Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
File: wrAFQRuLMhCDQsn3BZUCIGuYJME.mft (raw, json)
Hash identifier: lEXq7jH8oFCiMlgh2b7WvaGS3Jc+UK9bOhVmHGgyzdA=
Subject key identifier: FC:81:D5:98:27:A3:4F:2E:8F:DE:38:58:F5:AF:E8:B1:79:3A:D6:89
Authority key identifier: C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
Certificate issuer: /CN=c2b005411b8b32108342c9f7059502206b9824c1
Certificate serial: 0197B6D7B770699AE45DE2F1977C8931FC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 14:01:19 +0000
Manifest this update: Sat 28 Jun 2025 14:01:19 +0000
Manifest next update: Sun 29 Jun 2025 14:01:19 +0000
Files and hashes: 1: wrAFQRuLMhCDQsn3BZUCIGuYJME.crl (hash: xqnnlbMOXM6jWjdCAPB+M667HsJtVtpWHyehhtGNXhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b7:70:69:9a:e4:5d:e2:f1:97:7c:89:31:fc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b005411b8b32108342c9f7059502206b9824c1
Validity
Not Before: Jun 28 14:01:19 2025 GMT
Not After : Jun 29 14:01:19 2025 GMT
Subject: CN=fc81d59827a34f2e8fde3858f5afe8b1793ad689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:85:ec:17:96:30:75:06:5f:1f:96:7a:83:
3a:bd:32:2f:ad:5f:72:96:f3:99:44:e9:4d:7e:c2:
7b:db:3c:e3:34:13:e6:12:39:e5:b8:d4:81:30:93:
18:9c:43:ff:07:2e:d8:c3:3c:7c:35:c2:5e:f6:a9:
8b:3d:33:e9:09:87:94:28:40:46:38:f9:d5:8d:59:
a7:23:fd:93:bf:bb:30:f2:d6:bd:03:19:21:e1:63:
54:3c:1d:3d:ee:19:9d:2b:a4:d6:b2:e1:3e:e9:aa:
db:fc:fa:fc:4b:64:f5:ac:e4:b6:46:79:35:b8:02:
4a:62:74:c2:1a:51:a2:b7:c8:eb:2d:66:37:27:fa:
74:9e:ce:6c:9b:52:c2:50:94:34:c1:1d:0e:7b:9c:
e6:74:ff:55:d8:d7:2d:37:71:00:8e:45:b3:20:35:
22:00:7d:7e:46:4e:6f:a1:b3:3b:3b:2d:2a:92:e6:
d1:37:fc:12:ef:5f:8a:5c:0c:c9:6c:99:f0:c4:96:
b4:94:da:fc:10:40:29:af:71:aa:f5:62:4a:78:07:
26:78:32:b0:9e:9c:ae:a3:c2:5d:8b:a8:79:b8:23:
9a:32:a6:80:2e:79:56:68:b4:ca:50:d4:67:09:c7:
be:9f:32:fc:ef:ba:53:bb:00:cd:e0:87:6f:1b:59:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:81:D5:98:27:A3:4F:2E:8F:DE:38:58:F5:AF:E8:B1:79:3A:D6:89
X509v3 Authority Key Identifier:
keyid:C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2e:b9:ae:e0:e9:31:6b:c0:0d:39:3e:dd:b8:7b:42:da:c3:
b2:89:57:82:c8:0d:f3:cc:ed:12:ee:56:ae:60:fa:cd:ce:60:
7b:7c:91:81:54:30:26:2b:2d:34:7c:39:1a:6b:e9:3a:6c:b9:
