
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
File: wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json)
Hash identifier: 5JffbRqX8pZAXT1gxOY+0JXS18XFXld+vh47lJyUYSY=
Subject key identifier: C9:A0:DE:78:84:71:1F:77:B6:16:B3:CC:8A:E0:92:B5:80:2A:47:18
Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
Certificate issuer: /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Certificate serial: 0199221E98583C534718846FC64CEFD8AC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:00:54 +0000
Manifest this update: Sun 07 Sep 2025 03:00:54 +0000
Manifest next update: Mon 08 Sep 2025 03:00:54 +0000
Files and hashes: 1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: jQGPgR3N6zk95S6TR9jAh/bhW4GqAdHLk6563PtdGAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:98:58:3c:53:47:18:84:6f:c6:4c:ef:d8:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Validity
Not Before: Sep 7 03:00:54 2025 GMT
Not After : Sep 8 03:00:54 2025 GMT
Subject: CN=c9a0de7884711f77b616b3cc8ae092b5802a4718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:84:80:9c:b1:89:3c:78:e2:75:00:c8:a4:
86:a3:e0:06:df:10:2b:7e:30:64:62:b1:45:f2:ae:
15:fb:0f:28:b8:04:3f:e7:46:39:7f:81:be:b5:52:
cb:7b:ae:63:cc:5d:6f:9d:42:cd:09:12:f2:5a:ec:
66:ca:17:95:4f:1b:79:78:29:77:f1:ca:9a:e3:1b:
7e:e2:96:08:f4:e9:8d:20:28:b0:e0:61:aa:b2:8e:
5b:e5:c7:c7:6d:0a:33:53:17:57:e6:ce:89:54:d2:
c2:d3:3e:3c:8b:0f:65:d3:ee:ed:c2:f5:50:fc:10:
ae:8b:47:94:bf:7b:63:38:f5:f7:4e:e5:dd:b8:85:
40:21:a0:c9:a5:99:13:fe:fc:04:f8:5c:8e:b6:c8:
10:e6:6d:9b:0f:31:25:fd:a4:77:59:82:a6:5e:1b:
b0:57:9b:8d:b1:31:37:d4:99:80:05:44:e0:5e:ae:
76:31:3b:d7:9e:9e:bb:15:f0:61:20:6f:db:d8:09:
b4:1e:0c:e4:c8:2b:21:dd:4d:19:47:9c:ac:d6:f1:
48:1f:74:20:bf:52:8e:b8:a2:a4:5e:36:eb:eb:bd:
55:99:01:ac:6b:46:66:cb:d6:21:74:4c:ed:ff:0a:
26:b7:bc:c0:1c:13:fb:85:61:ae:e3:a4:07:4e:a4:
8b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A0:DE:78:84:71:1F:77:B6:16:B3:CC:8A:E0:92:B5:80:2A:47:18
X509v3 Authority Key Identifier:
keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:eb:4e:e9:79:8f:72:72:a4:07:bd:f0:91:fe:8b:82:2d:78:
41:57:d9:52:9c:c3:51:0a:59:fd:8f:ac:cd:c1:c9:d8:f8:f7:
a6:9b:b1:3b:31:cf:40:02:93:52:da:0c:3f:c7:61:53:2b:a0:
b7:68:3d:dd:90:e1:85:51:83:cb:1b:64:7f:68:69:5f:5c:81:
34:98:e7:20:73:80:5e:c0:c0:89:79:8f:71:d6:be:6a:87:d1:
42:47:bf:bf:aa:7f:ae:f5:c7:23:67:03:8d:44:c2:b1:9c:3e:
f2:8a:13:36:38:bd:b6:c0:38:02:18:43:aa:94:4c:21:1e:e9:
83:05:eb:68:97:e8:4e:b7:6d:31:d1:76:04:5e:19:9c:32:e5:
96:27:b6:df:10:6d:7b:83:e6:b8:4e:64:94:bd:35:86:d5:9d:
59:e3:ff:3a:ac:fa:d6:dc:e7:58:16:de:ed:be:12:17:9a:e0:
e4:3f:42:fa:71:5f:7f:08:3d:cc:af:4f:09:07:43:6d:bd:cc:
88:8d:3a:28:f9:f3:10:03:a1:0e:e2:e5:e1:27:69:f4:79:ad:
67:92:12:ff:d2:b7:d6:be:03:1a:c2:91:5c:d2:4b:fb:45:de:
c7:04:7e:8c:f7:5a:b5:a2:e1:15:64:01:dd:b8:21:f2:b4:c3:
f8:ad:05:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHphYPFNHGIRvxkzv2KxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDc0ZmRhNTcyOWY3MDVlNWZkOTJmMjI1ZWNhZjViOTNj
YjgyODgwHhcNMjUwOTA3MDMwMDU0WhcNMjUwOTA4MDMwMDU0WjAzMTEwLwYDVQQD
EyhjOWEwZGU3ODg0NzExZjc3YjYxNmIzY2M4YWUwOTJiNTgwMmE0NzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRmEgJyxiTx44nUAyKSGo+AG3xAr
fjBkYrFF8q4V+w8ouAQ/50Y5f4G+tVLLe65jzF1vnULNCRLyWuxmyheVTxt5eCl3
8cqa4xt+4pYI9OmNICiw4GGqso5b5cfHbQozUxdX5s6JVNLC0z48iw9l0+7twvVQ
/BCui0eUv3tjOPX3TuXduIVAIaDJpZkT/vwE+FyOtsgQ5m2bDzEl/aR3WYKmXhuw
V5uNsTE31JmABUTgXq52MTvXnp67FfBhIG/b2Am0HgzkyCsh3U0ZR5ys1vFIH3Qg
v1KOuKKkXjbr671VmQGsa0Zmy9YhdEzt/womt7zAHBP7hWGu46QHTqSLTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmg3niEcR93thazzIrgkrWAKkcYMB8GA1UdIwQY
MBaAFMEHT9pXKfcF5f2S8iXsr1uTy4KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FkUDJsY3A5d1hsX1pMeUpleXZXNVBMZ29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTBkNjAtODc1Mi00YjZkLTg1Zjgt
NWU5NmMyMzJlM2Q1LzEvd1FkUDJsY3A5d1hsX1pMeUpleXZXNVBMZ29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZTBkNjAtODc1Mi00YjZkLTg1ZjgtNWU5NmMyMzJlM2Q1
LzEvd1FkUDJsY3A5d1hsX1pMeUpleXZXNVBMZ29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+tO6XmP
cnKkB73wkf6Lgi14QVfZUpzDUQpZ/Y+szcHJ2Pj3ppuxOzHPQAKTUtoMP8dhUyug
t2g93ZDhhVGDyxtkf2hpX1yBNJjnIHOAXsDAiXmPcda+aofRQke/v6p/rvXHI2cD
jUTCsZw+8ooTNji9tsA4AhhDqpRMIR7pgwXraJfoTrdtMdF2BF4ZnDLllie23xBt
e4PmuE5klL01htWdWeP/Oqz61tznWBbe7b4SF5rg5D9C+nFffwg9zK9PCQdDbb3M
iI06KPnzEAOhDuLl4Sdp9HmtZ5IS/9K31r4DGsKRXNJL+0XexwR+jPdataLhFWQB
3bgh8rTD+K0FYA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:54 2025 by rpki-client