Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
File: WVt4mYk7niSL5hVd9EX2MK5daHI.mft (raw, json)
Hash identifier: ufgBnsZ03Xn57E5H3n0d5E1X/xv09YFUl4aaRpkdgog=
Subject key identifier: E7:06:90:0A:02:20:F1:7A:6E:FA:43:01:E3:BB:0E:F4:EC:30:E8:5C
Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
Certificate issuer: /CN=595b7899893b9e248be6155df445f630ae5d6872
Certificate serial: 019678D6B28BBCF0C05D92CEF5B482A02585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 20:00:58 +0000
Manifest this update: Sun 27 Apr 2025 20:00:58 +0000
Manifest next update: Mon 28 Apr 2025 20:00:58 +0000
Files and hashes: 1: 5-_m5sx2pOrKBnn6vsQwme9LIWs.roa (hash: h/D8Ki0B/ZgXWanH4BZ9jNHNZb1ZLuVPvKx+u3l030A=)
2: WVt4mYk7niSL5hVd9EX2MK5daHI.crl (hash: QbKBbPFqttopU2RNsUfuQG12iD98RQzm9e7FSixNIzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:b2:8b:bc:f0:c0:5d:92:ce:f5:b4:82:a0:25:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872
Validity
Not Before: Apr 27 20:00:58 2025 GMT
Not After : Apr 28 20:00:58 2025 GMT
Subject: CN=e706900a0220f17a6efa4301e3bb0ef4ec30e85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:eb:2c:e5:37:1e:8b:4b:15:28:e1:ce:fb:
75:05:89:5c:cf:d6:1f:4a:0e:07:81:3b:e8:70:79:
d6:d7:04:5f:cf:b2:9f:f8:69:51:ab:b7:56:ac:44:
03:b7:77:3a:a9:7d:e6:64:f8:8c:02:5a:30:d2:07:
bd:a8:0d:f3:5b:be:ca:fa:81:ec:9a:9e:91:28:b5:
70:ab:e2:86:62:f9:40:21:3a:03:2e:c9:14:2e:1f:
5f:9e:43:0c:78:b1:68:b5:e1:45:fa:85:dd:0b:a6:
7f:6a:4b:6d:96:1f:5d:c8:aa:18:4c:72:58:b0:b2:
24:e4:83:1a:a6:b1:14:bf:cd:3f:49:28:67:87:eb:
1f:1f:4c:24:32:07:1c:89:e7:05:24:b9:61:1a:0e:
c3:9a:79:38:d8:d9:3a:55:b0:a3:33:07:b4:9a:26:
66:b0:22:92:c4:20:46:85:cf:4d:82:74:b4:c1:fe:
1b:7e:c8:bc:75:a6:af:89:70:bd:9b:35:4f:12:4b:
2b:b9:fc:9f:68:85:5c:54:b0:76:f5:d9:a1:aa:18:
3f:47:44:e0:84:a5:07:2d:f9:8c:9d:d2:19:06:14:
41:1a:31:d3:bd:2d:26:69:07:02:df:5e:76:43:80:
a3:23:8d:47:32:c1:e1:45:78:52:90:28:18:5c:24:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:06:90:0A:02:20:F1:7A:6E:FA:43:01:E3:BB:0E:F4:EC:30:E8:5C
X509v3 Authority Key Identifier:
keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8f:06:aa:dd:c9:2e:0d:f3:53:e6:20:c4:8b:8f:cc:76:f1:
a6:be:1f:b0:cd:3d:fb:75:f2:cd:b8:c5:e9:46:2e:0b:ac:23:
a1:21:6c:58:84:10:9a:c2:ca:45:aa:30:f3:38:9d:9f:97:29:
