Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
File: w9bWn9WH0FQXblPRknJoI2GxZzY.mft (raw, json)
Hash identifier: jX8EY6HCeHInzF6h1148iiJCO2UXUhqviInLgSmxGyM=
Subject key identifier: 26:56:FB:47:43:82:75:50:E7:A7:55:65:EF:99:28:C6:77:31:EB:8B
Authority key identifier: C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
Certificate issuer: /CN=c3d6d69fd587d054176e53d19272682361b16736
Certificate serial: 01978846F2CDB327F92B684D1A866F396D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
Manifest number: 1599
Signing time: Thu 19 Jun 2025 13:00:40 +0000
Manifest this update: Thu 19 Jun 2025 13:00:40 +0000
Manifest next update: Fri 20 Jun 2025 13:00:40 +0000
Files and hashes: 1: w9bWn9WH0FQXblPRknJoI2GxZzY.crl (hash: Wx4PSR8LLalHG21QJmTgFI2c6X3UcCjmvRY6FsYdKeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:46:f2:cd:b3:27:f9:2b:68:4d:1a:86:6f:39:6d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3d6d69fd587d054176e53d19272682361b16736
Validity
Not Before: Jun 19 13:00:40 2025 GMT
Not After : Jun 20 13:00:40 2025 GMT
Subject: CN=2656fb4743827550e7a75565ef9928c67731eb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:b5:76:da:11:21:78:5d:d3:ed:8d:63:5b:
bb:d4:32:94:95:db:53:5a:bc:83:d5:ae:3e:ea:06:
4d:f9:17:f4:eb:78:da:2a:96:fe:c7:69:0d:ed:26:
cc:6a:9e:67:7d:ab:ef:5b:0e:43:26:73:ce:d8:4a:
26:da:44:2e:fb:4a:de:1e:da:d8:e6:dc:21:51:d9:
92:b1:a1:a2:08:6f:50:59:11:44:d3:fe:fa:ee:7a:
8a:a0:14:be:3e:51:2e:98:a2:46:6e:a3:c8:e3:84:
c6:1b:e4:82:07:36:69:7c:47:a9:c1:1c:14:54:2c:
ab:f3:5c:1d:b0:4e:d1:7b:3b:9b:d7:76:a1:45:0f:
d7:9b:45:33:8c:91:3a:01:4c:ea:3a:5b:5e:a2:3a:
9d:8d:92:4e:c4:49:e5:db:d0:7e:b7:43:61:31:13:
6c:ce:07:a6:77:4f:5b:72:08:05:09:5b:56:8c:72:
8d:1d:62:fc:23:1b:ac:b5:db:2e:e4:02:8a:8c:00:
99:c3:90:8b:b4:a4:5e:c4:6d:5f:af:02:df:e8:15:
a7:af:2d:c0:66:ff:ea:b0:d9:40:f7:1a:97:53:e8:
a3:07:14:86:5c:1f:fa:f0:ff:6c:2d:b5:07:a7:91:
34:e3:23:c1:da:63:e9:c8:7b:84:b8:70:0e:8d:cc:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:56:FB:47:43:82:75:50:E7:A7:55:65:EF:99:28:C6:77:31:EB:8B
X509v3 Authority Key Identifier:
keyid:C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a4:6a:dd:16:ba:65:a5:02:13:04:cf:49:66:d9:4e:69:9d:
ab:e6:5f:4a:96:01:8a:85:0b:d0:73:92:47:f1:4f:58:a6:63:
50:ec:e5:31:f1:dd:7c:43:04:09:e2:f3:3f:ff:3e:10:86:84:
