
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
File: wtVzsWdwcfL9bUS4QBthISBZjM8.mft (raw, json)
Hash identifier: yZQnfyac5z3j3GRWBrClkCpoxPfAaNTZl+ZdXtNjGKU=
Subject key identifier: CF:22:D2:22:0B:0B:6D:1D:64:F9:85:8E:D4:D6:E2:11:8A:1F:78:05
Authority key identifier: C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF
Certificate issuer: /CN=c2d573b1677071f2fd6d44b8401b612120598ccf
Certificate serial: 019923A036F94E8B8FAEF5E2EE7EA89AB28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:02:06 +0000
Manifest this update: Sun 07 Sep 2025 10:02:06 +0000
Manifest next update: Mon 08 Sep 2025 10:02:06 +0000
Files and hashes: 1: wtVzsWdwcfL9bUS4QBthISBZjM8.crl (hash: QDDGv1hfggL3dIukXYPZJUSiBKJMc9aM+adrlyUkfiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:36:f9:4e:8b:8f:ae:f5:e2:ee:7e:a8:9a:b2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d573b1677071f2fd6d44b8401b612120598ccf
Validity
Not Before: Sep 7 10:02:06 2025 GMT
Not After : Sep 8 10:02:06 2025 GMT
Subject: CN=cf22d2220b0b6d1d64f9858ed4d6e2118a1f7805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:67:11:22:83:1b:81:3b:13:5d:e4:69:30:
11:24:18:2e:03:a0:19:da:66:78:d0:2c:da:48:aa:
0c:22:89:87:62:9e:03:a4:04:1a:e9:e9:56:87:db:
a8:66:3d:0c:fd:90:84:7e:8d:92:58:cc:ee:8f:44:
7e:a5:df:cb:ed:6b:94:7b:e2:ee:93:e9:40:f9:3a:
7a:d8:05:a2:69:6d:20:f2:48:af:40:b8:78:94:02:
30:c9:80:38:ba:bb:0f:37:2e:53:fa:fa:6f:01:ba:
13:49:d0:64:59:a0:be:9a:94:a8:03:a5:23:a2:74:
ff:36:a8:3d:92:5a:95:42:9d:17:33:9f:77:31:8c:
8a:4a:74:ee:90:83:3a:31:c1:8c:19:72:ba:11:d9:
65:30:e7:6d:b6:c8:26:40:19:e7:17:25:b1:ab:d9:
bf:99:17:18:05:be:78:c7:92:e8:93:04:0d:65:68:
99:a7:58:92:fb:6f:8d:19:df:18:38:e5:c1:73:5c:
e5:02:c6:9d:6e:ef:9b:df:ac:7b:e6:88:58:97:54:
e4:6e:9a:b9:12:d3:fe:53:24:85:1b:46:fa:ba:b1:
66:a3:99:d7:e9:28:e0:e3:4b:8d:3d:2d:9a:e1:ad:
76:7f:77:25:d1:61:af:ad:e3:72:33:c8:55:0f:8d:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:D2:22:0B:0B:6D:1D:64:F9:85:8E:D4:D6:E2:11:8A:1F:78:05
X509v3 Authority Key Identifier:
keyid:C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:60:7e:a6:38:db:2e:87:fc:3c:53:91:de:e0:51:76:41:5d:
50:c4:f4:7e:5f:a2:6e:74:94:e9:90:6b:79:2a:5c:48:81:94:
b1:90:60:cc:27:63:c6:41:60:cb:f6:e0:f3:d9:a4:e2:b9:0a:
00:3e:26:28:b1:4b:ba:8c:ab:74:11:0e:33:48:de:c8:20:ee:
a3:81:5e:6b:9e:55:cf:2b:96:68:53:51:4b:ed:ea:6e:b5:ed:
21:af:48:46:9f:c0:f6:e4:2b:5d:86:6d:da:fc:c0:f8:62:d2:
7e:78:3f:62:ef:9e:94:d5:ed:f1:1b:90:b5:b7:c4:c0:69:f7:
03:99:2b:70:54:db:7d:c0:31:2a:05:36:58:47:1d:78:a7:1f:
e1:8f:cf:66:de:e8:9d:dc:58:93:f0:90:65:2d:3e:88:2a:eb:
ff:8e:e2:ed:63:a7:a7:89:ba:34:82:a9:a0:bc:f8:4e:13:f9:
38:cf:c0:22:8b:ae:74:aa:69:d0:f9:2f:b9:39:80:9e:82:54:
93:e8:bd:03:3a:ba:42:ec:75:c1:b6:19:32:e4:e1:1b:76:28:
11:d8:97:8c:cc:86:41:f1:f3:3b:ae:18:6c:f0:b3:ca:f0:e5:
e5:46:0e:8b:bf:f7:22:ec:63:37:00:0d:41:86:e2:76:f6:0e:
d1:0b:1f:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoDb5TouPrvXi7n6omrKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDU3M2IxNjc3MDcxZjJmZDZkNDRiODQwMWI2MTIxMjA1
OThjY2YwHhcNMjUwOTA3MTAwMjA2WhcNMjUwOTA4MTAwMjA2WjAzMTEwLwYDVQQD
EyhjZjIyZDIyMjBiMGI2ZDFkNjRmOTg1OGVkNGQ2ZTIxMThhMWY3ODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjNnESKDG4E7E13kaTARJBguA6AZ
2mZ40CzaSKoMIomHYp4DpAQa6elWh9uoZj0M/ZCEfo2SWMzuj0R+pd/L7WuUe+Lu
k+lA+Tp62AWiaW0g8kivQLh4lAIwyYA4ursPNy5T+vpvAboTSdBkWaC+mpSoA6Uj
onT/Nqg9klqVQp0XM593MYyKSnTukIM6McGMGXK6EdllMOdttsgmQBnnFyWxq9m/
mRcYBb54x5LokwQNZWiZp1iS+2+NGd8YOOXBc1zlAsadbu+b36x75ohYl1Tkbpq5
EtP+UySFG0b6urFmo5nX6Sjg40uNPS2a4a12f3cl0WGvreNyM8hVD42+5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8i0iILC20dZPmFjtTW4hGKH3gFMB8GA1UdIwQY
MBaAFMLVc7FncHHy/W1EuEAbYSEgWYzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RWenNXZHdjZkw5YlVTNFFCdGhJU0Jaak04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iNWY1OTEtZDVlYS00N2UyLTllNjkt
MDRkMTJmMmQwNzBhLzEvd3RWenNXZHdjZkw5YlVTNFFCdGhJU0Jaak04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iNWY1OTEtZDVlYS00N2UyLTllNjktMDRkMTJmMmQwNzBh
LzEvd3RWenNXZHdjZkw5YlVTNFFCdGhJU0Jaak04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs2B+pjjb
Lof8PFOR3uBRdkFdUMT0fl+ibnSU6ZBreSpcSIGUsZBgzCdjxkFgy/bg89mk4rkK
AD4mKLFLuoyrdBEOM0jeyCDuo4Fea55VzyuWaFNRS+3qbrXtIa9IRp/A9uQrXYZt
2vzA+GLSfng/Yu+elNXt8RuQtbfEwGn3A5krcFTbfcAxKgU2WEcdeKcf4Y/PZt7o
ndxYk/CQZS0+iCrr/47i7WOnp4m6NIKpoLz4ThP5OM/AIouudKpp0PkvuTmAnoJU
k+i9Azq6Qux1wbYZMuThG3YoEdiXjMyGQfHzO64YbPCzyvDl5UYOi7/3IuxjNwAN
QYbidvYO0Qsf4A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:57 2025 by rpki-client