Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
File: WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft (raw, json)
Hash identifier: HRUzQWZ9WVEN77nBy+tlKCdrJR3vbOGFIjXqf2YfV3Q=
Subject key identifier: 57:3D:C8:A5:89:5E:93:C7:DF:44:4C:B2:03:1D:16:F6:53:1F:EC:40
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Certificate issuer: /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial: 0196759E720149075062A64479D167069800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
Manifest number: 0472
Signing time: Sun 27 Apr 2025 05:00:40 +0000
Manifest this update: Sun 27 Apr 2025 05:00:40 +0000
Manifest next update: Mon 28 Apr 2025 05:00:40 +0000
Files and hashes: 1: EQErsYEn34VQuEWAGFb3PKqYnG4.roa (hash: V0vxhgyH062g70S7uriTR1kZL9lSGypJMHFC0eqjGm8=)
2: F6cqsVfR3nCwcraDWbOKx9UMCf0.roa (hash: VhLYWpxjVaCJbMRdgI+y8qkEuKfM8KwIqDJg1RYVsew=)
3: WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl (hash: BzkxHW53rNM/m8HbxcTj+Oq4d3por9bCfVRNIPKCxyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:72:01:49:07:50:62:a6:44:79:d1:67:06:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Validity
Not Before: Apr 27 05:00:40 2025 GMT
Not After : Apr 28 05:00:40 2025 GMT
Subject: CN=573dc8a5895e93c7df444cb2031d16f6531fec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:55:eb:28:e4:ba:3e:36:76:06:2b:5e:aa:
5c:13:0b:04:78:ce:e0:61:bf:db:79:d1:08:41:22:
a9:f7:7a:b7:2a:23:34:d0:da:56:35:3e:5b:6a:20:
e7:80:a0:13:62:50:02:db:d6:70:b6:b0:0f:b6:07:
2d:4f:27:84:e6:9f:bd:c0:43:14:7c:88:1c:8c:ec:
39:63:69:f7:38:4a:5d:b6:a3:c7:57:7e:29:e5:82:
43:2b:eb:be:0f:6d:dd:b0:a7:9c:85:11:20:39:5a:
46:24:c7:49:ce:59:6c:b6:2f:64:6c:09:ce:87:a4:
9f:f7:eb:2b:dd:ae:c1:ab:96:1f:21:88:90:07:9f:
ac:74:3b:e2:95:b5:35:c6:f0:f7:16:07:38:65:68:
39:eb:33:8e:cb:36:c0:4d:a9:1f:6e:2e:5e:a8:39:
2a:a3:d5:cd:f9:fd:2a:a6:fb:cc:1d:77:bb:b0:5f:
07:16:b9:83:ba:13:f2:a8:76:01:39:5f:a5:b1:5b:
39:bb:4e:91:57:66:94:91:be:f4:86:83:01:d5:f9:
24:5c:71:7f:b5:a6:62:11:75:ab:ba:1e:4d:20:71:
cc:a4:67:4a:8f:af:57:33:f0:e2:eb:af:33:07:30:
df:87:f8:5e:cd:4c:e5:3e:61:97:5e:f6:9e:49:c1:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3D:C8:A5:89:5E:93:C7:DF:44:4C:B2:03:1D:16:F6:53:1F:EC:40
X509v3 Authority Key Identifier:
keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1e:b8:cb:25:c9:9e:1f:04:22:cf:e2:67:3a:6e:1f:1d:d5:
