Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
File: ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json)
Hash identifier: KpYdTcBsbggsMO7Iu9yq6FmYyBSn1mg7VxOHf7jaM5k=
Subject key identifier: BD:B5:EB:86:E9:45:82:B3:5F:D3:15:CA:FA:9E:89:A9:9A:E0:7F:12
Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
Certificate issuer: /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Certificate serial: 0198D4A814AC9EBE269973004C9D548B9BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
Manifest number: 01CA
Signing time: Sat 23 Aug 2025 02:00:41 +0000
Manifest this update: Sat 23 Aug 2025 02:00:41 +0000
Manifest next update: Sun 24 Aug 2025 02:00:41 +0000
Files and hashes: 1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: vOl7Zoxc8ZIotornoB72ZSwwmWALJP2zWzsByg8eDX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:14:ac:9e:be:26:99:73:00:4c:9d:54:8b:9b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Validity
Not Before: Aug 23 02:00:41 2025 GMT
Not After : Aug 24 02:00:41 2025 GMT
Subject: CN=bdb5eb86e94582b35fd315cafa9e89a99ae07f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:c2:62:57:9f:6a:45:a2:9e:7f:fc:7b:1a:
36:2c:2e:f1:c2:c9:d4:82:c6:ca:fc:8f:36:9f:35:
93:7a:3f:96:ee:27:89:66:55:e3:30:dd:83:fc:00:
7c:a6:6d:4b:07:96:c5:a1:30:5e:81:4b:44:e4:54:
1c:63:a0:17:ea:a3:82:f0:7b:32:36:79:4f:a1:d0:
c5:11:66:fe:3f:7a:5d:1f:2c:5c:bb:a8:70:82:1b:
f7:9a:94:ab:d0:2f:e3:88:70:ca:41:8b:a2:52:04:
fd:ad:07:ad:45:53:c3:3a:39:37:f4:51:2d:78:f3:
eb:b0:39:f7:cd:25:b7:d1:10:61:57:9f:de:3d:8d:
c8:a3:cc:76:be:d9:47:c4:33:12:29:fe:bd:33:9d:
14:70:09:96:4c:da:8f:d5:36:92:f6:53:ae:82:6a:
53:32:72:ea:4d:99:31:1a:59:9d:f9:29:0f:d3:4d:
61:7a:d7:e1:a9:7b:b7:b8:e9:0b:1f:f2:9a:3a:7a:
af:07:a2:4e:51:56:de:0a:c9:82:40:9e:ac:18:1f:
db:dc:c6:98:40:3c:78:17:97:1e:28:a1:4f:7e:9f:
3f:15:1b:00:b9:4c:83:39:c0:5e:c8:b7:93:ef:ea:
c2:03:54:87:ad:a8:e8:56:14:6d:8b:1e:26:10:ad:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B5:EB:86:E9:45:82:B3:5F:D3:15:CA:FA:9E:89:A9:9A:E0:7F:12
X509v3 Authority Key Identifier:
keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:57:ea:90:de:92:23:af:60:11:dd:8e:67:24:0b:89:ba:14:
e0:5b:80:01:79:47:6c:3d:a3:3a:42:51:5f:f4:cd:08:bb:d2:
0d:dc:0b:be:2c:21:b7:3e:c8:6c:29:e0:8f:1d:af:52:cc:b9:
40:d5:ed:eb:1e:94:4f:b6:88:8b:f7:8d:44:7c:c5:62:28:63:
69:54:4d:c4:b3:07:d3:4c:d6:24:de:58:dd:e9:0a:59:4a:b8:
f1:90:a2:bf:1e:d7:59:70:f5:f7:19:c8:02:5b:38:5b:2b:53:
9c:68:63:b8:86:a0:b7:59:db:24:5b:3c:9c:e4:47:66:f5:7a:
1c:0e:d4:bb:68:ca:5d:a6:cf:af:21:be:23:06:93:97:70:9d:
92:5a:9a:64:30:4e:84:76:cd:51:58:9f:87:ef:eb:56:0e:56:
d9:e6:23:73:c7:c5:9f:dd:a3:68:20:ce:7d:4a:35:9e:8a:39:
08:f6:a2:72:4d:6e:0e:47:35:1e:e5:69:4b:8b:0f:e6:f0:8b:
54:21:3f:e0:a6:68:4f:9f:e9:f1:59:35:1d:ed:49:09:4f:51:
ff:a7:bf:72:13:56:03:b0:33:48:f5:26:e1:0f:e8:b5:9e:17:
72:ef:ed:32:c1:5b:16:70:8f:08:0e:ec:e0:e7:ca:66:c7:77:
0b:18:3d:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqBSsnr4mmXMATJ1Ui5vjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyY2ZlOTRmZGVjMzA5YWM1NTMwNWFjOTBlN2MzZDYyOGRm
ZDQwNmEwHhcNMjUwODIzMDIwMDQxWhcNMjUwODI0MDIwMDQxWjAzMTEwLwYDVQQD
EyhiZGI1ZWI4NmU5NDU4MmIzNWZkMzE1Y2FmYTllODlhOTlhZTA3ZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxPCYlefakWinn/8exo2LC7xwsnU
gsbK/I82nzWTej+W7ieJZlXjMN2D/AB8pm1LB5bFoTBegUtE5FQcY6AX6qOC8Hsy
NnlPodDFEWb+P3pdHyxcu6hwghv3mpSr0C/jiHDKQYuiUgT9rQetRVPDOjk39FEt
ePPrsDn3zSW30RBhV5/ePY3Io8x2vtlHxDMSKf69M50UcAmWTNqP1TaS9lOugmpT
MnLqTZkxGlmd+SkP001hetfhqXu3uOkLH/KaOnqvB6JOUVbeCsmCQJ6sGB/b3MaY
QDx4F5ceKKFPfp8/FRsAuUyDOcBeyLeT7+rCA1SHrajoVhRtix4mEK094QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2164bpRYKzX9MVyvqeiama4H8SMB8GA1UdIwQY
MBaAFMLP6U/ewwmsVTBayQ58PWKN/UBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zOTkwYzItNTFiZS00Yjg3LWFmNjIt
ZTBlMDk5NjQwZWFjLzEvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zOTkwYzItNTFiZS00Yjg3LWFmNjItZTBlMDk5NjQwZWFj
LzEvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlfqkN6S
I69gEd2OZyQLiboU4FuAAXlHbD2jOkJRX/TNCLvSDdwLviwhtz7IbCngjx2vUsy5
QNXt6x6UT7aIi/eNRHzFYihjaVRNxLMH00zWJN5Y3ekKWUq48ZCivx7XWXD19xnI
Als4WytTnGhjuIagt1nbJFs8nORHZvV6HA7Uu2jKXabPryG+IwaTl3CdklqaZDBO
hHbNUVifh+/rVg5W2eYjc8fFn92jaCDOfUo1noo5CPaick1uDkc1HuVpS4sP5vCL
VCE/4KZoT5/p8Vk1He1JCU9R/6e/chNWA7AzSPUm4Q/otZ4Xcu/tMsFbFnCPCA7s
4OfKZsd3Cxg9eQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:48 2025 by rpki-client