ac:c2:54:36:08:39:de:bb:1a:51:e3:2c:30:34:a7:de:73:b7:
0f:69:ee:16:72:cb:c8:ed:5e:ef:5d:3b:e7:87:75:e7:29:f6:
26:9e:ac:2d:2e:50:89:0b:8c:16:40:b3:43:4b:1f:00:4a:96:
8a:12:2a:79:06:ef:40:d6:a6:45:60:61:75:08:86:4f:6d:f7:
50:f4:a5:dc:09:4f:14:da:54:3c:f5:d0:45:cb:d2:97:7b:53:
ed:b7:b8:73:b9:be:66:5e:1a:a6:83:29:2c:e2:40:d5:c6:3c:
1a:c6:5c:3c:67:b1:88:95:b4:85:99:4b:71:54:60:b8:88:91:
d3:f1:a9:80:9b:1f:ba:b7:56:05:97:7f:48:8c:8b:6b:ac:88:
d3:13:26:d4:4b:db:e3:f4:b7:70:81:40:84:ef:cd:07:04:99:
d8:ed:59:bb:9e:af:20:04:ba:55:92:49:30:b7:ca:18:3a:4a:
ae:0e:28:60:b0:76:c3:87:f9:af:27:5c:ca:ce:8b:2b:96:86:
28:19:d8:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41rKLvPDAXZLO9bSCoCWFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NWI3ODk5ODkzYjllMjQ4YmU2MTU1ZGY0NDVmNjMwYWU1
ZDY4NzIwHhcNMjUwNDI3MjAwMDU4WhcNMjUwNDI4MjAwMDU4WjAzMTEwLwYDVQQD
EyhlNzA2OTAwYTAyMjBmMTdhNmVmYTQzMDFlM2JiMGVmNGVjMzBlODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGbrLOU3HotLFSjhzvt1BYlcz9Yf
Sg4HgTvocHnW1wRfz7Kf+GlRq7dWrEQDt3c6qX3mZPiMAlow0ge9qA3zW77K+oHs
mp6RKLVwq+KGYvlAIToDLskULh9fnkMMeLFoteFF+oXdC6Z/akttlh9dyKoYTHJY
sLIk5IMaprEUv80/SShnh+sfH0wkMgcciecFJLlhGg7Dmnk42Nk6VbCjMwe0miZm
sCKSxCBGhc9NgnS0wf4bfsi8daaviXC9mzVPEksrufyfaIVcVLB29dmhqhg/R0Tg
hKUHLfmMndIZBhRBGjHTvS0maQcC3152Q4CjI41HMsHhRXhSkCgYXCRxkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcGkAoCIPF6bvpDAeO7DvTsMOhcMB8GA1UdIwQY
MBaAFFlbeJmJO54ki+YVXfRF9jCuXWhyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1Z0NG1ZazduaVNMNWhWZDlFWDJNSzVkYUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OWI3YTEtYjNjOC00NWE2LWI5OTEt
N2M3OGViNWIyZDk0LzEvV1Z0NG1ZazduaVNMNWhWZDlFWDJNSzVkYUhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83OWI3YTEtYjNjOC00NWE2LWI5OTEtN2M3OGViNWIyZDk0
LzEvV1Z0NG1ZazduaVNMNWhWZDlFWDJNSzVkYUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANY8Gqt3J
Lg3zU+YgxIuPzHbxpr4fsM09+3XyzbjF6UYuC6wjoSFsWIQQmsLKRaow8zidn5cp
rMJUNgg53rsaUeMsMDSn3nO3D2nuFnLLyO1e710754d15yn2Jp6sLS5QiQuMFkCz
Q0sfAEqWihIqeQbvQNamRWBhdQiGT233UPSl3AlPFNpUPPXQRcvSl3tT7be4c7m+
Zl4apoMpLOJA1cY8GsZcPGexiJW0hZlLcVRguIiR0/GpgJsfurdWBZd/SIyLa6yI
0xMm1Evb4/S3cIFAhO/NBwSZ2O1Zu56vIAS6VZJJMLfKGDpKrg4oYLB2w4f5rydc
ys6LK5aGKBnYFQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:40:18 2025 by rpki-client