Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File: WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier: V/LNMpFMPJYcgvccjpKKWj5KQ5qjRncsbpdNUc5I5U8=
Subject key identifier: D6:C7:3D:78:14:29:5A:51:3A:F8:78:35:C5:DB:AF:44:57:FD:86:7D
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer: /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial: 01976A0593F2F61D50237D6E8332CB3CF47D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number: 0455
Signing time: Fri 13 Jun 2025 16:00:39 +0000
Manifest this update: Fri 13 Jun 2025 16:00:39 +0000
Manifest next update: Sat 14 Jun 2025 16:00:39 +0000
Files and hashes: 1: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: glGKP+x9JIXFqwMO3u7gsXDri7J5sJk8IvqC3RpylJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:93:f2:f6:1d:50:23:7d:6e:83:32:cb:3c:f4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Validity
Not Before: Jun 13 16:00:39 2025 GMT
Not After : Jun 14 16:00:39 2025 GMT
Subject: CN=d6c73d7814295a513af87835c5dbaf4457fd867d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:11:3a:e7:ca:09:4e:e4:75:3f:2b:f4:41:
1a:ef:00:61:73:e2:c6:33:b1:12:e8:2c:ba:e6:76:
2d:a0:d8:04:83:95:cf:a7:95:11:69:58:16:82:9b:
2b:6a:58:94:03:2f:34:9b:8f:c8:b7:54:68:19:ae:
a4:c1:4a:d2:71:41:c5:b1:8e:e8:75:09:ad:9a:80:
d6:16:03:cb:19:d5:c1:b3:21:8c:bb:e8:15:8b:c8:
0e:05:37:12:a1:f8:d8:59:37:cd:0e:90:16:32:a9:
e9:16:88:db:e1:e2:4e:7f:6c:28:4e:59:6e:d4:b0:
0e:ec:5c:b3:e9:dd:fb:d5:71:57:0f:32:89:27:e8:
3b:0e:96:5c:3d:39:31:ad:5e:20:0a:3b:56:f1:76:
1c:3b:42:a2:6b:cf:47:a5:aa:d3:6a:49:b2:bf:fa:
58:cf:bd:8f:d1:a2:89:99:c9:7e:82:24:4a:6f:ca:
94:ea:18:7c:82:0d:2e:10:59:5a:69:24:8e:44:03:
10:e1:32:df:b0:21:90:af:9d:0d:4f:99:6b:20:76:
06:f9:a6:68:2a:3b:91:b7:49:a4:d8:bb:31:1a:37:
86:32:ea:74:3f:e8:24:39:92:3d:74:c7:45:0c:a7:
53:f8:ce:cd:db:a5:e2:5b:d4:6b:4a:9f:58:4f:d0:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C7:3D:78:14:29:5A:51:3A:F8:78:35:C5:DB:AF:44:57:FD:86:7D
X509v3 Authority Key Identifier:
keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a6:5d:75:36:67:2b:2b:ce:d3:dd:97:6a:dc:fd:a9:7d:d5:
4c:9e:c4:fd:80:ca:f4:bb:b4:dc:28:99:5a:07:19:af:10:ee:
be:6e:a4:25:17:31:8b:09:53:41:12:d8:df:30:c4:60:8a:1a:
9a:8f:c5:49:af:c1:62:0d:8a:52:5d:63:dd:c2:cc:c3:1f:53:
bd:14:b4:e3:9f:e9:f7:bf:40:97:26:1f:a5:f8:96:fd:56:4d:
8a:d2:d8:e8:43:34:55:b2:dd:5a:8e:04:d7:91:c6:ac:a0:e3:
78:46:03:78:1e:ee:7b:4a:00:e2:ac:b2:39:93:9b:f1:0b:55:
5f:47:ee:29:1f:cb:5a:bd:aa:69:5b:4a:24:4b:73:80:bc:14:
32:ef:9e:de:1e:76:74:a2:ab:ae:98:67:e1:e5:4e:2c:02:9a:
db:87:0f:c1:6c:24:a9:4d:2b:b4:63:92:e4:e8:7d:7e:00:fa:
14:cd:00:da:88:c0:0a:61:0d:2f:23:fd:dc:fd:f0:f1:f6:ab:
45:d0:c8:79:2c:dd:ac:3d:c1:6a:b4:f6:cc:39:77:0c:4f:16:
02:b5:de:91:cc:e0:ce:1f:00:11:9d:ea:24:e8:ec:a1:31:51:
11:cf:58:30:3d:6f:bc:ff:e5:d1:39:73:b1:df:6d:32:e8:39:
da:8c:42:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBZPy9h1QI31ugzLLPPR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTUxMjA2OWU2NWM1OTA4MDJlY2U1YmY3YmQ4N2U2NmI4
ZjM1ZDMwHhcNMjUwNjEzMTYwMDM5WhcNMjUwNjE0MTYwMDM5WjAzMTEwLwYDVQQD
EyhkNmM3M2Q3ODE0Mjk1YTUxM2FmODc4MzVjNWRiYWY0NDU3ZmQ4NjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM4ROufKCU7kdT8r9EEa7wBhc+LG
M7ES6Cy65nYtoNgEg5XPp5URaVgWgpsraliUAy80m4/It1RoGa6kwUrScUHFsY7o
dQmtmoDWFgPLGdXBsyGMu+gVi8gOBTcSofjYWTfNDpAWMqnpFojb4eJOf2woTllu
1LAO7Fyz6d371XFXDzKJJ+g7DpZcPTkxrV4gCjtW8XYcO0Kia89HparTakmyv/pY
z72P0aKJmcl+giRKb8qU6hh8gg0uEFlaaSSORAMQ4TLfsCGQr50NT5lrIHYG+aZo
KjuRt0mk2LsxGjeGMup0P+gkOZI9dMdFDKdT+M7N26XiW9RrSp9YT9ABHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbHPXgUKVpROvh4NcXbr0RX/YZ9MB8GA1UdIwQY
MBaAFFlVEgaeZcWQgC7OW/e9h+ZrjzXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xYmVkMTctNWUzMy00M2ExLWJiOGYt
NDNhNDNkYTkyODlhLzEvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8xYmVkMTctNWUzMy00M2ExLWJiOGYtNDNhNDNkYTkyODlh
LzEvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKZddTZn
KyvO092Xatz9qX3VTJ7E/YDK9Lu03CiZWgcZrxDuvm6kJRcxiwlTQRLY3zDEYIoa
mo/FSa/BYg2KUl1j3cLMwx9TvRS045/p979AlyYfpfiW/VZNitLY6EM0VbLdWo4E
15HGrKDjeEYDeB7ue0oA4qyyOZOb8QtVX0fuKR/LWr2qaVtKJEtzgLwUMu+e3h52
dKKrrphn4eVOLAKa24cPwWwkqU0rtGOS5Oh9fgD6FM0A2ojACmENLyP93P3w8far
RdDIeSzdrD3BarT2zDl3DE8WArXekczgzh8AEZ3qJOjsoTFREc9YMD1vvP/l0Tlz
sd9tMug52oxCPg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:35 2025 by rpki-client