Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
File: wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json)
Hash identifier: lV19mEslpQ3rp84WrI/BiBiPyuxRMZcU7C83Y7XgVWU=
Subject key identifier: 60:D0:BE:16:1B:BC:5C:49:67:C6:42:23:B2:94:CD:A4:97:9A:A2:FC
Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
Certificate issuer: /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Certificate serial: 0198D7062186B44A34892CE62D8ED1121675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
Manifest number: 0FA1
Signing time: Sat 23 Aug 2025 13:02:39 +0000
Manifest this update: Sat 23 Aug 2025 13:02:39 +0000
Manifest next update: Sun 24 Aug 2025 13:02:39 +0000
Files and hashes: 1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: tWpLy5dW+y9E3m7zifs3Td9LVq13r6iqodsOCaOm0iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:21:86:b4:4a:34:89:2c:e6:2d:8e:d1:12:16:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Validity
Not Before: Aug 23 13:02:39 2025 GMT
Not After : Aug 24 13:02:39 2025 GMT
Subject: CN=60d0be161bbc5c4967c64223b294cda4979aa2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:12:11:d9:90:34:88:3a:75:25:5e:ec:b2:
08:86:a1:13:e2:ad:6e:60:0f:70:c4:15:fe:c7:30:
a0:2d:f2:b3:b1:bf:a9:33:b2:b0:2b:bb:7b:ef:0a:
20:41:83:df:d2:ea:3b:36:c9:51:10:b1:ea:08:74:
7f:97:73:bd:60:58:28:32:56:e4:6c:cb:85:30:78:
3d:e8:fd:17:02:b7:39:0d:db:df:83:f2:d7:54:b7:
b2:47:ea:e0:98:06:da:8a:88:a0:0b:1b:59:0f:5f:
2c:7f:9f:7c:ed:8e:6d:fb:27:72:df:e8:dd:1c:d5:
47:80:8e:45:82:ab:88:c0:48:6e:39:bd:4d:fe:a0:
a2:f5:f2:08:01:87:82:b4:fa:0e:78:74:1b:a7:00:
07:51:89:cc:ad:64:bc:20:0d:a0:58:b7:77:c7:e5:
27:de:0c:d0:0b:68:11:ac:27:b5:4a:5e:8a:e2:5e:
05:ab:5d:16:dc:0c:67:97:9f:d7:53:ec:b3:32:e7:
81:ec:31:fa:7c:3f:5e:64:ec:3f:b1:26:ee:b9:00:
10:da:15:0c:e7:42:ff:62:91:1a:e4:6c:10:0f:f8:
24:5d:bf:08:e1:42:80:29:39:18:41:04:b1:1d:f2:
45:af:78:0b:4c:b9:f9:4a:f7:2b:f5:62:9e:2a:65:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D0:BE:16:1B:BC:5C:49:67:C6:42:23:B2:94:CD:A4:97:9A:A2:FC
X509v3 Authority Key Identifier:
keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2a:e7:2e:01:94:7c:70:34:fe:b5:59:9a:80:1c:18:d9:17:
c9:46:01:75:1c:09:01:7f:f7:b3:c4:d5:56:3f:8f:ae:56:a0:
80:2e:53:89:c4:88:e5:ca:3b:b0:9a:1f:7a:55:75:83:53:d2:
10:08:5f:56:0f:d1:a2:82:1e:f1:fb:f0:2b:49:54:15:cb:fc:
d7:bc:f8:37:ae:b8:30:16:9e:c5:e7:a5:51:b4:8a:85:43:87:
b9:56:d5:a5:6c:64:c9:e5:e3:64:ef:33:dc:66:2c:81:60:15:
5b:75:86:02:90:56:0a:87:8b:37:a5:9d:6b:5c:9d:b7:25:87:
46:73:12:24:cb:e4:58:9d:61:44:fc:3c:73:a1:54:82:89:c1:
de:68:ee:b7:a7:32:33:80:c3:3e:73:12:6f:e1:96:50:69:bb:
f3:97:6d:c7:2b:ec:60:ce:92:93:53:97:ef:c1:35:22:7f:e5:
b1:fa:71:c7:d5:dd:2c:b3:aa:5f:4d:e3:af:a6:81:fc:4e:b0:
52:de:06:e8:44:43:a5:fa:80:a4:aa:2c:49:a3:b4:89:57:38:
1e:ca:ac:a1:59:00:a6:f0:ec:f6:fc:cc:13:61:88:c7:24:6d:
38:87:c8:82:32:1f:d5:c9:53:88:a1:d9:37:02:22:8a:6b:21:
c5:1f:0d:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBiGGtEo0iSzmLY7REhZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzdhM2RiNGEzZDJkYWZiZTE4NmFhNjg1ZjQ3MzZlYTdk
MDhjMzgwHhcNMjUwODIzMTMwMjM5WhcNMjUwODI0MTMwMjM5WjAzMTEwLwYDVQQD
Eyg2MGQwYmUxNjFiYmM1YzQ5NjdjNjQyMjNiMjk0Y2RhNDk3OWFhMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIwSEdmQNIg6dSVe7LIIhqET4q1u
YA9wxBX+xzCgLfKzsb+pM7KwK7t77wogQYPf0uo7NslRELHqCHR/l3O9YFgoMlbk
bMuFMHg96P0XArc5Ddvfg/LXVLeyR+rgmAbaioigCxtZD18sf5987Y5t+ydy3+jd
HNVHgI5FgquIwEhuOb1N/qCi9fIIAYeCtPoOeHQbpwAHUYnMrWS8IA2gWLd3x+Un
3gzQC2gRrCe1Sl6K4l4Fq10W3Axnl5/XU+yzMueB7DH6fD9eZOw/sSbuuQAQ2hUM
50L/YpEa5GwQD/gkXb8I4UKAKTkYQQSxHfJFr3gLTLn5Svcr9WKeKmULjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDQvhYbvFxJZ8ZCI7KUzaSXmqL8MB8GA1UdIwQY
MBaAFMLHo9tKPS2vvhhqpoX0c26n0Iw4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82NTJiZWYtNmY0ZS00OTk3LWJiM2Et
NGM5ZTQ5MjM5NjI0LzEvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82NTJiZWYtNmY0ZS00OTk3LWJiM2EtNGM5ZTQ5MjM5NjI0
LzEvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALirnLgGU
fHA0/rVZmoAcGNkXyUYBdRwJAX/3s8TVVj+PrlaggC5TicSI5co7sJofelV1g1PS
EAhfVg/RooIe8fvwK0lUFcv817z4N664MBaexeelUbSKhUOHuVbVpWxkyeXjZO8z
3GYsgWAVW3WGApBWCoeLN6Wda1ydtyWHRnMSJMvkWJ1hRPw8c6FUgonB3mjut6cy
M4DDPnMSb+GWUGm785dtxyvsYM6Sk1OX78E1In/lsfpxx9XdLLOqX03jr6aB/E6w
Ut4G6ERDpfqApKosSaO0iVc4HsqsoVkApvDs9vzME2GIxyRtOIfIgjIf1clTiKHZ
NwIiimshxR8Nbg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:30:45 2025 by rpki-client