
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier: HA/a60LUHeXfLHkyko4rhtG1xn/yPqPP/l3sO9tY+7Q=
Subject key identifier: 3D:C3:66:E0:A7:74:8C:77:76:6A:55:D7:6E:D8:87:FD:48:18:5C:CA
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial: 0196D3637255DB67CD3999B3927831726193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number: 0AB4
Signing time: Thu 15 May 2025 10:00:32 +0000
Manifest this update: Thu 15 May 2025 10:00:32 +0000
Manifest next update: Fri 16 May 2025 10:00:32 +0000
Files and hashes: 1: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: OcGP0pYWkL/ODJEpmGW3dcSwXUK05dSaVP1J5jERU/o=)
2: yZvcP-Ps4yo6pgIgUKI5eTzNp2U.roa (hash: MDG4N8hqJwJQSXIs3A2EDMOqJcbMoF8xcYaXQrrz3Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:63:72:55:db:67:cd:39:99:b3:92:78:31:72:61:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Validity
Not Before: May 15 10:00:32 2025 GMT
Not After : May 16 10:00:32 2025 GMT
Subject: CN=3dc366e0a7748c77766a55d76ed887fd48185cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:5a:3c:9d:9d:79:ed:dd:6f:32:0b:c5:a3:
40:77:7c:a4:de:f7:77:2d:26:5d:aa:7f:27:be:e7:
68:7e:d8:55:7b:4f:ca:53:f1:d4:d8:63:db:f9:29:
ac:64:b5:05:36:55:26:75:58:77:29:8d:86:e7:27:
48:00:38:14:e1:21:d4:b7:e2:92:33:a7:67:b4:9f:
47:af:e2:da:58:7f:33:64:03:e4:68:cf:9d:c4:98:
b7:ca:86:a1:65:fd:36:4d:73:ba:0b:d5:9b:49:ff:
ba:c3:2f:bd:c9:a6:8d:af:83:07:ac:92:a4:b4:2a:
cf:00:98:9b:d7:6c:fb:36:2e:cc:e2:0d:60:d9:f0:
0b:44:e4:34:a8:34:ca:56:12:d8:df:9a:0e:2e:ae:
f6:f9:20:f8:e3:c5:ee:80:6e:7c:01:82:c5:33:6d:
d9:2d:c9:c2:c9:27:43:9a:9f:2c:36:d6:24:47:ad:
11:8d:51:bc:25:e3:ef:9a:ea:20:6d:42:71:3d:9c:
2e:11:d9:da:70:e2:a8:ee:18:38:bd:17:87:83:52:
99:d0:ae:53:a1:e8:a5:09:02:98:92:10:9a:c9:af:
da:f8:d4:dc:5a:fa:d4:34:7e:4c:36:d2:0a:29:57:
c0:40:70:82:8a:e7:3e:0c:44:d4:2f:06:cd:ad:69:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C3:66:E0:A7:74:8C:77:76:6A:55:D7:6E:D8:87:FD:48:18:5C:CA
X509v3 Authority Key Identifier:
keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6b:48:54:0f:5c:f6:3c:79:29:02:3e:f7:6d:41:db:f7:31:
cb:15:2a:23:f6:80:b3:ec:63:36:bd:68:92:33:fe:6c:a9:bd:
26:d3:88:ca:ca:22:b4:7d:54:45:ff:b2:c7:19:7f:4d:a1:d4:
cf:6e:80:9d:0f:ae:21:7e:16:4f:9a:09:66:e8:d5:e5:83:a0:
3f:0a:e2:a3:e9:da:4a:1a:99:c5:5e:24:66:3a:bc:3b:f5:d8:
06:bd:eb:be:3b:ef:be:a3:12:09:ab:9e:4b:ee:60:90:0c:fe:
16:d8:80:2f:13:c2:e6:ef:fc:79:0b:ec:78:c2:ec:67:98:da:
83:c9:32:40:a0:07:ee:5a:98:6b:63:18:76:b2:b7:5a:73:a6:
6c:cd:98:86:b5:8f:68:7d:bc:9e:3a:33:63:f8:01:12:67:b9:
5f:4e:db:38:ff:97:59:d4:b1:80:38:cd:e3:c2:4d:4f:75:cb:
fe:2f:b6:f3:08:ae:19:45:66:57:fc:0b:7c:77:dc:86:5c:d7:
18:98:b0:37:8e:3b:c9:ee:9d:b0:46:47:20:4b:e9:95:0b:a5:
4c:83:e6:29:14:e1:32:c6:a9:ab:a7:70:08:11:4b:6b:91:bf:
dd:9c:99:22:46:15:2f:20:17:0b:34:3b:1f:a9:f4:4a:a4:bb:
22:f0:98:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbTY3JV22fNOZmzkngxcmGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNWQ0M2RjZGUxMGI5MjMxNzlkNWIxYmQ3NGVhNDNhY2My
MjEwOTMwHhcNMjUwNTE1MTAwMDMyWhcNMjUwNTE2MTAwMDMyWjAzMTEwLwYDVQQD
EygzZGMzNjZlMGE3NzQ4Yzc3NzY2YTU1ZDc2ZWQ4ODdmZDQ4MTg1Y2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujZaPJ2dee3dbzILxaNAd3yk3vd3
LSZdqn8nvudofthVe0/KU/HU2GPb+SmsZLUFNlUmdVh3KY2G5ydIADgU4SHUt+KS
M6dntJ9Hr+LaWH8zZAPkaM+dxJi3yoahZf02TXO6C9WbSf+6wy+9yaaNr4MHrJKk
tCrPAJib12z7Ni7M4g1g2fALROQ0qDTKVhLY35oOLq72+SD448XugG58AYLFM23Z
LcnCySdDmp8sNtYkR60RjVG8JePvmuogbUJxPZwuEdnacOKo7hg4vReHg1KZ0K5T
oeilCQKYkhCaya/a+NTcWvrUNH5MNtIKKVfAQHCCiuc+DETULwbNrWmkXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3DZuCndIx3dmpV127Yh/1IGFzKMB8GA1UdIwQY
MBaAFMJdQ9zeELkjF51bG9dOpDrMIhCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NGU0YmItOWJmNS00NzhiLTg1YTEt
NjQ5MzExMTM5ODgzLzEvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NGU0YmItOWJmNS00NzhiLTg1YTEtNjQ5MzExMTM5ODgz
LzEvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGtIVA9c
9jx5KQI+921B2/cxyxUqI/aAs+xjNr1okjP+bKm9JtOIysoitH1URf+yxxl/TaHU
z26AnQ+uIX4WT5oJZujV5YOgPwrio+naShqZxV4kZjq8O/XYBr3rvjvvvqMSCaue
S+5gkAz+FtiALxPC5u/8eQvseMLsZ5jag8kyQKAH7lqYa2MYdrK3WnOmbM2YhrWP
aH28njozY/gBEme5X07bOP+XWdSxgDjN48JNT3XL/i+28wiuGUVmV/wLfHfchlzX
GJiwN447ye6dsEZHIEvplQulTIPmKRThMsapq6dwCBFLa5G/3ZyZIkYVLyAXCzQ7
H6n0SqS7IvCYSA==
-----END CERTIFICATE-----
Generated at Thu May 15 14:37:02 2025 by rpki-client