Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: P3lExYtHtigOn1rkkJRW7fZGz6fkKZoIGvpMscQA8/I=
Subject key identifier: B8:97:FE:D8:43:29:2B:7A:90:A9:5C:61:91:A7:37:CD:E1:C2:EA:3E
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 0198D6610B64210AE6E526F4B1C97A8929CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 08C3
Signing time: Sat 23 Aug 2025 10:02:20 +0000
Manifest this update: Sat 23 Aug 2025 10:02:20 +0000
Manifest next update: Sun 24 Aug 2025 10:02:20 +0000
Files and hashes: 1: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: b+8sMFIG2O2MDoPswZNbIpKuvooGxySq6x+TgO0V+ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:0b:64:21:0a:e6:e5:26:f4:b1:c9:7a:89:29:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Aug 23 10:02:20 2025 GMT
Not After : Aug 24 10:02:20 2025 GMT
Subject: CN=b897fed843292b7a90a95c6191a737cde1c2ea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:b2:d2:f2:53:3f:3f:88:7a:1d:33:55:0e:
b0:d5:ab:13:ac:eb:ab:f8:8d:12:6c:a1:0d:76:ca:
0c:ba:1f:cb:3a:77:a0:02:5f:e0:50:a4:d2:1e:09:
fe:01:11:c0:80:ea:6f:40:2a:af:04:4c:ff:85:bc:
49:59:0f:00:5d:ea:71:a4:d8:cc:37:4e:cb:95:c4:
d5:70:02:a7:77:a1:8e:39:b5:76:93:53:8a:f1:53:
73:25:2d:d9:22:d2:b4:1d:05:e0:e5:41:3c:cc:85:
12:d4:d8:37:da:c4:94:59:7a:6b:f7:4e:81:1c:3e:
f1:aa:c5:51:bf:55:ed:11:8c:af:b5:4a:1d:46:14:
e3:af:1d:17:ef:7b:f9:b7:58:05:04:ac:52:46:11:
7d:c2:ef:b2:26:e1:0a:a3:5c:82:81:c9:8f:7f:05:
59:e2:04:42:5a:e1:56:f1:ef:1e:6f:dc:59:f3:3c:
ac:2b:86:67:34:d9:16:e7:aa:79:29:7a:5e:44:44:
3f:94:be:10:9f:cf:73:99:5b:b8:06:66:2c:c7:8e:
97:2c:af:43:13:88:67:62:0c:87:f5:2c:f3:9c:23:
2d:1a:56:f2:a3:9c:0a:91:e6:50:9f:eb:1d:90:04:
80:30:e2:4c:f5:b3:86:c4:d8:74:32:53:2b:d6:63:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:FE:D8:43:29:2B:7A:90:A9:5C:61:91:A7:37:CD:E1:C2:EA:3E
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:35:33:bc:f7:bb:a3:c2:8a:dd:bf:9a:57:dc:ec:9e:f9:49:
85:1c:bb:91:65:76:d8:f1:ce:cf:11:b4:21:d3:84:99:48:62:
4f:69:5f:7a:ac:83:29:ff:14:45:4c:71:d6:26:62:94:8d:23:
ad:de:19:16:c2:de:f7:2d:65:3a:9a:24:68:7c:e9:30:41:b0:
84:c9:64:5e:56:19:ee:19:be:46:9d:ae:74:3a:77:76:13:80:
36:22:3e:90:f8:a0:c3:15:47:b8:4a:d8:ba:1b:8b:0c:d5:33:
2d:94:65:f0:2b:91:15:d2:f4:e2:fd:36:f1:4b:57:41:82:ea:
86:4b:43:08:11:43:d0:8e:33:8e:91:20:f7:fc:98:c0:31:c8:
81:68:5d:f7:59:12:62:3d:1f:87:78:ec:bc:44:56:b8:4c:dc:
8b:02:73:74:fc:46:46:16:6b:26:e9:cf:55:86:1f:87:aa:31:
6c:7a:7b:f4:ce:88:c6:5f:92:62:30:54:4c:0a:49:f8:7b:2c:
7b:f8:5c:2a:2c:d8:b3:fa:08:7d:a9:3b:47:3a:51:0e:a2:2c:
ca:da:ee:1a:61:7a:bf:d9:25:4d:3b:66:03:ba:cc:21:37:f5:
fd:c2:fa:f3:8d:3e:e2:7f:4b:a9:87:57:40:9b:f3:19:fc:72:
02:f2:22:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYQtkIQrm5Sb0scl6iSnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzkwODhmNWI0NDM4YTQzNDhjODA1ZWViY2JmNGE4MGUw
N2ZmNTQwHhcNMjUwODIzMTAwMjIwWhcNMjUwODI0MTAwMjIwWjAzMTEwLwYDVQQD
EyhiODk3ZmVkODQzMjkyYjdhOTBhOTVjNjE5MWE3MzdjZGUxYzJlYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mey0vJTPz+Ieh0zVQ6w1asTrOur
+I0SbKENdsoMuh/LOnegAl/gUKTSHgn+ARHAgOpvQCqvBEz/hbxJWQ8AXepxpNjM
N07LlcTVcAKnd6GOObV2k1OK8VNzJS3ZItK0HQXg5UE8zIUS1Ng32sSUWXpr906B
HD7xqsVRv1XtEYyvtUodRhTjrx0X73v5t1gFBKxSRhF9wu+yJuEKo1yCgcmPfwVZ
4gRCWuFW8e8eb9xZ8zysK4ZnNNkW56p5KXpeREQ/lL4Qn89zmVu4BmYsx46XLK9D
E4hnYgyH9SzznCMtGlbyo5wKkeZQn+sdkASAMOJM9bOGxNh0MlMr1mN3VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiX/thDKSt6kKlcYZGnN83hwuo+MB8GA1UdIwQY
MBaAFMHJCI9bRDikNIyAXuvL9KgOB/9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NrSWoxdEVPS1EwaklCZTY4djBxQTRIXzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kNjYyYTYtMGFmNS00NTlmLWE3N2It
NmFkNTMzZGYwZDI0LzEvd2NrSWoxdEVPS1EwaklCZTY4djBxQTRIXzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9kNjYyYTYtMGFmNS00NTlmLWE3N2ItNmFkNTMzZGYwZDI0
LzEvd2NrSWoxdEVPS1EwaklCZTY4djBxQTRIXzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTUzvPe7
o8KK3b+aV9zsnvlJhRy7kWV22PHOzxG0IdOEmUhiT2lfeqyDKf8URUxx1iZilI0j
rd4ZFsLe9y1lOpokaHzpMEGwhMlkXlYZ7hm+Rp2udDp3dhOANiI+kPigwxVHuErY
uhuLDNUzLZRl8CuRFdL04v028UtXQYLqhktDCBFD0I4zjpEg9/yYwDHIgWhd91kS
Yj0fh3jsvERWuEzciwJzdPxGRhZrJunPVYYfh6oxbHp79M6Ixl+SYjBUTApJ+Hss
e/hcKizYs/oIfak7RzpRDqIsytruGmF6v9klTTtmA7rMITf1/cL6840+4n9LqYdX
QJvzGfxyAvIiOQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:07:20 2025 by rpki-client