Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json)
Hash identifier: kKKpR/0Y0EWKH4nNq0z1o/paA4NipcSjdTJC7F44SD8=
Subject key identifier: E6:4D:DF:1D:F3:74:FC:41:E7:8E:41:1F:75:73:7D:21:7D:6F:A0:FB
Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Certificate serial: 01988FFE98BBB2944962F59EE4F402F8CA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 18:01:23 +0000
Manifest this update: Sat 09 Aug 2025 18:01:23 +0000
Manifest next update: Sun 10 Aug 2025 18:01:23 +0000
Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: gtyY85gQkAhuqWUEysVpjfQnc1mvHqKSX4/Ilb6ijbU=)
2: g4DPD_TlI2jk4YtUIO3nppJCypo.roa (hash: 1cUob6Ttj1c9mZCdpqGoW3x2UVNqUiWBsqfqlcDpGkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:98:bb:b2:94:49:62:f5:9e:e4:f4:02:f8:ca:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Validity
Not Before: Aug 9 18:01:23 2025 GMT
Not After : Aug 10 18:01:23 2025 GMT
Subject: CN=e64ddf1df374fc41e78e411f75737d217d6fa0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:e1:c7:20:65:0d:35:13:4a:a9:50:15:16:
dd:ac:dd:1d:7c:df:3f:ac:e1:34:9c:2d:ba:e0:dd:
7a:5c:e0:42:a3:ee:8c:0e:49:fa:e9:cf:47:4b:b8:
9e:bd:00:3c:be:b2:75:2c:4f:17:53:bc:fa:ea:2d:
3e:2f:9a:3c:25:cc:e9:2c:8c:fb:6a:d0:b1:b2:01:
6c:7e:f0:15:64:3e:4a:51:4e:e1:58:92:67:1d:51:
c9:3d:6f:d7:f9:fe:fc:94:fb:54:bc:35:16:a6:1a:
04:55:26:ee:7e:44:7e:b4:64:81:73:a3:98:0f:16:
9d:2f:37:f5:57:73:da:e1:8f:13:05:83:87:81:ee:
39:fa:7c:36:c8:0f:1c:a1:c9:5f:37:cf:ce:32:b2:
85:67:6a:ce:00:49:0e:cb:62:32:1f:1e:41:0b:15:
82:68:73:38:a9:03:1c:4d:75:1b:ef:20:00:4c:c1:
52:8b:b6:f2:52:7e:bc:2a:a8:93:a5:0b:96:42:5f:
b9:0c:2d:5c:4a:c7:ac:b7:eb:d1:3c:50:20:03:04:
04:53:b6:52:5c:7e:5d:4d:88:77:08:30:9d:80:09:
68:91:21:40:d5:d0:0e:37:13:3b:25:49:be:2f:d7:
51:db:7d:4d:81:4b:45:0c:e7:f0:1c:55:5c:99:ee:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4D:DF:1D:F3:74:FC:41:E7:8E:41:1F:75:73:7D:21:7D:6F:A0:FB
X509v3 Authority Key Identifier:
keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cf:b2:79:d8:dd:4d:d2:6a:72:a8:0b:7c:62:a3:05:48:8b:
f4:04:8a:34:e3:21:ee:cc:18:f3:71:96:e5:59:4d:2d:09:0d:
e1:aa:98:f5:62:de:5c:4b:a8:d2:4e:8b:a1:69:2f:ad:f6:bc:
87:e4:59:38:1e:9d:17:a4:3d:41:ee:2e:30:d6:e6:bf:18:41:
0d:2f:2a:05:6c:be:b8:1e:c0:2f:00:ff:83:0a:53:11:5a:dd:
11:6d:8a:fa:a2:8d:46:4c:63:c0:0e:aa:4b:fc:e5:bb:7b:34:
5b:ec:6b:e0:4f:c6:b9:b8:a2:0b:5f:78:ef:78:0a:f1:b7:8e:
a9:3c:2c:ab:c4:96:5c:9e:e9:b5:a4:b4:9c:53:03:b2:cb:0a:
3d:f5:70:5e:10:96:ca:a3:79:3a:66:88:eb:44:df:96:f3:98:
ee:f3:b7:a0:59:c1:63:37:85:c1:9e:d2:a4:bc:de:5e:fd:e7:
8a:f0:5a:09:1a:37:57:3b:2d:ce:34:f4:06:89:46:c6:d3:28:
8e:59:32:aa:f1:7f:f5:2f:22:61:c0:aa:fa:2f:b9:02:3f:bf:
f0:12:1c:71:23:85:08:19:a6:69:6e:cd:a7:8f:c4:51:26:13:
2f:83:57:7c:b4:25:be:a2:87:de:ce:c4:fe:e6:10:ba:a1:b5:
5f:01:f5:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiP/pi7spRJYvWe5PQC+MphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDJhMzU2YTU0NzgxNTViZWFhOGJjNjI1NmE4NmY2ZDVi
M2Y3M2MwHhcNMjUwODA5MTgwMTIzWhcNMjUwODEwMTgwMTIzWjAzMTEwLwYDVQQD
EyhlNjRkZGYxZGYzNzRmYzQxZTc4ZTQxMWY3NTczN2QyMTdkNmZhMGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRPhxyBlDTUTSqlQFRbdrN0dfN8/
rOE0nC264N16XOBCo+6MDkn66c9HS7ievQA8vrJ1LE8XU7z66i0+L5o8JczpLIz7
atCxsgFsfvAVZD5KUU7hWJJnHVHJPW/X+f78lPtUvDUWphoEVSbufkR+tGSBc6OY
DxadLzf1V3Pa4Y8TBYOHge45+nw2yA8coclfN8/OMrKFZ2rOAEkOy2IyHx5BCxWC
aHM4qQMcTXUb7yAATMFSi7byUn68KqiTpQuWQl+5DC1cSsest+vRPFAgAwQEU7ZS
XH5dTYh3CDCdgAlokSFA1dAONxM7JUm+L9dR231NgUtFDOfwHFVcme68YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZN3x3zdPxB545BH3VzfSF9b6D7MB8GA1UdIwQY
MBaAFFjSo1alR4FVvqqLxiVqhvbVs/c8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQt
OTA1MzA1NGE1Y2FiLzEvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQtOTA1MzA1NGE1Y2Fi
LzEvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8+yedjd
TdJqcqgLfGKjBUiL9ASKNOMh7swY83GW5VlNLQkN4aqY9WLeXEuo0k6LoWkvrfa8
h+RZOB6dF6Q9Qe4uMNbmvxhBDS8qBWy+uB7ALwD/gwpTEVrdEW2K+qKNRkxjwA6q
S/zlu3s0W+xr4E/GubiiC19473gK8beOqTwsq8SWXJ7ptaS0nFMDsssKPfVwXhCW
yqN5OmaI60TflvOY7vO3oFnBYzeFwZ7SpLzeXv3nivBaCRo3VzstzjT0BolGxtMo
jlkyqvF/9S8iYcCq+i+5Aj+/8BIccSOFCBmmaW7Np4/EUSYTL4NXfLQlvqKH3s7E
/uYQuqG1XwH19A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:05 2025 by rpki-client