Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
File: Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft (raw, json)
Hash identifier: z72qZTzMNNFR38TVXcrCC3XxULocQmWmu8wAqkOAr28=
Subject key identifier: E8:88:EE:80:D9:7E:A0:CF:05:BF:38:59:79:5F:A1:73:F3:DD:2B:51
Authority key identifier: 5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC
Certificate issuer: /CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
Certificate serial: 0197B6A0529EBF10E04F8A145D154010D650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
Manifest number: 13AC
Signing time: Sat 28 Jun 2025 13:00:49 +0000
Manifest this update: Sat 28 Jun 2025 13:00:49 +0000
Manifest next update: Sun 29 Jun 2025 13:00:49 +0000
Files and hashes: 1: Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl (hash: jzcZDeCHBPi8Q3zGrEo3727ymoNZAFXKu2Zm+OdPVyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:52:9e:bf:10:e0:4f:8a:14:5d:15:40:10:d6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
Validity
Not Before: Jun 28 13:00:49 2025 GMT
Not After : Jun 29 13:00:49 2025 GMT
Subject: CN=e888ee80d97ea0cf05bf3859795fa173f3dd2b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:aa:79:4b:90:e2:44:35:db:b6:61:0b:b5:
6c:90:bc:89:23:c4:28:fc:4f:8d:db:f8:f0:6f:90:
0f:38:76:bc:6a:78:be:ca:d6:1e:6b:a3:c4:91:07:
1a:b4:7c:c6:ad:28:54:76:6c:39:8d:74:d2:78:68:
a4:9b:ae:09:44:3b:17:7e:d5:fc:e7:cf:63:87:fe:
64:ae:04:c4:16:d7:5c:e6:05:ca:9c:a3:b6:ee:44:
21:57:5c:a2:84:60:45:b8:81:e6:43:34:f5:8a:93:
41:1c:41:e5:c4:e2:43:c1:4b:5b:82:db:b3:6e:b1:
6c:d6:69:a7:9e:54:1c:a9:ea:a6:c7:c6:6a:7f:7f:
a8:c0:01:59:6d:84:9b:68:63:80:14:08:62:2c:01:
8a:e0:a0:f3:80:ea:82:b6:83:e4:ba:a1:e0:08:53:
68:69:da:92:a7:2a:f8:71:6e:ed:34:b4:93:86:fe:
fc:9c:7d:80:c2:99:52:b9:a0:70:69:57:64:6b:32:
67:f1:33:ce:62:c1:1d:b1:f3:62:a7:f0:a0:9a:2d:
6c:ab:bf:5d:ac:c6:45:28:d6:2a:e2:aa:7c:10:a4:
36:d7:67:5f:40:ec:5b:00:46:03:13:b8:79:65:ff:
d7:3f:d0:a6:83:1e:71:d4:68:78:df:66:db:75:50:
ea:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:88:EE:80:D9:7E:A0:CF:05:BF:38:59:79:5F:A1:73:F3:DD:2B:51
X509v3 Authority Key Identifier:
keyid:5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e8:f0:53:9d:be:82:ce:93:b1:10:e9:99:f9:a0:b0:06:0a:
a6:52:1f:46:1b:e7:f5:93:cd:e9:5a:ae:31:e5:21:35:ac:b1:
53:ff:3d:64:05:32:94:26:98:db:af:0d:f6:78:13:43:0b:62:
3f:4c:63:70:5c:cf:74:74:e5:0a:2a:66:bd:87:aa:04:60:8d:
49:8c:f1:00:6c:8f:55:d6:01:d8:9a:a3:d5:05:7a:31:38:09:
3b:12:54:45:33:13:75:17:3e:5c:9e:de:35:0b:2b:a1:80:55:
93:cb:ff:30:ac:29:97:43:fe:e5:50:79:66:8e:74:a7:2a:0c:
8c:49:f9:63:a9:3c:71:87:40:b4:ac:56:3f:8f:c3:bb:82:96:
c0:05:88:41:28:f4:47:a3:a6:83:30:b7:0c:2f:aa:59:7f:2f:
b4:31:5e:b5:53:36:83:c6:4e:9d:66:1c:51:2a:d6:32:26:53:
71:f9:87:b6:70:c0:2f:39:19:77:de:d7:d9:e0:c6:c2:c6:3d:
01:1b:e5:07:55:8e:c3:d3:e9:a2:bf:bc:1c:df:9a:3f:6f:a5:
0f:54:13:05:6b:db:ad:1c:fa:d2:02:01:ae:b3:d4:82:c2:9c:
fc:8d:10:d8:ae:bd:3b:0b:18:86:1d:5f:d2:f3:0a:cc:43:76:
16:cb:81:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oFKevxDgT4oUXRVAENZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMWQ1N2UwNjBkMTc0NWRiYjkyMzg5MTQ3ZjAxZjYwNGVj
ZmJhYWMwHhcNMjUwNjI4MTMwMDQ5WhcNMjUwNjI5MTMwMDQ5WjAzMTEwLwYDVQQD
EyhlODg4ZWU4MGQ5N2VhMGNmMDViZjM4NTk3OTVmYTE3M2YzZGQyYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQKqeUuQ4kQ127ZhC7VskLyJI8Qo
/E+N2/jwb5APOHa8ani+ytYea6PEkQcatHzGrShUdmw5jXTSeGikm64JRDsXftX8
589jh/5krgTEFtdc5gXKnKO27kQhV1yihGBFuIHmQzT1ipNBHEHlxOJDwUtbgtuz
brFs1mmnnlQcqeqmx8Zqf3+owAFZbYSbaGOAFAhiLAGK4KDzgOqCtoPkuqHgCFNo
adqSpyr4cW7tNLSThv78nH2AwplSuaBwaVdkazJn8TPOYsEdsfNip/Cgmi1sq79d
rMZFKNYq4qp8EKQ212dfQOxbAEYDE7h5Zf/XP9Cmgx5x1Gh432bbdVDqyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiI7oDZfqDPBb84WXlfoXPz3StRMB8GA1UdIwQY
MBaAFFodV+Bg0XRdu5I4kUfwH2BOz7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2gxWDRHRFJkRjI3a2ppUlJfQWZZRTdQdXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hNDZhYmUtMWZiNy00MzRhLTlmMjIt
YmViYTg1ZTdiMjk1LzEvV2gxWDRHRFJkRjI3a2ppUlJfQWZZRTdQdXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hNDZhYmUtMWZiNy00MzRhLTlmMjItYmViYTg1ZTdiMjk1
LzEvV2gxWDRHRFJkRjI3a2ppUlJfQWZZRTdQdXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOjwU52+
gs6TsRDpmfmgsAYKplIfRhvn9ZPN6VquMeUhNayxU/89ZAUylCaY268N9ngTQwti
P0xjcFzPdHTlCipmvYeqBGCNSYzxAGyPVdYB2Jqj1QV6MTgJOxJURTMTdRc+XJ7e
NQsroYBVk8v/MKwpl0P+5VB5Zo50pyoMjEn5Y6k8cYdAtKxWP4/Du4KWwAWIQSj0
R6OmgzC3DC+qWX8vtDFetVM2g8ZOnWYcUSrWMiZTcfmHtnDALzkZd97X2eDGwsY9
ARvlB1WOw9Ppor+8HN+aP2+lD1QTBWvbrRz60gIBrrPUgsKc/I0Q2K69OwsYhh1f
0vMKzEN2FsuBTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:29 2025 by rpki-client