Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
File: wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json)
Hash identifier: XfPrsNEP/Xrr5JFKhK4WUvpNHpCFthO4jKI5CTmued0=
Subject key identifier: 3A:BB:72:5B:41:41:C7:42:3E:09:2A:72:70:16:BC:F5:9C:E3:F9:1E
Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
Certificate issuer: /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Certificate serial: 01976F9A4221A7D8E55B074E8D6B56E8920E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 18:01:09 +0000
Manifest this update: Sat 14 Jun 2025 18:01:09 +0000
Manifest next update: Sun 15 Jun 2025 18:01:09 +0000
Files and hashes: 1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: vL8Qa9I0N00PdM3SEI96KmbzX3gjfZT1ZF9XtVL9hbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:42:21:a7:d8:e5:5b:07:4e:8d:6b:56:e8:92:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Validity
Not Before: Jun 14 18:01:09 2025 GMT
Not After : Jun 15 18:01:09 2025 GMT
Subject: CN=3abb725b4141c7423e092a727016bcf59ce3f91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:49:02:aa:71:4d:cb:ae:73:82:8c:f4:73:
ac:8d:da:93:3b:a7:3c:b2:1c:b6:f5:23:3b:61:05:
e3:05:9f:53:9f:0e:1d:44:19:44:8e:e3:a5:94:53:
03:c3:f3:e8:74:26:68:2a:a3:9e:2e:1e:47:0f:17:
31:b3:77:2c:4e:f6:79:14:14:7e:3a:71:48:6c:15:
84:59:a1:24:a1:9a:be:fd:22:2c:6b:4d:bc:24:12:
48:27:9d:f4:54:ad:d6:db:6e:de:a6:17:0c:a7:3c:
c0:ae:96:ff:c3:86:09:e2:a9:06:62:fe:5e:92:ee:
60:5c:45:d2:5b:fa:d2:1d:e1:4e:9d:4f:0f:44:8a:
8a:57:18:76:bb:86:cf:cf:c2:a5:46:ce:56:bf:e8:
c5:e1:3f:6e:ae:39:c9:cb:5e:2f:c5:50:c1:95:62:
46:58:0b:72:30:0d:89:ee:9a:c9:e6:74:6b:0d:82:
d5:11:74:c8:d0:84:63:28:c0:fe:30:ce:3d:5b:bf:
0a:83:a0:9a:15:29:d4:00:aa:dc:b5:7b:1a:3c:9e:
13:0c:42:14:65:d4:ca:68:87:0e:cd:de:54:05:db:
cd:8e:53:d0:a1:d6:f4:ce:61:72:69:33:01:8a:6d:
75:c7:8d:3e:bf:5b:9f:b9:b4:c9:93:32:e3:62:1b:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BB:72:5B:41:41:C7:42:3E:09:2A:72:70:16:BC:F5:9C:E3:F9:1E
X509v3 Authority Key Identifier:
keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a1:ab:0a:df:8d:0d:2b:dc:73:ce:cb:a4:62:83:60:12:a6:
cd:dd:ea:d0:85:ae:db:0a:5b:8c:60:26:d4:50:65:0b:0c:2b:
e5:5a:85:f8:55:d9:da:bb:79:9f:ea:42:dc:3f:95:1e:1f:89:
25:d9:60:4c:1b:58:62:2e:20:56:a7:83:a0:db:81:a2:0b:bc:
a8:8e:e5:52:24:1d:d1:bb:58:5e:db:28:ac:ee:74:cd:bb:5f:
04:6d:24:ca:e8:a8:c2:1a:a9:05:e5:b7:b2:da:11:69:eb:bc:
42:17:76:f9:ec:0e:b5:ca:7e:7c:22:0b:ea:ec:57:a2:e2:5a:
f6:6f:6e:ac:04:13:5f:08:0a:8d:2c:d3:4a:1f:22:54:c0:b1:
0f:5c:83:13:e8:b9:65:55:1c:53:b2:cc:76:2c:7f:c9:f9:64:
b0:e8:76:24:b4:d7:b3:a9:24:77:e7:96:39:9a:2d:94:39:ec:
d9:60:ff:75:f3:5f:6e:76:c6:fb:af:5f:03:29:e9:05:6a:6a:
19:49:2d:e1:ee:90:c6:6c:09:b0:ca:8c:d3:c1:2a:19:0b:d7:
71:bd:bf:ec:86:cb:f1:b7:12:de:13:d2:b8:eb:0a:66:6b:b0:
6f:10:be:2b:a0:03:d6:5e:c4:31:19:40:1d:36:c2:92:9e:f7:
8b:87:73:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmkIhp9jlWwdOjWtW6JIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDc0ZmRhNTcyOWY3MDVlNWZkOTJmMjI1ZWNhZjViOTNj
YjgyODgwHhcNMjUwNjE0MTgwMTA5WhcNMjUwNjE1MTgwMTA5WjAzMTEwLwYDVQQD
EygzYWJiNzI1YjQxNDFjNzQyM2UwOTJhNzI3MDE2YmNmNTljZTNmOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL9JAqpxTcuuc4KM9HOsjdqTO6c8
shy29SM7YQXjBZ9Tnw4dRBlEjuOllFMDw/PodCZoKqOeLh5HDxcxs3csTvZ5FBR+
OnFIbBWEWaEkoZq+/SIsa028JBJIJ530VK3W227ephcMpzzArpb/w4YJ4qkGYv5e
ku5gXEXSW/rSHeFOnU8PRIqKVxh2u4bPz8KlRs5Wv+jF4T9urjnJy14vxVDBlWJG
WAtyMA2J7prJ5nRrDYLVEXTI0IRjKMD+MM49W78Kg6CaFSnUAKrctXsaPJ4TDEIU
ZdTKaIcOzd5UBdvNjlPQodb0zmFyaTMBim11x40+v1ufubTJkzLjYhtQbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDq7cltBQcdCPgkqcnAWvPWc4/keMB8GA1UdIwQY
MBaAFMEHT9pXKfcF5f2S8iXsr1uTy4KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FkUDJsY3A5d1hsX1pMeUpleXZXNVBMZ29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTBkNjAtODc1Mi00YjZkLTg1Zjgt
NWU5NmMyMzJlM2Q1LzEvd1FkUDJsY3A5d1hsX1pMeUpleXZXNVBMZ29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZTBkNjAtODc1Mi00YjZkLTg1ZjgtNWU5NmMyMzJlM2Q1
LzEvd1FkUDJsY3A5d1hsX1pMeUpleXZXNVBMZ29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaGrCt+N
DSvcc87LpGKDYBKmzd3q0IWu2wpbjGAm1FBlCwwr5VqF+FXZ2rt5n+pC3D+VHh+J
JdlgTBtYYi4gVqeDoNuBogu8qI7lUiQd0btYXtsorO50zbtfBG0kyuiowhqpBeW3
stoRaeu8Qhd2+ewOtcp+fCIL6uxXouJa9m9urAQTXwgKjSzTSh8iVMCxD1yDE+i5
ZVUcU7LMdix/yflksOh2JLTXs6kkd+eWOZotlDns2WD/dfNfbnbG+69fAynpBWpq
GUkt4e6QxmwJsMqM08EqGQvXcb2/7IbL8bcS3hPSuOsKZmuwbxC+K6AD1l7EMRlA
HTbCkp73i4dzuA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:33:53 2025 by rpki-client