5:
26:28:64:db:e1:a4:36:5c:aa:77:a5:0d:da:97:03:
9f:4e:48:e1:db:e2:8b:b5:68:57:43:44:95:29:57:
a8:18:f5:10:a2:73:39:41:72:99:a9:64:f8:25:39:
04:2a:09:ec:4f:c0:5d:e2:c9:f0:4c:d2:a8:85:3c:
d1:cc:f1:8e:ad:01:75:a3:99:fa:2a:1d:ef:97:cf:
5f:ee:10:55:dc:12:c4:7e:80:11:da:45:3a:46:84:
f5:22:81:f0:8d:a9:3c:bb:ed:05:01:80:84:ba:72:
d3:60:b3:18:ba:56:19:bf:ed:e7:5d:47:19:f7:6a:
ba:30:48:24:78:a5:9f:b5:b5:c3:82:c0:f8:46:ed:
cf:6c:55:68:94:f8:f7:57:c9:e0:ef:88:51:c0:a5:
5e:f0:cc:77:f9:de:ca:5e:bc:60:69:e0:9c:fe:8d:
71:a5:be:95:48:55:9e:ca:a0:71:86:f0:e6:55:7f:
2f:82:55:66:63:2c:ab:8f:4a:42:92:44:94:7a:c1:
9b:1e:12:00:d1:1c:76:c3:b0:68:70:ac:e8:a4:1a:
94:23:e4:fe:cd:ba:48:56:ef:db:b6:6d:f6:a2:94:
5a:88:62:d8:76:a4:ee:be:2b:af:dc:9e:06:36:aa:
81:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EE:0E:10:BB:B6:09:A1:1B:9B:64:09:60:5B:F6:C5:B1:A8:35:57
X509v3 Authority Key Identifier:
keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:dc:1d:17:22:91:80:be:77:f2:69:1f:fc:ef:3f:23:e3:e0:
d5:8f:17:dd:bb:3a:f1:02:c2:57:6f:e6:a2:1a:7f:01:3c:c3:
9f:8c:4e:ff:f7:c9:3d:c0:ac:a3:7c:1a:e1:e6:7d:51:8e:ee:
46:ad:8a:b7:16:54:bb:6b:5f:8d:7e:0e:f3:42:30:d3:c8:f5:
bc:ea:be:a5:12:9c:71:b6:93:99:61:f4:a8:b3:3a:be:ca:64:
02:97:1e:3c:10:76:03:2d:dd:b5:b4:08:77:88:6f:63:cd:27:
a7:21:99:ca:1d:86:fc:29:65:50:53:d1:f9:66:e9:f8:ae:25:
e8:a3:7c:6f:19:34:75:00:bd:ab:1a:c5:2f:7d:8d:2d:bc:0b:
12:96:d0:58:e0:36:9d:1e:90:9d:a5:23:68:42:08:78:34:41:
cd:f3:93:48:98:cc:1f:70:08:f8:23:84:20:cc:f3:e3:db:44:
70:a1:13:36:f9:25:e7:01:05:2a:b4:4f:0e:59:30:48:b7:d7:
3d:99:d6:58:81:04:77:86:4f:c8:2b:05:c2:ea:e3:00:46:c7:
e1:9c:3e:98:6e:ad:0f:4a:a0:c8:c7:94:27:9d:cd:cd:c1:50:
a1:6e:33:41:f7:8d:fa:cb:b4:95:38:28:af:e3:4e:06:0c:b2:
c2:de:76:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/ovmXCMKA+qNcBfn+KwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTg2YTZjNzFmYjczNGM3MDViNWU2NmU3NGFjMWM1NmJi
OTYwNWUwHhcNMjUwODA5MDQwMjI4WhcNMjUwODEwMDQwMjI4WjAzMTEwLwYDVQQD
EygzZWVlMGUxMGJiYjYwOWExMWI5YjY0MDk2MDViZjZjNWIxYTgzNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSEJMyxVfC+o2EKJavUmKGTb4aQ2
XKp3pQ3alwOfTkjh2+KLtWhXQ0SVKVeoGPUQonM5QXKZqWT4JTkEKgnsT8Bd4snw
TNKohTzRzPGOrQF1o5n6Kh3vl89f7hBV3BLEfoAR2kU6RoT1IoHwjak8u+0FAYCE
unLTYLMYulYZv+3nXUcZ92q6MEgkeKWftbXDgsD4Ru3PbFVolPj3V8ng74hRwKVe
8Mx3+d7KXrxgaeCc/o1xpb6VSFWeyqBxhvDmVX8vglVmYyyrj0pCkkSUesGbHhIA
0Rx2w7BocKzopBqUI+T+zbpIVu/btm32opRaiGLYdqTuviuv3J4GNqqBBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7uDhC7tgmhG5tkCWBb9sWxqDVXMB8GA1UdIwQY
MBaAFFioamxx+3NMcFteZudKwcVruWBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzQzNjUtYTk4Zi00M2ZlLTk5NTAt
YTliMTNjMjgwMGFmLzEvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85YzQzNjUtYTk4Zi00M2ZlLTk5NTAtYTliMTNjMjgwMGFm
LzEvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdwdFyKR
gL538mkf/O8/I+Pg1Y8X3bs68QLCV2/mohp/ATzDn4xO//fJPcCso3wa4eZ9UY7u
Rq2KtxZUu2tfjX4O80Iw08j1vOq+pRKccbaTmWH0qLM6vspkApcePBB2Ay3dtbQI
d4hvY80npyGZyh2G/CllUFPR+Wbp+K4l6KN8bxk0dQC9qxrFL32NLbwLEpbQWOA2
nR6QnaUjaEIIeDRBzfOTSJjMH3AI+COEIMzz49tEcKETNvkl5wEFKrRPDlkwSLfX
PZnWWIEEd4ZPyCsFwurjAEbH4Zw+mG6tD0qgyMeUJ53NzcFQoW4zQfeN+su0lTgo
r+NOBgyywt52OQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:24 2025 by rpki-client