Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
File: wlZYX2ctCeHXfOXq9OPhUfhgroY.mft (raw, json)
Hash identifier: PUufYDWYdlfgPXgldAN+ZPn6GkjFc1Yic1dUEA1O/kw=
Subject key identifier: EA:AF:0A:56:C1:CC:92:99:94:5F:E9:09:76:E3:07:27:A9:40:50:88
Authority key identifier: C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86
Certificate issuer: /CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86
Certificate serial: 0197B7451FC37E4D36A66371C20F6F646089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
Manifest number: 14C8
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: wlZYX2ctCeHXfOXq9OPhUfhgroY.crl (hash: g6aNqxTI2ureGXzfcucYLWTG45CDtADV4t2++PXF2P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1f:c3:7e:4d:36:a6:63:71:c2:0f:6f:64:60:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=eaaf0a56c1cc9299945fe90976e30727a9405088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:8d:25:3a:7d:ba:3a:90:a2:d9:c0:f5:c1:
b4:65:b9:27:b7:bf:96:26:1a:ac:92:09:42:ca:f5:
72:94:21:87:2c:60:57:dc:0b:cc:48:73:66:01:74:
97:a0:52:1e:e0:4c:ad:cd:60:78:aa:bb:e7:08:38:
60:35:ba:0b:51:a9:4e:f2:1d:04:f7:4f:9e:0e:45:
f2:1b:ff:64:1c:dd:ba:47:5b:c1:6b:f9:6f:c0:cd:
97:d6:69:4c:4b:42:f0:11:78:c8:02:24:8d:49:fa:
65:1b:11:0c:c5:d0:fc:15:0e:6c:80:b8:81:be:99:
79:b0:13:9c:00:0d:1d:7e:23:e5:b6:e3:9f:18:1a:
6f:67:cc:00:3b:23:e8:5c:6d:df:b2:70:74:97:e3:
76:f6:68:d1:ed:82:f4:1b:ce:dd:c5:31:26:7c:55:
81:c6:2e:3a:1c:08:4f:f6:4f:d8:f7:4e:fb:36:3c:
04:8d:59:da:a1:da:82:b1:e2:8e:d1:8e:f1:2c:0e:
a9:f0:1b:e8:9e:54:f7:9d:b5:65:0e:6f:61:6e:01:
31:f3:04:bc:0b:2f:52:96:fe:92:07:a6:ea:ce:d6:
46:f8:32:43:f4:0d:5f:b8:d7:5b:7d:dc:8f:8a:16:
ee:d5:cf:c9:ff:d9:1e:73:a5:05:24:52:87:36:fb:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AF:0A:56:C1:CC:92:99:94:5F:E9:09:76:E3:07:27:A9:40:50:88
X509v3 Authority Key Identifier:
keyid:C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:07:bf:20:35:5f:09:81:7c:d8:59:3e:63:9e:43:3b:51:c1:
87:99:4c:b1:dd:4c:76:53:fd:93:4c:d7:01:21:5d:6b:18:6e:
51:61:29:e8:ac:9b:19:f9:fa:cc:60:1a:76:5c:16:0b:ae:04:
29:c9:21:fa:e3:ec:d4:eb:8e:61:cc:d3:bf:09:84:b5:9c:6b:
51:39:79:58:b1:eb:cd:66:78:58:90:c4:39:04:27:4f:b4:b9:
e2:6b:7f:c4:7a:a0:19:7e:e4:b5:f5:c6:f4:5a:b7:ec:28:f6:
5d:01:2c:21:af:d0:d9:df:96:e4:e8:48:a3:f1:ed:9e:e8:71:
0d:d5:bf:61:e4:65:af:b9:63:20:1d:d4:9e:4e:dd:9e:1e:84:
45:c1:5d:f2:df:b5:42:d7:7b:60:98:a9:ab:59:47:3d:5c:22:
3f:43:21:97:74:ed:1d:ef:83:4f:19:56:a0:58:c1:4c:c1:b7:
b3:cf:8a:53:f4:17:49:8b:63:69:3b:fa:9d:99:9c:a2:18:fe:
2b:fd:f4:e4:97:46:5c:c4:0c:b8:0b:f3:39:b9:c5:d8:be:9f:
d4:f2:91:14:84:a3:93:f3:fa:a9:33:8f:f3:6f:0b:92:04:b5:
a6:f5:db:ea:ab:75:f7:c1:fc:38:b6:70:85:04:1e:0e:2d:f6:
77:20:94:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RR/Dfk02pmNxwg9vZGCJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNTY1ODVmNjcyZDA5ZTFkNzdjZTVlYWY0ZTNlMTUxZjg2
MGFlODYwHhcNMjUwNjI4MTYwMDQ5WhcNMjUwNjI5MTYwMDQ5WjAzMTEwLwYDVQQD
EyhlYWFmMGE1NmMxY2M5Mjk5OTQ1ZmU5MDk3NmUzMDcyN2E5NDA1MDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5+NJTp9ujqQotnA9cG0Zbknt7+W
JhqskglCyvVylCGHLGBX3AvMSHNmAXSXoFIe4EytzWB4qrvnCDhgNboLUalO8h0E
90+eDkXyG/9kHN26R1vBa/lvwM2X1mlMS0LwEXjIAiSNSfplGxEMxdD8FQ5sgLiB
vpl5sBOcAA0dfiPltuOfGBpvZ8wAOyPoXG3fsnB0l+N29mjR7YL0G87dxTEmfFWB
xi46HAhP9k/Y9077NjwEjVnaodqCseKO0Y7xLA6p8BvonlT3nbVlDm9hbgEx8wS8
Cy9Slv6SB6bqztZG+DJD9A1fuNdbfdyPihbu1c/J/9kec6UFJFKHNvubywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqvClbBzJKZlF/pCXbjByepQFCIMB8GA1UdIwQY
MBaAFMJWWF9nLQnh13zl6vTj4VH4YK6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2xaWVgyY3RDZUhYZk9YcTlPUGhVZmhncm9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy82YzI1NDUtZGY5OS00NzhjLThiNzYt
YzUwYTAxYjZlZTA2LzEvd2xaWVgyY3RDZUhYZk9YcTlPUGhVZmhncm9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy82YzI1NDUtZGY5OS00NzhjLThiNzYtYzUwYTAxYjZlZTA2
LzEvd2xaWVgyY3RDZUhYZk9YcTlPUGhVZmhncm9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGge/IDVf
CYF82Fk+Y55DO1HBh5lMsd1MdlP9k0zXASFdaxhuUWEp6KybGfn6zGAadlwWC64E
Kckh+uPs1OuOYczTvwmEtZxrUTl5WLHrzWZ4WJDEOQQnT7S54mt/xHqgGX7ktfXG
9Fq37Cj2XQEsIa/Q2d+W5OhIo/HtnuhxDdW/YeRlr7ljIB3Unk7dnh6ERcFd8t+1
Qtd7YJipq1lHPVwiP0Mhl3TtHe+DTxlWoFjBTMG3s8+KU/QXSYtjaTv6nZmcohj+
K/305JdGXMQMuAvzObnF2L6f1PKRFISjk/P6qTOP828LkgS1pvXb6qt198H8OLZw
hQQeDi32dyCUXQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:01 2025 by rpki-client