d5:1d:69:8a:c4:98:61:c4:07:f8:8d:44:63:a6:bd:66:e1:69:
42:58:32:27:86:3f:1c:c2:bc:1c:52:7b:17:23:e1:9d:ba:0b:
c1:7a:47:cc:10:c1:18:48:08:ca:36:c2:cf:38:1a:12:1f:b3:
97:fd:34:d5:3b:0c:1d:fc:b6:1a:d2:ec:d2:2f:6d:2f:9b:8c:
21:ff:b3:52:e8:00:2a:71:91:f8:dd:ac:ce:81:86:ea:4c:5e:
e9:44:7f:12:e1:22:55:b6:40:78:a8:78:26:0f:68:22:0d:78:
fb:5f:0c:42:36:01:a4:c4:10:c3:9d:5f:3d:79:e3:76:1d:e4:
9b:fb:df:69:07:0e:2b:30:b1:dd:f7:b3:4c:28:80:a8:26:ab:
6d:04:76:0e:ef:a9:37:51:e2:1f:3a:ff:03:b4:8d:fc:68:95:
0f:62:77:f4:c7:3e:67:44:8c:23:60:bd:d6:bf:e6:14:33:b6:
59:1e:af:62:c1:f1:1a:ac:b1:20:3f:56:2a:7e:8c:cf:78:d2:
ce:96:a3:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe217dwaZrkXeLxl3yJMfxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYjAwNTQxMWI4YjMyMTA4MzQyYzlmNzA1OTUwMjIwNmI5
ODI0YzEwHhcNMjUwNjI4MTQwMTE5WhcNMjUwNjI5MTQwMTE5WjAzMTEwLwYDVQQD
EyhmYzgxZDU5ODI3YTM0ZjJlOGZkZTM4NThmNWFmZThiMTc5M2FkNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJiF7BeWMHUGXx+WeoM6vTIvrV9y
lvOZROlNfsJ72zzjNBPmEjnluNSBMJMYnEP/By7Ywzx8NcJe9qmLPTPpCYeUKEBG
OPnVjVmnI/2Tv7sw8ta9Axkh4WNUPB097hmdK6TWsuE+6arb/Pr8S2T1rOS2Rnk1
uAJKYnTCGlGit8jrLWY3J/p0ns5sm1LCUJQ0wR0Oe5zmdP9V2NctN3EAjkWzIDUi
AH1+Rk5vobM7Oy0qkubRN/wS71+KXAzJbJnwxJa0lNr8EEApr3Gq9WJKeAcmeDKw
npyuo8Jdi6h5uCOaMqaALnlWaLTKUNRnCce+nzL877pTuwDN4IdvG1m42wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyB1Zgno08uj944WPWv6LF5OtaJMB8GA1UdIwQY
MBaAFMKwBUEbizIQg0LJ9wWVAiBrmCTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3JBRlFSdUxNaENEUXNuM0JaVUNJR3VZSk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zZTUwZmYtYTU2Ni00Y2IxLWExMTAt
M2E4YWYwMjk1MWVlLzEvd3JBRlFSdUxNaENEUXNuM0JaVUNJR3VZSk1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zZTUwZmYtYTU2Ni00Y2IxLWExMTAtM2E4YWYwMjk1MWVl
LzEvd3JBRlFSdUxNaENEUXNuM0JaVUNJR3VZSk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfi65ruDp
MWvADTk+3bh7QtrDsolXgsgN88ztEu5WrmD6zc5ge3yRgVQwJistNHw5GmvpOmy5
1R1pisSYYcQH+I1EY6a9ZuFpQlgyJ4Y/HMK8HFJ7FyPhnboLwXpHzBDBGEgIyjbC
zzgaEh+zl/001TsMHfy2GtLs0i9tL5uMIf+zUugAKnGR+N2szoGG6kxe6UR/EuEi
VbZAeKh4Jg9oIg14+18MQjYBpMQQw51fPXnjdh3km/vfaQcOKzCx3fezTCiAqCar
bQR2Du+pN1HiHzr/A7SN/GiVD2J39Mc+Z0SMI2C91r/mFDO2WR6vYsHxGqyxID9W
Kn6Mz3jSzpajAw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:56 2025 by rpki-client