Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
File: dWXhJLHEG5OxTX7eBda4B3eYmv0.mft (raw, json)
Hash identifier: EbiJ9CsNHrfGNFSwrRZkH5Sm3r8C4INspi950hf6tzY=
Subject key identifier: CA:F2:3C:59:E4:75:62:B0:A0:A7:4A:B2:6A:D5:4B:E7:49:13:D6:18
Authority key identifier: 75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
Certificate issuer: /CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Certificate serial: 01987ED3D008A9D19174CABE18491DC102B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
Manifest number: 13C1
Signing time: Wed 06 Aug 2025 10:01:07 +0000
Manifest this update: Wed 06 Aug 2025 10:01:07 +0000
Manifest next update: Thu 07 Aug 2025 10:01:07 +0000
Files and hashes: 1: dWXhJLHEG5OxTX7eBda4B3eYmv0.crl (hash: WdLTkug1Et9tTr+5aDqpMbllCwBmzP7WA4fvvzfkN+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:d0:08:a9:d1:91:74:ca:be:18:49:1d:c1:02:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Validity
Not Before: Aug 6 10:01:07 2025 GMT
Not After : Aug 7 10:01:07 2025 GMT
Subject: CN=caf23c59e47562b0a0a74ab26ad54be74913d618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:db:25:8e:51:d8:15:67:32:e7:52:1b:62:
f7:1c:f0:4e:7e:81:ff:22:fd:20:ac:0a:c6:ca:7c:
f3:b7:b7:29:01:ff:af:71:f6:f7:89:11:20:8b:0d:
fd:8c:1d:03:c9:bc:ec:93:5f:09:b1:65:67:91:d5:
c4:7e:d7:3d:26:58:e1:6e:05:3d:da:65:a7:c1:e7:
4d:99:be:d1:10:28:c9:d4:8e:c7:6f:39:07:1d:08:
d4:74:98:0b:56:10:92:17:b9:21:21:64:ba:fa:36:
5c:85:2f:30:b8:8c:14:0e:ad:7b:cf:49:f4:a1:29:
16:9d:5e:b6:cc:be:34:fc:05:8f:f1:17:9e:dd:70:
57:6b:a8:e5:b9:b8:fa:fe:cd:04:7e:d5:1d:3e:14:
36:91:fa:a7:d5:20:50:56:98:a7:24:24:e2:e3:33:
b9:2b:66:ec:ae:c0:0b:50:c1:ff:b0:2b:c7:cb:fa:
18:84:a5:54:d4:50:5e:55:54:eb:10:1e:14:2a:70:
74:0c:62:04:61:99:47:5d:f9:d4:51:5b:4e:f0:5a:
c8:56:8d:72:35:33:51:62:ae:3f:44:66:73:97:e4:
3a:93:68:19:d0:bd:2a:86:11:63:a4:69:ac:56:a0:
16:51:e6:97:6e:36:88:21:b5:8b:29:25:d5:b6:85:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F2:3C:59:E4:75:62:B0:A0:A7:4A:B2:6A:D5:4B:E7:49:13:D6:18
X509v3 Authority Key Identifier:
keyid:75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:30:a7:33:3c:90:5c:74:05:fb:b6:68:85:9c:b1:37:9d:a8:
e4:82:a6:23:01:af:6a:83:4a:9a:b0:9c:4e:55:6a:3e:52:ce:
af:78:26:29:0e:cb:c8:45:39:43:e7:c9:87:48:e0:bf:3e:7b:
43:9b:23:a0:56:a0:56:1a:cf:71:a9:c1:d1:90:cf:65:17:7f:
aa:ff:40:ff:62:1e:b5:82:76:11:8a:7b:f7:b7:0f:77:94:38:
fb:b6:18:ae:54:22:9d:87:c3:34:2f:e4:fc:53:97:1e:62:a9:
81:72:00:06:bf:8a:c5:62:59:40:e6:e4:40:f3:e8:a6:c3:6e:
c1:84:25:22:5f:38:3c:33:d3:e5:2e:ee:af:fc:d4:19:4a:a6:
72:61:59:81:e8:60:d5:4e:20:e5:59:d6:c2:c8:c1:a0:73:a3:
5b:79:d0:e3:e8:d9:0d:9a:92:df:af:1f:0f:1b:60:11:69:ab:
cb:0f:26:36:1a:db:30:27:03:6d:0f:7c:e1:c0:27:23:75:70:
02:07:a2:fa:4b:9c:60:7b:29:31:1f:57:33:5e:ab:9b:21:55:
69:de:45:75:8b:6c:25:9d:19:0f:f6:39:c5:52:00:1d:d9:9c:
b6:7c:41:d2:49:27:96:74:8f:cb:a4:ad:1d:13:de:dd:7d:9b:
87:49:2a:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+09AIqdGRdMq+GEkdwQKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjVlMTI0YjFjNDFiOTNiMTRkN2VkZTA1ZDZiODA3Nzc5
ODlhZmQwHhcNMjUwODA2MTAwMTA3WhcNMjUwODA3MTAwMTA3WjAzMTEwLwYDVQQD
EyhjYWYyM2M1OWU0NzU2MmIwYTBhNzRhYjI2YWQ1NGJlNzQ5MTNkNjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqLbJY5R2BVnMudSG2L3HPBOfoH/
Iv0grArGynzzt7cpAf+vcfb3iREgiw39jB0Dybzsk18JsWVnkdXEftc9JljhbgU9
2mWnwedNmb7RECjJ1I7HbzkHHQjUdJgLVhCSF7khIWS6+jZchS8wuIwUDq17z0n0
oSkWnV62zL40/AWP8Ree3XBXa6jlubj6/s0EftUdPhQ2kfqn1SBQVpinJCTi4zO5
K2bsrsALUMH/sCvHy/oYhKVU1FBeVVTrEB4UKnB0DGIEYZlHXfnUUVtO8FrIVo1y
NTNRYq4/RGZzl+Q6k2gZ0L0qhhFjpGmsVqAWUeaXbjaIIbWLKSXVtoUbbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMryPFnkdWKwoKdKsmrVS+dJE9YYMB8GA1UdIwQY
MBaAFHVl4SSxxBuTsU1+3gXWuAd3mJr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdYaEpMSEVHNU94VFg3ZUJkYTRCM2VZbXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85Njk1MmItNzliOC00ZTA0LWJjNGEt
MjllNDQ1ZGUyNDU5LzEvZFdYaEpMSEVHNU94VFg3ZUJkYTRCM2VZbXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi85Njk1MmItNzliOC00ZTA0LWJjNGEtMjllNDQ1ZGUyNDU5
LzEvZFdYaEpMSEVHNU94VFg3ZUJkYTRCM2VZbXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzCnMzyQ
XHQF+7ZohZyxN52o5IKmIwGvaoNKmrCcTlVqPlLOr3gmKQ7LyEU5Q+fJh0jgvz57
Q5sjoFagVhrPcanB0ZDPZRd/qv9A/2IetYJ2EYp797cPd5Q4+7YYrlQinYfDNC/k
/FOXHmKpgXIABr+KxWJZQObkQPPopsNuwYQlIl84PDPT5S7ur/zUGUqmcmFZgehg
1U4g5VnWwsjBoHOjW3nQ4+jZDZqS368fDxtgEWmryw8mNhrbMCcDbQ984cAnI3Vw
Agei+kucYHspMR9XM16rmyFVad5FdYtsJZ0ZD/Y5xVIAHdmctnxB0kknlnSPy6St
HRPe3X2bh0kq6w==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:40 2025 by rpki-client