Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: /q0p1LJQ+JmDCttSU+HfMS511qBA4cTIOYv/Czm2otM=
Subject key identifier: 6E:47:00:3A:30:2B:95:F4:C4:41:CE:CC:87:EF:28:DB:F5:15:49:E8
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 01967943EECAA7A88915F9B24A1F6A1420BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 130E
Signing time: Sun 27 Apr 2025 22:00:17 +0000
Manifest this update: Sun 27 Apr 2025 22:00:17 +0000
Manifest next update: Mon 28 Apr 2025 22:00:17 +0000
Files and hashes: 1: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: kWPRhdp7zMrvNO6AM++P8BCbsarsMPLtPLYY+aHOQAU=)
2: XgR8akpJkIXmtNYutT4OTp5quOo.roa (hash: J70lBDkMgy2Yl8b9o6aU3SeolN3Fw23mWFk4KOMdzQk=)
3: XvxinObJ_Ej5nBLFUwMOjtk2T4E.roa (hash: IfeFWTU1UR3YBE9GSFaZmBt5m0QI6LQRR1xjta/zJxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:43:ee:ca:a7:a8:89:15:f9:b2:4a:1f:6a:14:20:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Apr 27 22:00:17 2025 GMT
Not After : Apr 28 22:00:17 2025 GMT
Subject: CN=6e47003a302b95f4c441cecc87ef28dbf51549e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:87:55:d4:55:18:2d:33:8d:cb:f6:a3:75:e1:
4d:31:7c:28:a2:5e:97:d0:21:db:c2:e4:0e:6c:39:
7e:d6:12:2f:26:7b:80:a3:d6:a0:f1:56:18:47:71:
2b:c7:76:16:7f:ef:72:68:ec:c5:4d:c5:f3:9d:fe:
83:60:1e:e6:39:8a:ab:21:90:22:da:03:09:23:c5:
6d:bf:ac:0c:87:b6:19:12:62:ab:4c:14:c5:2e:cc:
4c:4e:f8:2a:c8:d6:04:97:96:75:f1:50:26:1c:c2:
b0:d9:f1:23:b5:82:67:c3:b2:a9:ac:43:da:24:d7:
0f:46:d7:74:15:0a:dd:b3:7b:1b:50:48:e4:62:b0:
fb:c5:3c:66:5a:78:29:7d:52:3d:91:cf:9c:2a:bb:
7b:c7:38:c9:8f:0e:41:f3:fd:04:43:06:c3:da:65:
4f:eb:1e:2b:c2:e8:21:81:27:47:46:ad:d0:ce:c1:
bd:34:cf:4d:c2:25:30:01:81:03:0e:3f:48:54:1c:
14:58:06:47:f4:07:77:86:96:9e:51:3d:eb:09:7f:
a4:cc:7a:2d:aa:36:25:b8:e7:0e:00:62:96:12:c4:
be:90:71:1d:96:a4:b2:50:59:61:d5:c3:cc:5a:02:
c2:38:a1:51:7b:25:33:9f:f5:17:05:76:54:94:96:
f4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:47:00:3A:30:2B:95:F4:C4:41:CE:CC:87:EF:28:DB:F5:15:49:E8
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c2:f9:d2:9a:0e:29:4e:5c:88:03:f3:3d:db:e2:54:bb:4f:
b9:df:bc:55:bf:f9:89:6f:32:98:af:29:2c:29:d7:e5:f1:38:
08:a7:60:08:9a:69:35:48:6a:04:48:51:60:c0:18:e7:72:34:
4e:7e:24:57:4a:f0:b5:48:0d:25:b1:56:48:eb:c2:da:72:f4:
ce:9d:2c:14:b8:40:a0:74:15:cc:9e:25:68:fe:11:c7:cf:fb:
68:6e:52:d4:9f:a6:74:be:40:2e:e8:e5:24:ce:da:29:54:03:
b6:3b:dd:b3:32:00:94:b1:fd:ce:68:82:a3:e6:ba:e3:d6:01:
13:60:4b:e4:38:68:f6:c0:75:55:64:32:bc:f7:51:3f:81:99:
92:67:00:2d:d6:d4:6c:9e:d9:60:fe:f0:e6:3a:e3:e8:67:bb:
86:dc:00:b3:b7:59:23:5e:b4:fb:e7:91:cb:11:4d:95:4a:97:
3b:55:bd:f1:da:d6:5f:0a:5c:9d:7b:db:15:3a:9a:16:ef:dc:
9d:f2:df:77:ba:7b:91:b7:87:77:c0:82:b2:0d:ad:0a:33:65:
40:b8:35:f2:89:3d:a4:f9:97:95:c6:f6:44:56:cb:69:25:09:
f3:74:0e:4f:2e:e5:12:fe:cc:92:93:3f:44:0c:77:4a:8e:72:
5b:15:a6:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5Q+7Kp6iJFfmySh9qFCC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NjkzNjI2NmU5ODBkZDIwM2IyY2JlYjFjOWM0NTcwNjA0
YjkxMWIwHhcNMjUwNDI3MjIwMDE3WhcNMjUwNDI4MjIwMDE3WjAzMTEwLwYDVQQD
Eyg2ZTQ3MDAzYTMwMmI5NWY0YzQ0MWNlY2M4N2VmMjhkYmY1MTU0OWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIdV1FUYLTONy/ajdeFNMXwool6X
0CHbwuQObDl+1hIvJnuAo9ag8VYYR3Erx3YWf+9yaOzFTcXznf6DYB7mOYqrIZAi
2gMJI8Vtv6wMh7YZEmKrTBTFLsxMTvgqyNYEl5Z18VAmHMKw2fEjtYJnw7KprEPa
JNcPRtd0FQrds3sbUEjkYrD7xTxmWngpfVI9kc+cKrt7xzjJjw5B8/0EQwbD2mVP
6x4rwughgSdHRq3QzsG9NM9NwiUwAYEDDj9IVBwUWAZH9Ad3hpaeUT3rCX+kzHot
qjYluOcOAGKWEsS+kHEdlqSyUFlh1cPMWgLCOKFReyUzn/UXBXZUlJb0rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5HADowK5X0xEHOzIfvKNv1FUnoMB8GA1UdIwQY
MBaAFFhpNiZumA3SA7LL6xycRXBgS5EbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0drMkptNllEZElEc3N2ckhKeEZjR0JMa1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80YzY2Y2MtZmE5YS00ZjU4LWFkMjEt
N2RhMTgzZWZmMTE1LzEvV0drMkptNllEZElEc3N2ckhKeEZjR0JMa1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80YzY2Y2MtZmE5YS00ZjU4LWFkMjEtN2RhMTgzZWZmMTE1
LzEvV0drMkptNllEZElEc3N2ckhKeEZjR0JMa1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8L50poO
KU5ciAPzPdviVLtPud+8Vb/5iW8ymK8pLCnX5fE4CKdgCJppNUhqBEhRYMAY53I0
Tn4kV0rwtUgNJbFWSOvC2nL0zp0sFLhAoHQVzJ4laP4Rx8/7aG5S1J+mdL5ALujl
JM7aKVQDtjvdszIAlLH9zmiCo+a649YBE2BL5Dho9sB1VWQyvPdRP4GZkmcALdbU
bJ7ZYP7w5jrj6Ge7htwAs7dZI160++eRyxFNlUqXO1W98drWXwpcnXvbFTqaFu/c
nfLfd7p7kbeHd8CCsg2tCjNlQLg18ok9pPmXlcb2RFbLaSUJ83QOTy7lEv7MkpM/
RAx3So5yWxWmmQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:27:55 2025 by rpki-client