
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
File: wKmyD2ubglk-wH4MuLuHDOEYZdw.mft (raw, json)
Hash identifier: n87eQKQZIp5pjvbfdrswB0Nieiq87+P6tQCNv/DZaEY=
Subject key identifier: CD:9E:C2:31:F0:35:8A:1F:34:8D:91:46:E3:9A:C9:01:16:EC:4D:E1
Authority key identifier: C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC
Certificate issuer: /CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
Certificate serial: 0199225570151511375BDCE30236264DB2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
Manifest number: 09E2
Signing time: Sun 07 Sep 2025 04:00:48 +0000
Manifest this update: Sun 07 Sep 2025 04:00:48 +0000
Manifest next update: Mon 08 Sep 2025 04:00:48 +0000
Files and hashes: 1: wKmyD2ubglk-wH4MuLuHDOEYZdw.crl (hash: 9WWjfgk3PjQMKc/BmLhrV48N4sqWPzcmFHjt4xOIOpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:70:15:15:11:37:5b:dc:e3:02:36:26:4d:b2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
Validity
Not Before: Sep 7 04:00:48 2025 GMT
Not After : Sep 8 04:00:48 2025 GMT
Subject: CN=cd9ec231f0358a1f348d9146e39ac90116ec4de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:12:38:6a:18:b7:67:d2:dd:70:8e:99:ef:
00:84:29:bf:94:72:11:a9:95:b1:4d:a0:90:55:65:
8a:71:22:7c:1c:ea:01:9c:0d:64:18:6f:7e:4f:68:
1c:11:5e:9f:de:13:7d:8c:d2:f3:73:ec:9d:b1:09:
ac:47:f2:71:bc:c3:47:37:a6:18:43:6c:0f:86:de:
17:bb:e6:d1:fc:93:5d:71:7a:2c:18:1e:75:0a:3d:
dd:35:1d:e2:5a:48:19:f7:0c:2b:d3:e3:2c:a5:90:
5b:39:1b:64:e6:c5:1e:b1:3f:1a:23:06:74:55:a8:
85:72:79:e0:a5:22:a6:14:43:89:04:a0:08:7a:c5:
58:44:15:7c:76:06:cf:2f:8f:08:51:91:44:4b:55:
14:79:ba:7e:6d:fa:85:98:fc:9d:b3:9d:b4:ce:e8:
c7:fb:48:be:2b:f6:d9:b6:46:61:31:0c:17:82:73:
81:a2:59:3c:31:ea:ee:4d:5e:54:39:ef:af:1c:13:
f9:20:9a:99:c9:7b:64:88:43:b3:93:c8:8f:26:86:
fd:2b:32:3d:71:61:42:ea:fa:d7:2b:c3:a8:8b:f5:
67:26:39:a4:f0:7f:de:ab:c5:ba:f3:c8:3a:a7:f1:
f0:e2:03:a7:25:e3:ed:82:39:f2:09:41:ad:eb:c7:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9E:C2:31:F0:35:8A:1F:34:8D:91:46:E3:9A:C9:01:16:EC:4D:E1
X509v3 Authority Key Identifier:
keyid:C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:55:90:22:82:7f:32:16:39:f6:02:23:ec:18:10:90:c2:c7:
22:8a:57:f3:af:24:c1:bb:31:9d:07:12:0c:01:83:52:14:08:
fd:cc:aa:53:5e:3d:2f:7d:e4:35:02:8e:6f:97:99:f7:3f:85:
dc:2c:ee:37:55:26:bf:68:91:7b:b8:78:12:f2:d2:44:34:85:
33:20:59:4a:61:2d:4e:cb:89:24:5e:22:23:17:71:15:b0:b5:
8d:a9:ad:7f:a9:4c:4d:6f:d3:1a:3b:e1:29:cc:21:ce:ef:61:
71:e6:c5:e9:a0:d7:41:b1:b6:96:b6:e2:34:c9:06:2c:ac:19:
0c:53:2a:69:25:95:46:87:08:ab:1c:65:72:49:33:d4:54:49:
78:1e:2c:57:51:6e:f4:d7:60:8b:27:45:c0:6e:69:42:f0:2f:
0c:90:29:25:db:fe:4c:32:42:49:88:b9:c3:7b:23:0a:bb:4e:
83:09:69:40:74:84:9d:17:54:f8:30:1b:ef:a6:ea:4b:c1:d8:
3e:e4:39:1a:f9:93:e1:ff:5f:de:64:27:dd:a9:0d:e0:b8:11:
27:bf:2a:4b:1f:e6:80:b4:10:5d:8f:52:6f:83:ec:36:5a:66:
4d:a7:64:fd:c2:4d:4b:88:ec:45:86:75:17:ec:56:f6:4e:b6:
54:24:10:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVXAVFRE3W9zjAjYmTbLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYTliMjBmNmI5YjgyNTkzZWMwN2UwY2I4YmI4NzBjZTEx
ODY1ZGMwHhcNMjUwOTA3MDQwMDQ4WhcNMjUwOTA4MDQwMDQ4WjAzMTEwLwYDVQQD
EyhjZDllYzIzMWYwMzU4YTFmMzQ4ZDkxNDZlMzlhYzkwMTE2ZWM0ZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RoSOGoYt2fS3XCOme8AhCm/lHIR
qZWxTaCQVWWKcSJ8HOoBnA1kGG9+T2gcEV6f3hN9jNLzc+ydsQmsR/JxvMNHN6YY
Q2wPht4Xu+bR/JNdcXosGB51Cj3dNR3iWkgZ9wwr0+MspZBbORtk5sUesT8aIwZ0
VaiFcnngpSKmFEOJBKAIesVYRBV8dgbPL48IUZFES1UUebp+bfqFmPyds520zujH
+0i+K/bZtkZhMQwXgnOBolk8MeruTV5UOe+vHBP5IJqZyXtkiEOzk8iPJob9KzI9
cWFC6vrXK8Ooi/VnJjmk8H/eq8W688g6p/Hw4gOnJePtgjnyCUGt68eSnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2ewjHwNYofNI2RRuOayQEW7E3hMB8GA1UdIwQY
MBaAFMCpsg9rm4JZPsB+DLi7hwzhGGXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0tteUQydWJnbGstd0g0TXVMdUhET0VZWmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iNGNkNmUtM2U4Yy00NDAyLWIyYzEt
YjFhMWVkZGE3N2NkLzEvd0tteUQydWJnbGstd0g0TXVMdUhET0VZWmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iNGNkNmUtM2U4Yy00NDAyLWIyYzEtYjFhMWVkZGE3N2Nk
LzEvd0tteUQydWJnbGstd0g0TXVMdUhET0VZWmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1WQIoJ/
MhY59gIj7BgQkMLHIopX868kwbsxnQcSDAGDUhQI/cyqU149L33kNQKOb5eZ9z+F
3CzuN1Umv2iRe7h4EvLSRDSFMyBZSmEtTsuJJF4iIxdxFbC1jamtf6lMTW/TGjvh
Kcwhzu9hcebF6aDXQbG2lrbiNMkGLKwZDFMqaSWVRocIqxxlckkz1FRJeB4sV1Fu
9NdgiydFwG5pQvAvDJApJdv+TDJCSYi5w3sjCrtOgwlpQHSEnRdU+DAb76bqS8HY
PuQ5GvmT4f9f3mQn3akN4LgRJ78qSx/mgLQQXY9Sb4PsNlpmTadk/cJNS4jsRYZ1
F+xW9k62VCQQvg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:48 2025 by rpki-client