Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: R6S1/roZ1GzArR88KK1hanJPXmB5DFYA0+v+R0NnNhw=
Subject key identifier: 8A:C4:AD:C8:54:B1:45:8A:F3:8D:0D:D9:DC:98:2D:FA:EC:76:22:9E
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 01974C69DC780F0D52A06B988FE0EFB8FEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 09F4
Signing time: Sat 07 Jun 2025 22:01:35 +0000
Manifest this update: Sat 07 Jun 2025 22:01:35 +0000
Manifest next update: Sun 08 Jun 2025 22:01:35 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: hRlzpqRUCBhczQ3yZngZHl9L2AmZIdG1BeiCK6AwNJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:dc:78:0f:0d:52:a0:6b:98:8f:e0:ef:b8:fe:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: Jun 7 22:01:35 2025 GMT
Not After : Jun 8 22:01:35 2025 GMT
Subject: CN=8ac4adc854b1458af38d0dd9dc982dfaec76229e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:60:a9:0b:20:fc:5d:6f:3e:fa:37:70:a0:
28:69:49:4d:e6:35:32:14:49:48:10:9f:0b:87:c5:
e4:83:3c:61:30:53:a5:47:57:a4:21:d8:de:d7:9a:
f3:26:6b:30:83:fb:5e:52:f0:4d:b2:2f:57:82:3a:
8d:2f:50:1a:b2:24:8a:c0:23:9e:dc:69:b6:4e:6d:
69:41:98:0f:b3:fe:e9:c7:40:f3:f7:f3:24:1e:a0:
b5:19:b0:8f:f6:c5:d1:df:61:17:bf:41:a8:6d:96:
4e:8f:52:25:85:bb:6f:b3:85:36:09:f0:7b:f2:bb:
49:c5:04:2c:06:ec:fa:5c:d4:ad:86:dc:0d:6d:d2:
c8:62:b5:f5:3c:88:67:30:29:34:8d:3a:79:9b:09:
51:2d:21:6d:c8:11:f6:a8:3f:e5:94:f7:a9:e1:2c:
f8:ce:8b:61:5f:82:dc:68:a3:81:10:2c:95:a8:d9:
44:82:5a:9c:0e:c1:32:4a:54:af:3a:08:e6:26:25:
07:34:19:ec:b6:22:7d:5e:01:9d:49:d9:b3:0f:8d:
c2:8f:4d:d1:43:a0:8f:ae:e8:01:f4:d4:58:28:6c:
55:c4:a1:37:3d:51:82:b6:88:a7:87:12:60:fc:27:
fa:b7:5a:3b:2d:b7:d8:7e:81:a3:fd:a9:3b:bb:70:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C4:AD:C8:54:B1:45:8A:F3:8D:0D:D9:DC:98:2D:FA:EC:76:22:9E
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:97:42:56:87:76:49:b4:56:61:3d:63:c1:75:da:c4:e7:95:
1b:45:6f:ae:85:f9:ef:ad:67:1e:ef:26:1c:82:f2:8c:d9:cd:
dd:f8:22:65:84:73:90:55:08:4e:86:ce:cc:c2:0e:9c:47:f8:
a9:4e:b4:bc:28:e4:29:21:92:04:78:48:ed:88:95:58:6d:71:
06:4f:36:b0:fc:f6:3b:dd:f5:43:db:69:74:15:bd:06:ac:dd:
2f:65:22:9c:e6:a2:8f:70:9a:0b:15:1e:6b:4c:3b:6d:38:39:
3f:0a:6a:ce:ef:02:10:ad:aa:07:38:2d:83:43:55:16:b2:36:
59:ee:b9:10:43:43:5a:d3:f8:e5:03:08:54:c5:4a:2a:16:c4:
46:aa:ee:4c:2b:8d:3b:db:f8:7b:ee:0f:4c:a4:03:1c:77:82:
8c:67:90:c3:5d:71:f4:a0:35:f0:d4:90:78:a3:c6:41:ba:d5:
4e:f5:8d:c8:36:36:d8:e2:e0:17:4d:98:1d:4e:fd:42:22:61:
79:bb:c6:2c:b2:fc:e9:af:54:8d:46:30:50:60:83:b1:78:3f:
fc:b0:ec:44:1f:64:d2:21:14:a5:08:f0:5b:07:45:52:e4:f4:
e5:b8:cc:9c:e3:ee:97:71:09:9b:20:a0:e4:44:05:21:31:fb:
4e:75:8a:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMadx4Dw1SoGuYj+DvuP6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWQ5MmZlNTAxMmJkNjViZTBjMzJiMGVlMzkxNzE5Yzg4
Mjk0MmMwHhcNMjUwNjA3MjIwMTM1WhcNMjUwNjA4MjIwMTM1WjAzMTEwLwYDVQQD
Eyg4YWM0YWRjODU0YjE0NThhZjM4ZDBkZDlkYzk4MmRmYWVjNzYyMjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6BgqQsg/F1vPvo3cKAoaUlN5jUy
FElIEJ8Lh8XkgzxhMFOlR1ekIdje15rzJmswg/teUvBNsi9XgjqNL1AasiSKwCOe
3Gm2Tm1pQZgPs/7px0Dz9/MkHqC1GbCP9sXR32EXv0GobZZOj1Ilhbtvs4U2CfB7
8rtJxQQsBuz6XNSthtwNbdLIYrX1PIhnMCk0jTp5mwlRLSFtyBH2qD/llPep4Sz4
zothX4LcaKOBECyVqNlEglqcDsEySlSvOgjmJiUHNBnstiJ9XgGdSdmzD43Cj03R
Q6CPrugB9NRYKGxVxKE3PVGCtoinhxJg/Cf6t1o7LbfYfoGj/ak7u3AeHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrErchUsUWK840N2dyYLfrsdiKeMB8GA1UdIwQY
MBaAFFsdkv5QEr1lvgwysO45FxnIgpQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3gyU19sQVN2V1ctRERLdzdqa1hHY2lDbEN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82NTk3Y2MtOGIwMy00OWI4LWE3NjEt
ODg3MDE1YjM5NmYxLzEvV3gyU19sQVN2V1ctRERLdzdqa1hHY2lDbEN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82NTk3Y2MtOGIwMy00OWI4LWE3NjEtODg3MDE1YjM5NmYx
LzEvV3gyU19sQVN2V1ctRERLdzdqa1hHY2lDbEN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpdCVod2
SbRWYT1jwXXaxOeVG0VvroX5761nHu8mHILyjNnN3fgiZYRzkFUITobOzMIOnEf4
qU60vCjkKSGSBHhI7YiVWG1xBk82sPz2O931Q9tpdBW9BqzdL2UinOaij3CaCxUe
a0w7bTg5Pwpqzu8CEK2qBzgtg0NVFrI2We65EENDWtP45QMIVMVKKhbERqruTCuN
O9v4e+4PTKQDHHeCjGeQw11x9KA18NSQeKPGQbrVTvWNyDY22OLgF02YHU79QiJh
ebvGLLL86a9UjUYwUGCDsXg//LDsRB9k0iEUpQjwWwdFUuT05bjMnOPul3EJmyCg
5EQFITH7TnWKQA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:31:05 2025 by rpki-client