
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
File: W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json)
Hash identifier: 2FPkTlYRPjIXTC/Gky9qUiuMfSUWFKv+wd2xtBj35Ik=
Subject key identifier: 4F:2B:9F:D0:4A:C8:72:14:B0:41:01:AF:67:07:C5:FD:DD:08:D6:9F
Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
Certificate issuer: /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Certificate serial: 01974FA0C0E3B950B44B5575181027C05C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
Manifest number: 03C9
Signing time: Sun 08 Jun 2025 13:00:24 +0000
Manifest this update: Sun 08 Jun 2025 13:00:24 +0000
Manifest next update: Mon 09 Jun 2025 13:00:24 +0000
Files and hashes: 1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: Q/Y+sIWW5DgXFQEvbGU1rXyMikeQGTsNqZAVxMuO4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:c0:e3:b9:50:b4:4b:55:75:18:10:27:c0:5c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Validity
Not Before: Jun 8 13:00:24 2025 GMT
Not After : Jun 9 13:00:24 2025 GMT
Subject: CN=4f2b9fd04ac87214b04101af6707c5fddd08d69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:1d:1e:53:0f:7b:91:bc:7b:4d:fc:f2:4c:
1c:30:bc:a9:eb:21:78:58:41:b7:82:0b:12:c4:fe:
01:c7:c1:2e:a5:d7:ab:8f:e9:1d:7b:f6:2c:06:ff:
98:ef:8d:6a:7f:91:21:16:02:b4:d8:81:76:38:8e:
71:da:c9:1b:a3:6a:42:42:9f:c2:60:a0:52:e3:6c:
bb:de:15:08:8c:6d:de:92:d6:ec:fa:54:78:c6:40:
d0:13:d8:55:16:2a:cd:0b:e8:4c:b4:51:b4:e4:10:
b7:56:d5:5c:91:8f:ed:3a:73:9d:54:0d:8f:82:16:
79:fb:71:7e:e6:f7:61:07:51:79:50:eb:fb:f7:6f:
f1:92:60:c9:45:dc:7a:5f:ce:84:38:57:b8:da:a5:
f0:7a:b1:68:3d:c4:de:ed:3d:b4:11:4a:07:89:18:
b2:8a:d0:09:4e:17:de:aa:3e:af:c0:8f:87:df:5f:
10:37:0f:b3:d0:54:90:03:77:0f:e2:4f:03:b9:f3:
57:08:8b:0a:b7:2c:39:53:dd:b4:81:39:93:60:b3:
3f:a9:53:bf:02:65:41:6e:9d:97:82:29:b4:da:e2:
9b:da:9c:78:d7:d8:48:c0:36:e2:d6:8a:4d:1a:73:
f8:9f:6f:43:09:65:af:57:ad:b3:7f:cf:2f:d4:48:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2B:9F:D0:4A:C8:72:14:B0:41:01:AF:67:07:C5:FD:DD:08:D6:9F
X509v3 Authority Key Identifier:
keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b3:da:cc:cc:ce:93:7f:0f:ed:bb:7a:86:93:26:b1:79:d1:
66:7d:5e:83:83:f1:08:ff:f2:5d:42:9a:45:2f:e3:88:58:c1:
46:8d:ba:a1:8b:8b:cb:bc:fb:3d:46:00:18:8a:64:12:d6:e7:
d2:ce:49:45:3f:6c:9a:81:73:00:1b:a7:3c:a5:93:95:2b:50:
3d:37:29:01:52:09:57:5e:87:df:72:79:73:d5:f8:95:0d:d1:
ee:e2:f1:45:17:8b:e6:d8:46:b8:19:5a:b6:5f:df:c5:cd:07:
2e:74:46:f5:19:46:b4:2c:96:48:65:12:01:cb:de:73:c8:27:
76:ad:09:58:81:a4:cc:2f:93:53:de:40:9c:46:ef:4f:5b:b8:
60:9c:b7:45:b0:0f:56:84:2c:b4:b0:45:0d:9a:1a:9a:57:94:
fb:c9:4c:b3:a4:20:45:a5:a4:37:cc:58:a9:b3:d6:0e:ea:20:
01:26:ad:08:e1:92:5d:1c:6b:f0:29:1e:9c:56:4a:a4:16:6e:
28:f4:d9:ed:38:50:63:69:da:4b:31:4b:22:83:ed:81:6d:be:
2e:1b:2e:d8:96:46:5e:0f:92:b3:c3:2d:f9:35:a4:26:93:76:
7b:ac:78:c8:da:79:9e:50:2e:ce:af:9a:fb:09:ad:2c:c0:db:
d5:db:cb:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPoMDjuVC0S1V1GBAnwFyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNWI3N2Q2NDU4ZmZhZDk4NGU1MWRmMzM0ZjNlOGY5ODM4
MmFjMjQwHhcNMjUwNjA4MTMwMDI0WhcNMjUwNjA5MTMwMDI0WjAzMTEwLwYDVQQD
Eyg0ZjJiOWZkMDRhYzg3MjE0YjA0MTAxYWY2NzA3YzVmZGRkMDhkNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9UdHlMPe5G8e0388kwcMLyp6yF4
WEG3ggsSxP4Bx8Eupderj+kde/YsBv+Y741qf5EhFgK02IF2OI5x2skbo2pCQp/C
YKBS42y73hUIjG3ektbs+lR4xkDQE9hVFirNC+hMtFG05BC3VtVckY/tOnOdVA2P
ghZ5+3F+5vdhB1F5UOv792/xkmDJRdx6X86EOFe42qXwerFoPcTe7T20EUoHiRiy
itAJThfeqj6vwI+H318QNw+z0FSQA3cP4k8DufNXCIsKtyw5U920gTmTYLM/qVO/
AmVBbp2Xgim02uKb2px419hIwDbi1opNGnP4n29DCWWvV62zf88v1Ei/xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8rn9BKyHIUsEEBr2cHxf3dCNafMB8GA1UdIwQY
MBaAFFtbd9ZFj/rZhOUd8zTz6PmDgqwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWIt
ZjNkOWY2M2Q1ZDk3LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWItZjNkOWY2M2Q1ZDk3
LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbPazMzO
k38P7bt6hpMmsXnRZn1eg4PxCP/yXUKaRS/jiFjBRo26oYuLy7z7PUYAGIpkEtbn
0s5JRT9smoFzABunPKWTlStQPTcpAVIJV16H33J5c9X4lQ3R7uLxRReL5thGuBla
tl/fxc0HLnRG9RlGtCyWSGUSAcvec8gndq0JWIGkzC+TU95AnEbvT1u4YJy3RbAP
VoQstLBFDZoamleU+8lMs6QgRaWkN8xYqbPWDuogASatCOGSXRxr8CkenFZKpBZu
KPTZ7ThQY2naSzFLIoPtgW2+Lhsu2JZGXg+Ss8Mt+TWkJpN2e6x4yNp5nlAuzq+a
+wmtLMDb1dvLsg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:27:09 2025 by rpki-client