Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: zg6DgYwjQJT1ld19LQBFHkwPEfD8NqcChlTQs8mqW48=
Subject key identifier: 4F:17:7E:5C:DB:82:56:9F:50:3D:E5:2F:D1:86:7D:49:61:5E:90:97
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 019A01B511BCCDC7A9EF772F4DAB3CFD54BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 0336
Signing time: Mon 20 Oct 2025 13:00:35 +0000
Manifest this update: Mon 20 Oct 2025 13:00:35 +0000
Manifest next update: Tue 21 Oct 2025 13:00:35 +0000
Files and hashes: 1: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: mPr6J4+8qQRBW4jrfozjvxvnCzd0w/54XDwtqLwmAjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:11:bc:cd:c7:a9:ef:77:2f:4d:ab:3c:fd:54:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Oct 20 13:00:35 2025 GMT
Not After : Oct 21 13:00:35 2025 GMT
Subject: CN=4f177e5cdb82569f503de52fd1867d49615e9097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:80:db:31:46:56:ca:0a:41:e9:f0:2c:7f:
d4:61:50:88:d2:8d:25:1a:1f:5c:0b:bb:e1:51:bd:
01:e4:b5:4c:24:34:d6:7b:b8:5a:ae:ae:96:6a:b8:
58:bd:e4:fd:9b:cc:05:04:6e:fb:6d:6e:5d:87:fe:
ce:d2:b0:41:34:78:9d:dc:25:1a:45:c8:69:cf:bf:
4f:4d:83:e8:6c:91:1e:17:66:cc:7a:c5:34:57:ff:
59:95:de:ab:c6:86:bc:94:a1:db:b3:27:bf:ba:57:
4d:43:94:b0:d0:ce:95:98:85:04:20:27:f7:19:55:
f0:1d:cb:4c:b6:16:c1:48:ce:c1:00:25:9e:0a:6f:
de:01:45:64:74:61:d5:e0:8e:c8:08:3e:e7:06:09:
76:ea:7c:6a:da:3d:75:34:6d:53:09:79:85:0a:a7:
09:2e:3d:08:95:6f:43:d9:c3:6e:8d:bc:90:9c:b8:
30:b0:3b:7d:01:30:01:74:9a:fc:85:7b:ee:7d:fd:
3f:2f:98:3e:8c:76:08:78:b8:51:b2:c0:63:73:f8:
6d:76:23:01:ea:33:fb:a6:44:73:61:ff:23:8d:c8:
e1:da:7a:87:00:9d:d3:ed:5e:a3:0b:a4:69:7e:f9:
80:34:a6:5c:03:19:29:09:d8:38:b4:7c:4e:f2:91:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:17:7E:5C:DB:82:56:9F:50:3D:E5:2F:D1:86:7D:49:61:5E:90:97
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:97:2a:53:8e:bc:84:03:01:a7:32:c6:e5:ec:d8:ce:a0:ff:
f9:2d:4f:5c:45:70:8a:61:6a:47:77:52:eb:f3:78:fd:30:1d:
7e:1b:df:f9:1e:62:d6:ba:99:1c:c5:6b:d8:35:db:df:8c:92:
fb:27:ef:2b:35:87:0f:e0:8e:bb:da:2e:0b:71:0b:44:2c:9c:
81:dd:bb:df:93:5f:e2:b3:7c:5a:13:a4:47:be:25:e7:5d:9b:
d5:0b:0d:73:ba:70:13:fd:c6:84:62:0c:66:48:66:29:3e:99:
b1:4c:fa:b1:37:18:8b:a8:e5:27:b7:9e:8e:d5:76:90:d1:05:
f9:3e:ff:43:ae:8b:5c:4e:d2:42:38:53:90:c1:88:fd:c0:1d:
a3:f7:48:45:2c:02:9c:d0:e5:4a:fe:0f:bc:da:6e:1d:4a:2c:
21:91:79:8d:5e:b7:dc:8f:5f:a7:ac:d8:ad:08:74:da:8b:d3:
34:7e:20:9d:05:63:22:4b:0d:b5:ad:09:0a:e2:15:45:5c:22:
43:cb:f5:4c:eb:ca:17:c7:3c:bd:d7:ea:1a:30:0c:14:94:a4:
22:7d:92:1f:64:20:84:e8:5b:31:1c:5f:52:06:e3:da:8d:c9:
4a:b7:d3:cc:00:cb:5d:c4:c6:2b:75:92:65:da:0a:bf:a6:45:
51:f5:29:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtRG8zcep73cvTas8/VS+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYjQyZTRhNWMxYzkxZWJjNGVmZmZmMTQ4YjMxMmZlN2I3
ZTg5NzAwHhcNMjUxMDIwMTMwMDM1WhcNMjUxMDIxMTMwMDM1WjAzMTEwLwYDVQQD
Eyg0ZjE3N2U1Y2RiODI1NjlmNTAzZGU1MmZkMTg2N2Q0OTYxNWU5MDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRSA2zFGVsoKQenwLH/UYVCI0o0l
Gh9cC7vhUb0B5LVMJDTWe7harq6WarhYveT9m8wFBG77bW5dh/7O0rBBNHid3CUa
Rchpz79PTYPobJEeF2bMesU0V/9Zld6rxoa8lKHbsye/uldNQ5Sw0M6VmIUEICf3
GVXwHctMthbBSM7BACWeCm/eAUVkdGHV4I7ICD7nBgl26nxq2j11NG1TCXmFCqcJ
Lj0IlW9D2cNujbyQnLgwsDt9ATABdJr8hXvuff0/L5g+jHYIeLhRssBjc/htdiMB
6jP7pkRzYf8jjcjh2nqHAJ3T7V6jC6RpfvmANKZcAxkpCdg4tHxO8pH2uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8XflzbglafUD3lL9GGfUlhXpCXMB8GA1UdIwQY
MBaAFMK0LkpcHJHrxO//8UizEv57folwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQt
YzczY2JlNzBhYmI5LzEvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQtYzczY2JlNzBhYmI5
LzEvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJcqU468
hAMBpzLG5ezYzqD/+S1PXEVwimFqR3dS6/N4/TAdfhvf+R5i1rqZHMVr2DXb34yS
+yfvKzWHD+COu9ouC3ELRCycgd2735Nf4rN8WhOkR74l512b1QsNc7pwE/3GhGIM
ZkhmKT6ZsUz6sTcYi6jlJ7eejtV2kNEF+T7/Q66LXE7SQjhTkMGI/cAdo/dIRSwC
nNDlSv4PvNpuHUosIZF5jV633I9fp6zYrQh02ovTNH4gnQVjIksNta0JCuIVRVwi
Q8v1TOvKF8c8vdfqGjAMFJSkIn2SH2QghOhbMRxfUgbj2o3JSrfTzADLXcTGK3WS
ZdoKv6ZFUfUpVQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:22 2025 by rpki-client