Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: tZXq9/3M3Qo9OGznBYVhgmKvPiKrXDiXLSOfaZwSV2k=
Subject key identifier: AA:B8:33:81:64:81:EA:71:5F:DB:56:D6:ED:30:A8:5B:CE:67:FD:0D
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 0198496540159F45C340E03E30B919985B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 0252
Signing time: Sun 27 Jul 2025 01:00:28 +0000
Manifest this update: Sun 27 Jul 2025 01:00:28 +0000
Manifest next update: Mon 28 Jul 2025 01:00:28 +0000
Files and hashes: 1: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: KUGHhYLADUr9huIa49hQ2t8Ak/UfVaZmWKH68mcGjTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:40:15:9f:45:c3:40:e0:3e:30:b9:19:98:5b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Jul 27 01:00:28 2025 GMT
Not After : Jul 28 01:00:28 2025 GMT
Subject: CN=aab833816481ea715fdb56d6ed30a85bce67fd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:07:31:f4:76:02:51:b4:2e:ef:2e:a6:5e:
bc:50:c8:28:78:d4:28:92:e5:75:37:d6:6f:72:f1:
01:52:5a:7a:70:d4:a6:6f:cf:6e:8b:0a:e6:88:c4:
20:8c:07:8d:a5:13:97:31:14:e5:a9:cf:34:d1:84:
4a:9f:07:ba:ca:ff:7e:c9:48:4a:d5:68:24:af:e4:
e9:69:40:de:75:7a:07:67:e9:a6:ed:07:d7:56:1b:
2e:18:5e:3d:a0:0b:32:40:1f:bd:5b:75:99:8c:cd:
f2:aa:bf:60:91:e4:52:af:28:64:a0:0a:ac:12:7b:
39:6e:9c:67:b4:8d:de:c7:fc:36:9f:34:55:26:55:
26:41:28:44:8f:03:72:11:94:81:ad:d2:a9:c5:a7:
26:30:c0:e4:d3:8a:1a:c6:05:4c:81:8d:b8:4f:2b:
5c:03:9d:b0:38:73:30:08:91:cb:d2:d0:ec:5a:c9:
0c:a9:8e:e0:cb:70:3a:52:61:eb:1e:e9:ef:04:ad:
8a:74:07:6a:67:63:1a:bf:38:e8:de:32:9d:fb:75:
36:62:db:56:52:0c:0f:d6:55:cd:a6:fc:63:f8:21:
96:cc:48:18:4b:52:f5:fc:8c:d2:66:c7:2b:d5:5b:
64:b8:be:e6:c1:1a:35:37:04:3c:75:4b:ae:fb:32:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B8:33:81:64:81:EA:71:5F:DB:56:D6:ED:30:A8:5B:CE:67:FD:0D
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:69:39:61:41:83:6b:93:de:0d:7c:aa:84:1e:e2:77:74:8b:
29:83:7a:fc:04:46:08:b6:ec:c4:aa:c5:53:17:a8:4d:0e:fd:
33:4a:c4:5e:da:2a:3b:d5:36:d0:89:0b:f3:10:6c:92:ab:a9:
8a:2a:87:cb:b3:0e:6c:99:9c:ef:54:d2:a0:8f:43:be:e0:b0:
7a:1a:0d:27:62:65:b5:c6:e6:74:88:e2:15:21:a1:79:9e:69:
18:8b:24:32:7e:15:38:51:c4:c7:bb:95:ab:75:7a:44:28:7f:
32:41:1c:90:79:11:e2:16:5c:60:60:ec:27:10:44:c9:8f:5b:
a2:f3:37:64:73:fc:ef:5c:9f:cf:85:bb:83:1a:32:f3:97:c4:
18:3e:95:f5:6f:dc:35:2e:0d:0a:56:85:76:dc:53:5f:31:1b:
22:07:31:a7:2a:7f:41:e9:6d:86:18:a8:1c:c1:10:58:cc:1f:
04:af:59:46:60:32:c7:23:b6:cd:06:3a:4c:29:12:cc:66:51:
a4:16:39:f8:1a:bb:c7:8e:4f:9c:da:a4:78:75:67:9f:3e:8e:
35:7e:76:6f:cf:38:e2:1d:7c:cd:df:13:13:35:97:22:47:21:
fd:cb:cf:90:cf:30:47:7c:d0:ee:e2:8e:cf:80:18:82:7d:60:
15:8a:95:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZUAVn0XDQOA+MLkZmFs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYjQyZTRhNWMxYzkxZWJjNGVmZmZmMTQ4YjMxMmZlN2I3
ZTg5NzAwHhcNMjUwNzI3MDEwMDI4WhcNMjUwNzI4MDEwMDI4WjAzMTEwLwYDVQQD
EyhhYWI4MzM4MTY0ODFlYTcxNWZkYjU2ZDZlZDMwYTg1YmNlNjdmZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoagHMfR2AlG0Lu8upl68UMgoeNQo
kuV1N9ZvcvEBUlp6cNSmb89uiwrmiMQgjAeNpROXMRTlqc800YRKnwe6yv9+yUhK
1Wgkr+TpaUDedXoHZ+mm7QfXVhsuGF49oAsyQB+9W3WZjM3yqr9gkeRSryhkoAqs
Ens5bpxntI3ex/w2nzRVJlUmQShEjwNyEZSBrdKpxacmMMDk04oaxgVMgY24Tytc
A52wOHMwCJHL0tDsWskMqY7gy3A6UmHrHunvBK2KdAdqZ2Mavzjo3jKd+3U2YttW
UgwP1lXNpvxj+CGWzEgYS1L1/IzSZscr1VtkuL7mwRo1NwQ8dUuu+zLSFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq4M4FkgepxX9tW1u0wqFvOZ/0NMB8GA1UdIwQY
MBaAFMK0LkpcHJHrxO//8UizEv57folwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQt
YzczY2JlNzBhYmI5LzEvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQtYzczY2JlNzBhYmI5
LzEvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWk5YUGD
a5PeDXyqhB7id3SLKYN6/ARGCLbsxKrFUxeoTQ79M0rEXtoqO9U20IkL8xBskqup
iiqHy7MObJmc71TSoI9DvuCwehoNJ2JltcbmdIjiFSGheZ5pGIskMn4VOFHEx7uV
q3V6RCh/MkEckHkR4hZcYGDsJxBEyY9bovM3ZHP871yfz4W7gxoy85fEGD6V9W/c
NS4NClaFdtxTXzEbIgcxpyp/QelthhioHMEQWMwfBK9ZRmAyxyO2zQY6TCkSzGZR
pBY5+Bq7x45PnNqkeHVnnz6ONX52b8844h18zd8TEzWXIkch/cvPkM8wR3zQ7uKO
z4AYgn1gFYqVDQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:07:48 2025 by rpki-client