Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier: b0TjtrJcOU8hYnwZMkkXyWAoN0k+UYQvTRSRXByqQIA=
Subject key identifier: CE:0D:31:61:71:A7:6A:3A:40:DC:9E:05:59:94:8A:9A:4E:C4:16:64
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial: 019771BF38444BABBC4C7FF27AE795D90326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number: 0770
Signing time: Sun 15 Jun 2025 04:00:46 +0000
Manifest this update: Sun 15 Jun 2025 04:00:46 +0000
Manifest next update: Mon 16 Jun 2025 04:00:46 +0000
Files and hashes: 1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: efVnEZpw9d3GE4R78MQLAiYPFqRM+SjKncFb3H6i8JM=)
2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=)
3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:38:44:4b:ab:bc:4c:7f:f2:7a:e7:95:d9:03:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
Validity
Not Before: Jun 15 04:00:46 2025 GMT
Not After : Jun 16 04:00:46 2025 GMT
Subject: CN=ce0d316171a76a3a40dc9e0559948a9a4ec41664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6c:85:55:45:d8:80:85:be:99:b3:b6:b8:ac:
f6:bd:72:72:1a:8e:04:1c:74:22:f9:0e:08:dc:77:
4b:7a:ac:da:76:b8:72:18:81:9b:28:33:72:a2:61:
31:01:93:df:38:cc:ac:29:53:15:35:7e:9d:02:cb:
07:c9:1a:7b:b1:6e:5c:0a:f9:9b:d1:a3:64:aa:14:
00:52:4b:30:e4:88:b9:49:fb:73:28:66:5b:d6:af:
fc:35:7d:c8:18:c9:9a:a9:9c:cc:e2:bf:85:70:cb:
c0:66:96:cd:2e:58:89:94:1a:7f:f6:26:b0:8c:01:
d6:90:4b:16:2b:76:5b:81:40:8e:12:28:93:eb:f9:
65:ef:45:f4:89:fe:ce:1a:25:ca:2d:68:ac:2b:ae:
9c:0f:c8:b7:97:94:83:c4:14:19:36:be:93:9d:a9:
05:49:af:74:a8:c5:32:03:79:8c:8c:29:8d:7d:c8:
3c:eb:fd:c4:2f:78:cf:ee:d2:4b:80:f9:d4:78:3e:
b1:32:f2:e1:5e:7b:d6:1e:b3:72:3e:a1:d8:9b:27:
ea:ec:7b:c5:d2:67:ed:1b:5e:20:20:ae:6e:77:b5:
e4:89:51:9f:dc:6c:97:87:6e:f3:4e:de:1e:54:6e:
94:ce:49:41:1c:97:05:63:fb:74:43:db:a1:c2:0d:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0D:31:61:71:A7:6A:3A:40:DC:9E:05:59:94:8A:9A:4E:C4:16:64
X509v3 Authority Key Identifier:
keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9e:3e:92:09:4f:76:6f:3b:bb:a5:66:43:c1:a0:f6:c4:45:
7f:b8:90:34:7d:64:af:54:b7:9a:94:5c:a3:17:7c:7c:a0:f2:
8f:0c:99:b3:20:95:4e:3e:4b:7f:05:ce:94:d9:19:33:50:b7:
55:31:46:72:5a:23:40:da:e4:2f:f3:7b:d3:69:eb:40:ca:f4:
2d:53:ee:bc:c3:bc:a8:76:b3:51:37:9d:f2:c6:e7:b0:74:2d:
43:90:cc:ad:a7:79:52:0a:f6:2f:65:d4:3a:59:9c:fd:9d:83:
32:e9:fd:05:3e:cf:8e:ce:81:85:8c:88:c7:3f:97:2e:54:d8:
60:56:8c:72:f8:cf:9a:9c:52:db:2e:81:27:78:7f:60:a3:5b:
0b:da:89:39:eb:e6:45:79:43:0f:79:54:e4:c3:65:47:3f:a2:
be:83:ea:f5:81:03:cd:b3:a5:db:80:c4:6d:cf:53:a6:e9:a2:
8c:e5:22:10:7a:15:9a:02:b8:13:98:88:ea:c6:20:35:c5:b9:
86:f7:42:71:b6:21:10:0c:92:99:71:52:62:bf:6b:2f:88:c8:
2a:a4:9f:80:56:d3:6f:1a:f6:c2:07:bb:4b:be:d0:80:04:bb:
9d:3d:10:5f:ca:13:af:0d:0f:82:68:e0:e5:2d:fa:7d:e2:8c:
b4:06:1c:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxvzhES6u8TH/yeueV2QMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NjdhYzY5ODVjYzBiM2ZlYTIxNjk0NWM5MmViMmU5MzIx
ODk0MDMwHhcNMjUwNjE1MDQwMDQ2WhcNMjUwNjE2MDQwMDQ2WjAzMTEwLwYDVQQD
EyhjZTBkMzE2MTcxYTc2YTNhNDBkYzllMDU1OTk0OGE5YTRlYzQxNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4myFVUXYgIW+mbO2uKz2vXJyGo4E
HHQi+Q4I3HdLeqzadrhyGIGbKDNyomExAZPfOMysKVMVNX6dAssHyRp7sW5cCvmb
0aNkqhQAUksw5Ii5SftzKGZb1q/8NX3IGMmaqZzM4r+FcMvAZpbNLliJlBp/9iaw
jAHWkEsWK3ZbgUCOEiiT6/ll70X0if7OGiXKLWisK66cD8i3l5SDxBQZNr6TnakF
Sa90qMUyA3mMjCmNfcg86/3EL3jP7tJLgPnUeD6xMvLhXnvWHrNyPqHYmyfq7HvF
0mftG14gIK5ud7XkiVGf3GyXh27zTt4eVG6UzklBHJcFY/t0Q9uhwg0NMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4NMWFxp2o6QNyeBVmUippOxBZkMB8GA1UdIwQY
MBaAFFhnrGmFzAs/6iFpRckusukyGJQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMt
Y2IxNjhhZmRiMzQzLzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMtY2IxNjhhZmRiMzQz
LzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL54+kglP
dm87u6VmQ8Gg9sRFf7iQNH1kr1S3mpRcoxd8fKDyjwyZsyCVTj5LfwXOlNkZM1C3
VTFGclojQNrkL/N702nrQMr0LVPuvMO8qHazUTed8sbnsHQtQ5DMrad5Ugr2L2XU
Olmc/Z2DMun9BT7Pjs6BhYyIxz+XLlTYYFaMcvjPmpxS2y6BJ3h/YKNbC9qJOevm
RXlDD3lU5MNlRz+ivoPq9YEDzbOl24DEbc9TpumijOUiEHoVmgK4E5iI6sYgNcW5
hvdCcbYhEAySmXFSYr9rL4jIKqSfgFbTbxr2wge7S77QgAS7nT0QX8oTrw0Pgmjg
5S36feKMtAYc2w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:01:19 2025 by rpki-client