Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier: LeyJSuBB7Nqg1FxX7Km9TL34G4Inip7n2l0wMrsWWVI=
Subject key identifier: C5:5B:FC:C9:5D:33:03:40:F5:08:20:C1:89:8C:88:20:39:8C:FB:B6
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial: 01976F2C5EAEC0E56320CDBC1114FEF225AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number: 0BF6
Signing time: Sat 14 Jun 2025 16:01:08 +0000
Manifest this update: Sat 14 Jun 2025 16:01:08 +0000
Manifest next update: Sun 15 Jun 2025 16:01:08 +0000
Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: +GQzf3UlVv3kPndBeJAAu/ZTr0wx9gFofm1pjP19j9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:5e:ae:c0:e5:63:20:cd:bc:11:14:fe:f2:25:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Validity
Not Before: Jun 14 16:01:08 2025 GMT
Not After : Jun 15 16:01:08 2025 GMT
Subject: CN=c55bfcc95d330340f50820c1898c8820398cfbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a0:6e:7e:2f:74:5f:d6:20:1c:31:3f:28:85:
e2:8b:4b:31:33:de:e6:34:09:b1:d3:d5:e5:6d:3d:
84:c6:42:78:99:58:5b:03:9d:5f:42:22:6c:b5:da:
d0:9b:f2:ea:f1:75:9c:cd:28:88:52:25:04:ff:49:
bc:33:6f:e4:5e:48:fa:ce:f0:7a:7f:97:0e:16:22:
1b:4a:35:f6:c8:87:d8:c2:6a:b6:2b:0c:3e:7a:08:
40:b1:97:92:22:9d:47:5f:c9:a1:d3:ce:3b:e6:bb:
c3:dc:37:50:46:61:16:63:ad:40:82:e1:de:01:68:
43:13:d3:f6:8b:8e:a0:44:fb:3c:6b:e3:c2:d8:a3:
67:10:b4:2a:9d:30:e2:25:c8:4f:c1:4e:75:c0:9d:
84:cc:02:3a:a7:97:8c:2b:11:07:6a:76:b7:f0:c1:
81:46:98:91:db:e8:85:c8:20:bd:ff:63:d2:48:9d:
d3:a7:67:0c:38:69:5d:d6:68:a1:23:72:66:1e:10:
14:94:aa:9c:67:f5:44:c5:95:c0:b6:e9:d2:44:52:
62:9c:79:ea:a1:cf:ce:5a:ba:b3:ab:75:17:ab:73:
45:b5:49:b2:39:a9:49:e7:f8:ac:03:f2:d7:74:75:
86:80:ce:8e:94:f5:14:e9:3b:0a:02:48:99:f6:a5:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5B:FC:C9:5D:33:03:40:F5:08:20:C1:89:8C:88:20:39:8C:FB:B6
X509v3 Authority Key Identifier:
keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9d:32:e2:6c:26:1d:fb:10:a8:3c:6d:70:34:3c:a9:00:39:
ad:50:a9:0d:34:c2:b9:b2:60:6a:a9:e7:cd:65:44:fd:98:ab:
74:70:95:9b:53:bf:9c:13:52:8f:e5:e1:68:c7:c3:5e:59:18:
9f:24:19:c6:07:b0:50:41:7d:b5:4e:07:9d:49:f0:1d:0b:43:
97:db:8e:19:fb:59:df:07:82:44:8f:b9:66:89:6b:7d:70:49:
1f:17:c0:c1:34:25:6b:e4:37:9a:0e:48:9b:f0:47:a2:d5:3f:
f9:b0:2f:e0:7b:d2:e5:fb:c7:30:d4:41:3a:b5:c4:66:0b:94:
19:ac:e7:43:3e:f2:1f:3b:54:fd:fe:18:be:e9:cc:42:b2:a4:
e7:52:db:6c:63:24:27:74:a2:52:94:a1:0d:3f:cf:26:42:ee:
0a:67:69:34:82:15:c4:76:fc:d4:eb:ea:8f:55:a0:54:bf:6f:
b0:a5:70:4d:ab:f2:2a:50:44:c8:62:bc:d7:da:65:a2:12:a7:
95:24:50:df:84:a4:b7:30:28:49:bb:e2:e9:10:0a:43:21:02:
de:f9:13:02:43:35:8d:e4:b0:60:6a:9b:f6:7c:cd:3d:f2:c7:
9a:d4:1e:71:72:c0:f5:9a:bd:7d:5a:96:d4:a0:7d:68:c1:ae:
6d:bd:fa:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLF6uwOVjIM28ERT+8iWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMmYyZGJmZGQzMDlmMjYwMzI0Y2FhN2UzZWRhNzc5M2Y4
NTQxYTcwHhcNMjUwNjE0MTYwMTA4WhcNMjUwNjE1MTYwMTA4WjAzMTEwLwYDVQQD
EyhjNTViZmNjOTVkMzMwMzQwZjUwODIwYzE4OThjODgyMDM5OGNmYmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqBufi90X9YgHDE/KIXii0sxM97m
NAmx09XlbT2ExkJ4mVhbA51fQiJstdrQm/Lq8XWczSiIUiUE/0m8M2/kXkj6zvB6
f5cOFiIbSjX2yIfYwmq2Kww+eghAsZeSIp1HX8mh08475rvD3DdQRmEWY61AguHe
AWhDE9P2i46gRPs8a+PC2KNnELQqnTDiJchPwU51wJ2EzAI6p5eMKxEHana38MGB
RpiR2+iFyCC9/2PSSJ3Tp2cMOGld1mihI3JmHhAUlKqcZ/VExZXAtunSRFJinHnq
oc/OWrqzq3UXq3NFtUmyOalJ5/isA/LXdHWGgM6OlPUU6TsKAkiZ9qUY+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVb/MldMwNA9QggwYmMiCA5jPu2MB8GA1UdIwQY
MBaAFMEvLb/dMJ8mAyTKp+Ptp3k/hUGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmRiMGYtZTY3Yy00NzY5LTlhMGQt
MGZiZWFlY2Q5M2E0LzEvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85ZmRiMGYtZTY3Yy00NzY5LTlhMGQtMGZiZWFlY2Q5M2E0
LzEvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcp0y4mwm
HfsQqDxtcDQ8qQA5rVCpDTTCubJgaqnnzWVE/ZirdHCVm1O/nBNSj+XhaMfDXlkY
nyQZxgewUEF9tU4HnUnwHQtDl9uOGftZ3weCRI+5ZolrfXBJHxfAwTQla+Q3mg5I
m/BHotU/+bAv4HvS5fvHMNRBOrXEZguUGaznQz7yHztU/f4YvunMQrKk51LbbGMk
J3SiUpShDT/PJkLuCmdpNIIVxHb81Ovqj1WgVL9vsKVwTavyKlBEyGK819plohKn
lSRQ34SktzAoSbvi6RAKQyEC3vkTAkM1jeSwYGqb9nzNPfLHmtQecXLA9Zq9fVqW
1KB9aMGubb36lQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:29 2025 by rpki-client