Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: +bdKn0pjknXPsWz5OC90zezgnQ07RLt3LA18ffxfabQ=
Subject key identifier: E8:D7:C0:16:03:14:52:67:64:39:CE:37:25:2B:23:44:10:2A:F3:3C
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 0199228CF0B266305E11294CE0EBF529F126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 1216
Signing time: Sun 07 Sep 2025 05:01:25 +0000
Manifest this update: Sun 07 Sep 2025 05:01:25 +0000
Manifest next update: Mon 08 Sep 2025 05:01:25 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: bW8VCaC4EGzHEaF9MJQmFzGP8AXuXhvXMmuGsJ2E+2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f0:b2:66:30:5e:11:29:4c:e0:eb:f5:29:f1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: Sep 7 05:01:25 2025 GMT
Not After : Sep 8 05:01:25 2025 GMT
Subject: CN=e8d7c016031452676439ce37252b2344102af33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:f5:03:20:8d:e0:4e:7c:3c:8d:ad:76:00:
53:c0:d0:81:f8:44:df:70:a2:ea:9e:13:e4:0e:5e:
48:0b:70:e8:c2:9c:33:25:eb:91:47:7e:bd:c1:43:
71:a3:ef:f5:47:60:d0:c8:b5:e7:db:c4:b1:cb:00:
43:85:58:7c:2d:81:7c:d3:63:ba:c2:f4:6e:f0:17:
c7:37:9f:28:08:84:d1:bf:47:72:b3:0f:d8:5b:e9:
04:0a:d9:d3:76:af:63:1c:74:9b:38:6a:56:f1:d8:
7c:93:d0:3a:65:f5:f5:f4:27:7f:f5:d0:e8:12:87:
c9:4f:d9:47:d5:6d:d1:78:cf:60:0e:af:93:fb:78:
31:af:c7:3d:b7:4d:a5:77:a2:b4:45:a4:16:63:14:
0b:dd:6e:1a:41:be:4a:7a:3f:20:94:bb:3f:15:54:
ee:27:e5:0d:8f:a5:60:5b:b3:05:99:af:a7:92:b1:
26:7f:c7:97:22:32:a4:ae:fd:51:a3:9c:46:78:39:
06:db:0c:26:16:14:3f:82:45:ec:e7:c6:8a:47:a6:
d6:b8:b5:0c:15:11:bd:c2:bb:53:99:27:cc:2f:81:
9b:13:b4:5c:00:62:6e:de:66:cd:22:37:b7:7d:76:
d3:6b:c2:f9:86:0d:b3:51:4c:19:66:78:7b:2e:e4:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D7:C0:16:03:14:52:67:64:39:CE:37:25:2B:23:44:10:2A:F3:3C
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d4:7f:aa:9c:18:dc:6d:ac:be:1b:c5:9d:55:d9:bb:ac:f3:
5f:c5:ae:90:9c:bb:6c:2e:d3:44:5f:dd:fc:80:7b:02:51:74:
68:37:73:c3:96:44:2b:95:4c:13:5d:fb:ac:02:54:c4:aa:4c:
fe:5a:45:a6:37:32:24:9f:d7:e3:8b:1c:3b:27:60:2d:88:89:
2b:da:fd:9d:d1:f2:b6:05:e6:73:56:88:ba:0b:c2:f3:21:30:
91:b5:75:f8:4f:22:2c:91:94:5a:65:6d:b2:3e:0a:23:50:18:
d8:6a:76:a8:d0:42:65:75:62:bb:2a:44:26:9a:97:ed:b7:b3:
8e:b9:c0:7b:29:b0:41:7a:fc:0b:e3:18:c1:e0:6c:97:3f:88:
19:9f:db:08:ad:64:f3:cf:97:18:76:fe:ce:0e:dd:17:30:12:
25:20:c1:c1:d3:5c:da:b2:53:69:a5:23:6e:81:07:dd:1b:c1:
22:51:1d:59:14:2b:a1:c6:49:bb:49:d5:2e:c5:6d:c7:c5:ba:
6f:bf:3b:48:40:f3:14:32:50:9e:27:f4:29:d7:26:dd:05:a2:
dd:8c:37:14:7d:d3:5b:e3:17:14:09:73:e1:92:ab:9a:33:77:
b6:55:a1:84:bf:7d:66:80:36:da:50:85:8d:dd:60:27:36:61:
2d:8e:f9:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijPCyZjBeESlM4Ov1KfEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNDRiOGJmYzBhMzRmNDcwNDY0NTJhOTIxYmYwMWI5ODE2
MzZhMjkwHhcNMjUwOTA3MDUwMTI1WhcNMjUwOTA4MDUwMTI1WjAzMTEwLwYDVQQD
EyhlOGQ3YzAxNjAzMTQ1MjY3NjQzOWNlMzcyNTJiMjM0NDEwMmFmMzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCz1AyCN4E58PI2tdgBTwNCB+ETf
cKLqnhPkDl5IC3DowpwzJeuRR369wUNxo+/1R2DQyLXn28SxywBDhVh8LYF802O6
wvRu8BfHN58oCITRv0dysw/YW+kECtnTdq9jHHSbOGpW8dh8k9A6ZfX19Cd/9dDo
EofJT9lH1W3ReM9gDq+T+3gxr8c9t02ld6K0RaQWYxQL3W4aQb5Kej8glLs/FVTu
J+UNj6VgW7MFma+nkrEmf8eXIjKkrv1Ro5xGeDkG2wwmFhQ/gkXs58aKR6bWuLUM
FRG9wrtTmSfML4GbE7RcAGJu3mbNIje3fXbTa8L5hg2zUUwZZnh7LuQFzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjXwBYDFFJnZDnONyUrI0QQKvM8MB8GA1UdIwQY
MBaAFMNEuL/Ao09HBGRSqSG/AbmBY2opMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzBTNHY4Q2pUMGNFWkZLcEliOEJ1WUZqYWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMzNhNGQtZGI5NC00OTYzLThjZTQt
YTA0MzcwODc0ZDE2LzEvdzBTNHY4Q2pUMGNFWkZLcEliOEJ1WUZqYWlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMzNhNGQtZGI5NC00OTYzLThjZTQtYTA0MzcwODc0ZDE2
LzEvdzBTNHY4Q2pUMGNFWkZLcEliOEJ1WUZqYWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdR/qpwY
3G2svhvFnVXZu6zzX8WukJy7bC7TRF/d/IB7AlF0aDdzw5ZEK5VME137rAJUxKpM
/lpFpjcyJJ/X44scOydgLYiJK9r9ndHytgXmc1aIugvC8yEwkbV1+E8iLJGUWmVt
sj4KI1AY2Gp2qNBCZXViuypEJpqX7bezjrnAeymwQXr8C+MYweBslz+IGZ/bCK1k
88+XGHb+zg7dFzASJSDBwdNc2rJTaaUjboEH3RvBIlEdWRQrocZJu0nVLsVtx8W6
b787SEDzFDJQnif0Kdcm3QWi3Yw3FH3TW+MXFAlz4ZKrmjN3tlWhhL99ZoA22lCF
jd1gJzZhLY758A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:30 2025 by rpki-client