Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json)
Hash identifier: kqJE18sEMysyzRUxVEH4ECLESIt7B5fn+VBPrrgR/QU=
Subject key identifier: D1:69:6E:B7:AE:0A:75:A4:2F:2A:E4:36:4C:6A:4B:7B:7F:A9:D2:B3
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 01976F63031FA4E3104297737EAACFB9E446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
Manifest number: 0BD5
Signing time: Sat 14 Jun 2025 17:00:49 +0000
Manifest this update: Sat 14 Jun 2025 17:00:49 +0000
Manifest next update: Sun 15 Jun 2025 17:00:49 +0000
Files and hashes: 1: 42TScFyDsL36h4YpEfhHoHfnzjk.roa (hash: PlV9CG6o3L7E63lVcJyc5UxCQesBmENg5els1UMNldc=)
2: GzDEyQPlP7XqkDOXMJVrm-t5quA.roa (hash: yHlRVvenZ9bcsv8W/dTmVIqnz02wrgwCRtxhDUrDoKo=)
3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: 1EF1K0PejwhVDITf+GSFqO+VOeKqqhE65Wps2PV6jJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:03:1f:a4:e3:10:42:97:73:7e:aa:cf:b9:e4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: Jun 14 17:00:49 2025 GMT
Not After : Jun 15 17:00:49 2025 GMT
Subject: CN=d1696eb7ae0a75a42f2ae4364c6a4b7b7fa9d2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:d4:f1:ac:d0:87:3a:0e:52:fa:53:04:bd:
28:f9:58:0e:12:44:9f:ff:40:e4:d0:d9:4e:e7:c5:
4a:64:81:b7:25:3e:a3:68:f8:98:b0:74:4e:91:22:
0b:48:63:4f:11:4a:c2:ca:8f:c6:a5:a7:94:90:b7:
57:af:33:89:1b:99:22:d0:a7:32:2a:cb:6d:a4:ba:
c5:27:5e:31:f5:f9:05:24:de:39:13:94:47:f1:1e:
f9:73:04:94:e3:fe:24:57:ff:3d:dc:45:5e:3e:f7:
1f:a2:95:b5:d7:53:c7:21:d6:2e:bb:a3:a1:96:70:
1e:cb:60:7a:3a:ab:fd:9a:44:e9:a3:31:45:58:a4:
84:a7:52:2c:a4:fe:39:8d:d0:0e:c9:bc:9e:74:89:
30:f6:12:a7:ec:f0:56:2b:30:25:67:d0:f6:b6:0d:
ee:e9:ae:72:1b:f2:b1:39:25:26:17:7f:2f:60:f3:
ee:41:a3:ab:c4:e3:19:0b:34:48:67:7d:33:d0:ab:
41:50:cb:37:6c:49:6b:60:ed:de:3a:f0:8f:15:b1:
69:70:e3:9e:e5:6d:0f:cf:4b:76:7a:2a:fe:56:44:
7f:20:dd:94:98:86:8b:e2:b9:3f:a3:53:b3:7d:96:
ad:d6:4d:7f:a9:f0:af:29:05:b4:5d:07:f8:d6:05:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:69:6E:B7:AE:0A:75:A4:2F:2A:E4:36:4C:6A:4B:7B:7F:A9:D2:B3
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:38:50:c1:24:1c:84:23:97:d5:32:1a:3d:b1:fc:cb:de:97:
27:6d:36:6a:d0:00:b7:80:e5:d3:c3:03:47:d0:52:c9:06:35:
5c:05:89:a7:4e:bc:36:94:7a:d7:fe:7c:a9:3f:67:61:a7:f6:
62:78:7f:23:d6:d5:d7:ed:dd:5b:08:96:c3:f0:b4:5b:75:12:
f7:09:e8:34:b4:86:02:9c:1d:50:b0:cc:15:f0:05:77:b7:0e:
18:d6:d6:e2:a3:ff:e9:fe:34:b0:88:6a:12:8b:da:d0:97:4d:
20:79:38:03:76:f2:f3:6f:70:1e:38:92:70:8f:95:ff:2a:5c:
c6:18:a9:50:bb:ff:ad:e7:9e:45:9d:95:34:6a:39:f0:d1:4d:
9b:af:ad:ab:48:b3:de:88:c1:0a:ff:ff:43:75:78:a1:28:ef:
b0:f9:82:79:4d:35:92:e3:63:5d:51:77:30:9c:8a:a6:01:75:
56:e6:c7:d4:18:59:95:68:70:73:de:81:45:17:0a:f0:19:c0:
71:44:b0:22:1d:a6:19:a0:ba:4f:0f:92:35:cd:3d:ba:10:b0:
73:46:e3:d1:00:05:95:e7:df:aa:db:07:9b:c6:33:26:5b:05:
9e:1c:7c:c0:d7:7d:81:98:dc:48:2c:80:df:73:f0:48:be:7e:
b4:b5:d4:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYwMfpOMQQpdzfqrPueRGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjkyNTcxMTA4OTU4Nzg2YjY1ZmZhMjQxYjFmMTFmNmQw
NThiNTYwHhcNMjUwNjE0MTcwMDQ5WhcNMjUwNjE1MTcwMDQ5WjAzMTEwLwYDVQQD
EyhkMTY5NmViN2FlMGE3NWE0MmYyYWU0MzY0YzZhNGI3YjdmYTlkMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxHU8azQhzoOUvpTBL0o+VgOEkSf
/0Dk0NlO58VKZIG3JT6jaPiYsHROkSILSGNPEUrCyo/GpaeUkLdXrzOJG5ki0Kcy
KsttpLrFJ14x9fkFJN45E5RH8R75cwSU4/4kV/893EVePvcfopW111PHIdYuu6Oh
lnAey2B6Oqv9mkTpozFFWKSEp1IspP45jdAOybyedIkw9hKn7PBWKzAlZ9D2tg3u
6a5yG/KxOSUmF38vYPPuQaOrxOMZCzRIZ30z0KtBUMs3bElrYO3eOvCPFbFpcOOe
5W0Pz0t2eir+VkR/IN2UmIaL4rk/o1OzfZat1k1/qfCvKQW0XQf41gWKgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFpbreuCnWkLyrkNkxqS3t/qdKzMB8GA1UdIwQY
MBaAFMD5JXEQiVh4a2X/okGx8R9tBYtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQt
OWIyYjllYTk1NTM1LzEvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQtOWIyYjllYTk1NTM1
LzEvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzhQwSQc
hCOX1TIaPbH8y96XJ202atAAt4Dl08MDR9BSyQY1XAWJp068NpR61/58qT9nYaf2
Ynh/I9bV1+3dWwiWw/C0W3US9wnoNLSGApwdULDMFfAFd7cOGNbW4qP/6f40sIhq
Eova0JdNIHk4A3by829wHjiScI+V/ypcxhipULv/reeeRZ2VNGo58NFNm6+tq0iz
3ojBCv//Q3V4oSjvsPmCeU01kuNjXVF3MJyKpgF1VubH1BhZlWhwc96BRRcK8BnA
cUSwIh2mGaC6Tw+SNc09uhCwc0bj0QAFleffqtsHm8YzJlsFnhx8wNd9gZjcSCyA
33PwSL5+tLXUQw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:29:09 2025 by rpki-client