
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
File: ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json)
Hash identifier: QGxaKeWyVylNMMaKLt33Yj1v24pimGHu/EJxv0Y1JXE=
Subject key identifier: 8C:41:6A:1B:8C:26:C1:0C:54:1A:97:94:B9:A7:7E:BE:C8:F8:4C:C7
Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
Certificate issuer: /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Certificate serial: 019923D616AB0B39A319212122F29A25E01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
Manifest number: 01F3
Signing time: Sun 07 Sep 2025 11:00:56 +0000
Manifest this update: Sun 07 Sep 2025 11:00:56 +0000
Manifest next update: Mon 08 Sep 2025 11:00:56 +0000
Files and hashes: 1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: jP9yOLbo/CYEmutzr/en/e4FnkNwQ0yL3u6VtH5pLGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:16:ab:0b:39:a3:19:21:21:22:f2:9a:25:e0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Validity
Not Before: Sep 7 11:00:56 2025 GMT
Not After : Sep 8 11:00:56 2025 GMT
Subject: CN=8c416a1b8c26c10c541a9794b9a77ebec8f84cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:5d:00:c1:2f:ca:53:5a:fb:11:c6:2f:c0:
00:c1:b3:68:28:20:9a:38:f6:02:09:4e:55:d6:e2:
a2:ff:1e:63:19:6b:be:fa:c3:de:ae:e7:ff:00:80:
74:f0:10:70:30:aa:19:b3:46:b8:ba:99:f9:b6:3e:
93:88:c6:36:f9:d1:3c:b7:8d:a8:1d:21:20:a8:5d:
f3:f5:e4:9f:a9:c8:b0:16:54:98:d5:e7:70:69:e1:
01:9b:6c:7e:81:3c:02:9a:31:39:aa:3d:fe:00:4f:
f0:18:4d:67:7d:7b:8f:d2:56:eb:e2:18:d6:ca:7b:
a3:17:09:1b:68:c0:3f:99:1a:e9:33:32:b2:71:e6:
0f:b0:0c:db:4d:e2:0a:d0:0e:0b:22:97:6b:c1:cd:
be:88:eb:cf:2d:bd:0e:1b:d1:f2:8d:f1:c1:b4:10:
6d:54:f8:14:12:8c:e6:78:90:b2:2e:0a:11:2a:7a:
a8:47:2e:5f:a3:6c:c7:43:af:95:b8:69:a4:18:8d:
da:aa:2e:a5:d6:3c:22:bc:d9:fc:bc:ed:fb:f3:e8:
57:3a:62:ec:a4:fe:c5:91:fa:94:50:b2:49:be:b7:
48:12:4e:61:11:24:5e:ab:23:70:3d:b4:95:d9:eb:
fa:fb:7b:13:f4:d2:e0:7a:cc:b6:90:be:10:55:8f:
dc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:41:6A:1B:8C:26:C1:0C:54:1A:97:94:B9:A7:7E:BE:C8:F8:4C:C7
X509v3 Authority Key Identifier:
keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6e:fc:62:13:ff:eb:77:f9:84:03:1f:83:4d:02:0b:52:20:
43:c0:31:2e:6e:72:02:5b:3a:fe:e8:ec:85:d1:bf:c4:ee:e3:
47:30:48:7f:63:9e:ce:5d:42:f8:b2:53:60:91:63:e1:cb:6d:
a1:ce:2f:73:90:eb:32:0d:12:c4:60:e6:82:6f:3c:fa:0c:56:
d0:af:a5:f5:5b:70:2d:ef:1f:ad:cd:99:10:b3:9f:3c:b5:1a:
56:d4:fb:3b:bb:08:3f:bc:08:3f:8e:28:46:5b:e0:52:98:65:
d3:b6:b2:08:5f:92:e6:4a:72:0b:ad:58:2a:5f:bd:a1:7f:80:
74:77:4a:b8:69:2d:f6:09:cf:7f:e3:92:a5:27:4d:00:ef:0e:
5b:c9:78:1b:8b:f2:e1:f3:7e:17:1a:0f:0a:96:ee:e2:6a:1b:
36:9b:6e:07:d0:35:44:c2:e5:18:db:93:97:82:10:6d:9c:85:
03:87:b1:b7:aa:a9:51:f5:84:57:b4:3e:1b:8f:7e:d8:a4:56:
46:8a:30:97:1a:6b:d1:a1:6f:45:32:cf:44:55:f2:2a:64:d6:
55:8e:7e:db:a5:63:6f:f2:d7:a7:ad:01:13:72:54:9b:b2:86:
08:b6:ac:3f:35:04:66:1f:ac:a6:dc:bb:44:0d:ef:23:ac:19:
64:e9:38:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1harCzmjGSEhIvKaJeAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyY2ZlOTRmZGVjMzA5YWM1NTMwNWFjOTBlN2MzZDYyOGRm
ZDQwNmEwHhcNMjUwOTA3MTEwMDU2WhcNMjUwOTA4MTEwMDU2WjAzMTEwLwYDVQQD
Eyg4YzQxNmExYjhjMjZjMTBjNTQxYTk3OTRiOWE3N2ViZWM4Zjg0Y2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKtdAMEvylNa+xHGL8AAwbNoKCCa
OPYCCU5V1uKi/x5jGWu++sPeruf/AIB08BBwMKoZs0a4upn5tj6TiMY2+dE8t42o
HSEgqF3z9eSfqciwFlSY1edwaeEBm2x+gTwCmjE5qj3+AE/wGE1nfXuP0lbr4hjW
ynujFwkbaMA/mRrpMzKyceYPsAzbTeIK0A4LIpdrwc2+iOvPLb0OG9HyjfHBtBBt
VPgUEozmeJCyLgoRKnqoRy5fo2zHQ6+VuGmkGI3aqi6l1jwivNn8vO378+hXOmLs
pP7FkfqUULJJvrdIEk5hESReqyNwPbSV2ev6+3sT9NLgesy2kL4QVY/cjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxBahuMJsEMVBqXlLmnfr7I+EzHMB8GA1UdIwQY
MBaAFMLP6U/ewwmsVTBayQ58PWKN/UBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zOTkwYzItNTFiZS00Yjg3LWFmNjIt
ZTBlMDk5NjQwZWFjLzEvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zOTkwYzItNTFiZS00Yjg3LWFmNjItZTBlMDk5NjQwZWFj
LzEvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPW78YhP/
63f5hAMfg00CC1IgQ8AxLm5yAls6/ujshdG/xO7jRzBIf2Oezl1C+LJTYJFj4ctt
oc4vc5DrMg0SxGDmgm88+gxW0K+l9VtwLe8frc2ZELOfPLUaVtT7O7sIP7wIP44o
RlvgUphl07ayCF+S5kpyC61YKl+9oX+AdHdKuGkt9gnPf+OSpSdNAO8OW8l4G4vy
4fN+FxoPCpbu4mobNptuB9A1RMLlGNuTl4IQbZyFA4ext6qpUfWEV7Q+G49+2KRW
Roowlxpr0aFvRTLPRFXyKmTWVY5+26Vjb/LXp60BE3JUm7KGCLasPzUEZh+spty7
RA3vI6wZZOk4eg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:35:25 2025 by rpki-client