Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
File: w9bWn9WH0FQXblPRknJoI2GxZzY.mft (raw, json)
Hash identifier: uK4RY5/iJNY8agIZwUapwwnElcO6dWSkGfBkIK1qODg=
Subject key identifier: 54:33:07:92:B6:B1:08:AF:4B:27:06:A2:66:04:05:B8:94:B6:F6:9F
Authority key identifier: C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
Certificate issuer: /CN=c3d6d69fd587d054176e53d19272682361b16736
Certificate serial: 0197CBDEA079EB9FF566F67E570840B901E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
Manifest number: 15BC
Signing time: Wed 02 Jul 2025 16:00:54 +0000
Manifest this update: Wed 02 Jul 2025 16:00:54 +0000
Manifest next update: Thu 03 Jul 2025 16:00:54 +0000
Files and hashes: 1: w9bWn9WH0FQXblPRknJoI2GxZzY.crl (hash: Kywm27gq6bVOpq7MAoYx+XIsEiPdPZ4szvfYzMzWHs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:a0:79:eb:9f:f5:66:f6:7e:57:08:40:b9:01:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3d6d69fd587d054176e53d19272682361b16736
Validity
Not Before: Jul 2 16:00:54 2025 GMT
Not After : Jul 3 16:00:54 2025 GMT
Subject: CN=54330792b6b108af4b2706a2660405b894b6f69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:85:3a:2f:3f:ac:d1:7d:b4:28:53:3c:42:
4c:83:20:41:bf:e6:6f:24:83:c7:c5:c1:f2:10:4c:
05:44:ed:15:f2:58:dc:42:0b:ed:6d:39:bc:ed:f5:
10:63:82:0f:53:a5:c1:9e:31:df:63:93:89:16:cf:
07:b1:8d:73:8f:05:e5:57:e1:11:6d:31:32:74:f4:
e3:c1:50:7c:02:ee:fb:47:0d:95:a9:5d:0b:d8:b2:
ae:b4:7b:d2:5c:ff:c9:3d:fe:85:63:9f:06:f1:84:
7d:d4:79:d5:40:a7:6f:7d:e4:23:ca:e9:96:33:a0:
de:f8:3f:b4:17:ff:cb:af:68:c2:32:73:2f:bc:84:
0d:f5:cf:3f:59:e0:94:44:12:43:d9:60:2b:eb:28:
cb:20:38:4b:be:50:de:40:b8:fe:58:77:00:2c:58:
0e:7c:b4:aa:f4:4d:6c:a3:9b:72:0b:8e:2e:b5:0f:
a6:15:47:c8:ce:66:77:ce:ed:95:75:3c:f6:80:ed:
99:ed:d1:90:68:cb:87:f9:cf:90:bb:b0:46:02:09:
6c:1b:11:f8:6a:e3:e1:99:a5:f6:3e:5a:c9:56:32:
1a:01:91:94:66:71:24:27:48:2b:03:d6:eb:be:2d:
70:c2:cf:38:1b:44:a8:00:7b:91:cb:90:ee:7d:d4:
c7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:33:07:92:B6:B1:08:AF:4B:27:06:A2:66:04:05:B8:94:B6:F6:9F
X509v3 Authority Key Identifier:
keyid:C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c6:2c:88:11:12:e5:b8:e8:36:c6:10:6a:fa:7f:04:c3:be:
10:19:43:fa:05:9b:9d:51:de:06:5c:11:70:0a:68:dd:75:1c:
36:67:ff:8f:ce:4e:be:34:b8:19:c3:89:c1:d3:6f:5b:69:47:
