Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
File: wwvzI77VsMENPzevDrNjrafKxKs.mft (raw, json)
Hash identifier: OeSXWExhFyXvWqKkHTRTSNDjWYvWrTs3SOKC1SeyW/w=
Subject key identifier: 54:AE:BE:9B:04:AA:F7:32:C0:8A:ED:8B:E0:1C:9B:21:CE:6C:EC:97
Authority key identifier: C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB
Certificate issuer: /CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
Certificate serial: 01984B5469E5C2D16675684156611DC245FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
Manifest number: 0943
Signing time: Sun 27 Jul 2025 10:01:20 +0000
Manifest this update: Sun 27 Jul 2025 10:01:20 +0000
Manifest next update: Mon 28 Jul 2025 10:01:20 +0000
Files and hashes: 1: wwvzI77VsMENPzevDrNjrafKxKs.crl (hash: R6n26HJdEmD12mtj/+wPnDLMUV7WUIHtlPekn7E8Bos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:69:e5:c2:d1:66:75:68:41:56:61:1d:c2:45:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
Validity
Not Before: Jul 27 10:01:20 2025 GMT
Not After : Jul 28 10:01:20 2025 GMT
Subject: CN=54aebe9b04aaf732c08aed8be01c9b21ce6cec97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:82:a3:2a:87:1e:ff:35:fb:3e:c1:ea:b3:
83:9c:22:57:2a:5b:1d:46:9b:77:ca:2b:2d:fd:b4:
cf:f2:08:8e:74:d9:36:d2:7c:91:42:eb:3b:80:9d:
96:c6:5f:af:52:ff:06:6d:fa:c3:bf:c2:db:5d:15:
cc:d1:36:da:4e:ce:4e:5f:c9:93:09:89:2e:17:16:
42:2c:09:2f:49:45:35:44:48:ba:20:89:b1:28:0b:
9c:17:af:fa:b0:9f:54:16:ac:74:4c:2a:1c:9e:ff:
c5:ee:75:2f:52:f1:d1:1f:36:fe:1e:ee:cf:c3:db:
25:69:20:58:3b:53:04:7b:9d:69:ba:57:fb:b6:b7:
c3:07:1a:85:af:ec:31:2a:14:5e:a6:4a:af:92:74:
6d:8e:f5:3b:e9:6d:a1:54:6c:a4:4a:e8:9c:a1:bb:
e9:c7:fd:c3:95:26:4e:57:f7:da:f7:2e:b3:a4:f8:
62:b2:0a:af:9c:ce:a2:d9:72:4b:c5:ed:da:4b:fe:
55:dc:76:ba:c9:74:e0:8c:05:27:71:7c:fb:a0:4b:
48:ca:8f:3e:69:bc:4e:8f:68:0e:27:03:5b:ae:90:
4d:87:b5:b0:15:9f:12:a5:29:0a:34:2f:32:20:97:
24:4f:5c:d1:e2:9d:ec:1c:0c:b3:f1:50:ae:77:c6:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AE:BE:9B:04:AA:F7:32:C0:8A:ED:8B:E0:1C:9B:21:CE:6C:EC:97
X509v3 Authority Key Identifier:
keyid:C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5d:98:e6:68:fc:90:da:e0:af:0e:2c:df:7a:8d:97:36:e9:
31:3e:67:90:bc:b1:7b:e1:9c:ef:9b:86:93:ed:53:9f:e0:4e:
95:5c:fa:4b:9c:71:75:fa:b4:14:10:29:36:68:89:c2:eb:ab:
74:b6:70:db:e8:81:03:99:06:db:02:1c:10:cf:ea:19:aa:32:
f4:ab:5b:14:d8:09:e7:ec:b2:2b:2e:ba:e1:1c:32:2e:ac:a6:
53:31:66:eb:f8:9d:1c:a3:6e:65:bf:05:c4:be:91:38:bc:25:
41:6c:4b:de:97:a0:1c:3b:f1:ae:80:c4:7c:66:af:ce:aa:17:
8a:30:69:32:d4:4f:b7:73:b4:04:ee:66:4d:0e:d3:76:1a:ad:
cb:d1:31:7c:91:a8:32:af:6c:f1:ea:e9:40:c6:8a:7f:31:5a:
7e:e5:46:da:61:bf:0c:98:30:62:fa:0e:b6:52:e1:20:0d:b2:
32:a2:b5:ce:86:ca:6e:9b:fa:8f:8f:88:3d:de:ae:36:dd:f0:
d9:5a:dd:51:e3:80:84:12:ea:44:37:99:38:86:02:1a:9e:77:
5b:fd:22:2d:fc:2e:55:da:17:bb:6f:63:17:29:bc:7f:16:47:
86:a6:2e:39:da:60:00:c3:5b:eb:94:4b:67:9a:98:b8:9b:34:
55:c6:53:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVGnlwtFmdWhBVmEdwkX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMGJmMzIzYmVkNWIwYzEwZDNmMzdhZjBlYjM2M2FkYTdj
YWM0YWIwHhcNMjUwNzI3MTAwMTIwWhcNMjUwNzI4MTAwMTIwWjAzMTEwLwYDVQQD
Eyg1NGFlYmU5YjA0YWFmNzMyYzA4YWVkOGJlMDFjOWIyMWNlNmNlYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk6CoyqHHv81+z7B6rODnCJXKlsd
Rpt3yist/bTP8giOdNk20nyRQus7gJ2Wxl+vUv8GbfrDv8LbXRXM0TbaTs5OX8mT
CYkuFxZCLAkvSUU1REi6IImxKAucF6/6sJ9UFqx0TCocnv/F7nUvUvHRHzb+Hu7P
w9slaSBYO1MEe51pulf7trfDBxqFr+wxKhRepkqvknRtjvU76W2hVGykSuicobvp
x/3DlSZOV/fa9y6zpPhisgqvnM6i2XJLxe3aS/5V3Ha6yXTgjAUncXz7oEtIyo8+
abxOj2gOJwNbrpBNh7WwFZ8SpSkKNC8yIJckT1zR4p3sHAyz8VCud8Y+gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSuvpsEqvcywIrti+AcmyHObOyXMB8GA1UdIwQY
MBaAFMML8yO+1bDBDT83rw6zY62nysSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3d2ekk3N1ZzTUVOUHpldkRyTmpyYWZLeEtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zZjA1NmEtMTI0ZS00ZjEyLWIzZGIt
ZmNhMzFmNjQ1YmY1LzEvd3d2ekk3N1ZzTUVOUHpldkRyTmpyYWZLeEtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8zZjA1NmEtMTI0ZS00ZjEyLWIzZGItZmNhMzFmNjQ1YmY1
LzEvd3d2ekk3N1ZzTUVOUHpldkRyTmpyYWZLeEtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQV2Y5mj8
kNrgrw4s33qNlzbpMT5nkLyxe+Gc75uGk+1Tn+BOlVz6S5xxdfq0FBApNmiJwuur
dLZw2+iBA5kG2wIcEM/qGaoy9KtbFNgJ5+yyKy664RwyLqymUzFm6/idHKNuZb8F
xL6ROLwlQWxL3pegHDvxroDEfGavzqoXijBpMtRPt3O0BO5mTQ7Tdhqty9ExfJGo
Mq9s8erpQMaKfzFafuVG2mG/DJgwYvoOtlLhIA2yMqK1zobKbpv6j4+IPd6uNt3w
2VrdUeOAhBLqRDeZOIYCGp53W/0iLfwuVdoXu29jFym8fxZHhqYuOdpgAMNb65RL
Z5qYuJs0VcZTCw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:39:05 2025 by rpki-client