Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
File: wwOJmXRU-gA-H_yM0ui35l2T9OI.mft (raw, json)
Hash identifier: /VAb4L7iWjbef+AuExr7d9udP5QURU/naclmCZjheQg=
Subject key identifier: 96:37:27:4F:3E:DA:FF:50:E3:AE:69:28:79:39:95:0E:44:0E:30:45
Authority key identifier: C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2
Certificate issuer: /CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
Certificate serial: 0199FDA1CCB9096E71C889D025D115C50429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
Manifest number: 0AEF
Signing time: Sun 19 Oct 2025 18:01:03 +0000
Manifest this update: Sun 19 Oct 2025 18:01:03 +0000
Manifest next update: Mon 20 Oct 2025 18:01:03 +0000
Files and hashes: 1: wwOJmXRU-gA-H_yM0ui35l2T9OI.crl (hash: vEY9+AHfkyu31cp8tEiD64K6F4p9hbzrXnca0NqGyWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:cc:b9:09:6e:71:c8:89:d0:25:d1:15:c5:04:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
Validity
Not Before: Oct 19 18:01:03 2025 GMT
Not After : Oct 20 18:01:03 2025 GMT
Subject: CN=9637274f3edaff50e3ae69287939950e440e3045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:11:74:f1:82:c8:64:88:f2:9c:fb:89:25:e8:
ea:c0:cf:b7:dc:6a:cc:d1:fe:bd:30:f1:cd:2e:9c:
ad:92:95:86:1d:55:06:2b:3f:78:4b:cf:a0:d0:2f:
e2:32:c7:86:af:49:d2:ff:5a:e0:16:8a:30:77:9d:
fc:85:a1:92:39:3c:36:c6:1c:38:c0:9b:35:66:9a:
da:af:53:af:7c:db:f5:4c:6c:98:7a:58:76:61:13:
60:db:3f:45:97:55:7c:bd:72:a5:05:09:00:04:bd:
ee:58:b6:3d:6f:d7:a4:3d:5e:ce:eb:2b:83:49:dc:
f0:9c:3f:f3:96:93:7b:61:d1:b8:5e:28:5d:41:8f:
52:51:40:48:6c:04:06:95:b9:15:da:be:d5:d7:f2:
2a:15:96:b5:df:20:f3:ea:10:57:82:52:30:65:86:
d0:26:08:e2:df:89:40:7d:23:ba:b2:06:8d:9c:c0:
79:92:ee:8b:bc:41:cd:dd:0a:4d:53:00:df:3d:b2:
ac:3a:b8:a2:db:ce:d0:de:b2:fc:a5:54:92:aa:0b:
4e:dd:58:54:d3:3f:d4:09:cb:02:4d:1d:7e:e0:78:
e1:b8:c9:d4:b4:b9:d9:e8:5b:f2:78:d2:4c:e8:65:
fa:c0:f0:4c:79:47:ff:d8:f4:da:e9:69:5f:58:f9:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:27:4F:3E:DA:FF:50:E3:AE:69:28:79:39:95:0E:44:0E:30:45
X509v3 Authority Key Identifier:
keyid:C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:61:f9:e1:53:26:d0:e2:fd:4e:4b:dc:15:1e:3d:f9:65:51:
15:38:de:38:67:ef:9e:a0:52:88:0e:5f:1a:60:a4:22:f2:eb:
71:aa:69:a7:5f:e2:3c:9f:4d:3a:39:c6:24:81:b3:db:4b:e6:
99:19:cf:b2:5a:fd:c7:6a:d6:0f:95:f5:77:7f:c8:02:25:9c:
ab:6c:44:3f:17:46:7b:a5:62:7c:66:fe:fe:a8:36:a0:07:94:
e9:c6:d6:bc:9f:44:33:3a:09:3e:e8:51:9e:ff:c1:b4:ab:4f:
51:7d:0b:f8:5e:37:e8:91:66:64:70:83:2d:4c:f5:11:bd:50:
3c:5c:04:67:28:c5:e4:19:e7:6b:3f:76:b6:9d:95:40:34:ee:
b7:fe:e1:2e:63:c4:ef:0f:63:cd:c1:85:88:5c:42:2d:62:f9:
4f:99:df:7c:5c:c2:0b:f8:57:eb:bd:15:f7:79:ed:4e:91:9c:
b8:68:45:9b:2f:ec:5f:2e:ab:0b:04:8d:1c:61:bf:c6:6a:69:
de:eb:31:df:f0:58:b7:6f:6a:80:43:08:ef:b1:b9:71:b3:5a:
bf:2a:7e:63:ff:2f:21:3e:c3:d6:3a:89:aa:53:60:80:04:0b:
bd:f2:42:cb:16:08:81:68:9c:0f:50:e0:7d:e6:c6:6c:c5:4c:
f1:92:81:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ocy5CW5xyInQJdEVxQQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMDM4OTk5NzQ1NGZhMDAzZTFmZmM4Y2QyZThiN2U2NWQ5
M2Y0ZTIwHhcNMjUxMDE5MTgwMTAzWhcNMjUxMDIwMTgwMTAzWjAzMTEwLwYDVQQD
Eyg5NjM3Mjc0ZjNlZGFmZjUwZTNhZTY5Mjg3OTM5OTUwZTQ0MGUzMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhF08YLIZIjynPuJJejqwM+33GrM
0f69MPHNLpytkpWGHVUGKz94S8+g0C/iMseGr0nS/1rgFoowd538haGSOTw2xhw4
wJs1Zprar1OvfNv1TGyYelh2YRNg2z9Fl1V8vXKlBQkABL3uWLY9b9ekPV7O6yuD
SdzwnD/zlpN7YdG4XihdQY9SUUBIbAQGlbkV2r7V1/IqFZa13yDz6hBXglIwZYbQ
Jgji34lAfSO6sgaNnMB5ku6LvEHN3QpNUwDfPbKsOrii287Q3rL8pVSSqgtO3VhU
0z/UCcsCTR1+4HjhuMnUtLnZ6FvyeNJM6GX6wPBMeUf/2PTa6WlfWPmMpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJY3J08+2v9Q465pKHk5lQ5EDjBFMB8GA1UdIwQY
MBaAFMMDiZl0VPoAPh/8jNLot+Zdk/TiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3dPSm1YUlUtZ0EtSF95TTB1aTM1bDJUOU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82M2RiOTMtNjA3Ny00OTUzLWE2ZDEt
M2JmYTU4M2U3N2RiLzEvd3dPSm1YUlUtZ0EtSF95TTB1aTM1bDJUOU9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82M2RiOTMtNjA3Ny00OTUzLWE2ZDEtM2JmYTU4M2U3N2Ri
LzEvd3dPSm1YUlUtZ0EtSF95TTB1aTM1bDJUOU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvmH54VMm
0OL9TkvcFR49+WVRFTjeOGfvnqBSiA5fGmCkIvLrcappp1/iPJ9NOjnGJIGz20vm
mRnPslr9x2rWD5X1d3/IAiWcq2xEPxdGe6VifGb+/qg2oAeU6cbWvJ9EMzoJPuhR
nv/BtKtPUX0L+F436JFmZHCDLUz1Eb1QPFwEZyjF5Bnnaz92tp2VQDTut/7hLmPE
7w9jzcGFiFxCLWL5T5nffFzCC/hX670V93ntTpGcuGhFmy/sXy6rCwSNHGG/xmpp
3usx3/BYt29qgEMI77G5cbNavyp+Y/8vIT7D1jqJqlNggAQLvfJCyxYIgWicD1Dg
febGbMVM8ZKBpQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:06 2025 by rpki-client