a0:50:e2:47:c7:7a:64:37:09:0c:b4:31:36:0c:64:79:f0:db:
d5:32:29:3b:b9:8c:fc:ac:fd:7c:a4:9c:f2:b0:f3:d2:a0:42:
e1:ea:70:9d:2d:53:6b:c9:04:af:d2:9b:c3:5a:90:c4:97:81:
bf:bc:4a:0e:1e:df:37:5f:d1:47:b4:0a:1e:6d:1c:ce:68:95:
4e:66:6e:8f:eb:06:ab:55:f8:87:84:92:21:c3:c8:8b:78:36:
3b:dc:c5:74:a3:3d:53:0a:9d:02:33:27:f9:f7:14:63:67:cc:
33:7d:08:07:0c:c7:d5:81:89:71:bf:af:86:97:a6:48:c5:9a:
37:c0:92:68:f1:9d:61:ca:ab:6a:91:15:55:ae:4f:36:10:96:
c4:77:1a:49:66:7f:04:f8:05:1a:a1:2e:1a:fb:0a:8d:81:f4:
8a:78:d6:f5:44:e5:ff:0f:85:51:f0:60:ec:63:30:eb:2c:5e:
f8:d4:8a:b8:f2:23:c5:3d:46:2f:c6:eb:8a:4a:b5:8b:92:be:
58:58:01:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeIRvLNsyf5K2hNGoZvOW1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZDZkNjlmZDU4N2QwNTQxNzZlNTNkMTkyNzI2ODIzNjFi
MTY3MzYwHhcNMjUwNjE5MTMwMDQwWhcNMjUwNjIwMTMwMDQwWjAzMTEwLwYDVQQD
EygyNjU2ZmI0NzQzODI3NTUwZTdhNzU1NjVlZjk5MjhjNjc3MzFlYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oi1dtoRIXhd0+2NY1u71DKUldtT
WryD1a4+6gZN+Rf063jaKpb+x2kN7SbMap5nfavvWw5DJnPO2Eom2kQu+0reHtrY
5twhUdmSsaGiCG9QWRFE0/767nqKoBS+PlEumKJGbqPI44TGG+SCBzZpfEepwRwU
VCyr81wdsE7Rezub13ahRQ/Xm0UzjJE6AUzqOlteojqdjZJOxEnl29B+t0NhMRNs
zgemd09bcggFCVtWjHKNHWL8Ixustdsu5AKKjACZw5CLtKRexG1frwLf6BWnry3A
Zv/qsNlA9xqXU+ijBxSGXB/68P9sLbUHp5E04yPB2mPpyHuEuHAOjcztswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZW+0dDgnVQ56dVZe+ZKMZ3MeuLMB8GA1UdIwQY
MBaAFMPW1p/Vh9BUF25T0ZJyaCNhsWc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzliV245V0gwRlFYYmxQUmtuSm9JMkd4WnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kNzc0YmYtMDBmZS00Mzc5LWFkMjQt
Y2EwODM2MzE4OTk1LzEvdzliV245V0gwRlFYYmxQUmtuSm9JMkd4WnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9kNzc0YmYtMDBmZS00Mzc5LWFkMjQtY2EwODM2MzE4OTk1
LzEvdzliV245V0gwRlFYYmxQUmtuSm9JMkd4WnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqRq3Ra6
ZaUCEwTPSWbZTmmdq+ZfSpYBioUL0HOSR/FPWKZjUOzlMfHdfEMECeLzP/8+EIaE
oFDiR8d6ZDcJDLQxNgxkefDb1TIpO7mM/Kz9fKSc8rDz0qBC4epwnS1Ta8kEr9Kb
w1qQxJeBv7xKDh7fN1/RR7QKHm0czmiVTmZuj+sGq1X4h4SSIcPIi3g2O9zFdKM9
UwqdAjMn+fcUY2fMM30IBwzH1YGJcb+vhpemSMWaN8CSaPGdYcqrapEVVa5PNhCW
xHcaSWZ/BPgFGqEuGvsKjYH0injW9UTl/w+FUfBg7GMw6yxe+NSKuPIjxT1GL8br
ikq1i5K+WFgBpg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 16:17:12 2025 by rpki-client