
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
File: WX2pAlHCK1uljAuii6BJC51tQgU.mft (raw, json)
Hash identifier: e2lZkDeM9FWjEUoIXQEq5ezNIn6OJUb26avQwHl9gk8=
Subject key identifier: A6:30:47:5F:88:EE:58:56:0C:25:3B:E4:E9:C1:62:55:52:CB:40:91
Authority key identifier: 59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05
Certificate issuer: /CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205
Certificate serial: 01987D8B897D30487BBD213C37C72F11D765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
Manifest number: 1069
Signing time: Wed 06 Aug 2025 04:02:33 +0000
Manifest this update: Wed 06 Aug 2025 04:02:33 +0000
Manifest next update: Thu 07 Aug 2025 04:02:33 +0000
Files and hashes: 1: WX2pAlHCK1uljAuii6BJC51tQgU.crl (hash: 0BH805R7th0HnDTPQQgKnon0D9Hog38upqL0RApkG3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:89:7d:30:48:7b:bd:21:3c:37:c7:2f:11:d7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205
Validity
Not Before: Aug 6 04:02:33 2025 GMT
Not After : Aug 7 04:02:33 2025 GMT
Subject: CN=a630475f88ee58560c253be4e9c1625552cb4091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:4d:63:bf:bc:dd:93:fc:39:24:0e:df:d0:
e7:32:31:61:87:ca:8c:57:67:2c:21:28:ed:bd:e6:
48:6a:73:d7:b5:ec:02:2a:77:74:d2:15:f3:d0:67:
04:46:a3:b1:c7:e5:dc:39:98:99:f4:f2:6b:c7:a3:
3e:aa:58:76:6a:89:18:e2:90:d4:6a:0c:16:48:e0:
a3:57:d1:2e:8b:6f:c0:3b:3d:55:f2:7a:3c:33:bf:
a6:43:be:05:7e:8c:ef:14:d5:5a:57:be:f3:25:f5:
f1:4c:89:d4:95:64:98:93:9c:83:a7:48:c2:6d:65:
c3:30:f1:b7:0f:e2:9c:73:0a:c3:b1:6d:ba:4c:4d:
73:b4:21:3f:4b:a6:f0:3d:5d:56:14:9a:c3:50:8a:
21:9c:ce:68:10:08:24:ea:7f:08:4a:f6:d1:73:eb:
60:2d:29:35:63:ca:d6:28:16:83:18:a2:ce:e3:dd:
4e:a2:fe:56:3f:06:af:d7:de:c0:d8:34:06:0d:63:
64:27:c0:aa:22:19:dd:b8:62:48:b3:94:26:09:a3:
4d:f6:16:76:f8:a5:3c:9f:bc:df:2b:7a:92:92:c0:
ab:88:68:10:02:55:49:cc:6e:bd:ec:2a:f4:18:25:
85:98:0f:66:43:0c:28:8f:81:82:e0:96:16:e6:58:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:30:47:5F:88:EE:58:56:0C:25:3B:E4:E9:C1:62:55:52:CB:40:91
X509v3 Authority Key Identifier:
keyid:59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4f:38:91:a6:4b:a6:a1:66:bb:69:f0:18:2b:60:b4:29:9f:
e6:a1:9b:a6:24:9b:2d:0d:f6:fa:18:bd:39:f0:fe:03:dd:e8:
e9:c1:6c:c8:23:7b:17:28:ea:3c:6f:0b:a0:c7:ff:a9:37:07:
55:b3:ee:86:d3:6b:b6:d1:72:90:da:99:6c:4f:f7:f6:2a:9d:
ad:e9:15:97:94:73:83:f2:b7:f7:b8:63:ae:2a:3f:ec:28:ee:
7e:3f:15:6c:81:72:e2:bd:15:73:d4:d3:8e:bc:82:97:fd:af:
83:5b:95:bd:f5:30:34:00:c7:bb:5d:26:a4:98:1c:a8:d5:1e:
56:e9:fa:ba:a0:92:e7:aa:0e:cd:af:c3:52:da:6d:d5:49:b8:
f1:0f:a8:fa:66:d1:0f:7d:d2:9b:5e:e0:18:91:63:2a:14:63:
af:90:3b:fd:9d:99:e7:7c:b6:57:93:b9:2f:37:51:96:af:69:
94:de:c6:51:2e:1b:43:82:e9:dc:7b:c1:16:e4:09:67:1a:40:
d0:f9:3f:5b:e3:f0:d1:98:95:a4:dc:7e:8e:87:8f:dc:46:0e:
96:a5:37:a9:d3:14:38:66:11:d9:fe:e1:b8:9c:0a:b5:23:f8:
3f:88:15:a8:54:36:c2:65:c1:fa:c6:1e:66:99:33:ad:aa:21:
45:83:7d:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9i4l9MEh7vSE8N8cvEddlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5N2RhOTAyNTFjMjJiNWJhNThjMGJhMjhiYTA0OTBiOWQ2
ZDQyMDUwHhcNMjUwODA2MDQwMjMzWhcNMjUwODA3MDQwMjMzWjAzMTEwLwYDVQQD
EyhhNjMwNDc1Zjg4ZWU1ODU2MGMyNTNiZTRlOWMxNjI1NTUyY2I0MDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk5NY7+83ZP8OSQO39DnMjFhh8qM
V2csISjtveZIanPXtewCKnd00hXz0GcERqOxx+XcOZiZ9PJrx6M+qlh2aokY4pDU
agwWSOCjV9Eui2/AOz1V8no8M7+mQ74FfozvFNVaV77zJfXxTInUlWSYk5yDp0jC
bWXDMPG3D+KccwrDsW26TE1ztCE/S6bwPV1WFJrDUIohnM5oEAgk6n8ISvbRc+tg
LSk1Y8rWKBaDGKLO491Oov5WPwav197A2DQGDWNkJ8CqIhnduGJIs5QmCaNN9hZ2
+KU8n7zfK3qSksCriGgQAlVJzG697Cr0GCWFmA9mQwwoj4GC4JYW5lgQJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYwR1+I7lhWDCU75OnBYlVSy0CRMB8GA1UdIwQY
MBaAFFl9qQJRwitbpYwLoougSQudbUIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1gycEFsSENLMXVsakF1aWk2QkpDNTF0UWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mYjk0ODItYzAxZC00MmQ1LWFmNjMt
ZTE3YmU4MmY0M2NjLzEvV1gycEFsSENLMXVsakF1aWk2QkpDNTF0UWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mYjk0ODItYzAxZC00MmQ1LWFmNjMtZTE3YmU4MmY0M2Nj
LzEvV1gycEFsSENLMXVsakF1aWk2QkpDNTF0UWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsk84kaZL
pqFmu2nwGCtgtCmf5qGbpiSbLQ32+hi9OfD+A93o6cFsyCN7FyjqPG8LoMf/qTcH
VbPuhtNrttFykNqZbE/39iqdrekVl5Rzg/K397hjrio/7Cjufj8VbIFy4r0Vc9TT
jryCl/2vg1uVvfUwNADHu10mpJgcqNUeVun6uqCS56oOza/DUtpt1Um48Q+o+mbR
D33Sm17gGJFjKhRjr5A7/Z2Z53y2V5O5LzdRlq9plN7GUS4bQ4Lp3HvBFuQJZxpA
0Pk/W+Pw0ZiVpNx+joeP3EYOlqU3qdMUOGYR2f7huJwKtSP4P4gVqFQ2wmXB+sYe
ZpkzraohRYN9Yw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:10:51 2025 by rpki-client