Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
File: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft (raw, json)
Hash identifier: fGFJgjyIrX3gVoFsgerrpAcDGT2XXUcC3R+J839jKGU=
Subject key identifier: 62:46:A9:D3:23:1A:67:BF:28:3E:5D:58:0E:32:F0:A3:23:FC:7E:70
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Certificate issuer: /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial: 0197C45C7AB48DD73A59179F2BE49B41518F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
Manifest number: 123C
Signing time: Tue 01 Jul 2025 05:01:24 +0000
Manifest this update: Tue 01 Jul 2025 05:01:24 +0000
Manifest next update: Wed 02 Jul 2025 05:01:24 +0000
Files and hashes: 1: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl (hash: vjBHOSusGjvoGMUkkufu0zGCVBnxq+d7mLOMbExubSE=)
2: q9zEIJSyiAtted-qK0IC2QOIvVc.roa (hash: Dw02XDclSknqFZSzdcVjqUMXTqYYIsr90SDwtwPQEIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5c:7a:b4:8d:d7:3a:59:17:9f:2b:e4:9b:41:51:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
Validity
Not Before: Jul 1 05:01:24 2025 GMT
Not After : Jul 2 05:01:24 2025 GMT
Subject: CN=6246a9d3231a67bf283e5d580e32f0a323fc7e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:a1:0b:8a:a1:af:a1:c2:42:59:98:8d:ed:
48:8f:46:80:ae:05:c0:dc:7a:67:37:b8:ee:21:c3:
a8:82:5c:24:8c:d7:db:fa:b4:90:5b:50:2f:35:21:
ef:72:f5:bd:fe:3b:f6:a2:b5:8a:5e:5c:39:51:48:
46:79:4a:8a:b2:ad:16:47:95:02:09:b5:75:0e:c5:
f3:26:bf:63:00:0f:9a:dd:37:b0:66:33:12:7b:f8:
41:22:1d:37:84:98:88:ea:c4:54:8e:f6:6a:fc:05:
5b:3e:31:e8:02:06:62:49:10:b9:fc:5a:cb:2a:ff:
81:bb:40:6b:44:fc:f6:58:24:fe:b3:2c:8f:ea:73:
ef:fc:53:50:70:61:94:17:f5:87:20:7c:aa:6c:e5:
38:41:eb:e1:22:00:d5:d2:e6:47:b1:94:e9:08:88:
6f:b9:3a:39:ae:c7:45:1b:8f:bb:79:8e:b3:1a:88:
c0:07:e0:ff:a2:8b:1c:5b:d1:41:e4:1e:75:54:d3:
c2:a2:c2:e4:ac:87:ff:aa:0f:47:ab:48:72:04:55:
1a:5b:89:76:df:77:85:62:6a:9f:ea:bf:49:4c:df:
71:40:b6:49:6d:06:18:aa:87:4d:f1:ab:8e:c1:b4:
64:e1:8c:9e:f9:37:2f:b0:cf:97:31:32:92:e4:9c:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:46:A9:D3:23:1A:67:BF:28:3E:5D:58:0E:32:F0:A3:23:FC:7E:70
X509v3 Authority Key Identifier:
keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:20:66:bd:a6:45:1a:97:07:9d:a3:a3:4b:52:55:a7:da:a4:
56:95:63:6c:4f:b8:ab:d4:7a:eb:85:35:7c:5c:88:2f:73:a7:
33:97:7a:2e:18:f6:54:6a:80:d0:b7:e8:93:aa:54:6d:ef:fb:
ef:36:52:98:d3:00:42:b9:cb:d8:36:2a:85:a9:8a:be:c8:f4:
da:c1:d2:52:1a:ae:50:83:78:24:14:6a:ac:7c:40:97:70:40:
22:a1:9a:fc:03:02:fb:be:ec:4c:cd:cf:89:26:15:50:92:3d:
77:83:b8:77:eb:d2:e1:18:da:e6:8a:4e:85:73:c4:aa:ab:9a:
d3:4e:28:ad:c8:9b:3e:02:eb:98:9b:82:3a:9f:d4:15:26:c1:
5c:8f:5b:a0:68:ea:a2:1f:dd:3b:b9:65:1b:7d:5b:9c:ad:f4:
a1:5c:60:a3:c7:31:9a:51:54:ba:a7:bb:2e:93:49:2a:ab:0e:
d8:9b:ea:1e:69:2b:28:d8:83:12:ad:5a:dd:2f:94:3a:ee:7b:
d2:c8:e7:11:73:be:f6:9b:83:08:82:6d:07:bd:c6:1c:03:3a:
cc:b8:00:20:18:5f:3d:b9:dd:e9:38:7d:9f:b9:26:60:38:1d:
54:1b:27:96:bf:13:5f:1f:99:53:79:ec:6a:cd:c9:ef:50:7b:
2a:f0:14:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEXHq0jdc6WRefK+SbQVGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZmQ4NjY3Y2NlOTViZTBhZTk2MDU4YzQ1NTBkNzA4ODAz
NTMxMmYwHhcNMjUwNzAxMDUwMTI0WhcNMjUwNzAyMDUwMTI0WjAzMTEwLwYDVQQD
Eyg2MjQ2YTlkMzIzMWE2N2JmMjgzZTVkNTgwZTMyZjBhMzIzZmM3ZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3WhC4qhr6HCQlmYje1Ij0aArgXA
3HpnN7juIcOoglwkjNfb+rSQW1AvNSHvcvW9/jv2orWKXlw5UUhGeUqKsq0WR5UC
CbV1DsXzJr9jAA+a3TewZjMSe/hBIh03hJiI6sRUjvZq/AVbPjHoAgZiSRC5/FrL
Kv+Bu0BrRPz2WCT+syyP6nPv/FNQcGGUF/WHIHyqbOU4QevhIgDV0uZHsZTpCIhv
uTo5rsdFG4+7eY6zGojAB+D/ooscW9FB5B51VNPCosLkrIf/qg9Hq0hyBFUaW4l2
33eFYmqf6r9JTN9xQLZJbQYYqodN8auOwbRk4Yye+TcvsM+XMTKS5JzznQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJGqdMjGme/KD5dWA4y8KMj/H5wMB8GA1UdIwQY
MBaAFFr9hmfM6VvgrpYFjEVQ1wiANTEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hYWNiMGEtY2Y2NC00ZTc1LWE5ZGYt
MjQ5YWM3NzNjMjgyLzEvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9hYWNiMGEtY2Y2NC00ZTc1LWE5ZGYtMjQ5YWM3NzNjMjgy
LzEvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriBmvaZF
GpcHnaOjS1JVp9qkVpVjbE+4q9R664U1fFyIL3OnM5d6Lhj2VGqA0Lfok6pUbe/7
7zZSmNMAQrnL2DYqhamKvsj02sHSUhquUIN4JBRqrHxAl3BAIqGa/AMC+77sTM3P
iSYVUJI9d4O4d+vS4Rja5opOhXPEqqua004orcibPgLrmJuCOp/UFSbBXI9boGjq
oh/dO7llG31bnK30oVxgo8cxmlFUuqe7LpNJKqsO2JvqHmkrKNiDEq1a3S+UOu57
0sjnEXO+9puDCIJtB73GHAM6zLgAIBhfPbnd6Th9n7kmYDgdVBsnlr8TXx+ZU3ns
as3J71B7KvAUFw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:16:27 2025 by rpki-client