Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
File: _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json)
Hash identifier: S8iJQ+GL+ePPEvBbKX8MljBS+kjoSO50RpBB/C+IG0I=
Subject key identifier: F1:05:25:B5:5E:FD:F0:E3:F0:83:56:0C:2B:2C:A8:A4:11:76:A7:43
Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
Certificate issuer: /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Certificate serial: 0198D5BBDCBDF16061848C8A6089E9AA2DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
Manifest number: 0C76
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: TreKd7vNQe3F8ds+rS459mKwo0f+t6JYcTZCbhE992Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:dc:bd:f1:60:61:84:8c:8a:60:89:e9:aa:2d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=f10525b55efdf0e3f083560c2b2ca8a41176a743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:0c:e9:be:36:ae:14:d9:cb:39:50:b5:1a:
54:76:33:7b:0c:82:d9:f7:e7:cc:74:fd:20:64:43:
62:a0:2a:5e:01:fd:ac:de:87:8c:25:a1:1b:d6:1e:
49:62:32:cd:5a:da:a1:cd:02:53:2b:e6:06:ab:94:
b2:25:67:b2:c8:68:7f:e2:12:ae:6d:6a:fb:be:53:
b6:e8:24:af:7b:e6:45:40:89:e0:16:26:44:7a:c8:
7f:10:18:a1:99:9d:0c:2b:49:95:a0:c6:64:de:db:
93:af:06:c3:e8:d1:e0:38:09:e2:ca:8b:2c:85:35:
5b:02:9d:fd:2e:2c:0a:bb:74:bd:b3:3c:ae:8b:9b:
a7:a0:6b:b7:b1:ec:47:aa:c0:fc:f9:c9:c7:22:c4:
4e:75:b8:97:be:4c:7a:1f:e4:81:e0:00:ae:6e:15:
dd:2d:fd:79:5d:e9:50:aa:85:ac:59:27:48:e5:3a:
14:3a:7b:eb:8d:e1:31:27:be:da:f5:0f:4d:7c:6b:
18:15:e3:f1:3b:57:45:67:e4:89:4c:c1:7a:86:33:
a0:d4:02:db:cb:7a:17:9a:ba:9d:06:56:4f:c0:1c:
5b:49:63:65:8d:61:29:e9:c7:71:08:14:ec:10:1f:
60:58:55:8d:11:32:5a:4c:a5:66:dc:84:42:d0:28:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:05:25:B5:5E:FD:F0:E3:F0:83:56:0C:2B:2C:A8:A4:11:76:A7:43
X509v3 Authority Key Identifier:
keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c1:d2:f9:48:29:54:b6:e1:f7:48:ce:ca:ad:f9:a2:bb:0f:
c3:bd:68:e5:b2:bc:01:f6:63:95:ab:54:58:05:aa:22:91:44:
48:f0:87:b7:e2:a6:14:d3:40:bc:c1:82:ca:65:eb:66:bc:2f:
34:70:62:93:72:b3:79:8e:b1:69:4b:97:af:31:06:85:8c:b1:
c8:28:40:57:ee:35:54:11:65:0d:1f:1b:57:de:ee:f2:82:17:
3a:71:33:0c:e2:ca:ac:35:dd:8d:b4:72:0e:ff:83:99:72:43:
69:fe:56:82:ad:68:03:ef:52:80:7f:89:0b:dd:7e:7f:a0:fd:
77:24:0d:cd:92:c0:00:15:ac:83:c0:52:43:f9:11:5b:25:b8:
8d:f6:43:f8:ea:f7:7b:86:f3:9a:f9:57:54:d3:98:9c:69:a0:
d4:be:8e:0a:26:eb:b2:46:9f:97:d1:8b:b5:5b:0f:0b:3e:1b:
e2:26:db:e1:94:bd:00:c2:6b:6a:ea:55:d6:53:ff:9c:a4:be:
a5:03:69:8a:b4:90:a1:97:e2:55:92:6e:ff:a7:d3:68:95:00:
61:1f:b5:53:79:e0:b5:b1:00:a9:74:c7:48:fe:a3:c2:bd:b8:
66:08:1b:da:fa:52:bc:97:38:36:a0:6c:e8:e2:b0:d1:df:d9:
c8:bf:e3:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu9y98WBhhIyKYInpqi26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNjhkOWY1MmJjNzk1MmRkZjBhN2RmODFhMTFlZTE0M2Yz
MzI3MGEwHhcNMjUwODIzMDcwMTU1WhcNMjUwODI0MDcwMTU1WjAzMTEwLwYDVQQD
EyhmMTA1MjViNTVlZmRmMGUzZjA4MzU2MGMyYjJjYThhNDExNzZhNzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwEM6b42rhTZyzlQtRpUdjN7DILZ
9+fMdP0gZENioCpeAf2s3oeMJaEb1h5JYjLNWtqhzQJTK+YGq5SyJWeyyGh/4hKu
bWr7vlO26CSve+ZFQIngFiZEesh/EBihmZ0MK0mVoMZk3tuTrwbD6NHgOAniyoss
hTVbAp39LiwKu3S9szyui5unoGu3sexHqsD8+cnHIsROdbiXvkx6H+SB4ACubhXd
Lf15XelQqoWsWSdI5ToUOnvrjeExJ77a9Q9NfGsYFePxO1dFZ+SJTMF6hjOg1ALb
y3oXmrqdBlZPwBxbSWNljWEp6cdxCBTsEB9gWFWNETJaTKVm3IRC0CgAXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEFJbVe/fDj8INWDCssqKQRdqdDMB8GA1UdIwQY
MBaAFP1o2fUrx5Ut3wp9+BoR7hQ/MycKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1dqWjlTdkhsUzNmQ24zNEdoSHVGRDh6SndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lMmI3MDktYjg0My00MjA1LWJhMzEt
ZDUwNDVjNTAxNzA3LzEvX1dqWjlTdkhsUzNmQ24zNEdoSHVGRDh6SndvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lMmI3MDktYjg0My00MjA1LWJhMzEtZDUwNDVjNTAxNzA3
LzEvX1dqWjlTdkhsUzNmQ24zNEdoSHVGRDh6SndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8HS+Ugp
VLbh90jOyq35orsPw71o5bK8AfZjlatUWAWqIpFESPCHt+KmFNNAvMGCymXrZrwv
NHBik3KzeY6xaUuXrzEGhYyxyChAV+41VBFlDR8bV97u8oIXOnEzDOLKrDXdjbRy
Dv+DmXJDaf5Wgq1oA+9SgH+JC91+f6D9dyQNzZLAABWsg8BSQ/kRWyW4jfZD+Or3
e4bzmvlXVNOYnGmg1L6OCibrskafl9GLtVsPCz4b4ibb4ZS9AMJraupV1lP/nKS+
pQNpirSQoZfiVZJu/6fTaJUAYR+1U3ngtbEAqXTHSP6jwr24Zggb2vpSvJc4NqBs
6OKw0d/ZyL/jyw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:09:54 2025 by rpki-client