5d:0c:ed:10:3a:0e:bc:a4:96:cc:f9:b4:22:12:3c:84:89:fd:
09:9d:7c:3c:32:96:bf:59:29:a9:5e:71:76:eb:6f:94:1a:ae:
85:6c:1e:77:96:99:62:e8:91:2d:fa:a8:ca:53:bd:77:89:5a:
55:6f:e2:fe:a8:f2:3e:3e:72:be:e4:de:b8:4d:8f:e5:db:29:
b3:f8:47:c0:5b:26:0a:f7:c1:26:39:d1:3f:82:6f:46:5f:0c:
70:4b:a0:2d:c0:e4:a8:2e:1b:09:f1:0d:db:13:25:1f:ef:d3:
d0:b7:28:95:16:9c:d3:24:72:68:9a:95:52:73:94:58:be:80:
44:44:36:4f:3a:e5:a5:2b:50:e9:ee:c4:ea:ce:0c:98:26:3c:
be:52:4e:25:ba:64:6a:c0:aa:69:be:83:14:25:fc:14:13:08:
31:07:0a:a7:cd:26:a7:1a:06:49:ad:6f:2e:c1:7d:e5:96:9b:
e7:b5:8e:72:61:39:74:23:f8:4b:34:e2:fa:29:86:9f:2f:49:
e0:fe:64:fe:45:ee:8b:14:75:c2:7e:ae:73:b4:4d:3a:7f:ba:
c0:e5:9a:a4:32:61:97:23:b1:3a:2a:85:cd:be:fa:8b:64:78:
be:42:5c:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nnIBSQdQYqZEedFnBpgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmM3NGZjNTliN2FiMDk2YTI1N2QzYjYyOTlkMmY2ZmRh
NDZhODAwHhcNMjUwNDI3MDUwMDQwWhcNMjUwNDI4MDUwMDQwWjAzMTEwLwYDVQQD
Eyg1NzNkYzhhNTg5NWU5M2M3ZGY0NDRjYjIwMzFkMTZmNjUzMWZlYzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybJV6yjkuj42dgYrXqpcEwsEeM7g
Yb/bedEIQSKp93q3KiM00NpWNT5baiDngKATYlAC29ZwtrAPtgctTyeE5p+9wEMU
fIgcjOw5Y2n3OEpdtqPHV34p5YJDK+u+D23dsKechREgOVpGJMdJzllsti9kbAnO
h6Sf9+sr3a7Bq5YfIYiQB5+sdDvilbU1xvD3Fgc4ZWg56zOOyzbATakfbi5eqDkq
o9XN+f0qpvvMHXe7sF8HFrmDuhPyqHYBOV+lsVs5u06RV2aUkb70hoMB1fkkXHF/
taZiEXWruh5NIHHMpGdKj69XM/Di668zBzDfh/hezUzlPmGXXvaeScEIZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFc9yKWJXpPH30RMsgMdFvZTH+xAMB8GA1UdIwQY
MBaAFFgsdPxZt6sJaiV9O2KZ0vb9pGqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0N4MF9GbTNxd2xxSlgwN1lwblM5djJrYW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iMTU4NTEtYTgzYi00MTVjLWFlZTUt
ZjllZmMwNDU3ZmI5LzEvV0N4MF9GbTNxd2xxSlgwN1lwblM5djJrYW9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iMTU4NTEtYTgzYi00MTVjLWFlZTUtZjllZmMwNDU3ZmI5
LzEvV0N4MF9GbTNxd2xxSlgwN1lwblM5djJrYW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVh64yyXJ
nh8EIs/iZzpuHx3VXQztEDoOvKSWzPm0IhI8hIn9CZ18PDKWv1kpqV5xdutvlBqu
hWwed5aZYuiRLfqoylO9d4laVW/i/qjyPj5yvuTeuE2P5dsps/hHwFsmCvfBJjnR
P4JvRl8McEugLcDkqC4bCfEN2xMlH+/T0LcolRac0yRyaJqVUnOUWL6AREQ2Tzrl
pStQ6e7E6s4MmCY8vlJOJbpkasCqab6DFCX8FBMIMQcKp80mpxoGSa1vLsF95Zab
57WOcmE5dCP4SzTi+imGny9J4P5k/kXuixR1wn6uc7RNOn+6wOWapDJhlyOxOiqF
zb76i2R4vkJcUw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:41:10 2025 by rpki-client