Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
File: WCXq-3jz1WkmUXwqPNUzmqUTht4.mft (raw, json)
Hash identifier: RMq994x2QHBlbjHJpF6EaoBi4BbCPqunbS1RIUHkJ/I=
Subject key identifier: 4D:8C:30:68:51:C8:B7:10:F4:C4:06:D7:23:D8:1D:C0:6E:C1:5F:3A
Authority key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
Certificate issuer: /CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Certificate serial: 0198D4E03EC5CE990B81F1CDDFF4023F7BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
Manifest number: 01F0
Signing time: Sat 23 Aug 2025 03:02:02 +0000
Manifest this update: Sat 23 Aug 2025 03:02:02 +0000
Manifest next update: Sun 24 Aug 2025 03:02:02 +0000
Files and hashes: 1: WCXq-3jz1WkmUXwqPNUzmqUTht4.crl (hash: DNKmJR40OYIa/vWMxZrioZDK+chDom3RH+4DoDOOQ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3e:c5:ce:99:0b:81:f1:cd:df:f4:02:3f:7b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Validity
Not Before: Aug 23 03:02:02 2025 GMT
Not After : Aug 24 03:02:02 2025 GMT
Subject: CN=4d8c306851c8b710f4c406d723d81dc06ec15f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:1a:f0:55:9c:96:74:14:97:e4:ba:45:72:
75:18:5e:c6:a1:ee:99:c1:c7:fc:80:f1:37:94:5c:
59:86:41:8e:cb:cd:67:1f:fd:da:c6:8f:cc:4e:43:
a7:74:3d:c8:e6:c3:8c:ff:ce:73:8d:48:bc:04:3e:
66:b6:ed:21:d4:d6:cd:99:b6:d0:ce:96:d0:30:2b:
bc:2a:61:bc:75:40:30:b0:c9:13:37:0b:54:8b:f9:
b2:6a:06:3d:a5:2d:a7:9d:6a:c8:eb:66:0e:09:04:
61:7f:06:80:53:80:7f:36:fd:26:36:37:59:6f:27:
47:c7:bf:51:8e:26:e5:32:5f:cd:2d:d8:38:79:38:
27:54:89:5b:04:9d:4a:3d:29:63:4e:e4:46:9a:e2:
10:7a:ca:5d:d9:5a:76:62:92:53:ed:35:e5:45:1e:
2a:e3:95:af:4c:11:bc:dc:03:fb:42:dd:1e:3b:3d:
be:82:1d:01:82:d1:1c:b8:d2:8c:a1:81:cf:df:4b:
05:17:84:49:18:81:41:53:03:c2:05:f4:01:9d:ca:
22:eb:58:00:ef:d1:3d:ad:c0:85:cc:55:f6:b0:ba:
6c:05:c3:aa:21:e6:8b:23:24:b3:e9:94:15:8c:b8:
ab:02:f2:82:21:fa:27:63:76:01:e4:68:9c:ec:6c:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8C:30:68:51:C8:B7:10:F4:C4:06:D7:23:D8:1D:C0:6E:C1:5F:3A
X509v3 Authority Key Identifier:
keyid:58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:38:20:3b:f6:cf:37:4d:ef:0b:2d:ac:8d:84:b1:57:96:35:
61:08:21:94:02:9c:7e:63:01:9a:a9:ee:19:39:5c:c4:80:77:
f7:d8:01:fe:54:2c:f3:b8:c0:49:41:d9:75:b1:40:87:08:18:
6d:32:91:b2:5d:7c:34:0a:a9:c0:52:34:ef:46:a5:5e:19:17:
78:41:2e:66:bf:1e:a7:98:42:97:a2:d3:af:ec:cc:34:09:76:
9f:4b:7b:e7:51:05:32:9c:fd:11:e6:c1:8a:9e:82:78:84:c1:
37:f5:e4:7f:15:96:16:50:a7:3c:a1:b1:07:05:20:1c:25:c0:
2b:af:62:56:ea:54:ac:91:be:11:69:15:b6:d7:56:7d:48:50:
d4:91:7c:1e:86:a4:f2:5c:c0:a4:c2:5d:6d:9e:61:c4:f7:25:
d1:32:c8:fd:d5:74:ea:d4:f8:63:3b:4d:85:fd:34:1f:ec:76:
f0:0e:7c:ee:af:94:08:07:3b:e8:1d:b8:2d:0a:86:19:6c:96:
2e:e7:08:ab:16:6f:26:7c:74:56:a3:f4:e3:8f:13:8d:b0:31:
6d:50:8c:97:5e:46:61:17:12:50:79:e6:3d:1b:2e:47:e0:e7:
5e:95:ac:29:81:92:9f:ae:81:47:14:93:c7:81:ec:40:4a:46:
67:75:da:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4D7FzpkLgfHN3/QCP3v8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MjVlYWZiNzhmM2Q1NjkyNjUxN2MyYTNjZDUzMzlhYTUx
Mzg2ZGUwHhcNMjUwODIzMDMwMjAyWhcNMjUwODI0MDMwMjAyWjAzMTEwLwYDVQQD
Eyg0ZDhjMzA2ODUxYzhiNzEwZjRjNDA2ZDcyM2Q4MWRjMDZlYzE1ZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytEa8FWclnQUl+S6RXJ1GF7Goe6Z
wcf8gPE3lFxZhkGOy81nH/3axo/MTkOndD3I5sOM/85zjUi8BD5mtu0h1NbNmbbQ
zpbQMCu8KmG8dUAwsMkTNwtUi/myagY9pS2nnWrI62YOCQRhfwaAU4B/Nv0mNjdZ
bydHx79RjiblMl/NLdg4eTgnVIlbBJ1KPSljTuRGmuIQespd2Vp2YpJT7TXlRR4q
45WvTBG83AP7Qt0eOz2+gh0BgtEcuNKMoYHP30sFF4RJGIFBUwPCBfQBncoi61gA
79E9rcCFzFX2sLpsBcOqIeaLIySz6ZQVjLirAvKCIfonY3YB5Gic7GxCHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2MMGhRyLcQ9MQG1yPYHcBuwV86MB8GA1UdIwQY
MBaAFFgl6vt489VpJlF8KjzVM5qlE4beMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYTgyNWItY2FlNi00NzdiLWFiZmMt
ZDVjNmFlMjYyNWFhLzEvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mYTgyNWItY2FlNi00NzdiLWFiZmMtZDVjNmFlMjYyNWFh
LzEvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezggO/bP
N03vCy2sjYSxV5Y1YQghlAKcfmMBmqnuGTlcxIB399gB/lQs87jASUHZdbFAhwgY
bTKRsl18NAqpwFI070alXhkXeEEuZr8ep5hCl6LTr+zMNAl2n0t751EFMpz9EebB
ip6CeITBN/XkfxWWFlCnPKGxBwUgHCXAK69iVupUrJG+EWkVttdWfUhQ1JF8Hoak
8lzApMJdbZ5hxPcl0TLI/dV06tT4YztNhf00H+x28A587q+UCAc76B24LQqGGWyW
LucIqxZvJnx0VqP0448TjbAxbVCMl15GYRcSUHnmPRsuR+DnXpWsKYGSn66BRxST
x4HsQEpGZ3XaQw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:33 2025 by rpki-client