Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
File: Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft (raw, json)
Hash identifier: 36Ndkn0MNKUqCNh52o/zl4q7Kho2BDsIIBAQxBbfM2Q=
Subject key identifier: 58:F7:3E:BF:40:A0:55:AB:D9:B7:05:45:74:B1:FB:2C:91:7B:78:FC
Authority key identifier: 5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
Certificate issuer: /CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Certificate serial: 01977E9ECFE21BB92DA1E90939F9E0E6B487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
Manifest number: 101D
Signing time: Tue 17 Jun 2025 16:00:26 +0000
Manifest this update: Tue 17 Jun 2025 16:00:26 +0000
Manifest next update: Wed 18 Jun 2025 16:00:26 +0000
Files and hashes: 1: Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl (hash: hrUKHVuufuwtHLsZF2xi3b6LEhQes/X1n2WQVvP9278=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9e:cf:e2:1b:b9:2d:a1:e9:09:39:f9:e0:e6:b4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Validity
Not Before: Jun 17 16:00:26 2025 GMT
Not After : Jun 18 16:00:26 2025 GMT
Subject: CN=58f73ebf40a055abd9b7054574b1fb2c917b78fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:22:dc:21:b1:9c:41:74:08:30:5d:6e:5f:
9b:83:5c:2a:5c:c9:20:de:c2:dd:d1:3d:6f:cc:f9:
30:bc:3d:55:83:35:9b:a8:48:df:90:69:8d:f2:5c:
af:ec:e6:6e:67:8a:e7:83:c2:ec:08:ac:43:74:a6:
8f:4d:b5:be:05:13:1c:30:ff:d0:8a:71:5e:84:51:
69:f2:51:c5:d2:e2:23:5d:86:9f:ca:cb:64:8b:0d:
79:1a:fc:9e:97:e3:0a:85:4d:10:72:0b:d0:10:aa:
08:0c:8c:4f:67:d2:7c:4f:9c:e9:d2:92:49:e1:d7:
fa:1a:ce:da:28:3a:35:29:93:93:c5:12:7c:9e:03:
58:9b:49:5f:9e:7e:88:aa:d8:5f:ba:8c:10:a2:04:
75:11:a3:fe:7d:f1:32:bc:21:24:d6:fa:db:42:bb:
ba:2d:29:d1:b3:b7:59:42:ac:50:80:4d:06:4a:75:
34:2f:cc:a5:b9:86:22:9d:67:f3:bc:3b:0c:c3:ef:
50:e3:3d:cd:de:1f:c8:10:3d:32:25:54:b2:ca:c0:
db:41:2b:73:ae:4e:da:90:a0:6d:dc:d1:93:5c:39:
58:44:02:2b:68:ae:0c:52:a4:89:84:5b:cb:5a:39:
8f:ca:f8:a3:ae:68:d7:bc:96:2c:93:4e:63:9d:a4:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F7:3E:BF:40:A0:55:AB:D9:B7:05:45:74:B1:FB:2C:91:7B:78:FC
X509v3 Authority Key Identifier:
keyid:5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3f:34:d3:a8:11:86:8e:dc:da:42:56:0c:3b:55:86:57:c0:
53:30:e9:4b:e0:13:6c:48:13:92:14:91:b5:53:b0:2a:dc:65:
13:e2:9d:58:ce:3d:15:51:83:cc:a1:9a:75:bb:7a:43:90:90:
ad:3c:04:5a:ae:69:89:25:d2:62:78:4c:0f:28:bf:3e:03:40:
0f:18:22:cb:5e:87:b0:b3:79:66:12:95:7f:1e:1c:f9:59:ed:
4a:e0:2b:26:6a:a2:63:a2:88:d3:b6:0c:16:b3:9f:fe:9f:d5:
df:17:b1:0f:e2:a5:1f:d4:49:c0:0a:f0:a1:9c:83:5a:16:c4:
02:ff:61:e0:bd:8d:2b:c3:b4:e4:b0:de:bf:1f:c2:f0:d3:b0:
4f:d5:c5:d5:4b:4a:58:f2:83:99:c9:fa:a3:d7:35:72:fc:da:
7f:96:3b:3a:01:da:4a:67:d9:8a:39:7c:22:bd:23:30:c2:e3:
93:c8:06:b8:ad:ce:d1:ad:35:d9:7f:f9:b0:bf:f1:58:17:55:
17:1e:8d:51:05:8b:c5:50:2c:17:2f:a2:64:b3:70:0e:1a:c1:
a9:1a:19:ad:12:e9:80:9f:b8:25:8a:70:e7:fe:0e:09:77:fa:
50:d0:5d:f1:79:86:d3:95:3e:63:c5:dc:8e:e7:b6:3d:bc:43:
f7:fb:5a:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd+ns/iG7ktoekJOfng5rSHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWZhNTJmMWU5ZjM1MTBjMmNkMmFlMjQ2MTU1MmExYWQy
ZTNkM2EwHhcNMjUwNjE3MTYwMDI2WhcNMjUwNjE4MTYwMDI2WjAzMTEwLwYDVQQD
Eyg1OGY3M2ViZjQwYTA1NWFiZDliNzA1NDU3NGIxZmIyYzkxN2I3OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxci3CGxnEF0CDBdbl+bg1wqXMkg
3sLd0T1vzPkwvD1VgzWbqEjfkGmN8lyv7OZuZ4rng8LsCKxDdKaPTbW+BRMcMP/Q
inFehFFp8lHF0uIjXYafystkiw15Gvyel+MKhU0QcgvQEKoIDIxPZ9J8T5zp0pJJ
4df6Gs7aKDo1KZOTxRJ8ngNYm0lfnn6IqthfuowQogR1EaP+ffEyvCEk1vrbQru6
LSnRs7dZQqxQgE0GSnU0L8yluYYinWfzvDsMw+9Q4z3N3h/IED0yJVSyysDbQStz
rk7akKBt3NGTXDlYRAIraK4MUqSJhFvLWjmPyvijrmjXvJYsk05jnaQBuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFj3Pr9AoFWr2bcFRXSx+yyRe3j8MB8GA1UdIwQY
MBaAFFsfpS8enzUQws0q4kYVUqGtLj06MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3gtbEx4NmZOUkRDelNyaVJoVlNvYTB1UFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNmNhY2ItOWU5MS00OTExLTg0NTYt
NWRlZDc2NmE1NTA2LzEvV3gtbEx4NmZOUkRDelNyaVJoVlNvYTB1UFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8yNmNhY2ItOWU5MS00OTExLTg0NTYtNWRlZDc2NmE1NTA2
LzEvV3gtbEx4NmZOUkRDelNyaVJoVlNvYTB1UFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPj8006gR
ho7c2kJWDDtVhlfAUzDpS+ATbEgTkhSRtVOwKtxlE+KdWM49FVGDzKGadbt6Q5CQ
rTwEWq5piSXSYnhMDyi/PgNADxgiy16HsLN5ZhKVfx4c+VntSuArJmqiY6KI07YM
FrOf/p/V3xexD+KlH9RJwArwoZyDWhbEAv9h4L2NK8O05LDevx/C8NOwT9XF1UtK
WPKDmcn6o9c1cvzaf5Y7OgHaSmfZijl8Ir0jMMLjk8gGuK3O0a012X/5sL/xWBdV
Fx6NUQWLxVAsFy+iZLNwDhrBqRoZrRLpgJ+4JYpw5/4OCXf6UNBd8XmG05U+Y8Xc
jue2PbxD9/taqQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:00:55 2025 by rpki-client