Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
File: WCXq-3jz1WkmUXwqPNUzmqUTht4.mft (raw, json)
Hash identifier: Fy502Qb0KZgwxDst7RhpmZkNnn/9eyY6KmteEBwSiS0=
Subject key identifier: B1:BF:44:D9:58:D0:5A:59:42:3E:3C:66:BD:83:D3:AC:CC:E9:61:C9
Authority key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
Certificate issuer: /CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Certificate serial: 0199221E9EAD0E559350F589F0E495149EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
Manifest number: 0218
Signing time: Sun 07 Sep 2025 03:00:55 +0000
Manifest this update: Sun 07 Sep 2025 03:00:55 +0000
Manifest next update: Mon 08 Sep 2025 03:00:55 +0000
Files and hashes: 1: WCXq-3jz1WkmUXwqPNUzmqUTht4.crl (hash: Pwo7SapeeYJwzd9p2WEAuOjErlE3BnDnzEyeZslmnYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9e:ad:0e:55:93:50:f5:89:f0:e4:95:14:9e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Validity
Not Before: Sep 7 03:00:55 2025 GMT
Not After : Sep 8 03:00:55 2025 GMT
Subject: CN=b1bf44d958d05a59423e3c66bd83d3accce961c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:65:0a:da:37:68:5d:43:9f:a5:56:8a:f1:
5e:c9:e8:4a:6a:82:51:b8:fa:66:2d:21:5f:52:74:
0a:20:1b:36:48:2e:f9:7f:52:43:d2:27:98:1a:26:
35:b1:99:b3:11:99:12:ab:44:f0:4c:86:03:99:48:
b1:04:61:0b:37:88:61:b7:f3:bd:50:4b:1e:f2:f4:
a7:a3:71:b9:37:17:de:dc:02:b1:8f:8d:0c:b6:02:
5c:78:c6:a4:40:78:ff:42:92:c9:d4:db:87:d1:82:
8f:8a:cc:a5:e7:db:31:b8:00:2a:ed:a6:a9:3f:7b:
39:80:d6:51:f7:5f:21:be:89:13:07:98:2a:13:51:
5d:8e:4f:eb:61:14:89:ce:8e:27:ef:fe:96:63:d5:
52:6d:b0:6b:09:82:b1:30:a7:b3:84:2c:70:b9:91:
8d:5f:60:cb:fc:9c:42:07:98:eb:db:19:30:51:e7:
98:b3:41:44:89:c5:18:df:33:bc:88:d2:0f:32:bb:
9b:12:d9:e2:f5:83:c4:67:67:e9:97:da:04:e0:1b:
20:d5:3c:6c:cc:09:31:10:7d:4a:74:50:07:e9:db:
3d:3b:25:e4:6e:76:ef:e2:e6:57:ed:9f:c7:75:b3:
c1:1d:22:c9:07:6c:de:2c:4a:f7:ee:fa:aa:16:a1:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BF:44:D9:58:D0:5A:59:42:3E:3C:66:BD:83:D3:AC:CC:E9:61:C9
X509v3 Authority Key Identifier:
keyid:58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:46:80:06:c2:e4:ea:98:62:9c:cd:22:81:51:56:f5:71:cd:
75:6a:7c:c5:ea:e2:28:5d:bd:5d:d3:0e:65:9f:b2:21:61:79:
a6:98:9d:c5:f6:45:25:e9:9d:05:37:28:a0:5d:97:dc:14:df:
f8:d5:70:1c:ea:20:64:44:6e:75:4b:a2:18:49:eb:7f:60:38:
78:33:c0:9e:d9:83:07:5a:52:2c:b4:2f:2b:61:82:db:c0:3b:
a0:c2:e6:53:46:86:48:42:a4:a7:e1:23:62:de:cc:af:d7:91:
ba:d6:bf:d4:8a:88:21:af:ef:06:88:7a:fa:a3:06:fb:61:a1:
48:1e:17:7c:0a:ba:1f:90:05:e8:7b:7b:31:5c:b4:0e:04:fd:
96:f0:8d:0e:43:4d:d2:21:9a:76:e3:a8:22:b5:0d:a0:25:6d:
f7:01:b4:f7:e5:6d:c5:b3:48:e1:c9:c9:e8:30:a4:7b:90:48:
1a:ea:53:c1:84:29:db:a3:1c:e0:d8:8d:23:c4:9f:77:21:f2:
7e:a9:02:39:4a:56:55:e1:b6:66:ea:45:46:f0:bf:05:59:25:
09:0d:c4:d9:1c:3d:43:19:7a:e7:b5:54:df:37:2c:7f:79:9d:
94:76:f7:55:20:a4:08:c3:48:d6:42:69:9a:fc:42:1b:f5:b8:
8c:70:2a:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHp6tDlWTUPWJ8OSVFJ6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MjVlYWZiNzhmM2Q1NjkyNjUxN2MyYTNjZDUzMzlhYTUx
Mzg2ZGUwHhcNMjUwOTA3MDMwMDU1WhcNMjUwOTA4MDMwMDU1WjAzMTEwLwYDVQQD
EyhiMWJmNDRkOTU4ZDA1YTU5NDIzZTNjNjZiZDgzZDNhY2NjZTk2MWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+llCto3aF1Dn6VWivFeyehKaoJR
uPpmLSFfUnQKIBs2SC75f1JD0ieYGiY1sZmzEZkSq0TwTIYDmUixBGELN4hht/O9
UEse8vSno3G5Nxfe3AKxj40MtgJceMakQHj/QpLJ1NuH0YKPisyl59sxuAAq7aap
P3s5gNZR918hvokTB5gqE1Fdjk/rYRSJzo4n7/6WY9VSbbBrCYKxMKezhCxwuZGN
X2DL/JxCB5jr2xkwUeeYs0FEicUY3zO8iNIPMrubEtni9YPEZ2fpl9oE4Bsg1Txs
zAkxEH1KdFAH6ds9OyXkbnbv4uZX7Z/HdbPBHSLJB2zeLEr37vqqFqFDmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLG/RNlY0FpZQj48Zr2D06zM6WHJMB8GA1UdIwQY
MBaAFFgl6vt489VpJlF8KjzVM5qlE4beMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYTgyNWItY2FlNi00NzdiLWFiZmMt
ZDVjNmFlMjYyNWFhLzEvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mYTgyNWItY2FlNi00NzdiLWFiZmMtZDVjNmFlMjYyNWFh
LzEvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUaABsLk
6phinM0igVFW9XHNdWp8xeriKF29XdMOZZ+yIWF5ppidxfZFJemdBTcooF2X3BTf
+NVwHOogZERudUuiGEnrf2A4eDPAntmDB1pSLLQvK2GC28A7oMLmU0aGSEKkp+Ej
Yt7Mr9eRuta/1IqIIa/vBoh6+qMG+2GhSB4XfAq6H5AF6Ht7MVy0DgT9lvCNDkNN
0iGaduOoIrUNoCVt9wG09+VtxbNI4cnJ6DCke5BIGupTwYQp26Mc4NiNI8SfdyHy
fqkCOUpWVeG2ZupFRvC/BVklCQ3E2Rw9Qxl657VU3zcsf3mdlHb3VSCkCMNI1kJp
mvxCG/W4jHAqJw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:39 2025 by rpki-client