66:a4:64:07:9a:f0:87:d2:4f:c6:8d:df:35:a8:8f:fd:cd:67:
ec:48:39:cc:08:f5:48:d1:a5:cf:82:3b:a9:39:71:83:76:45:
02:d2:78:0a:c0:9b:ef:05:06:51:3a:e3:20:00:57:99:d1:05:
bd:22:ec:77:6f:29:ff:06:4f:ea:3b:3d:d8:78:89:51:c1:e2:
17:6c:0c:ca:48:6c:11:36:2d:b1:24:09:35:4c:97:60:6a:3e:
5d:8e:91:44:6e:d0:bd:e0:9d:0c:83:98:06:a6:ed:80:c1:22:
a9:8e:ae:b4:3e:21:15:37:6d:c4:7a:6a:5b:b2:e1:99:15:4b:
f5:18:6b:dc:81:3f:e3:11:b1:1e:f9:2a:43:26:40:78:9e:72:
0d:92:51:cf:f5:ed:94:b2:57:f9:62:21:9d:79:5e:b7:db:26:
5d:a7:a6:43:b9:c3:80:01:a2:47:1a:5a:69:f8:f1:30:04:ee:
21:fb:45:97:15:07:af:f9:9f:53:2c:cb:37:99:5c:c6:57:06:
f0:87:4b:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfL3qB565/1ZvZ+VwhAuQHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZDZkNjlmZDU4N2QwNTQxNzZlNTNkMTkyNzI2ODIzNjFi
MTY3MzYwHhcNMjUwNzAyMTYwMDU0WhcNMjUwNzAzMTYwMDU0WjAzMTEwLwYDVQQD
Eyg1NDMzMDc5MmI2YjEwOGFmNGIyNzA2YTI2NjA0MDViODk0YjZmNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYKFOi8/rNF9tChTPEJMgyBBv+Zv
JIPHxcHyEEwFRO0V8ljcQgvtbTm87fUQY4IPU6XBnjHfY5OJFs8HsY1zjwXlV+ER
bTEydPTjwVB8Au77Rw2VqV0L2LKutHvSXP/JPf6FY58G8YR91HnVQKdvfeQjyumW
M6De+D+0F//Lr2jCMnMvvIQN9c8/WeCURBJD2WAr6yjLIDhLvlDeQLj+WHcALFgO
fLSq9E1so5tyC44utQ+mFUfIzmZ3zu2VdTz2gO2Z7dGQaMuH+c+Qu7BGAglsGxH4
auPhmaX2PlrJVjIaAZGUZnEkJ0grA9brvi1wws84G0SoAHuRy5DufdTH/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQzB5K2sQivSycGomYEBbiUtvafMB8GA1UdIwQY
MBaAFMPW1p/Vh9BUF25T0ZJyaCNhsWc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzliV245V0gwRlFYYmxQUmtuSm9JMkd4WnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kNzc0YmYtMDBmZS00Mzc5LWFkMjQt
Y2EwODM2MzE4OTk1LzEvdzliV245V0gwRlFYYmxQUmtuSm9JMkd4WnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9kNzc0YmYtMDBmZS00Mzc5LWFkMjQtY2EwODM2MzE4OTk1
LzEvdzliV245V0gwRlFYYmxQUmtuSm9JMkd4WnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecYsiBES
5bjoNsYQavp/BMO+EBlD+gWbnVHeBlwRcApo3XUcNmf/j85OvjS4GcOJwdNvW2lH
ZqRkB5rwh9JPxo3fNaiP/c1n7Eg5zAj1SNGlz4I7qTlxg3ZFAtJ4CsCb7wUGUTrj
IABXmdEFvSLsd28p/wZP6js92HiJUcHiF2wMykhsETYtsSQJNUyXYGo+XY6RRG7Q
veCdDIOYBqbtgMEiqY6utD4hFTdtxHpqW7LhmRVL9Rhr3IE/4xGxHvkqQyZAeJ5y
DZJRz/XtlLJX+WIhnXlet9smXaemQ7nDgAGiRxpaafjxMATuIftFlxUHr/mfUyzL
N5lcxlcG8IdLZg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 19:37:19 2025 by rpki-client