Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier: vKuIHYE4pYCz3tmUCCmV2juxJ2qkjZ1Cp4Dr4LDTfc0=
Subject key identifier: DC:FB:CE:9D:57:16:EC:BA:AF:54:2B:58:4E:DC:2F:C8:2C:BF:FA:4B
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 01967FEB269C982555D2197D443FE927EA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 05:00:39 +0000
Manifest this update: Tue 29 Apr 2025 05:00:39 +0000
Manifest next update: Wed 30 Apr 2025 05:00:39 +0000
Files and hashes: 1: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (hash: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=)
2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: 9DoWlGhj0u4Ap4dJTMWFgEAFUlF+T8JThscbXh5yOEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:26:9c:98:25:55:d2:19:7d:44:3f:e9:27:ea:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: Apr 29 05:00:39 2025 GMT
Not After : Apr 30 05:00:39 2025 GMT
Subject: CN=dcfbce9d5716ecbaaf542b584edc2fc82cbffa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:98:d2:62:f9:58:e5:84:ac:d1:f8:ea:ff:
35:96:c4:e5:1c:8d:4f:c2:6b:32:bf:26:f8:a5:0e:
0b:cb:36:db:43:70:96:c2:4a:15:b2:85:bb:05:94:
73:9d:73:61:83:ce:75:31:a4:9c:98:02:01:45:45:
42:86:64:b3:a2:8b:81:55:30:18:0f:1c:9c:74:fd:
ec:2f:9b:59:ca:b7:24:69:bb:a5:94:a1:0a:d7:58:
8b:47:bc:a1:20:ff:c3:74:13:87:e4:04:e9:fc:c6:
9b:d5:1f:b0:c2:06:e3:af:ee:a3:6c:c0:bd:2a:11:
14:41:db:7f:9a:3b:a8:36:d3:4f:b0:d0:11:c3:84:
e5:67:9b:ae:68:ca:a6:70:65:63:d2:8c:3a:9d:76:
c1:fd:40:15:6e:c3:90:55:a9:2e:cf:7c:5f:9a:af:
8f:18:4e:45:6d:3d:66:69:69:e4:7d:5e:f5:d2:4a:
3f:54:97:a7:3b:5f:5e:cd:54:62:99:50:db:9f:bf:
52:6c:b1:39:7a:25:62:a8:68:fe:fc:8c:43:ee:25:
c0:1e:21:f1:0b:66:03:c8:fc:06:cb:5c:26:95:04:
40:02:0e:61:3b:15:a8:c6:90:ab:f0:12:dc:0c:b9:
b2:f8:d5:b8:50:f6:e4:f2:5d:bf:8e:ca:bc:16:44:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:CE:9D:57:16:EC:BA:AF:54:2B:58:4E:DC:2F:C8:2C:BF:FA:4B
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2c:66:8d:6c:e1:b5:9d:fd:61:e3:6a:30:cc:b8:fc:5d:ae:
a1:f0:11:28:d1:00:92:25:c3:ca:06:55:aa:25:50:d3:89:4a:
2f:8d:78:ee:04:e5:ec:cc:65:a1:f7:ab:8a:d3:1f:fc:ee:ef:
67:d5:b5:75:d4:c0:6c:33:5c:ee:f3:53:8c:5f:fa:4a:6e:f0:
15:ed:ee:7b:2a:f1:32:46:c0:58:cc:a6:87:9f:cd:fd:5b:4c:
1c:34:95:8a:7f:23:02:81:5e:11:ee:6e:57:73:a1:1e:2e:f0:
25:60:9f:31:d7:4d:df:c4:d3:4c:af:c5:48:dc:bf:06:e2:7c:
9e:da:4c:c5:4d:34:5d:73:1c:3a:54:7c:d1:18:cd:12:c3:61:
e8:6f:f3:08:73:81:57:08:28:39:f8:68:00:65:3f:f8:b0:dc:
e4:a9:51:ed:e1:57:60:6c:9e:81:41:02:15:7b:8f:8c:bb:4e:
9e:42:a8:68:e4:82:f4:c0:fa:d6:ca:63:3f:f9:4a:4c:0e:80:
ec:d8:0c:c4:f9:ae:a1:a6:cc:7c:9a:aa:ef:77:26:a8:c8:d8:
4b:ba:10:73:91:ee:42:cf:94:1f:9d:21:0f:01:34:f4:6f:7f:
21:6d:55:07:43:27:4c:7f:7a:fd:1a:9f:15:6e:71:73:7d:d3:
5b:a7:23:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/6yacmCVV0hl9RD/pJ+peMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzJkNDc2MTI0MDM1OWFjYmE4YTMzN2QzYWMzYTkzOTc5
MjVhNzIwHhcNMjUwNDI5MDUwMDM5WhcNMjUwNDMwMDUwMDM5WjAzMTEwLwYDVQQD
EyhkY2ZiY2U5ZDU3MTZlY2JhYWY1NDJiNTg0ZWRjMmZjODJjYmZmYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTeY0mL5WOWErNH46v81lsTlHI1P
wmsyvyb4pQ4LyzbbQ3CWwkoVsoW7BZRznXNhg851MaScmAIBRUVChmSzoouBVTAY
DxycdP3sL5tZyrckabullKEK11iLR7yhIP/DdBOH5ATp/Mab1R+wwgbjr+6jbMC9
KhEUQdt/mjuoNtNPsNARw4TlZ5uuaMqmcGVj0ow6nXbB/UAVbsOQVakuz3xfmq+P
GE5FbT1maWnkfV710ko/VJenO19ezVRimVDbn79SbLE5eiViqGj+/IxD7iXAHiHx
C2YDyPwGy1wmlQRAAg5hOxWoxpCr8BLcDLmy+NW4UPbk8l2/jsq8FkQ+OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNz7zp1XFuy6r1QrWE7cL8gsv/pLMB8GA1UdIwQY
MBaAFMJy1HYSQDWay6ijN9OsOpOXklpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAt
MTBkZTY3MTIxMTk3LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAtMTBkZTY3MTIxMTk3
LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCxmjWzh
tZ39YeNqMMy4/F2uofARKNEAkiXDygZVqiVQ04lKL4147gTl7MxloferitMf/O7v
Z9W1ddTAbDNc7vNTjF/6Sm7wFe3ueyrxMkbAWMymh5/N/VtMHDSVin8jAoFeEe5u
V3OhHi7wJWCfMddN38TTTK/FSNy/BuJ8ntpMxU00XXMcOlR80RjNEsNh6G/zCHOB
VwgoOfhoAGU/+LDc5KlR7eFXYGyegUECFXuPjLtOnkKoaOSC9MD61spjP/lKTA6A
7NgMxPmuoabMfJqq73cmqMjYS7oQc5HuQs+UH50hDwE09G9/IW1VB0MnTH96/Rqf
FW5xc33TW6cjQA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:31:26 2025 by rpki-client