Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File: WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier: B2BeF2GVSHSjcLyKYAE3EtwdkrjbuwbcOsdS8C//X1Y=
Subject key identifier: 0F:97:13:46:60:53:A5:CC:31:1B:CB:3F:60:B3:65:4B:5C:12:DF:C3
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer: /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial: 0197B88F2F788ACB2F14BF9A82C59716C77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 22:01:20 +0000
Manifest this update: Sat 28 Jun 2025 22:01:20 +0000
Manifest next update: Sun 29 Jun 2025 22:01:20 +0000
Files and hashes: 1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: hvyE4hEyyJA8MAZLJT7qJKbdtVQAPlP/JS4UIUVnma4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:2f:78:8a:cb:2f:14:bf:9a:82:c5:97:16:c7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
Validity
Not Before: Jun 28 22:01:20 2025 GMT
Not After : Jun 29 22:01:20 2025 GMT
Subject: CN=0f9713466053a5cc311bcb3f60b3654b5c12dfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:f0:f3:f2:0c:af:d8:24:8a:2f:c1:c2:5b:
fe:bb:b8:b9:67:48:24:84:26:c1:d8:76:3c:0b:ae:
69:8e:88:fa:ad:6d:8d:ca:77:30:88:c1:18:b2:59:
05:93:81:b4:c5:cf:7a:f7:64:45:c6:67:10:3b:30:
73:c3:49:ea:1d:cf:a5:9e:28:af:96:61:a8:ec:4b:
57:10:ed:d7:65:f1:cc:ac:f3:77:d3:16:68:91:15:
cd:80:35:b9:40:02:27:33:bc:2f:93:fa:ee:d0:f4:
29:4a:f1:a5:d0:b8:e5:a5:88:b6:d7:1a:13:1f:50:
3e:33:4a:13:e1:44:4d:41:cc:52:76:d1:81:09:c8:
1e:ce:b0:7a:64:4c:90:84:db:73:77:e0:55:f4:e0:
b7:92:b2:ac:be:19:05:3c:79:d2:6a:d8:28:eb:2b:
9d:f0:c7:56:2b:b7:bf:9e:26:50:0b:5e:42:28:d5:
89:5a:72:cc:b0:b0:e8:57:f0:af:9b:2e:32:84:88:
41:dd:2a:93:84:b2:74:25:39:38:0c:d5:62:2d:f6:
6d:65:35:b4:39:01:87:fc:f7:4a:b2:94:d3:82:23:
38:bf:76:f3:e3:86:c7:c7:1d:71:06:43:a3:d5:00:
7a:31:89:11:4b:0f:c0:ee:5d:a2:73:48:b5:67:e6:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:97:13:46:60:53:A5:CC:31:1B:CB:3F:60:B3:65:4B:5C:12:DF:C3
X509v3 Authority Key Identifier:
keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cd:a3:34:1c:06:c2:0f:b3:3b:cc:4a:18:bb:53:16:ca:9e:
46:c2:f8:fd:6d:7e:d3:54:65:5f:ae:60:7d:d1:a1:bb:9f:24:
06:4e:44:fd:c0:7d:76:d0:f7:6a:d4:55:9c:da:ac:0f:b5:b7:
6c:97:55:9a:28:2c:c2:cf:5c:d4:e7:28:45:8a:89:71:77:1e:
b1:4c:91:94:0d:02:34:26:75:38:c1:d1:e0:4b:a2:dc:34:8b:
db:25:64:55:ac:92:7b:45:6f:90:bb:bc:ed:e9:df:90:64:ba:
00:69:c8:af:72:79:dc:74:59:14:f2:44:dd:bf:2b:1a:98:f0:
eb:3e:6e:d4:69:8c:b6:1b:b3:ca:ba:c4:ae:30:c8:63:02:c9:
cc:2b:8b:ca:4a:26:06:ce:49:cf:09:23:97:7a:7e:9f:98:6c:
c6:87:fe:8e:75:70:0d:95:f6:94:4a:6e:9c:4b:e8:f1:bd:e2:
c7:3b:40:76:07:1c:10:96:f6:f5:21:14:b8:e9:b6:18:32:3f:
02:28:83:16:39:62:3a:fb:17:28:7e:a4:f3:e3:27:7e:3b:3f:
46:fb:99:d5:8c:49:a8:06:8c:62:25:1b:80:b7:b9:01:d0:9b:
3b:07:d8:25:63:15:5a:d2:22:d7:55:a6:d5:75:89:55:b2:7b:
a1:ce:c1:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jy94issvFL+agsWXFsd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDQwYjM5Y2Q5OTQ5MDlmNTUwNDEwZGM0Nzk0NWJiNWI0
OTUyZjkwHhcNMjUwNjI4MjIwMTIwWhcNMjUwNjI5MjIwMTIwWjAzMTEwLwYDVQQD
EygwZjk3MTM0NjYwNTNhNWNjMzExYmNiM2Y2MGIzNjU0YjVjMTJkZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14Pw8/IMr9gkii/Bwlv+u7i5Z0gk
hCbB2HY8C65pjoj6rW2NyncwiMEYslkFk4G0xc9692RFxmcQOzBzw0nqHc+lniiv
lmGo7EtXEO3XZfHMrPN30xZokRXNgDW5QAInM7wvk/ru0PQpSvGl0LjlpYi21xoT
H1A+M0oT4URNQcxSdtGBCcgezrB6ZEyQhNtzd+BV9OC3krKsvhkFPHnSatgo6yud
8MdWK7e/niZQC15CKNWJWnLMsLDoV/Cvmy4yhIhB3SqThLJ0JTk4DNViLfZtZTW0
OQGH/PdKspTTgiM4v3bz44bHxx1xBkOj1QB6MYkRSw/A7l2ic0i1Z+aeCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+XE0ZgU6XMMRvLP2CzZUtcEt/DMB8GA1UdIwQY
MBaAFFsECznNmUkJ9VBBDcR5RbtbSVL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dRTE9jMlpTUW4xVUVFTnhIbEZ1MXRKVXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iM2FmYzktNDFmMC00NjY3LWI5MTkt
NTVlNzAyMDliZTMyLzEvV3dRTE9jMlpTUW4xVUVFTnhIbEZ1MXRKVXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iM2FmYzktNDFmMC00NjY3LWI5MTktNTVlNzAyMDliZTMy
LzEvV3dRTE9jMlpTUW4xVUVFTnhIbEZ1MXRKVXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH82jNBwG
wg+zO8xKGLtTFsqeRsL4/W1+01RlX65gfdGhu58kBk5E/cB9dtD3atRVnNqsD7W3
bJdVmigsws9c1OcoRYqJcXcesUyRlA0CNCZ1OMHR4Eui3DSL2yVkVaySe0VvkLu8
7enfkGS6AGnIr3J53HRZFPJE3b8rGpjw6z5u1GmMthuzyrrErjDIYwLJzCuLykom
Bs5Jzwkjl3p+n5hsxof+jnVwDZX2lEpunEvo8b3ixztAdgccEJb29SEUuOm2GDI/
AiiDFjliOvsXKH6k8+Mnfjs/RvuZ1YxJqAaMYiUbgLe5AdCbOwfYJWMVWtIi11Wm
1XWJVbJ7oc7Bfg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:52 2025 by rpki-client