Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
File: wXO75fcjeEWsqNMmO41R7zePwSA.mft (raw, json)
Hash identifier: wqXpMrzn9YNKRamiDNkkFqsltg2EtcbktAYGRlHyHgU=
Subject key identifier: 76:20:E7:E7:B0:64:F4:AD:A4:49:08:C9:F6:87:67:0C:1F:DB:AC:09
Authority key identifier: C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
Certificate issuer: /CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Certificate serial: 0196760CAFE6D2F9CA4605DC13B832965E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
Manifest number: 0202
Signing time: Sun 27 Apr 2025 07:01:05 +0000
Manifest this update: Sun 27 Apr 2025 07:01:05 +0000
Manifest next update: Mon 28 Apr 2025 07:01:05 +0000
Files and hashes: 1: nTT0TyM5N3ly5yMdXzhx4HHtEso.roa (hash: RLNwdKAN6eUr14/Qkl0nwCAt9mev9qzfdg1E2WS7ZdA=)
2: wXO75fcjeEWsqNMmO41R7zePwSA.crl (hash: Ax20VMD6mSTtl/AgbQvNgv3UxZuQHFihu+luVVPbFB4=)
3: wkDz4piEW6E8TjjPv3mOyqzv81A.roa (hash: eds8liA7bmXrlLWfOe2ZVl6NU4VaLq7onyWiImSwEm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:af:e6:d2:f9:ca:46:05:dc:13:b8:32:96:5e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Validity
Not Before: Apr 27 07:01:05 2025 GMT
Not After : Apr 28 07:01:05 2025 GMT
Subject: CN=7620e7e7b064f4ada44908c9f687670c1fdbac09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:9e:a8:11:3c:9b:53:bc:39:bf:4a:a8:90:
c9:4e:b4:82:e9:80:c2:fd:aa:ff:7a:ea:b2:af:77:
8a:a5:f9:5c:70:a1:dd:fa:7b:2b:b7:71:00:c6:b9:
c5:02:be:ab:f8:c8:9c:b9:fd:eb:34:0e:19:2c:6d:
27:1a:2b:9c:4e:6e:6d:ce:6d:00:bc:d4:e3:91:60:
6c:da:b5:65:a0:06:25:3e:eb:12:a7:c2:79:b9:67:
23:43:e7:b7:c4:97:2d:5c:80:57:67:2e:14:d7:d4:
eb:30:7f:15:63:95:59:fa:b3:af:5c:86:4a:0d:c6:
68:24:9e:d0:a7:4c:cd:d4:63:d5:99:04:53:ba:ef:
d7:ef:18:04:19:39:11:ba:7b:00:c9:79:14:74:62:
51:e2:da:32:71:3e:c3:bb:e1:b8:00:9c:31:83:14:
8c:f4:fe:61:e4:44:7a:d7:6a:78:fe:57:8d:d3:b9:
38:81:31:f9:a8:a0:af:72:c3:a5:83:ef:1e:fa:1d:
89:0d:17:78:ba:eb:bb:f8:74:5f:5e:ec:5a:32:27:
58:c9:38:65:13:67:a1:77:5e:55:fe:0b:93:66:e3:
d0:9d:ec:08:68:37:9b:9f:fc:c4:5f:b4:7b:9b:4a:
f7:c3:8d:d1:a2:83:af:e2:63:1b:42:14:ec:1f:ef:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:20:E7:E7:B0:64:F4:AD:A4:49:08:C9:F6:87:67:0C:1F:DB:AC:09
X509v3 Authority Key Identifier:
keyid:C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4b:d3:bf:21:82:ba:60:97:06:d9:83:f0:48:86:f0:90:81:
