Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
File: wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json)
Hash identifier: jr/oUClvox7dY8gGq0WmlvIhr9Csw1hJ2fyzbzEV7ng=
Subject key identifier: 99:CB:20:60:E4:E3:EF:6F:69:3C:08:33:DD:56:A3:CA:E8:C5:D9:58
Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
Certificate issuer: /CN=c14d724ca59addd0f7f8108b01059795f34d3345
Certificate serial: 019679E922B699B96E9198A74616D36081C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
Manifest number: 052B
Signing time: Mon 28 Apr 2025 01:00:43 +0000
Manifest this update: Mon 28 Apr 2025 01:00:43 +0000
Manifest next update: Tue 29 Apr 2025 01:00:43 +0000
Files and hashes: 1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: 7LRE4XGYQuuBJ7vjDaQaGKC9ur1nxto/hAykRaZOWIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:22:b6:99:b9:6e:91:98:a7:46:16:d3:60:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345
Validity
Not Before: Apr 28 01:00:43 2025 GMT
Not After : Apr 29 01:00:43 2025 GMT
Subject: CN=99cb2060e4e3ef6f693c0833dd56a3cae8c5d958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:05:e7:57:73:38:85:ec:06:37:88:aa:9e:
14:54:c5:a5:2a:de:7b:71:30:cd:50:a2:54:90:fe:
3b:32:31:b7:66:05:77:42:90:a7:d5:61:73:ec:e8:
26:3c:bb:d5:41:6c:d5:5a:9d:67:da:d7:22:c8:38:
54:9d:e6:08:c8:d5:ea:48:09:74:d7:6e:dd:dc:fd:
fb:10:6c:11:ef:24:6b:d5:de:1a:59:bb:42:56:04:
c3:81:71:98:1e:b0:6a:84:fd:59:91:83:e9:31:4f:
c9:bd:62:2b:e8:98:ff:ff:67:6c:13:b3:21:18:a5:
d5:a5:a2:a7:44:6f:e5:7d:68:ae:9f:77:20:0d:8a:
41:92:f0:e3:ce:a0:cc:7c:4a:00:18:79:9b:2f:7d:
9f:44:87:a0:93:40:d1:aa:89:5a:b8:b6:c3:ae:bb:
15:8b:cd:c5:b9:df:b6:23:5b:55:1c:09:81:1c:04:
45:75:3c:b6:8c:6e:f4:84:56:cb:e2:39:9e:94:54:
a2:fa:c0:e3:cb:b8:76:57:86:ac:33:7a:4e:39:83:
e2:21:b8:12:62:2b:87:b9:66:f8:a7:ab:14:63:d7:
0a:4b:0a:9a:e8:16:4d:92:fc:e0:fc:f1:a8:16:95:
48:34:a9:b5:09:a1:d7:c4:b8:9c:2a:c8:86:aa:ff:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CB:20:60:E4:E3:EF:6F:69:3C:08:33:DD:56:A3:CA:E8:C5:D9:58
X509v3 Authority Key Identifier:
keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:96:5c:79:8f:3e:36:79:f7:53:7f:d7:97:4d:45:d7:8c:8f:
21:1a:93:46:2f:28:c2:8d:dd:7c:2a:a5:79:15:82:e7:90:91:
ce:6c:fc:30:ec:11:fd:e2:41:d2:a9:e3:b4:b7:ca:97:41:1c:
4b:ec:0b:c5:5e:ad:3d:73:da:8f:af:bd:34:83:9e:f2:61:f5:
a1:df:7e:d3:c2:c9:74:03:71:72:d5:1c:a0:25:97:41:ff:f9:
3d:32:d6:3e:15:57:b4:4b:8a:5e:15:9b:33:fb:d5:e9:08:79:
88:bf:aa:5b:23:20:0d:82:3d:7c:9c:18:05:c2:ab:e7:d7:9f:
a2:62:07:57:44:b4:ec:fd:a8:6d:da:ec:cb:54:ca:9c:68:eb:
b9:62:67:39:d0:5a:ab:16:39:62:29:ed:6a:00:ea:4a:12:22:
c6:1c:f2:aa:51:20:c0:a7:75:81:40:78:6c:87:0a:6e:f5:9f:
ee:f2:5c:90:5a:95:63:c1:aa:df:e3:e4:b6:5f:0a:a9:05:e8:
ae:2c:67:3d:76:73:07:6d:bc:23:ca:9a:1b:37:71:73:7e:fe:
a3:82:f3:d4:bf:b7:27:af:1b:51:d4:de:c0:cf:dc:57:b2:cf:
d9:3f:df:a7:5d:80:7d:7a:ee:ea:59:4f:e7:59:0f:69:58:23:
49:4b:1b:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56SK2mblukZinRhbTYIHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNGQ3MjRjYTU5YWRkZDBmN2Y4MTA4YjAxMDU5Nzk1ZjM0
ZDMzNDUwHhcNMjUwNDI4MDEwMDQzWhcNMjUwNDI5MDEwMDQzWjAzMTEwLwYDVQQD
Eyg5OWNiMjA2MGU0ZTNlZjZmNjkzYzA4MzNkZDU2YTNjYWU4YzVkOTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynIF51dzOIXsBjeIqp4UVMWlKt57
cTDNUKJUkP47MjG3ZgV3QpCn1WFz7OgmPLvVQWzVWp1n2tciyDhUneYIyNXqSAl0
127d3P37EGwR7yRr1d4aWbtCVgTDgXGYHrBqhP1ZkYPpMU/JvWIr6Jj//2dsE7Mh
GKXVpaKnRG/lfWiun3cgDYpBkvDjzqDMfEoAGHmbL32fRIegk0DRqolauLbDrrsV
i83Fud+2I1tVHAmBHARFdTy2jG70hFbL4jmelFSi+sDjy7h2V4asM3pOOYPiIbgS
YiuHuWb4p6sUY9cKSwqa6BZNkvzg/PGoFpVINKm1CaHXxLicKsiGqv9PuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnLIGDk4+9vaTwIM91Wo8roxdlYMB8GA1UdIwQY
MBaAFMFNckylmt3Q9/gQiwEFl5XzTTNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNGRkZDctY2Q0MS00NmI1LWFjMzgt
NGY1NjRjZTA3MTI2LzEvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iNGRkZDctY2Q0MS00NmI1LWFjMzgtNGY1NjRjZTA3MTI2
LzEvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpZceY8+
Nnn3U3/Xl01F14yPIRqTRi8owo3dfCqleRWC55CRzmz8MOwR/eJB0qnjtLfKl0Ec
S+wLxV6tPXPaj6+9NIOe8mH1od9+08LJdANxctUcoCWXQf/5PTLWPhVXtEuKXhWb
M/vV6Qh5iL+qWyMgDYI9fJwYBcKr59efomIHV0S07P2obdrsy1TKnGjruWJnOdBa
qxY5YintagDqShIixhzyqlEgwKd1gUB4bIcKbvWf7vJckFqVY8Gq3+Pktl8KqQXo
rixnPXZzB228I8qaGzdxc37+o4Lz1L+3J68bUdTewM/cV7LP2T/fp12AfXru6llP
51kPaVgjSUsbsQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:13:08 2025 by rpki-client