Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier: fcvssfyQerT3B3TbegV8FvO+zQAuRohQKk1amXgX88I=
Subject key identifier: 0D:B3:BF:77:12:51:FD:58:33:07:C1:B7:2C:61:2D:AF:34:2F:A1:73
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial: 01984B54911080EC7976C8DF5B857775E444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number: 0C68
Signing time: Sun 27 Jul 2025 10:01:29 +0000
Manifest this update: Sun 27 Jul 2025 10:01:29 +0000
Manifest next update: Mon 28 Jul 2025 10:01:29 +0000
Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: nWxxwx8C2mX6jBtWonrl00eE4FhrzqzdcvFCo09n8ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:91:10:80:ec:79:76:c8:df:5b:85:77:75:e4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Validity
Not Before: Jul 27 10:01:29 2025 GMT
Not After : Jul 28 10:01:29 2025 GMT
Subject: CN=0db3bf771251fd583307c1b72c612daf342fa173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:4a:80:d3:2e:a5:57:2b:5c:ec:ac:27:70:
0d:62:f9:54:51:ef:3a:8d:a5:91:7a:c6:4a:19:c1:
92:75:35:89:2d:53:0c:cb:cb:69:bf:b0:20:13:1f:
7b:17:f7:26:0a:86:15:cf:96:5e:3d:09:3f:6e:80:
32:2b:9b:b8:71:c2:6a:c3:f9:03:96:80:40:6e:08:
67:02:e7:48:77:23:55:2d:b7:dc:dd:37:5f:62:0a:
a9:e2:11:92:7a:62:3a:cd:be:cd:22:b6:ab:1f:73:
25:e7:6c:19:be:65:4a:e3:08:fb:fd:da:6c:c6:f5:
c9:66:09:cd:3f:53:59:14:57:56:56:0d:85:56:24:
96:fc:5e:75:8b:fa:33:a2:e3:26:2f:ae:29:b7:57:
f2:4e:a5:56:b9:2d:18:86:76:92:ed:1f:9e:13:04:
22:ad:6c:8e:7b:54:b3:95:18:87:6c:37:1b:ad:e1:
ad:ac:88:30:c7:70:4c:fa:a9:df:5b:15:47:35:cb:
b7:b4:d6:c5:f5:62:ca:4c:25:f0:47:75:09:fb:d4:
7b:18:93:c5:95:e1:79:c8:e5:c2:51:02:ca:b3:1f:
b5:c2:14:63:8e:33:f1:d6:5f:b3:af:46:37:c4:aa:
a4:d4:15:cb:94:f8:59:05:d5:fa:ff:62:e7:59:59:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B3:BF:77:12:51:FD:58:33:07:C1:B7:2C:61:2D:AF:34:2F:A1:73
X509v3 Authority Key Identifier:
keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e3:b6:f0:27:89:d2:51:05:d8:8e:78:2d:60:5b:9b:a3:dd:
fa:d4:54:0b:20:a5:9b:36:b5:40:03:09:ff:4b:10:48:98:25:
74:80:12:ea:6e:35:84:15:89:75:d6:ee:22:c2:fd:d5:6b:8d:
8a:b7:f3:76:2b:3a:1a:1f:c3:bc:e7:1e:e7:d5:93:5f:23:a0:
11:cb:0d:03:6d:7e:8f:fd:01:75:09:56:e3:69:77:ef:d3:51:
b1:ff:08:11:34:36:c5:e3:ce:58:1a:e3:ab:e2:59:e4:9f:3f:
04:01:5d:ee:6c:3a:95:ec:fe:43:59:a5:0f:65:81:76:cd:94:
60:a1:73:e6:13:88:88:d8:96:5a:9e:62:4e:8f:38:82:07:f8:
2a:d8:db:bd:0a:71:6a:01:03:dc:82:3d:9e:dc:15:3e:ff:46:
76:9a:59:6b:17:48:dd:1c:a1:d1:91:f6:ee:3a:e3:4b:69:e7:
5d:2c:d7:5a:b6:22:08:ea:24:b3:48:27:bf:62:1f:0a:63:23:
e5:93:88:78:b9:87:51:b1:34:26:a7:45:13:1f:8b:cc:8a:74:
a7:d3:c2:99:2b:af:7e:3c:24:fb:6f:18:99:76:d6:97:42:83:
45:c0:ce:90:2a:de:90:ce:69:42:f2:d8:e8:74:16:c2:e2:b6:
0d:bc:80:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVJEQgOx5dsjfW4V3deREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMmYyZGJmZGQzMDlmMjYwMzI0Y2FhN2UzZWRhNzc5M2Y4
NTQxYTcwHhcNMjUwNzI3MTAwMTI5WhcNMjUwNzI4MTAwMTI5WjAzMTEwLwYDVQQD
EygwZGIzYmY3NzEyNTFmZDU4MzMwN2MxYjcyYzYxMmRhZjM0MmZhMTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTlKgNMupVcrXOysJ3ANYvlUUe86
jaWResZKGcGSdTWJLVMMy8tpv7AgEx97F/cmCoYVz5ZePQk/boAyK5u4ccJqw/kD
loBAbghnAudIdyNVLbfc3TdfYgqp4hGSemI6zb7NIrarH3Ml52wZvmVK4wj7/dps
xvXJZgnNP1NZFFdWVg2FViSW/F51i/ozouMmL64pt1fyTqVWuS0YhnaS7R+eEwQi
rWyOe1SzlRiHbDcbreGtrIgwx3BM+qnfWxVHNcu3tNbF9WLKTCXwR3UJ+9R7GJPF
leF5yOXCUQLKsx+1whRjjjPx1l+zr0Y3xKqk1BXLlPhZBdX6/2LnWVkavwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2zv3cSUf1YMwfBtyxhLa80L6FzMB8GA1UdIwQY
MBaAFMEvLb/dMJ8mAyTKp+Ptp3k/hUGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmRiMGYtZTY3Yy00NzY5LTlhMGQt
MGZiZWFlY2Q5M2E0LzEvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85ZmRiMGYtZTY3Yy00NzY5LTlhMGQtMGZiZWFlY2Q5M2E0
LzEvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOO28CeJ
0lEF2I54LWBbm6Pd+tRUCyClmza1QAMJ/0sQSJgldIAS6m41hBWJddbuIsL91WuN
irfzdis6Gh/DvOce59WTXyOgEcsNA21+j/0BdQlW42l379NRsf8IETQ2xePOWBrj
q+JZ5J8/BAFd7mw6lez+Q1mlD2WBds2UYKFz5hOIiNiWWp5iTo84ggf4KtjbvQpx
agED3II9ntwVPv9GdppZaxdI3Ryh0ZH27jrjS2nnXSzXWrYiCOoks0gnv2IfCmMj
5ZOIeLmHUbE0JqdFEx+LzIp0p9PCmSuvfjwk+28YmXbWl0KDRcDOkCrekM5pQvLY
6HQWwuK2DbyABQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:34:36 2025 by rpki-client