eb:ea:4b:67:dd:9f:53:63:10:86:7c:62:76:11:d8:69:7a:26:
8b:2c:86:4e:6c:06:61:ec:dd:37:bb:2b:ef:bc:43:88:29:67:
da:b4:cd:f0:38:94:ad:e6:e2:e8:aa:a1:84:96:91:4c:f0:89:
d3:22:60:86:0b:1b:c4:ae:9b:3f:b9:cc:cf:ee:9e:22:3d:7f:
dd:bf:dc:69:92:2a:99:11:55:46:90:7c:15:b8:2e:43:7a:60:
57:99:05:5e:a2:d1:f4:aa:8c:0c:52:ae:be:1b:b8:6d:fd:41:
ea:27:17:cf:2c:69:13:cb:d0:8f:88:9c:70:e6:24:62:23:e2:
63:4a:e0:04:80:1f:5f:c4:65:20:ba:91:15:78:ee:25:0e:bf:
36:28:67:a7:70:37:42:3b:45:49:07:a8:b7:a1:3b:15:45:91:
87:a0:4a:5e:f3:28:72:27:ef:4f:a5:5b:4d:25:e3:aa:2f:ee:
5f:43:68:00:88:7a:34:7d:4c:84:30:c0:99:de:34:8d:63:f3:
b4:8b:4d:6f:84:8b:fe:ad:9a:41:bb:4c:fb:ee:fb:4a:4d:d2:
d8:f9:ba:40:84:ef:e8:87:1c:fd:ff:16:0d:3d:82:81:a3:e5:
70:a7:2f:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DK/m0vnKRgXcE7gyll5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzNiYmU1ZjcyMzc4NDVhY2E4ZDMyNjNiOGQ1MWVmMzc4
ZmMxMjAwHhcNMjUwNDI3MDcwMTA1WhcNMjUwNDI4MDcwMTA1WjAzMTEwLwYDVQQD
Eyg3NjIwZTdlN2IwNjRmNGFkYTQ0OTA4YzlmNjg3NjcwYzFmZGJhYzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjKeqBE8m1O8Ob9KqJDJTrSC6YDC
/ar/euqyr3eKpflccKHd+nsrt3EAxrnFAr6r+Micuf3rNA4ZLG0nGiucTm5tzm0A
vNTjkWBs2rVloAYlPusSp8J5uWcjQ+e3xJctXIBXZy4U19TrMH8VY5VZ+rOvXIZK
DcZoJJ7Qp0zN1GPVmQRTuu/X7xgEGTkRunsAyXkUdGJR4toycT7Du+G4AJwxgxSM
9P5h5ER612p4/leN07k4gTH5qKCvcsOlg+8e+h2JDRd4uuu7+HRfXuxaMidYyThl
E2ehd15V/guTZuPQnewIaDebn/zEX7R7m0r3w43RooOv4mMbQhTsH++NeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYg5+ewZPStpEkIyfaHZwwf26wJMB8GA1UdIwQY
MBaAFMFzu+X3I3hFrKjTJjuNUe83j8EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hPNzVmY2plRVdzcU5NbU80MVI3emVQd1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85OWQyZjUtMTgwMC00YzA4LWJjYWQt
OGE3NTFiMGUwMTcwLzEvd1hPNzVmY2plRVdzcU5NbU80MVI3emVQd1NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85OWQyZjUtMTgwMC00YzA4LWJjYWQtOGE3NTFiMGUwMTcw
LzEvd1hPNzVmY2plRVdzcU5NbU80MVI3emVQd1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUvTvyGC
umCXBtmD8EiG8JCB6+pLZ92fU2MQhnxidhHYaXomiyyGTmwGYezdN7sr77xDiCln
2rTN8DiUrebi6KqhhJaRTPCJ0yJghgsbxK6bP7nMz+6eIj1/3b/caZIqmRFVRpB8
FbguQ3pgV5kFXqLR9KqMDFKuvhu4bf1B6icXzyxpE8vQj4iccOYkYiPiY0rgBIAf
X8RlILqRFXjuJQ6/Nihnp3A3QjtFSQeot6E7FUWRh6BKXvMocifvT6VbTSXjqi/u
X0NoAIh6NH1MhDDAmd40jWPztItNb4SL/q2aQbtM++77Sk3S2Pm6QITv6Icc/f8W
DT2CgaPlcKcv/w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:04 2025 by rpki-client