Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File: wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier: YiOtl+Bciwu/yt1pMZNQYngV8bhbXx35TNujRwSDK+Q=
Subject key identifier: 87:E8:B5:E4:3B:3B:23:DE:E5:CA:B2:07:63:63:93:EA:5B:49:4D:7D
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer: /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial: 019680C70E0FD225A32060AA99E50A8A8D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number: 0787
Signing time: Tue 29 Apr 2025 09:00:51 +0000
Manifest this update: Tue 29 Apr 2025 09:00:51 +0000
Manifest next update: Wed 30 Apr 2025 09:00:51 +0000
Files and hashes: 1: JlMTszQ0SriAWERqlr9FMnp6WvU.roa (hash: M6WDGwhPPqHvkOqSI6cVPu36gkAbrulfoDxAqaGV7po=)
2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: TKyQp1SOv9U6v3I0lXW79ToRXxk3N/rK3Pfv+tETZ6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c7:0e:0f:d2:25:a3:20:60:aa:99:e5:0a:8a:8d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Validity
Not Before: Apr 29 09:00:51 2025 GMT
Not After : Apr 30 09:00:51 2025 GMT
Subject: CN=87e8b5e43b3b23dee5cab207636393ea5b494d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:9a:31:ab:f8:5c:9a:9d:db:0b:a8:10:97:
bb:fb:4e:33:33:6f:ec:95:8c:39:bc:ae:48:ca:a4:
f7:98:78:a2:53:a8:b3:24:57:ac:db:81:d0:02:70:
95:d7:48:26:2b:d2:f6:57:76:cc:8a:5c:28:1f:a9:
f6:c1:d5:0e:da:0a:ee:bd:e5:00:dd:78:f0:f6:4b:
bb:12:80:e9:7a:ac:8b:c9:0a:9e:ef:83:d0:37:98:
3f:5d:dc:83:e9:8b:11:9f:a5:67:8d:f6:a2:76:c6:
d3:5d:ef:5e:40:6e:a4:b9:67:b3:82:3d:ed:4d:88:
36:83:ad:93:cb:0a:64:f8:c0:73:1f:c0:ca:99:c6:
d2:79:f2:18:01:2a:4c:d1:25:67:93:54:c9:93:99:
3b:1b:88:55:91:18:27:d5:9f:2b:12:69:e7:c1:10:
53:f1:64:c8:95:c1:7d:2a:74:86:0a:7d:40:fd:5b:
89:04:c5:cf:1d:13:41:98:b9:c9:ab:47:95:a7:25:
39:66:6f:41:1e:aa:9c:ed:5a:75:76:54:dd:0f:62:
cc:8b:a4:5d:a8:1d:85:0a:9f:87:73:69:a7:ea:61:
5a:87:ee:c7:7c:65:02:44:ca:fa:2a:c5:4b:58:2c:
15:69:e9:22:bc:7e:07:23:cb:09:49:3e:6c:2a:66:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E8:B5:E4:3B:3B:23:DE:E5:CA:B2:07:63:63:93:EA:5B:49:4D:7D
X509v3 Authority Key Identifier:
keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:22:4c:36:f6:00:63:49:10:ed:ea:6a:ae:7a:c0:51:ce:87:
f6:e8:39:df:8d:e6:b5:5e:57:b2:c1:61:ad:52:65:7f:ae:a7:
90:a2:19:5e:1a:cc:93:30:58:86:a8:30:32:10:22:7b:df:ad:
b8:a8:e6:6d:b9:76:8a:42:3b:dd:bc:d3:b1:7c:a5:00:0f:6e:
5b:20:09:60:33:ae:e7:4c:45:90:99:e0:7c:60:fb:15:af:2b:
24:e6:67:24:07:77:49:30:ec:b7:b4:f0:45:3a:5a:08:bf:ce:
48:15:fa:e8:c1:db:3d:ed:bd:55:82:de:72:f2:ac:f9:e8:6d:
f8:8a:ce:53:4d:f1:50:52:eb:2e:0b:34:19:d7:f8:dd:5d:bc:
a5:fb:06:69:f1:bd:e2:23:20:15:62:36:20:d2:f9:d1:e3:43:
b1:f7:b8:5e:dc:56:88:81:c2:76:47:df:ff:40:03:09:1a:9d:
88:d1:aa:b3:e5:06:98:9a:e7:15:dd:e2:79:3b:72:2d:26:bb:
71:e1:85:ef:58:6d:a1:38:23:07:d5:80:73:cd:c7:44:05:bb:
d4:e6:ca:11:25:6a:7a:7b:d1:d0:37:6d:2f:9a:86:38:ce:c4:
4a:e6:5e:b2:b2:89:99:c9:8e:d7:48:47:4b:7a:65:a0:02:27:
14:4c:7a:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAxw4P0iWjIGCqmeUKio04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYTkxMWQ2OWM0ZjY0NTdhMTA5ZGU3N2IxYzc1MjQ5ZGM1
MzBlMTcwHhcNMjUwNDI5MDkwMDUxWhcNMjUwNDMwMDkwMDUxWjAzMTEwLwYDVQQD
Eyg4N2U4YjVlNDNiM2IyM2RlZTVjYWIyMDc2MzYzOTNlYTViNDk0ZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0WaMav4XJqd2wuoEJe7+04zM2/s
lYw5vK5IyqT3mHiiU6izJFes24HQAnCV10gmK9L2V3bMilwoH6n2wdUO2gruveUA
3Xjw9ku7EoDpeqyLyQqe74PQN5g/XdyD6YsRn6VnjfaidsbTXe9eQG6kuWezgj3t
TYg2g62Tywpk+MBzH8DKmcbSefIYASpM0SVnk1TJk5k7G4hVkRgn1Z8rEmnnwRBT
8WTIlcF9KnSGCn1A/VuJBMXPHRNBmLnJq0eVpyU5Zm9BHqqc7Vp1dlTdD2LMi6Rd
qB2FCp+Hc2mn6mFah+7HfGUCRMr6KsVLWCwVaekivH4HI8sJST5sKmYXwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfoteQ7OyPe5cqyB2Njk+pbSU19MB8GA1UdIwQY
MBaAFMKpEdacT2RXoQned7HHUkncUw4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jNjUzNWQtNzIxZi00MzAxLTlkODkt
ZmNkYWQyYjU2NTZiLzEvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jNjUzNWQtNzIxZi00MzAxLTlkODktZmNkYWQyYjU2NTZi
LzEvd3FrUjFweFBaRmVoQ2Q1M3NjZFNTZHhURGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiJMNvYA
Y0kQ7epqrnrAUc6H9ug5343mtV5XssFhrVJlf66nkKIZXhrMkzBYhqgwMhAie9+t
uKjmbbl2ikI73bzTsXylAA9uWyAJYDOu50xFkJngfGD7Fa8rJOZnJAd3STDst7Tw
RTpaCL/OSBX66MHbPe29VYLecvKs+eht+IrOU03xUFLrLgs0Gdf43V28pfsGafG9
4iMgFWI2INL50eNDsfe4XtxWiIHCdkff/0ADCRqdiNGqs+UGmJrnFd3ieTtyLSa7
ceGF71htoTgjB9WAc83HRAW71ObKESVqenvR0DdtL5qGOM7ESuZesrKJmcmO10hH
S3ploAInFEx6GA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:05:00 2025 by rpki-client