Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File: WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier: nA48HTM+GGEkBX+ezM/Oy09Pva7BuS/qDHvN50LDVVU=
Subject key identifier: 68:3C:E3:7E:9F:55:F4:21:5D:69:B1:8F:A5:2D:18:7F:48:5A:F1:AB
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer: /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial: 019684A350FB62BD8AF90244BD235E66E8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 03:00:17 +0000
Manifest this update: Wed 30 Apr 2025 03:00:17 +0000
Manifest next update: Thu 01 May 2025 03:00:17 +0000
Files and hashes: 1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: X4Cq88TE+GLkbfTCrDLcXjPacdJeHbyDbMFUOcMhCgo=)
2: vt15ABy3zJP47x5DikC4lY7LNe4.roa (hash: IdpTO09MEQGHcGdgBzndMJHenkqW9uYtr/gnL2zPkrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:50:fb:62:bd:8a:f9:02:44:bd:23:5e:66:e8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Validity
Not Before: Apr 30 03:00:17 2025 GMT
Not After : May 1 03:00:17 2025 GMT
Subject: CN=683ce37e9f55f4215d69b18fa52d187f485af1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:e2:14:a7:41:8d:5c:04:b4:c4:11:29:1b:
0c:6c:c6:3c:32:1d:f5:9a:51:a7:4b:66:9a:cb:39:
1b:5e:c9:b8:a4:49:b3:27:13:77:5a:9e:6e:5a:af:
4a:b5:84:a7:bb:01:5b:33:20:3b:c3:a5:44:8b:22:
8f:87:d0:d4:44:8e:d1:ea:2d:6b:54:85:2e:7f:9d:
21:56:fb:11:29:93:b4:a2:1a:fe:27:d5:46:81:6a:
84:93:1c:c4:11:30:86:2d:65:49:f6:a2:04:3d:d8:
82:64:5a:85:3b:91:f4:a6:bb:f7:76:a5:06:72:2b:
81:f5:7e:56:fc:23:ac:db:6c:49:32:fe:38:25:86:
94:6f:c4:2a:b1:82:d4:c3:0e:50:bb:3d:ab:82:df:
a0:3f:bf:57:78:39:08:c2:94:53:4d:eb:27:b3:d4:
42:d8:01:5a:f4:a5:9e:05:62:c1:73:77:04:5f:86:
50:06:0a:d2:6b:5d:15:d4:c4:85:bf:52:7a:7a:0f:
3b:3d:9c:d7:00:b5:d6:5b:e1:94:b0:27:63:2b:c1:
ae:36:57:8f:7f:01:d8:5d:92:7a:06:fe:36:39:9e:
a6:6d:c4:d4:67:bb:49:b5:d0:ba:cb:46:12:a8:8a:
ec:a6:5a:b9:20:3a:2a:03:fb:b8:6b:ff:4a:14:94:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3C:E3:7E:9F:55:F4:21:5D:69:B1:8F:A5:2D:18:7F:48:5A:F1:AB
X509v3 Authority Key Identifier:
keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:01:38:6d:8b:7c:b6:6c:d8:1d:a3:bf:7b:07:0e:0e:2d:4f:
bb:0a:53:69:6e:72:77:4e:3e:07:13:1c:4f:51:2d:10:bd:3a:
52:a8:5e:39:55:ac:6a:1b:8a:27:98:40:93:c0:bd:89:ba:51:
87:84:31:6b:b4:05:bc:dc:dc:78:32:83:cb:78:77:d4:c2:c8:
e5:2a:40:b3:65:d2:04:68:70:1f:ac:e5:ca:84:56:1b:0a:8a:
4d:8f:49:ae:08:13:f8:b7:b4:a0:07:9b:b4:79:74:fe:5f:e9:
7f:bf:8b:7f:5d:5e:41:b0:fc:54:ea:ad:51:03:c1:74:84:5c:
c1:54:70:e8:fe:c4:87:3a:72:1e:b3:9e:84:55:55:f4:c3:08:
ef:3a:f8:d0:1e:77:85:d6:ab:f2:b0:67:4a:45:78:b8:92:90:
8e:80:a0:42:ee:96:86:e2:0e:4a:a7:f7:7c:d5:89:bf:2c:4d:
80:60:75:53:83:7f:df:9d:d1:35:81:7e:7c:78:71:d1:1e:0e:
4d:f0:fe:0e:1e:f7:d4:50:9b:77:7d:c0:5d:3b:73:38:a8:3e:
ab:f5:3c:44:fc:95:b2:6d:61:f3:e5:9d:ae:74:81:de:76:11:
70:09:56:58:57:9d:a6:2a:4a:5e:37:f8:e3:c9:af:6e:aa:2c:
ac:24:25:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEo1D7Yr2K+QJEvSNeZujFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDk2OThiYmNkMjRmYzllMWE5ZjVmNDE0ODZjMzFhZjE5
YTRiYzgwHhcNMjUwNDMwMDMwMDE3WhcNMjUwNTAxMDMwMDE3WjAzMTEwLwYDVQQD
Eyg2ODNjZTM3ZTlmNTVmNDIxNWQ2OWIxOGZhNTJkMTg3ZjQ4NWFmMWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoLiFKdBjVwEtMQRKRsMbMY8Mh31
mlGnS2aayzkbXsm4pEmzJxN3Wp5uWq9KtYSnuwFbMyA7w6VEiyKPh9DURI7R6i1r
VIUuf50hVvsRKZO0ohr+J9VGgWqEkxzEETCGLWVJ9qIEPdiCZFqFO5H0prv3dqUG
ciuB9X5W/COs22xJMv44JYaUb8QqsYLUww5Quz2rgt+gP79XeDkIwpRTTesns9RC
2AFa9KWeBWLBc3cEX4ZQBgrSa10V1MSFv1J6eg87PZzXALXWW+GUsCdjK8GuNleP
fwHYXZJ6Bv42OZ6mbcTUZ7tJtdC6y0YSqIrsplq5IDoqA/u4a/9KFJSvpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGg8436fVfQhXWmxj6UtGH9IWvGrMB8GA1UdIwQY
MBaAFFlJaYu80k/J4an19BSGwxrxmkvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2Mt
NTgzZmJlNjRhOTU1LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2MtNTgzZmJlNjRhOTU1
LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQE4bYt8
tmzYHaO/ewcODi1PuwpTaW5yd04+BxMcT1EtEL06UqheOVWsahuKJ5hAk8C9ibpR
h4Qxa7QFvNzceDKDy3h31MLI5SpAs2XSBGhwH6zlyoRWGwqKTY9JrggT+Le0oAeb
tHl0/l/pf7+Lf11eQbD8VOqtUQPBdIRcwVRw6P7EhzpyHrOehFVV9MMI7zr40B53
hdar8rBnSkV4uJKQjoCgQu6WhuIOSqf3fNWJvyxNgGB1U4N/353RNYF+fHhx0R4O
TfD+Dh731FCbd33AXTtzOKg+q/U8RPyVsm1h8+WdrnSB3nYRcAlWWFedpipKXjf4
48mvbqosrCQlWQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:33:29 2025 by rpki-client