Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
File: wkDtrImIu1blLeEopdZaj07z8Tg.mft (raw, json)
Hash identifier: 54LLa3hqbTYN1SaZ+5Hy7JU33mAVCrw7bIcDdVxi09E=
Subject key identifier: 0D:53:C7:62:2D:61:79:C8:C7:6C:88:AC:EB:38:8D:AC:39:DF:C6:DC
Authority key identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
Certificate issuer: /CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Certificate serial: 0197684DF1AC5BCD6B8FA98223773CDD2370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
Manifest number: 0BF7
Signing time: Fri 13 Jun 2025 08:00:27 +0000
Manifest this update: Fri 13 Jun 2025 08:00:27 +0000
Manifest next update: Sat 14 Jun 2025 08:00:27 +0000
Files and hashes: 1: wkDtrImIu1blLeEopdZaj07z8Tg.crl (hash: Uono1E7614UK5UOhxBiC41n5Ebi/QHBWQNipf4VJx88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:f1:ac:5b:cd:6b:8f:a9:82:23:77:3c:dd:23:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Validity
Not Before: Jun 13 08:00:27 2025 GMT
Not After : Jun 14 08:00:27 2025 GMT
Subject: CN=0d53c7622d6179c8c76c88aceb388dac39dfc6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:06:b0:ae:a6:67:f7:d9:b2:11:f6:aa:e2:
35:75:19:29:7c:77:49:fa:21:5c:54:2e:b3:a5:3d:
34:e2:fb:8c:11:20:f4:d1:74:04:7e:27:64:68:0a:
94:99:09:d1:07:b8:83:9f:f8:1d:10:0a:99:fa:4b:
c9:b9:f0:e6:2c:c9:fe:fb:e3:d4:21:fc:f9:6a:64:
7e:44:1a:6a:26:df:8d:f9:b1:b3:21:a0:bb:46:f7:
c3:4b:37:0d:3b:ab:fe:18:31:a1:51:40:e3:5f:21:
31:99:01:50:7c:30:0e:80:1e:27:33:9e:27:4d:16:
80:5e:64:03:d8:e8:c8:3b:e7:78:89:73:63:10:1b:
0e:d9:2e:86:72:38:3f:88:1a:26:21:1d:f9:bd:ce:
c6:89:f5:9f:88:71:9a:3a:0c:d3:90:bd:51:59:73:
32:9f:36:53:70:44:d4:be:47:ec:e1:bd:ce:3f:08:
2d:d5:7b:d7:e8:db:8a:c9:25:c2:82:c2:30:01:10:
ad:78:2c:88:4d:8c:6d:4a:9c:f7:4c:a5:07:ae:5a:
69:27:22:2f:81:10:17:2a:65:2a:7a:83:46:94:08:
1c:d3:33:92:a4:fb:9a:3b:93:93:8e:55:76:2f:ff:
7a:70:ec:01:00:32:8d:76:d7:d8:5b:28:ac:ae:f4:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:53:C7:62:2D:61:79:C8:C7:6C:88:AC:EB:38:8D:AC:39:DF:C6:DC
X509v3 Authority Key Identifier:
keyid:C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:91:ac:fb:69:19:c5:f0:40:9f:68:9f:22:dd:d0:e8:26:5f:
0f:30:e2:cd:ff:61:f4:7d:63:70:be:05:c9:39:72:cc:c8:8d:
96:f5:77:9b:62:ac:3d:01:52:f3:51:fb:d4:12:9d:91:43:6a:
b4:55:f9:25:08:2b:5b:5d:37:29:a7:c5:26:32:b6:9a:bb:4c:
cc:e3:05:f6:20:6b:27:f5:31:52:61:2d:fa:41:41:cd:d1:0c:
fc:09:3e:45:bf:ef:b7:35:af:5e:68:4c:49:fc:eb:c9:52:a4:
10:d2:76:ac:e4:0c:50:a3:7d:7b:4e:bf:3b:d7:d0:ef:aa:5b:
5d:39:a2:43:bf:13:99:49:aa:d5:ce:1d:7a:9b:89:29:77:99:
49:c6:50:02:4d:88:d2:fe:bd:a2:51:fd:32:04:0d:b5:d6:4d:
12:58:aa:b1:5e:4f:04:6d:80:ad:c2:ce:87:b8:ff:b7:3b:15:
96:e0:b0:69:7d:5a:f6:09:44:0f:15:21:0d:fc:c5:13:78:e6:
6e:aa:a3:f0:c4:bf:6d:1e:21:b7:19:38:a6:ea:04:f5:16:90:
bd:63:cb:6a:1a:51:58:eb:34:45:c4:31:aa:ca:ec:69:c9:40:
0a:b9:51:37:a0:b3:c2:9c:39:e6:d9:37:6d:d8:de:52:6d:58:
9b:0e:0e:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTfGsW81rj6mCI3c83SNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNDBlZGFjODk4OGJiNTZlNTJkZTEyOGE1ZDY1YThmNGVm
M2YxMzgwHhcNMjUwNjEzMDgwMDI3WhcNMjUwNjE0MDgwMDI3WjAzMTEwLwYDVQQD
EygwZDUzYzc2MjJkNjE3OWM4Yzc2Yzg4YWNlYjM4OGRhYzM5ZGZjNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDUGsK6mZ/fZshH2quI1dRkpfHdJ
+iFcVC6zpT004vuMESD00XQEfidkaAqUmQnRB7iDn/gdEAqZ+kvJufDmLMn+++PU
Ifz5amR+RBpqJt+N+bGzIaC7RvfDSzcNO6v+GDGhUUDjXyExmQFQfDAOgB4nM54n
TRaAXmQD2OjIO+d4iXNjEBsO2S6Gcjg/iBomIR35vc7GifWfiHGaOgzTkL1RWXMy
nzZTcETUvkfs4b3OPwgt1XvX6NuKySXCgsIwARCteCyITYxtSpz3TKUHrlppJyIv
gRAXKmUqeoNGlAgc0zOSpPuaO5OTjlV2L/96cOwBADKNdtfYWyisrvRKTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1Tx2ItYXnIx2yIrOs4jaw538bcMB8GA1UdIwQY
MBaAFMJA7ayJiLtW5S3hKKXWWo9O8/E4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2tEdHJJbUl1MWJsTGVFb3BkWmFqMDd6OFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lNTM0YjAtNzAyMy00ZTcxLWEyNjQt
YTcxNDk3ZjE2OGUxLzEvd2tEdHJJbUl1MWJsTGVFb3BkWmFqMDd6OFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lNTM0YjAtNzAyMy00ZTcxLWEyNjQtYTcxNDk3ZjE2OGUx
LzEvd2tEdHJJbUl1MWJsTGVFb3BkWmFqMDd6OFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZGs+2kZ
xfBAn2ifIt3Q6CZfDzDizf9h9H1jcL4FyTlyzMiNlvV3m2KsPQFS81H71BKdkUNq
tFX5JQgrW103KafFJjK2mrtMzOMF9iBrJ/UxUmEt+kFBzdEM/Ak+Rb/vtzWvXmhM
SfzryVKkENJ2rOQMUKN9e06/O9fQ76pbXTmiQ78TmUmq1c4depuJKXeZScZQAk2I
0v69olH9MgQNtdZNEliqsV5PBG2ArcLOh7j/tzsVluCwaX1a9glEDxUhDfzFE3jm
bqqj8MS/bR4htxk4puoE9RaQvWPLahpRWOs0RcQxqsrsaclACrlRN6Czwpw55tk3
bdjeUm1Ymw4O+g==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:56 2025 by rpki-client