Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
File: wkDtrImIu1blLeEopdZaj07z8Tg.mft (raw, json)
Hash identifier: rxcYXx2JfKLGVUug3Di47pDk8GYOfYS9Ee+ZqXheqEo=
Subject key identifier: A0:A3:43:A6:A3:F6:6F:21:18:9F:5F:0D:D7:AF:3C:B3:B0:B9:90:BF
Authority key identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
Certificate issuer: /CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Certificate serial: 01987A897C29483BAAFDFE166A07546BC8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
Manifest number: 0C85
Signing time: Tue 05 Aug 2025 14:01:27 +0000
Manifest this update: Tue 05 Aug 2025 14:01:27 +0000
Manifest next update: Wed 06 Aug 2025 14:01:27 +0000
Files and hashes: 1: wkDtrImIu1blLeEopdZaj07z8Tg.crl (hash: u6Vu4gU13DQ5E7ngFB9ZlipcGt06MEAE5Le+jzZobN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:7c:29:48:3b:aa:fd:fe:16:6a:07:54:6b:c8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Validity
Not Before: Aug 5 14:01:27 2025 GMT
Not After : Aug 6 14:01:27 2025 GMT
Subject: CN=a0a343a6a3f66f21189f5f0dd7af3cb3b0b990bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:98:f8:62:02:73:f7:9e:f7:66:0d:98:64:
52:9e:be:12:06:be:1a:86:57:7e:08:a3:ad:4c:3c:
00:0d:4e:55:b3:8a:88:0e:74:df:31:77:37:79:77:
91:aa:91:41:d2:db:f7:d8:e4:5c:bf:22:e2:b9:4a:
7a:b0:60:56:30:b2:56:d7:55:2f:cb:f4:1e:bb:70:
5d:df:c4:68:93:8e:66:62:3e:fd:04:a6:50:1a:7f:
9a:97:e8:ae:f3:d9:d3:31:5a:cc:7c:3c:87:95:32:
2c:cb:26:e4:26:d4:4a:14:04:49:67:83:fd:12:7e:
e4:c6:30:c9:fe:78:f1:ef:ac:fc:35:5d:1d:15:12:
27:c0:fb:ce:6c:cf:81:75:9c:41:ce:91:22:1c:b9:
66:c6:c7:86:7c:4b:22:b6:6d:75:58:e3:af:38:2e:
3d:dd:78:00:55:48:c7:fe:7b:f3:62:9a:ab:c4:6c:
55:48:5c:90:02:3e:2a:82:05:46:56:c3:b4:10:a2:
35:0c:e8:cb:08:23:94:f5:fa:58:b0:1f:d8:d2:ed:
d0:5b:f2:24:32:15:02:16:f5:97:05:15:3a:6b:fc:
95:87:78:39:c6:f3:9a:55:3b:a5:05:3f:69:6c:17:
1d:e6:37:99:b9:92:e1:38:a7:da:e4:0a:ae:2f:36:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A3:43:A6:A3:F6:6F:21:18:9F:5F:0D:D7:AF:3C:B3:B0:B9:90:BF
X509v3 Authority Key Identifier:
keyid:C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:10:98:1f:70:03:32:32:d1:9a:20:3b:8c:2a:c2:14:d9:32:
be:d8:89:36:4d:05:64:3b:d7:c5:21:2e:80:13:50:56:4c:85:
7a:9b:49:43:d8:f3:60:03:99:4d:ff:d4:29:61:2e:9d:f4:26:
8c:9c:b2:9a:bc:c7:47:30:1d:ff:bf:43:c1:bb:84:b6:e2:b6:
18:69:e4:a1:a4:60:d0:4e:82:e5:81:6d:8c:f4:52:c5:ef:c6:
82:c0:38:a8:b1:76:86:45:23:da:99:35:bc:51:79:b2:5f:71:
ca:20:e4:05:26:6a:50:63:79:ef:b4:fe:36:cb:f4:0c:b6:ec:
70:5e:5b:fc:c3:c6:fc:bc:2b:c4:51:d0:43:7c:3a:6e:ff:c8:
80:f0:79:b8:19:6f:c7:41:34:0f:a1:34:c4:b2:df:37:52:87:
34:dc:0e:4f:ca:c3:6d:5d:c1:52:d7:fa:5c:44:a0:c6:77:af:
0b:4d:00:75:e2:8e:36:fc:40:62:60:72:a6:33:a5:0f:4d:f9:
4e:5d:3b:63:9a:a0:dd:5e:d9:e2:62:92:00:7c:e2:b6:d7:b2:
e2:d8:7a:82:0c:3d:40:74:a6:58:e4:0d:00:f7:67:3c:13:eb:
21:90:41:b1:ae:8c:da:31:a9:16:db:ba:c7:ec:b7:7b:06:ac:
6c:77:61:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iXwpSDuq/f4WagdUa8i2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNDBlZGFjODk4OGJiNTZlNTJkZTEyOGE1ZDY1YThmNGVm
M2YxMzgwHhcNMjUwODA1MTQwMTI3WhcNMjUwODA2MTQwMTI3WjAzMTEwLwYDVQQD
EyhhMGEzNDNhNmEzZjY2ZjIxMTg5ZjVmMGRkN2FmM2NiM2IwYjk5MGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzluY+GICc/ee92YNmGRSnr4SBr4a
hld+CKOtTDwADU5Vs4qIDnTfMXc3eXeRqpFB0tv32ORcvyLiuUp6sGBWMLJW11Uv
y/Qeu3Bd38Rok45mYj79BKZQGn+al+iu89nTMVrMfDyHlTIsyybkJtRKFARJZ4P9
En7kxjDJ/njx76z8NV0dFRInwPvObM+BdZxBzpEiHLlmxseGfEsitm11WOOvOC49
3XgAVUjH/nvzYpqrxGxVSFyQAj4qggVGVsO0EKI1DOjLCCOU9fpYsB/Y0u3QW/Ik
MhUCFvWXBRU6a/yVh3g5xvOaVTulBT9pbBcd5jeZuZLhOKfa5AquLzbhHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCjQ6aj9m8hGJ9fDdevPLOwuZC/MB8GA1UdIwQY
MBaAFMJA7ayJiLtW5S3hKKXWWo9O8/E4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2tEdHJJbUl1MWJsTGVFb3BkWmFqMDd6OFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lNTM0YjAtNzAyMy00ZTcxLWEyNjQt
YTcxNDk3ZjE2OGUxLzEvd2tEdHJJbUl1MWJsTGVFb3BkWmFqMDd6OFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lNTM0YjAtNzAyMy00ZTcxLWEyNjQtYTcxNDk3ZjE2OGUx
LzEvd2tEdHJJbUl1MWJsTGVFb3BkWmFqMDd6OFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuxCYH3AD
MjLRmiA7jCrCFNkyvtiJNk0FZDvXxSEugBNQVkyFeptJQ9jzYAOZTf/UKWEunfQm
jJyymrzHRzAd/79DwbuEtuK2GGnkoaRg0E6C5YFtjPRSxe/GgsA4qLF2hkUj2pk1
vFF5sl9xyiDkBSZqUGN577T+Nsv0DLbscF5b/MPG/LwrxFHQQ3w6bv/IgPB5uBlv
x0E0D6E0xLLfN1KHNNwOT8rDbV3BUtf6XESgxnevC00AdeKONvxAYmBypjOlD035
Tl07Y5qg3V7Z4mKSAHzittey4th6ggw9QHSmWOQNAPdnPBPrIZBBsa6M2jGpFtu6
x+y3ewasbHdhiA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:03:43 2025 by rpki-client