
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
File: wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft (raw, json)
Hash identifier: okKGPOv9NbGRUW4TGQJMst+HF90kEsFLJ2D1KX/H2aE=
Subject key identifier: 5F:A7:46:B3:98:25:90:1A:E4:26:16:A0:FB:FC:CC:2E:FE:ED:11:73
Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
Certificate issuer: /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Certificate serial: 01974DB2BFA78DCB7AADE855E37867DF66D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
Manifest number: 0884
Signing time: Sun 08 Jun 2025 04:00:49 +0000
Manifest this update: Sun 08 Jun 2025 04:00:49 +0000
Manifest next update: Mon 09 Jun 2025 04:00:49 +0000
Files and hashes: 1: wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl (hash: UqgdVhcjAemTrw1tQku78HSAax7J6pSkiWOfwueiJxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:bf:a7:8d:cb:7a:ad:e8:55:e3:78:67:df:66:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Validity
Not Before: Jun 8 04:00:49 2025 GMT
Not After : Jun 9 04:00:49 2025 GMT
Subject: CN=5fa746b39825901ae42616a0fbfccc2efeed1173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:14:3a:b8:7d:fc:f8:ad:4a:da:fd:c7:0b:
af:22:1e:57:a2:60:b6:a7:b3:4f:5d:be:bf:5f:87:
44:0a:c9:6b:74:01:cc:4b:c1:f6:fc:c9:8b:7b:c8:
9f:83:e2:08:bb:6f:60:b1:a4:b9:59:41:5c:1d:63:
ce:08:6e:90:c7:c1:7b:6e:14:8e:14:ec:27:71:8a:
7b:8c:ff:d6:1e:5f:80:5b:a3:c8:ed:b6:5b:af:fc:
bc:cd:4b:26:bd:d9:b2:85:fe:33:99:a4:c7:86:6b:
0f:91:e6:3e:41:32:62:68:cf:b1:96:41:33:dd:66:
15:53:95:0b:d5:1c:e9:f2:71:6d:a4:71:e9:e5:bd:
da:64:96:52:14:84:f6:b6:97:c0:e6:d0:60:da:d0:
71:df:31:8a:04:a2:b9:63:41:19:13:5e:6f:1a:79:
ce:a1:4e:54:30:9c:13:0a:23:52:dd:a1:2d:9a:fe:
6d:94:0f:0b:77:1b:d7:64:85:47:28:e1:72:b2:a1:
eb:3a:7d:bf:c2:ed:71:8e:6a:a7:de:1d:30:7d:30:
15:66:69:1a:02:74:9f:61:58:91:50:eb:a9:8e:34:
31:a4:03:87:77:ec:0c:ab:b2:eb:f1:b1:9d:05:50:
ee:ec:27:0e:6f:e2:6a:3a:56:2f:01:5b:4f:b3:5e:
a5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A7:46:B3:98:25:90:1A:E4:26:16:A0:FB:FC:CC:2E:FE:ED:11:73
X509v3 Authority Key Identifier:
keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d2:c2:cc:76:c3:ad:d4:95:b4:30:8a:a2:d8:ee:a8:94:22:
35:55:ad:87:d8:b2:b9:af:d8:eb:4f:fd:ac:09:27:a8:c8:9a:
86:e7:2a:a6:6b:97:ed:ae:c9:05:42:51:c7:ca:12:26:3e:09:
bf:ab:a7:8e:79:44:11:db:83:0c:50:95:b4:34:60:c3:cc:57:
66:83:76:87:33:4a:f7:00:7a:fb:27:a1:67:0c:72:42:f3:98:
3c:10:47:c5:35:0b:5d:d8:57:49:80:56:7b:3c:be:7a:92:5c:
e9:ff:0e:5a:44:73:d8:b9:7b:04:d7:f2:3e:f2:f3:2a:58:08:
80:4a:07:8b:59:19:a8:11:ed:85:32:ac:ff:4b:86:6d:51:6e:
5e:a1:e0:9b:5e:28:88:29:44:45:f9:f7:db:dd:6b:be:a5:25:
4e:6f:b7:9d:80:6b:a6:a4:05:87:ac:71:44:ed:10:48:1f:b8:
9c:61:65:da:47:27:51:82:0f:ec:af:1d:ee:a7:2e:f3:72:f2:
b9:b1:f2:cb:af:b1:c5:a0:6d:ba:41:d4:e3:46:bf:19:24:4f:
d1:9e:5c:47:e5:e8:99:3a:cc:ee:00:f5:2b:e0:22:93:98:1f:
42:9f:a2:56:14:b6:b2:78:95:29:0c:ab:65:16:02:32:bf:f7:
c8:18:f6:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNsr+njct6rehV43hn32bUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZGQ0NzUyZDc5ZDQzODhjMWY2YjI4NTYwM2Q0MGI1YTRi
Njk1MzYwHhcNMjUwNjA4MDQwMDQ5WhcNMjUwNjA5MDQwMDQ5WjAzMTEwLwYDVQQD
Eyg1ZmE3NDZiMzk4MjU5MDFhZTQyNjE2YTBmYmZjY2MyZWZlZWQxMTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLAUOrh9/PitStr9xwuvIh5XomC2
p7NPXb6/X4dECslrdAHMS8H2/MmLe8ifg+IIu29gsaS5WUFcHWPOCG6Qx8F7bhSO
FOwncYp7jP/WHl+AW6PI7bZbr/y8zUsmvdmyhf4zmaTHhmsPkeY+QTJiaM+xlkEz
3WYVU5UL1Rzp8nFtpHHp5b3aZJZSFIT2tpfA5tBg2tBx3zGKBKK5Y0EZE15vGnnO
oU5UMJwTCiNS3aEtmv5tlA8LdxvXZIVHKOFysqHrOn2/wu1xjmqn3h0wfTAVZmka
AnSfYViRUOupjjQxpAOHd+wMq7Lr8bGdBVDu7CcOb+JqOlYvAVtPs16laQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+nRrOYJZAa5CYWoPv8zC7+7RFzMB8GA1UdIwQY
MBaAFMLdR1LXnUOIwfayhWA9QLWktpU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lMWIyZDctMjcwMi00ODMxLWJhNTAt
NGE1NzU2NjQ5ZTAxLzEvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9lMWIyZDctMjcwMi00ODMxLWJhNTAtNGE1NzU2NjQ5ZTAx
LzEvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINLCzHbD
rdSVtDCKotjuqJQiNVWth9iyua/Y60/9rAknqMiahucqpmuX7a7JBUJRx8oSJj4J
v6unjnlEEduDDFCVtDRgw8xXZoN2hzNK9wB6+yehZwxyQvOYPBBHxTULXdhXSYBW
ezy+epJc6f8OWkRz2Ll7BNfyPvLzKlgIgEoHi1kZqBHthTKs/0uGbVFuXqHgm14o
iClERfn3291rvqUlTm+3nYBrpqQFh6xxRO0QSB+4nGFl2kcnUYIP7K8d7qcu83Ly
ubHyy6+xxaBtukHU40a/GSRP0Z5cR+XomTrM7gD1K+Aik5gfQp+iVhS2sniVKQyr
ZRYCMr/3yBj2sQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:54:26 2025 by rpki-client