Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
File: wwvzI77VsMENPzevDrNjrafKxKs.mft (raw, json)
Hash identifier: P6qhiEKJj8KKt6oAKnq7RSCeLPKqGKBpijvp9NgozdI=
Subject key identifier: A0:50:6B:77:C2:84:6C:EE:2B:5A:6B:44:40:B5:27:9C:EA:0C:0D:A1
Authority key identifier: C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB
Certificate issuer: /CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
Certificate serial: 0197B6A10020D33B087103C34FE88C78E145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
Manifest number: 08F6
Signing time: Sat 28 Jun 2025 13:01:33 +0000
Manifest this update: Sat 28 Jun 2025 13:01:33 +0000
Manifest next update: Sun 29 Jun 2025 13:01:33 +0000
Files and hashes: 1: wwvzI77VsMENPzevDrNjrafKxKs.crl (hash: moL/b5uacU7MPmWKyr5gX8CUIe1805huXSQIlkPX/j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:00:20:d3:3b:08:71:03:c3:4f:e8:8c:78:e1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
Validity
Not Before: Jun 28 13:01:33 2025 GMT
Not After : Jun 29 13:01:33 2025 GMT
Subject: CN=a0506b77c2846cee2b5a6b4440b5279cea0c0da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:db:01:af:ea:89:25:f5:f5:8b:90:b0:17:
fd:77:34:9d:fa:52:7e:67:4b:b2:bf:32:14:3d:31:
8c:eb:0a:24:cf:39:34:de:74:94:b3:8f:9f:33:d2:
05:99:11:39:c0:65:a4:20:74:72:54:06:f8:6f:a6:
a4:14:71:29:c0:88:fa:7e:d3:1f:04:60:8a:d1:cf:
ab:c6:a6:91:7b:09:e5:bd:f9:e1:9a:f1:e5:6b:26:
9f:26:db:1d:55:74:0b:1d:b7:92:9d:8a:5a:6b:de:
93:18:5f:55:72:83:97:c2:0f:03:24:51:d4:af:07:
19:fd:60:1b:6d:80:e9:88:9f:8d:d7:83:ed:78:a7:
7f:1c:b9:2a:ac:13:dd:bf:a3:dd:a8:fd:f3:26:73:
c0:03:1c:a9:61:bc:be:e3:33:91:d3:c0:ba:41:b2:
a2:df:76:46:46:17:2a:17:eb:ca:de:11:c4:2c:6f:
57:49:c6:3f:46:4d:e7:c7:f0:23:0f:52:2e:aa:ab:
6a:88:7b:2e:e0:43:db:c1:f3:0e:95:c7:a5:5b:76:
4e:ea:bd:5f:c9:6a:28:96:4c:76:b9:7e:d2:85:a0:
7b:29:c6:64:18:d6:90:3f:f0:c5:9b:ba:32:f0:9f:
f4:90:18:5a:df:44:18:2a:93:c0:5e:62:62:23:9f:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:50:6B:77:C2:84:6C:EE:2B:5A:6B:44:40:B5:27:9C:EA:0C:0D:A1
X509v3 Authority Key Identifier:
keyid:C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:08:04:0c:60:b0:45:0a:4c:18:d2:1d:ab:f8:d6:df:cd:87:
13:38:39:b4:37:16:48:55:ca:83:b7:ed:61:f6:f7:66:f3:74:
99:fc:30:65:ae:d8:c7:c5:b6:93:a5:3c:07:7b:72:60:2e:dd:
9e:74:3d:66:fd:fc:b7:be:af:87:9d:e1:07:66:62:3f:91:ef:
18:da:b9:71:64:b6:89:60:2f:fc:52:b4:f4:6d:99:dd:32:e3:
33:6e:6c:2e:87:cd:fd:2a:af:52:d3:26:69:15:1c:9c:05:40:
5e:07:d0:3f:67:45:6e:2f:98:94:b0:8a:8a:c8:34:d8:f9:16:
26:11:66:01:5a:6c:02:4f:6c:d0:4c:a9:08:86:cb:47:ca:d2:
81:5a:1f:7b:0d:5b:17:4d:93:6d:be:82:2c:e0:84:77:ce:da:
9a:b1:f4:78:95:b8:c4:63:64:17:36:1a:4e:2b:ab:dd:92:19:
32:b7:2d:9d:d2:3e:2b:af:29:48:9a:0c:33:84:c3:d9:10:31:
3b:c8:a1:5f:75:39:48:0e:28:ee:c1:41:31:62:d5:87:b9:05:
49:8c:0c:a8:42:3b:d9:32:dd:24:ed:6b:9b:39:29:d6:58:8f:
33:92:3a:9a:2c:11:68:ba:93:7c:9a:e3:26:80:5a:46:74:08:
1b:40:8a:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oQAg0zsIcQPDT+iMeOFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMGJmMzIzYmVkNWIwYzEwZDNmMzdhZjBlYjM2M2FkYTdj
YWM0YWIwHhcNMjUwNjI4MTMwMTMzWhcNMjUwNjI5MTMwMTMzWjAzMTEwLwYDVQQD
EyhhMDUwNmI3N2MyODQ2Y2VlMmI1YTZiNDQ0MGI1Mjc5Y2VhMGMwZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4nbAa/qiSX19YuQsBf9dzSd+lJ+
Z0uyvzIUPTGM6wokzzk03nSUs4+fM9IFmRE5wGWkIHRyVAb4b6akFHEpwIj6ftMf
BGCK0c+rxqaRewnlvfnhmvHlayafJtsdVXQLHbeSnYpaa96TGF9VcoOXwg8DJFHU
rwcZ/WAbbYDpiJ+N14PteKd/HLkqrBPdv6PdqP3zJnPAAxypYby+4zOR08C6QbKi
33ZGRhcqF+vK3hHELG9XScY/Rk3nx/AjD1IuqqtqiHsu4EPbwfMOlcelW3ZO6r1f
yWoolkx2uX7ShaB7KcZkGNaQP/DFm7oy8J/0kBha30QYKpPAXmJiI59niQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBQa3fChGzuK1prREC1J5zqDA2hMB8GA1UdIwQY
MBaAFMML8yO+1bDBDT83rw6zY62nysSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3d2ekk3N1ZzTUVOUHpldkRyTmpyYWZLeEtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zZjA1NmEtMTI0ZS00ZjEyLWIzZGIt
ZmNhMzFmNjQ1YmY1LzEvd3d2ekk3N1ZzTUVOUHpldkRyTmpyYWZLeEtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8zZjA1NmEtMTI0ZS00ZjEyLWIzZGItZmNhMzFmNjQ1YmY1
LzEvd3d2ekk3N1ZzTUVOUHpldkRyTmpyYWZLeEtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewgEDGCw
RQpMGNIdq/jW382HEzg5tDcWSFXKg7ftYfb3ZvN0mfwwZa7Yx8W2k6U8B3tyYC7d
nnQ9Zv38t76vh53hB2ZiP5HvGNq5cWS2iWAv/FK09G2Z3TLjM25sLofN/SqvUtMm
aRUcnAVAXgfQP2dFbi+YlLCKisg02PkWJhFmAVpsAk9s0EypCIbLR8rSgVofew1b
F02Tbb6CLOCEd87amrH0eJW4xGNkFzYaTiur3ZIZMrctndI+K68pSJoMM4TD2RAx
O8ihX3U5SA4o7sFBMWLVh7kFSYwMqEI72TLdJO1rmzkp1liPM5I6miwRaLqTfJrj
JoBaRnQIG0CKbA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:55 2025 by rpki-client