Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
File: wa45j5qt0GOL_-okwceeuIMveHU.mft (raw, json)
Hash identifier: JnRrfmHfOMQ13/pfIUqNOWmQ5iL8Hhd0rgevH4yGYyc=
Subject key identifier: 1F:91:AE:0B:9F:41:F0:09:59:49:51:88:98:79:86:AF:CE:29:74:33
Authority key identifier: C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
Certificate issuer: /CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Certificate serial: 0198D515B8CEC7D74A15C3A15615C0DE4E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
Manifest number: 1399
Signing time: Sat 23 Aug 2025 04:00:27 +0000
Manifest this update: Sat 23 Aug 2025 04:00:27 +0000
Manifest next update: Sun 24 Aug 2025 04:00:27 +0000
Files and hashes: 1: wa45j5qt0GOL_-okwceeuIMveHU.crl (hash: Th64RPh+iS7KBxrwzeVYQ2LqnhU4KybTlAfoHQTdFJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b8:ce:c7:d7:4a:15:c3:a1:56:15:c0:de:4e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Validity
Not Before: Aug 23 04:00:27 2025 GMT
Not After : Aug 24 04:00:27 2025 GMT
Subject: CN=1f91ae0b9f41f00959495188987986afce297433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:e3:7f:ec:ef:2f:5f:e8:65:b0:8b:e5:9e:
08:d5:d3:71:ff:9a:5c:b5:55:32:80:26:e4:f0:bc:
92:7d:b3:d8:5b:86:e7:92:e5:f5:ed:b5:17:a5:23:
9a:b7:90:0e:fd:3a:64:86:83:cb:37:d1:55:76:f2:
9a:dc:47:04:64:f8:17:c4:c4:bf:08:f2:ee:d7:38:
a3:90:f6:13:77:7a:79:8c:6b:2d:b3:ba:3b:62:6c:
64:e2:e0:12:03:85:cc:69:43:61:8d:0a:a9:f8:1e:
02:45:98:14:da:fc:93:55:ab:80:59:61:c0:e8:f5:
8b:cf:25:5d:66:d4:e0:26:79:e7:fe:52:97:e8:4d:
05:f2:48:a4:53:ce:04:cc:1f:67:1c:d4:21:0b:c8:
c1:52:af:45:19:99:d5:01:46:0e:16:0d:a0:26:db:
ee:85:56:cc:c8:e7:74:2c:2d:ac:b7:65:7a:2e:de:
ff:61:23:22:e8:06:a5:60:cc:c3:75:87:07:fd:a1:
79:03:d5:92:60:78:a4:4a:5e:a1:92:8a:72:0b:aa:
09:9d:d1:d0:db:cf:2b:db:15:fe:4d:23:1b:a8:a6:
48:51:63:ba:c6:80:c8:6f:e7:a3:01:d9:82:76:02:
cf:20:84:2e:3e:89:7f:ad:00:b8:cd:47:11:ff:42:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:91:AE:0B:9F:41:F0:09:59:49:51:88:98:79:86:AF:CE:29:74:33
X509v3 Authority Key Identifier:
keyid:C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:55:8b:1e:6f:8b:4f:b6:a8:01:64:d1:f7:5f:62:70:c9:65:
89:9a:01:c8:18:e1:97:40:04:b1:04:fe:d3:cc:9d:6d:34:b3:
d5:24:58:0b:a7:4b:ef:74:0b:dd:c0:5b:ab:46:a3:97:43:7f:
70:ae:15:b3:30:33:fb:3e:50:6f:58:39:e5:53:8f:ae:76:78:
7a:5b:a9:18:0a:7d:33:01:a8:c7:db:3b:00:53:2c:4a:44:a4:
bb:a2:b0:19:58:0d:36:d1:d3:6d:3a:22:1b:bb:35:4b:34:14:
1c:c8:6f:45:1d:30:56:45:16:e2:cb:f8:ec:9e:2b:49:1d:75:
98:c3:9a:8c:09:00:69:86:fb:42:36:6b:cb:73:81:25:e7:5c:
b7:e7:7b:fd:82:d1:7d:42:e6:d1:e5:25:08:ed:ac:71:d8:40:
44:94:22:e5:af:5d:a3:e2:08:ae:35:b9:94:0a:17:78:c0:0b:
da:34:55:78:5c:a5:ef:22:77:34:45:09:94:ed:31:6e:14:46:
0c:1c:be:1c:2b:24:84:e2:2b:f1:ee:a3:a5:da:97:b2:8d:6d:
77:a4:5c:d2:18:7d:9a:dc:18:15:e1:7b:49:a9:00:1a:0a:b7:
72:3c:8e:c2:2e:ab:c2:ee:5c:fa:82:0e:be:70:45:6c:e6:1b:
d6:9d:c4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFbjOx9dKFcOhVhXA3k6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWUzOThmOWFhZGQwNjM4YmZmZWEyNGMxYzc5ZWI4ODMy
Zjc4NzUwHhcNMjUwODIzMDQwMDI3WhcNMjUwODI0MDQwMDI3WjAzMTEwLwYDVQQD
EygxZjkxYWUwYjlmNDFmMDA5NTk0OTUxODg5ODc5ODZhZmNlMjk3NDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpnjf+zvL1/oZbCL5Z4I1dNx/5pc
tVUygCbk8LySfbPYW4bnkuX17bUXpSOat5AO/TpkhoPLN9FVdvKa3EcEZPgXxMS/
CPLu1zijkPYTd3p5jGsts7o7Ymxk4uASA4XMaUNhjQqp+B4CRZgU2vyTVauAWWHA
6PWLzyVdZtTgJnnn/lKX6E0F8kikU84EzB9nHNQhC8jBUq9FGZnVAUYOFg2gJtvu
hVbMyOd0LC2st2V6Lt7/YSMi6AalYMzDdYcH/aF5A9WSYHikSl6hkopyC6oJndHQ
288r2xX+TSMbqKZIUWO6xoDIb+ejAdmCdgLPIIQuPol/rQC4zUcR/0JLcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+RrgufQfAJWUlRiJh5hq/OKXQzMB8GA1UdIwQY
MBaAFMGuOY+ardBji//qJMHHnriDL3h1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jMzZjNGEtODhhZS00YmQyLWJmMzct
OWQ1ZTYzNGFhZjlmLzEvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9jMzZjNGEtODhhZS00YmQyLWJmMzctOWQ1ZTYzNGFhZjlm
LzEvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1WLHm+L
T7aoAWTR919icMlliZoByBjhl0AEsQT+08ydbTSz1SRYC6dL73QL3cBbq0ajl0N/
cK4VszAz+z5Qb1g55VOPrnZ4elupGAp9MwGox9s7AFMsSkSku6KwGVgNNtHTbToi
G7s1SzQUHMhvRR0wVkUW4sv47J4rSR11mMOajAkAaYb7QjZry3OBJedct+d7/YLR
fULm0eUlCO2scdhARJQi5a9do+IIrjW5lAoXeMAL2jRVeFyl7yJ3NEUJlO0xbhRG
DBy+HCskhOIr8e6jpdqXso1td6Rc0hh9mtwYFeF7SakAGgq3cjyOwi6rwu5c+oIO
vnBFbOYb1p3ESw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:09:50 2025 by rpki-client