Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
File: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft (raw, json)
Hash identifier: z2jXBiRgBqelZAeKppcPGl2YXzj8T3tT7kgBJJzrmKw=
Subject key identifier: 44:9D:9A:78:90:2E:DD:41:3E:7B:B8:15:B6:FE:E1:1B:F9:39:99:36
Authority key identifier: C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
Certificate issuer: /CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Certificate serial: 019747B10B19EA5D3D17ED51B4025D032F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
Manifest number: 053A
Signing time: Sat 07 Jun 2025 00:01:14 +0000
Manifest this update: Sat 07 Jun 2025 00:01:14 +0000
Manifest next update: Sun 08 Jun 2025 00:01:14 +0000
Files and hashes: 1: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl (hash: xFB0NhHnkZ25UfVntrizMYe3TFNfw4qfFpjnraUm9WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:0b:19:ea:5d:3d:17:ed:51:b4:02:5d:03:2f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Validity
Not Before: Jun 7 00:01:14 2025 GMT
Not After : Jun 8 00:01:14 2025 GMT
Subject: CN=449d9a78902edd413e7bb815b6fee11bf9399936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:94:6b:4f:02:3d:83:50:15:fb:5e:e4:82:
7c:67:5d:82:a3:73:95:20:c2:b9:e3:bb:cd:0e:cc:
52:9e:ae:99:e7:5d:3c:52:c6:7a:b4:4f:bb:d1:4a:
b9:b4:f3:9e:12:cf:05:4d:82:8e:68:d9:5f:04:76:
52:03:c6:b6:f6:be:c7:4e:85:39:62:02:83:d3:9e:
23:f4:23:92:48:b1:32:3a:45:13:36:6b:c5:8b:8c:
6d:80:77:3b:62:e8:86:8c:e0:a3:29:83:65:24:28:
99:96:1d:85:66:8a:ae:90:d7:0f:e1:04:84:a7:5d:
dc:9d:d0:5a:8f:dd:0d:34:e0:de:f9:39:a2:58:ae:
ec:58:2f:ab:b7:a8:7c:f3:55:02:ea:a7:26:f6:7b:
e5:a9:30:de:e5:90:0c:fb:ee:b0:f2:2a:d9:2f:8e:
94:15:53:95:e4:cf:11:e1:79:cf:c6:7f:25:b7:35:
98:c5:32:8f:a6:72:58:58:2f:fd:46:b1:64:89:e0:
87:6d:4e:fa:e7:07:5a:2e:6b:86:59:a1:5d:10:5e:
61:d4:e1:3c:da:68:7c:5e:e2:83:c9:ea:a5:54:3e:
75:08:e8:2b:92:65:77:88:c1:5b:d3:99:bd:66:3a:
09:13:ef:05:46:5a:40:c6:44:39:f8:52:6a:ec:73:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9D:9A:78:90:2E:DD:41:3E:7B:B8:15:B6:FE:E1:1B:F9:39:99:36
X509v3 Authority Key Identifier:
keyid:C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:cc:b6:68:01:c6:f5:18:05:1a:9d:bd:1d:22:4b:15:12:65:
00:bc:2f:8f:7a:21:54:2c:f8:cb:62:fd:a9:54:c8:5b:a6:0a:
2f:85:cb:04:35:93:65:82:60:32:ec:43:be:78:ba:39:f9:9e:
fb:08:93:e1:26:a7:c0:04:0f:95:d9:9d:05:13:52:fc:e5:d9:
28:ed:46:b0:07:af:be:ce:86:e6:00:5c:e2:7f:49:63:2c:28:
77:0a:93:96:5a:d9:a6:01:f7:a1:ae:ec:23:75:32:c5:64:03:
f6:ad:89:a7:e7:d0:8c:a1:f3:75:8f:fc:e5:d8:dc:c1:db:f6:
17:34:af:83:b2:74:a5:a2:75:6a:62:c5:54:28:bc:82:a4:1b:
05:fc:9f:f3:28:3e:34:a4:b7:f8:e5:49:e6:c1:fa:ab:30:9a:
bb:e2:27:95:0a:19:be:8b:92:fd:2d:18:b5:5a:0f:ba:1a:09:
69:4c:3c:fb:ed:16:da:26:f9:e4:a7:47:55:7f:fc:6e:88:3c:
60:d0:42:11:0b:54:80:63:a9:a6:bb:8e:77:c2:08:9f:74:db:
ee:62:94:a5:61:07:aa:bc:73:b8:27:61:d5:d2:d7:da:65:7f:
c0:d0:72:54:8e:76:54:ce:98:39:57:8b:de:a5:58:1c:52:14:
ae:e1:b4:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsQsZ6l09F+1RtAJdAy9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYmMyZDJmNjgxN2I5NGMyNmFlZmRkODlmZjk0M2E4OGYz
ZjFjODQwHhcNMjUwNjA3MDAwMTE0WhcNMjUwNjA4MDAwMTE0WjAzMTEwLwYDVQQD
Eyg0NDlkOWE3ODkwMmVkZDQxM2U3YmI4MTViNmZlZTExYmY5Mzk5OTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjiUa08CPYNQFfte5IJ8Z12Co3OV
IMK547vNDsxSnq6Z5108UsZ6tE+70Uq5tPOeEs8FTYKOaNlfBHZSA8a29r7HToU5
YgKD054j9COSSLEyOkUTNmvFi4xtgHc7YuiGjOCjKYNlJCiZlh2FZoqukNcP4QSE
p13cndBaj90NNODe+TmiWK7sWC+rt6h881UC6qcm9nvlqTDe5ZAM++6w8irZL46U
FVOV5M8R4XnPxn8ltzWYxTKPpnJYWC/9RrFkieCHbU765wdaLmuGWaFdEF5h1OE8
2mh8XuKDyeqlVD51COgrkmV3iMFb05m9ZjoJE+8FRlpAxkQ5+FJq7HNKgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESdmniQLt1BPnu4Fbb+4Rv5OZk2MB8GA1UdIwQY
MBaAFMO8LS9oF7lMJq792J/5Q6iPPxyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzd3dEwyZ1h1VXdtcnYzWW5fbERxSThfSElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNTRiZjktNmI1NS00YzNjLWFhNTAt
MTUzZWVmZTcwY2Y2LzEvdzd3dEwyZ1h1VXdtcnYzWW5fbERxSThfSElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lNTRiZjktNmI1NS00YzNjLWFhNTAtMTUzZWVmZTcwY2Y2
LzEvdzd3dEwyZ1h1VXdtcnYzWW5fbERxSThfSElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwsy2aAHG
9RgFGp29HSJLFRJlALwvj3ohVCz4y2L9qVTIW6YKL4XLBDWTZYJgMuxDvni6Ofme
+wiT4SanwAQPldmdBRNS/OXZKO1GsAevvs6G5gBc4n9JYywodwqTllrZpgH3oa7s
I3UyxWQD9q2Jp+fQjKHzdY/85djcwdv2FzSvg7J0paJ1amLFVCi8gqQbBfyf8yg+
NKS3+OVJ5sH6qzCau+InlQoZvouS/S0YtVoPuhoJaUw8++0W2ib55KdHVX/8bog8
YNBCEQtUgGOppruOd8IIn3Tb7mKUpWEHqrxzuCdh1dLX2mV/wNByVI52VM6YOVeL
3qVYHFIUruG03g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:34 2025 by rpki-client