Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
File: wzdo22Ch8ho07lwqNDVFYXvvi0A.mft (raw, json)
Hash identifier: nfvA0QckF32OE/xcDIHr2y4BDoYbXcLQz+E+AVwmTPU=
Subject key identifier: 62:9E:66:1E:48:33:86:7F:35:2F:73:02:FB:41:B6:05:B4:E6:48:95
Authority key identifier: C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
Certificate issuer: /CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Certificate serial: 019894123AE2A4EDDFAB15C4CCD43DDDF4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
Manifest number: 1623
Signing time: Sun 10 Aug 2025 13:01:19 +0000
Manifest this update: Sun 10 Aug 2025 13:01:19 +0000
Manifest next update: Mon 11 Aug 2025 13:01:19 +0000
Files and hashes: 1: wzdo22Ch8ho07lwqNDVFYXvvi0A.crl (hash: FXgAlzBKHoo+ZJ0+5ueykIRR5mCgs6cpgWLVBkL6L48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:3a:e2:a4:ed:df:ab:15:c4:cc:d4:3d:dd:f4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Validity
Not Before: Aug 10 13:01:19 2025 GMT
Not After : Aug 11 13:01:19 2025 GMT
Subject: CN=629e661e4833867f352f7302fb41b605b4e64895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:17:ad:76:2d:a0:17:b4:43:c1:3e:f0:fe:
9c:9b:5c:54:18:80:b6:ca:d1:aa:7f:48:6f:04:ba:
bf:d8:64:d4:b0:0f:f8:41:a1:ca:d0:a3:96:81:b7:
63:34:91:92:2d:89:47:6e:af:bf:af:1a:9d:bb:e5:
94:0b:be:75:ce:69:56:fd:7d:ff:65:8b:8a:d4:f2:
f0:ab:48:9a:49:c0:28:b3:dd:b1:56:9f:71:df:f2:
d7:70:ec:3f:a7:eb:38:cc:6c:d0:a0:22:5c:af:48:
6e:48:38:b9:33:f2:8c:72:98:4c:f5:e7:b8:92:23:
88:d1:36:9c:d8:16:e6:1a:0b:11:39:95:cc:88:8c:
f7:42:4d:02:eb:21:33:13:ea:3e:e4:1e:73:33:7e:
95:14:9b:8e:cf:84:1b:20:eb:88:d5:3c:a4:5a:5a:
b3:f5:f2:fc:cc:0f:4c:d2:86:63:59:ae:71:76:bb:
b0:05:fc:30:1b:51:9d:9a:23:bd:33:fa:eb:4d:70:
4b:00:b9:c0:10:52:2d:3a:87:c7:76:3f:c4:35:3d:
d5:0a:33:d8:c3:d7:aa:53:a1:3b:39:c2:f2:62:b4:
d2:16:c0:74:fa:e8:f5:f7:4c:15:c8:4f:ee:ed:9a:
97:91:e4:da:8e:92:31:0a:89:d9:89:1c:df:15:c9:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9E:66:1E:48:33:86:7F:35:2F:73:02:FB:41:B6:05:B4:E6:48:95
X509v3 Authority Key Identifier:
keyid:C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:88:35:e1:a8:ae:e2:22:5e:fc:4e:ec:33:8e:0b:90:7a:0b:
c8:84:f7:b8:94:bd:f9:03:b8:6e:b5:f9:20:73:d6:ec:20:26:
9f:fc:fa:64:f3:ed:8b:46:64:30:9c:91:fc:80:f7:15:c6:1a:
0c:9f:5d:8e:0d:08:72:c1:d9:3c:ff:ea:50:32:d6:1e:6a:ae:
62:8a:1c:9d:a3:2d:2f:01:8e:2f:17:a8:4a:15:c8:69:81:3c:
15:eb:0f:51:71:be:7f:24:b7:00:f4:c8:0b:b5:bb:60:73:81:
9b:0a:6b:7c:41:29:bd:a5:31:af:85:db:49:d3:1a:24:5c:bd:
e4:a7:bc:ff:50:69:36:2f:60:81:83:1d:b0:17:10:db:58:5e:
8b:1b:40:1d:47:0d:50:89:d6:59:90:a3:ac:53:70:ff:f7:08:
d1:2f:f4:d6:a3:d9:75:77:d1:96:f4:ef:2e:51:eb:f4:ae:7b:
22:4c:5d:13:0b:97:6f:4f:bf:dc:19:9b:e2:b4:38:d4:ac:8e:
23:1b:6f:04:1e:64:0f:34:48:f5:a1:e2:8e:2f:52:f5:7f:24:
c2:d3:97:94:a0:b1:de:23:d9:fb:ac:71:e8:f6:69:c1:2a:fd:
81:4d:10:43:9e:0b:22:7e:1a:ce:1c:47:3e:8b:f5:57:15:49:
01:f5:ec:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUEjripO3fqxXEzNQ93fTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzc2OGRiNjBhMWYyMWEzNGVlNWMyYTM0MzU0NTYxN2Jl
ZjhiNDAwHhcNMjUwODEwMTMwMTE5WhcNMjUwODExMTMwMTE5WjAzMTEwLwYDVQQD
Eyg2MjllNjYxZTQ4MzM4NjdmMzUyZjczMDJmYjQxYjYwNWI0ZTY0ODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn8XrXYtoBe0Q8E+8P6cm1xUGIC2
ytGqf0hvBLq/2GTUsA/4QaHK0KOWgbdjNJGSLYlHbq+/rxqdu+WUC751zmlW/X3/
ZYuK1PLwq0iaScAos92xVp9x3/LXcOw/p+s4zGzQoCJcr0huSDi5M/KMcphM9ee4
kiOI0Tac2BbmGgsROZXMiIz3Qk0C6yEzE+o+5B5zM36VFJuOz4QbIOuI1TykWlqz
9fL8zA9M0oZjWa5xdruwBfwwG1GdmiO9M/rrTXBLALnAEFItOofHdj/ENT3VCjPY
w9eqU6E7OcLyYrTSFsB0+uj190wVyE/u7ZqXkeTajpIxConZiRzfFclTkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKeZh5IM4Z/NS9zAvtBtgW05kiVMB8GA1UdIwQY
MBaAFMM3aNtgofIaNO5cKjQ1RWF774tAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iMWVjNWMtMTc3MC00YjFhLTg5NGIt
YzI2MTFiNzQyMGYyLzEvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9iMWVjNWMtMTc3MC00YjFhLTg5NGItYzI2MTFiNzQyMGYy
LzEvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHog14aiu
4iJe/E7sM44LkHoLyIT3uJS9+QO4brX5IHPW7CAmn/z6ZPPti0ZkMJyR/ID3FcYa
DJ9djg0IcsHZPP/qUDLWHmquYoocnaMtLwGOLxeoShXIaYE8FesPUXG+fyS3APTI
C7W7YHOBmwprfEEpvaUxr4XbSdMaJFy95Ke8/1BpNi9ggYMdsBcQ21heixtAHUcN
UInWWZCjrFNw//cI0S/01qPZdXfRlvTvLlHr9K57IkxdEwuXb0+/3Bmb4rQ41KyO
IxtvBB5kDzRI9aHiji9S9X8kwtOXlKCx3iPZ+6xx6PZpwSr9gU0QQ54LIn4azhxH
Pov1VxVJAfXsWA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:21 2025 by rpki-client