Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier: QzUg/8ufpecpgtpuakJyiJM4JJCnkDZalMRuBVG7GH8=
Subject key identifier: EB:F0:21:A0:A3:77:7F:56:B0:29:CE:D3:99:D2:40:9A:2A:DE:4C:C5
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 0198963706B5A9C4C0DF4553D95C91EAD20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number: 1592
Signing time: Sun 10 Aug 2025 23:00:45 +0000
Manifest this update: Sun 10 Aug 2025 23:00:45 +0000
Manifest next update: Mon 11 Aug 2025 23:00:45 +0000
Files and hashes: 1: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: rb5zwuQoX9faArRY+dM7/Wwrbwd2J1qpPhppHgib0dU=)
2: ad0B85jvjdQ5awOY3wMvIUJWKS0.roa (hash: TTcNh3M53FShxBm0xKV5WZZn8GR6GuYGWd3G/MpA0dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:06:b5:a9:c4:c0:df:45:53:d9:5c:91:ea:d2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Aug 10 23:00:45 2025 GMT
Not After : Aug 11 23:00:45 2025 GMT
Subject: CN=ebf021a0a3777f56b029ced399d2409a2ade4cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:42:ac:c2:c4:36:c5:b5:95:18:87:e6:01:
06:53:7b:40:d5:59:e0:f2:ac:56:81:a5:27:ea:67:
22:0f:3b:f8:60:25:aa:86:9b:9f:9b:b2:4d:90:dc:
d3:fe:0b:df:69:35:99:5b:e1:7b:c6:b0:22:df:f8:
d6:ee:be:3b:85:09:9a:95:cb:d9:26:3a:25:4a:d2:
8c:89:b2:3d:dd:1c:03:67:3a:16:60:2f:85:7b:04:
9e:d2:47:e8:df:9f:03:c1:fb:09:c2:c0:61:97:c0:
9a:4c:e9:c3:de:b2:a3:a2:4b:13:6a:60:3b:a5:da:
5d:3f:6d:63:73:a4:9c:06:7b:ac:45:e7:1f:96:a2:
84:df:98:16:c7:d1:44:da:e2:8f:96:9e:ac:4d:3c:
2a:12:21:20:47:98:54:ad:87:ed:ca:fb:3f:f8:34:
80:eb:4f:9e:ac:2d:e1:bb:56:c9:d3:65:bc:f8:f7:
fa:f9:dd:fb:a5:82:ee:b2:39:07:fd:94:2f:a6:4e:
c6:99:51:14:49:7d:26:cc:ad:ca:82:d1:3c:a1:69:
b3:31:be:3c:30:76:ef:72:9b:02:d1:c4:00:3a:ad:
49:e1:88:ce:ea:01:12:24:db:a1:8f:0f:e5:7d:80:
7e:6d:65:ee:76:f2:b3:59:a9:ed:d3:e1:06:83:c9:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F0:21:A0:A3:77:7F:56:B0:29:CE:D3:99:D2:40:9A:2A:DE:4C:C5
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1a:60:f8:96:00:03:40:29:21:41:b2:30:a3:00:d2:d8:8c:
34:74:46:e9:c0:9d:c1:74:e2:72:ec:a0:c3:00:13:e7:c6:9e:
e6:11:5b:b1:d2:da:bd:c1:a6:b0:70:c5:b3:21:66:f4:82:c7:
af:c3:10:ec:f4:d9:2c:7b:ea:60:98:0c:1e:49:d8:71:5e:ab:
84:54:d8:00:22:88:a5:35:f9:0e:30:22:7d:be:c3:f2:a4:02:
45:82:b8:6c:55:68:30:0b:07:63:3a:53:70:15:82:ed:ec:0e:
b0:ab:2c:e6:02:7e:2b:1a:08:f9:15:e1:39:ea:33:53:3b:bc:
77:bb:81:fd:50:06:03:f8:5f:27:9d:e0:5a:33:85:a5:a3:6e:
d2:d7:84:7b:b1:e5:a1:ea:be:44:35:96:84:c1:69:03:a9:f6:
37:fb:16:83:b8:ea:2d:7f:dc:95:dd:e8:59:36:5b:84:77:d6:
84:d0:f2:10:b0:01:ab:76:de:de:b9:ab:a5:49:35:cc:01:fe:
35:d6:b2:62:d9:15:aa:6b:18:a0:95:6d:f6:7d:43:a4:50:fa:
3a:a5:75:5c:75:2d:07:9b:ba:0e:ae:e4:14:02:11:fb:f6:90:
b8:c7:b6:9a:78:62:ed:2a:08:06:f1:f6:33:58:ad:4e:5f:a0:
af:22:3e:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWNwa1qcTA30VT2VyR6tIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMzM1ODExMGRhZGYyMjRlNzE5OTE0MTYxNzMxZGY1ZTU2
YzQxODgwHhcNMjUwODEwMjMwMDQ1WhcNMjUwODExMjMwMDQ1WjAzMTEwLwYDVQQD
EyhlYmYwMjFhMGEzNzc3ZjU2YjAyOWNlZDM5OWQyNDA5YTJhZGU0Y2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokZCrMLENsW1lRiH5gEGU3tA1Vng
8qxWgaUn6mciDzv4YCWqhpufm7JNkNzT/gvfaTWZW+F7xrAi3/jW7r47hQmalcvZ
JjolStKMibI93RwDZzoWYC+FewSe0kfo358DwfsJwsBhl8CaTOnD3rKjoksTamA7
pdpdP21jc6ScBnusRecflqKE35gWx9FE2uKPlp6sTTwqEiEgR5hUrYftyvs/+DSA
60+erC3hu1bJ02W8+Pf6+d37pYLusjkH/ZQvpk7GmVEUSX0mzK3KgtE8oWmzMb48
MHbvcpsC0cQAOq1J4YjO6gESJNuhjw/lfYB+bWXudvKzWant0+EGg8mLXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvwIaCjd39WsCnO05nSQJoq3kzFMB8GA1UdIwQY
MBaAFFszWBENrfIk5xmRQWFzHfXlbEGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAt
ZjQyNzJlZWMyODBkLzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAtZjQyNzJlZWMyODBk
LzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBpg+JYA
A0ApIUGyMKMA0tiMNHRG6cCdwXTicuygwwAT58ae5hFbsdLavcGmsHDFsyFm9ILH
r8MQ7PTZLHvqYJgMHknYcV6rhFTYACKIpTX5DjAifb7D8qQCRYK4bFVoMAsHYzpT
cBWC7ewOsKss5gJ+KxoI+RXhOeozUzu8d7uB/VAGA/hfJ53gWjOFpaNu0teEe7Hl
oeq+RDWWhMFpA6n2N/sWg7jqLX/cld3oWTZbhHfWhNDyELABq3be3rmrpUk1zAH+
NdayYtkVqmsYoJVt9n1DpFD6OqV1XHUtB5u6Dq7kFAIR+/aQuMe2mnhi7SoIBvH2
M1itTl+gryI+RQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:37 2025 by rpki-client