Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
File: WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json)
Hash identifier: ljgDm8ukqvCzgKdvEUQ+uPerTwi4YnzjR70UL17lP4Q=
Subject key identifier: 38:D0:F4:42:B0:4E:A7:42:D3:47:BD:F4:1C:64:83:B8:CA:F0:C4:81
Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
Certificate issuer: /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Certificate serial: 0197CA5E8584A09527DED9F59119A2B3312A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
Manifest number: 091B
Signing time: Wed 02 Jul 2025 09:01:21 +0000
Manifest this update: Wed 02 Jul 2025 09:01:21 +0000
Manifest next update: Thu 03 Jul 2025 09:01:21 +0000
Files and hashes: 1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: MIxwW+Rh4wX2tFKKo6E8dqebtedbsdf/oFE0xfI95fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:85:84:a0:95:27:de:d9:f5:91:19:a2:b3:31:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Validity
Not Before: Jul 2 09:01:21 2025 GMT
Not After : Jul 3 09:01:21 2025 GMT
Subject: CN=38d0f442b04ea742d347bdf41c6483b8caf0c481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:09:6c:68:ee:7a:83:51:15:9c:77:a9:3c:bf:
b7:63:f7:b9:24:8d:2f:c8:17:89:1a:e4:60:20:e4:
c6:f7:46:6e:6c:6d:a5:8d:9b:e7:e7:a1:b0:22:70:
9e:9d:27:f9:00:e3:63:94:96:71:14:da:04:6f:ec:
e3:f1:ce:e1:af:83:30:30:b6:ed:f5:35:21:a7:26:
01:50:4c:e4:81:a6:e6:05:0f:91:02:a3:54:b2:27:
dc:7d:9a:11:20:4f:eb:e0:a7:19:fe:c1:d7:9f:6f:
8b:65:ff:ec:2b:ba:d6:be:69:3c:8e:ff:eb:60:9a:
94:3c:0f:ec:e3:6e:f4:56:7a:38:df:f5:bf:1e:3f:
ca:ad:76:d8:9a:14:20:b1:d7:7a:a5:8d:21:68:dd:
54:ac:d8:50:5a:b9:a2:da:13:7f:82:3d:3b:b6:23:
b2:4c:38:b5:ff:c0:d0:62:a7:88:2d:6a:81:85:6c:
68:71:c2:03:7c:01:92:06:2e:c5:d2:46:2c:f0:3a:
47:c5:8b:25:13:ef:a4:e1:a6:4c:45:bf:d1:b7:e2:
08:f5:10:bc:12:0b:05:f3:fc:5a:69:09:8a:04:b7:
c8:05:7c:1d:fb:26:d4:92:1a:68:98:44:db:68:c0:
a8:ea:9b:49:af:80:3f:f5:c1:4a:a5:85:e6:cf:44:
0c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:F4:42:B0:4E:A7:42:D3:47:BD:F4:1C:64:83:B8:CA:F0:C4:81
X509v3 Authority Key Identifier:
keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:27:e1:89:55:70:2f:42:5a:6b:ef:26:b9:54:51:42:1d:54:
7e:23:c9:65:77:db:8e:49:8d:03:c2:3f:d6:ab:e7:be:2d:6d:
af:95:e5:7c:e1:1d:66:2b:ca:02:68:4b:5d:57:b5:d1:23:91:
aa:ff:ea:27:c5:ed:ba:fa:c5:42:32:f8:fb:58:2f:3f:4f:30:
4c:6c:ed:3a:99:e9:91:bb:e1:fc:c0:97:ab:4a:51:32:fc:ca:
19:15:41:3c:a2:49:5b:6f:26:f9:02:81:8c:88:4b:60:7f:4f:
e2:80:d3:7d:43:1d:a7:81:fa:48:b6:ce:56:60:9b:f1:8e:1c:
d3:07:03:35:fb:66:ae:70:ce:e9:48:0f:5c:2a:38:1a:6a:d1:
3e:62:e0:f4:25:fc:10:67:b1:65:39:2b:5e:25:3f:ef:26:1a:
a3:8b:98:09:9b:24:8e:42:35:5e:aa:00:37:f7:6c:f9:2a:d8:
24:73:fa:7a:3e:eb:0a:23:b8:d6:5b:24:be:d1:89:e8:67:c4:
18:e3:31:ba:28:69:02:b2:90:46:af:53:1b:ec:14:3f:97:4b:
27:ff:3c:d3:44:94:14:1e:d6:44:a6:10:a8:91:fc:d5:08:8d:
59:1c:7a:ce:f3:9c:3b:8f:9d:33:15:61:be:13:29:e1:39:9a:
4b:83:37:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKXoWEoJUn3tn1kRmiszEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMGFjMzhkZWE2YTcwNGFkYmFiYTkzODFjMWRjMDIzNTZk
M2FhOTAwHhcNMjUwNzAyMDkwMTIxWhcNMjUwNzAzMDkwMTIxWjAzMTEwLwYDVQQD
EygzOGQwZjQ0MmIwNGVhNzQyZDM0N2JkZjQxYzY0ODNiOGNhZjBjNDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAlsaO56g1EVnHepPL+3Y/e5JI0v
yBeJGuRgIOTG90ZubG2ljZvn56GwInCenSf5AONjlJZxFNoEb+zj8c7hr4MwMLbt
9TUhpyYBUEzkgabmBQ+RAqNUsifcfZoRIE/r4KcZ/sHXn2+LZf/sK7rWvmk8jv/r
YJqUPA/s4270Vno43/W/Hj/KrXbYmhQgsdd6pY0haN1UrNhQWrmi2hN/gj07tiOy
TDi1/8DQYqeILWqBhWxoccIDfAGSBi7F0kYs8DpHxYslE++k4aZMRb/Rt+II9RC8
EgsF8/xaaQmKBLfIBXwd+ybUkhpomETbaMCo6ptJr4A/9cFKpYXmz0QMpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjQ9EKwTqdC00e99Bxkg7jK8MSBMB8GA1UdIwQY
MBaAFFsKw43qanBK26upOBwdwCNW06qQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dyRGplcHFjRXJicTZrNEhCM0FJMWJUcXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83MjJiZDYtYmNlZi00MzRmLWIwMTEt
OTQ4ZDg2OTEzNTM4LzEvV3dyRGplcHFjRXJicTZrNEhCM0FJMWJUcXBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83MjJiZDYtYmNlZi00MzRmLWIwMTEtOTQ4ZDg2OTEzNTM4
LzEvV3dyRGplcHFjRXJicTZrNEhCM0FJMWJUcXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSfhiVVw
L0Jaa+8muVRRQh1UfiPJZXfbjkmNA8I/1qvnvi1tr5XlfOEdZivKAmhLXVe10SOR
qv/qJ8XtuvrFQjL4+1gvP08wTGztOpnpkbvh/MCXq0pRMvzKGRVBPKJJW28m+QKB
jIhLYH9P4oDTfUMdp4H6SLbOVmCb8Y4c0wcDNftmrnDO6UgPXCo4GmrRPmLg9CX8
EGexZTkrXiU/7yYao4uYCZskjkI1XqoAN/ds+SrYJHP6ej7rCiO41lskvtGJ6GfE
GOMxuihpArKQRq9TG+wUP5dLJ/8800SUFB7WRKYQqJH81QiNWRx6zvOcO4+dMxVh
vhMp4TmaS4M3nQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:19:55 2025 by rpki-client