Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File: wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier: sGbvwNjSQTYDbUFek22/MG38IThKKlTGqo+HK21T1aI=
Subject key identifier: 68:5C:E2:52:F0:57:5D:22:34:B2:66:18:CA:58:9D:7D:06:47:EB:67
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer: /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial: 0197B70F1E5BC5816A845257E2D99A0262D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number: 0C40
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: VvAEEucypqQ/ApX1sob9IhhtmjLHnVSXpw8df8Js5Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1e:5b:c5:81:6a:84:52:57:e2:d9:9a:02:62:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=685ce252f0575d2234b26618ca589d7d0647eb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:bd:67:1d:05:dd:33:fb:10:44:13:65:66:
d9:bb:b2:53:c9:ef:32:5f:ec:f3:d0:40:01:db:c3:
6a:ee:1e:db:0c:8e:74:55:a2:41:4a:c7:4a:63:be:
56:cd:cb:a0:c9:22:72:02:47:57:ed:3a:bf:4d:18:
7d:dc:e1:73:21:1a:43:c2:c8:86:03:0f:11:a6:72:
13:2b:2c:1e:e7:50:d6:2c:b2:45:66:fb:86:0a:af:
48:03:0d:89:69:91:e9:40:e8:18:f2:9b:c6:74:16:
1d:6f:91:02:16:e7:10:4c:e1:10:30:30:ff:3d:fb:
e1:a0:18:d3:17:a2:33:e6:34:c7:47:1d:9c:0f:b8:
c5:e4:7f:99:f3:ab:13:f8:1e:27:0b:88:9c:49:6c:
03:74:20:f2:c7:f0:d7:11:a3:f0:c7:32:b6:08:c1:
1e:55:e4:47:82:c5:f7:86:8c:6b:93:fc:e7:4c:33:
cb:93:5d:67:06:fc:9e:41:47:b2:be:98:37:16:ed:
07:be:97:f4:29:44:2e:d0:3f:9c:29:d2:6f:a5:01:
d4:21:37:85:c6:bf:63:a1:ca:f0:97:0d:7a:67:40:
24:36:2b:f8:93:92:43:2f:bd:da:0f:a4:70:77:a8:
9b:ed:33:fd:39:49:3a:49:8d:48:6c:3b:14:8c:21:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5C:E2:52:F0:57:5D:22:34:B2:66:18:CA:58:9D:7D:06:47:EB:67
X509v3 Authority Key Identifier:
keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1b:83:86:ae:e9:f0:73:f3:c1:fb:be:c8:a8:f0:f4:34:21:
c2:f0:10:b8:32:a4:c2:56:b1:b6:c3:db:d0:fe:7f:0e:4a:bc:
8f:08:27:8e:10:0e:ba:85:81:cb:e4:b4:fd:3e:8d:4c:9f:5b:
21:82:fe:5e:08:40:9d:5f:1f:8d:24:e8:aa:b8:2b:fa:c9:39:
6b:9a:62:bd:31:bd:b2:ad:eb:ca:99:d0:9a:53:54:cb:1c:77:
af:41:17:2e:77:a9:21:0b:98:5e:11:48:2e:55:b9:64:e0:a2:
88:57:31:69:a5:3a:ce:86:14:0a:8e:02:c1:16:a9:df:17:ec:
be:82:d3:e2:be:7c:0e:0d:a4:9f:39:f3:14:57:bc:00:f2:c6:
6a:3d:2e:a1:a4:d9:06:ad:d4:00:18:3e:41:87:46:a8:3d:ac:
d1:00:7b:70:ed:26:12:3d:d6:62:fe:dd:1c:4e:60:3e:ea:20:
ee:1e:10:e4:cd:a8:e2:b7:7c:22:6e:c0:ca:3a:ef:ff:ba:39:
1c:43:15:24:e0:dd:2d:f1:db:ee:88:f4:65:89:13:5a:64:11:
60:cb:ac:bd:0a:4a:18:ef:01:55:bb:53:d4:78:f0:c5:c4:a2:
1f:4c:cd:14:0c:bd:db:20:72:d1:00:f5:eb:f9:32:0a:c9:29:
84:9c:f6:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dx5bxYFqhFJX4tmaAmLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNDc2YzhkYjU0OWY3YjU4OGE5MDJiMGY0Y2U4MGJlYjZk
MjU3NDgwHhcNMjUwNjI4MTUwMTUwWhcNMjUwNjI5MTUwMTUwWjAzMTEwLwYDVQQD
Eyg2ODVjZTI1MmYwNTc1ZDIyMzRiMjY2MThjYTU4OWQ3ZDA2NDdlYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuii9Zx0F3TP7EEQTZWbZu7JTye8y
X+zz0EAB28Nq7h7bDI50VaJBSsdKY75WzcugySJyAkdX7Tq/TRh93OFzIRpDwsiG
Aw8RpnITKywe51DWLLJFZvuGCq9IAw2JaZHpQOgY8pvGdBYdb5ECFucQTOEQMDD/
PfvhoBjTF6Iz5jTHRx2cD7jF5H+Z86sT+B4nC4icSWwDdCDyx/DXEaPwxzK2CMEe
VeRHgsX3hoxrk/znTDPLk11nBvyeQUeyvpg3Fu0Hvpf0KUQu0D+cKdJvpQHUITeF
xr9jocrwlw16Z0AkNiv4k5JDL73aD6Rwd6ib7TP9OUk6SY1IbDsUjCFTMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhc4lLwV10iNLJmGMpYnX0GR+tnMB8GA1UdIwQY
MBaAFMJHbI21Sfe1iKkCsPTOgL620ldIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2It
MWYwYmYwZDhjYjM2LzEvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2ItMWYwYmYwZDhjYjM2
LzEvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxuDhq7p
8HPzwfu+yKjw9DQhwvAQuDKkwlaxtsPb0P5/Dkq8jwgnjhAOuoWBy+S0/T6NTJ9b
IYL+XghAnV8fjSToqrgr+sk5a5pivTG9sq3rypnQmlNUyxx3r0EXLnepIQuYXhFI
LlW5ZOCiiFcxaaU6zoYUCo4CwRap3xfsvoLT4r58Dg2knznzFFe8APLGaj0uoaTZ
Bq3UABg+QYdGqD2s0QB7cO0mEj3WYv7dHE5gPuog7h4Q5M2o4rd8Im7Ayjrv/7o5
HEMVJODdLfHb7oj0ZYkTWmQRYMusvQpKGO8BVbtT1HjwxcSiH0zNFAy92yBy0QD1
6/kyCskphJz2ag==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:15:39 2025 by rpki-client