Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
File: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft (raw, json)
Hash identifier: h/qI0OTayZq37y+XCRRNxKKCZxRyu/BJmOIlhYMV8N8=
Subject key identifier: 89:5A:7C:91:D2:0D:FF:93:CE:9F:15:29:AD:30:AA:96:39:A6:B0:B4
Authority key identifier: 5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
Certificate issuer: /CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Certificate serial: 01992F3640C0B9BC788DFAB287E5E46012D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
Manifest number: 160C
Signing time: Tue 09 Sep 2025 16:01:48 +0000
Manifest this update: Tue 09 Sep 2025 16:01:48 +0000
Manifest next update: Wed 10 Sep 2025 16:01:48 +0000
Files and hashes: 1: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl (hash: X8+MWhYvK5faz3S3e2raw1LQWktzd30X39wCV8s8eSM=)
2: Y5NkjhxNGx4ss5GCzKl7-rIduCM.roa (hash: /DJ0Dj5nLfrACSNcG6NOE2ReJp4ef+Ajvh1vnuYm/CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:40:c0:b9:bc:78:8d:fa:b2:87:e5:e4:60:12:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Validity
Not Before: Sep 9 16:01:48 2025 GMT
Not After : Sep 10 16:01:48 2025 GMT
Subject: CN=895a7c91d20dff93ce9f1529ad30aa9639a6b0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:f3:1f:14:52:f5:4c:dc:c7:7d:62:e1:89:
8d:b3:f9:e4:5e:ca:78:7a:a5:fc:c8:de:ef:3f:fe:
e6:3b:16:16:09:99:2b:93:54:ab:22:49:49:4b:50:
ab:63:99:9f:b0:f3:ee:f8:90:cd:1e:ce:a9:fc:c0:
a9:68:b0:17:3f:a9:30:ac:ac:7d:bd:d2:d2:a3:ce:
e3:53:d1:ff:f5:54:50:49:f0:da:45:33:96:6e:b3:
0d:ed:d9:29:94:10:c3:17:38:71:e4:14:be:00:c3:
ac:2e:aa:66:e0:50:41:ba:7f:43:27:20:0b:81:d9:
48:d4:31:a3:49:1f:c3:53:c8:0e:ea:ef:22:5a:e7:
ef:d4:33:9c:7e:28:67:86:bd:76:09:bd:d7:bc:3a:
99:9b:5c:f5:56:b7:d8:31:b9:b4:19:38:37:4d:10:
d0:49:2c:a2:c9:1d:23:fa:cb:48:df:b2:c1:ec:2d:
1c:93:b6:67:5b:39:ae:b1:74:c3:b2:fe:87:2b:cc:
b1:08:7c:cc:46:82:aa:16:ae:7e:08:b2:17:07:be:
00:51:3c:df:80:a7:b2:d6:8e:a1:c3:db:8e:1c:35:
f2:f0:ab:c2:b6:d0:89:94:d3:5d:ae:3c:8c:ab:ec:
8a:d6:bc:57:b8:17:39:19:af:9f:f5:79:93:16:7f:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5A:7C:91:D2:0D:FF:93:CE:9F:15:29:AD:30:AA:96:39:A6:B0:B4
X509v3 Authority Key Identifier:
keyid:5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:31:f1:cb:b9:3a:09:b2:e2:60:b9:9e:ea:4d:b4:76:8e:07:
a8:f0:9b:61:17:5a:08:e7:5c:35:ee:43:2b:4d:80:1f:21:75:
03:e5:4b:4e:42:7b:cf:3e:f5:c8:70:89:25:dd:09:57:4c:aa:
f9:3f:77:e7:41:15:f5:80:d5:fe:41:d4:86:db:0f:ba:1c:f0:
e7:da:23:a6:01:63:11:60:d7:39:7e:e6:b1:8d:31:f4:f8:25:
d0:80:c0:4d:a9:a1:4b:31:a1:91:ff:39:be:3c:3a:eb:1d:90:
d9:a3:e8:2c:fc:56:bf:30:9d:c3:21:1b:54:23:d4:cb:d3:e4:
45:ae:12:17:5b:01:54:a6:e1:17:13:17:2b:50:ca:aa:05:dc:
9d:d0:af:bd:7a:65:22:7d:78:e5:d1:1b:14:6c:16:6b:7e:29:
1d:98:c5:eb:f3:46:50:84:45:51:c5:e0:27:f3:8d:64:93:76:
78:75:ac:31:68:70:f3:d7:38:98:8c:5f:86:6e:e3:55:44:27:
32:97:1f:a4:b5:4e:e5:d7:a9:28:10:d8:1a:9b:00:c3:9b:9e:
a8:1f:a2:a0:e7:96:70:00:af:60:20:78:9a:d9:3d:06:1b:5f:
27:5f:2e:ec:37:52:08:76:9d:c9:cd:5f:f9:57:07:96:d9:f8:
8c:e8:18:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkvNkDAubx4jfqyh+XkYBLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNTEyNWFmYzVlYzk3OGIyYTMyMTI5MWMyYTU1NzBmZTYx
OTE1OWUwHhcNMjUwOTA5MTYwMTQ4WhcNMjUwOTEwMTYwMTQ4WjAzMTEwLwYDVQQD
Eyg4OTVhN2M5MWQyMGRmZjkzY2U5ZjE1MjlhZDMwYWE5NjM5YTZiMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/3zHxRS9Uzcx31i4YmNs/nkXsp4
eqX8yN7vP/7mOxYWCZkrk1SrIklJS1CrY5mfsPPu+JDNHs6p/MCpaLAXP6kwrKx9
vdLSo87jU9H/9VRQSfDaRTOWbrMN7dkplBDDFzhx5BS+AMOsLqpm4FBBun9DJyAL
gdlI1DGjSR/DU8gO6u8iWufv1DOcfihnhr12Cb3XvDqZm1z1VrfYMbm0GTg3TRDQ
SSyiyR0j+stI37LB7C0ck7ZnWzmusXTDsv6HK8yxCHzMRoKqFq5+CLIXB74AUTzf
gKey1o6hw9uOHDXy8KvCttCJlNNdrjyMq+yK1rxXuBc5Ga+f9XmTFn+VYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlafJHSDf+Tzp8VKa0wqpY5prC0MB8GA1UdIwQY
MBaAFFpRJa/F7JeLKjISkcKlVw/mGRWeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83OTQwYWItZjdjYS00YzA3LWExMjMt
YTZmYjRkZjU0ODFlLzEvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83OTQwYWItZjdjYS00YzA3LWExMjMtYTZmYjRkZjU0ODFl
LzEvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjHxy7k6
CbLiYLme6k20do4HqPCbYRdaCOdcNe5DK02AHyF1A+VLTkJ7zz71yHCJJd0JV0yq
+T9350EV9YDV/kHUhtsPuhzw59ojpgFjEWDXOX7msY0x9Pgl0IDATamhSzGhkf85
vjw66x2Q2aPoLPxWvzCdwyEbVCPUy9PkRa4SF1sBVKbhFxMXK1DKqgXcndCvvXpl
In145dEbFGwWa34pHZjF6/NGUIRFUcXgJ/ONZJN2eHWsMWhw89c4mIxfhm7jVUQn
MpcfpLVO5depKBDYGpsAw5ueqB+ioOeWcACvYCB4mtk9BhtfJ18u7DdSCHadyc1f
+VcHltn4jOgYAw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 17:41:06 2025 by rpki-client