Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier: vjqMfZTHUFldAqWFkMXXfAvINegG584YmNMH3/Bn0tw=
Subject key identifier: C4:5A:DE:1F:13:D6:CB:FC:02:13:C5:22:86:8A:03:B9:8B:8F:3F:5E
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 019674548F0CF35C82FF3E38381F717D3D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number: 1188
Signing time: Sat 26 Apr 2025 23:00:20 +0000
Manifest this update: Sat 26 Apr 2025 23:00:20 +0000
Manifest next update: Sun 27 Apr 2025 23:00:20 +0000
Files and hashes: 1: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (hash: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=)
2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: xoSlmzaGkf/cR9BDUasu5L1nwRJvQ1p0jM5uRQSH3Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:8f:0c:f3:5c:82:ff:3e:38:38:1f:71:7d:3d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Apr 26 23:00:20 2025 GMT
Not After : Apr 27 23:00:20 2025 GMT
Subject: CN=c45ade1f13d6cbfc0213c522868a03b98b8f3f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2b:84:e6:a0:e3:e9:8e:51:d3:1f:93:21:66:
a5:cc:83:b3:13:38:62:80:d9:47:55:8e:ad:7b:cc:
8b:c8:11:57:ac:a3:29:c1:09:b9:4d:79:5c:5e:58:
9d:61:d4:78:0e:82:89:da:8a:37:19:06:5a:8b:63:
48:e6:f9:da:ab:86:be:91:75:5f:d0:f3:3e:74:67:
10:2e:83:8b:18:40:46:95:f5:54:75:28:89:72:92:
32:44:c6:b3:0e:32:f5:49:c5:0d:32:5f:06:85:7b:
b1:27:4f:40:ce:b6:ab:36:a6:8a:3b:6d:4f:46:c6:
c3:de:95:27:94:89:05:17:5d:11:68:98:6c:cf:9e:
dc:42:83:d9:5d:3f:0b:fa:38:72:e9:47:91:04:2a:
e0:b4:a2:cd:a8:a6:d2:da:f1:ad:e4:9b:f9:2b:96:
72:b4:6f:c8:37:ea:2a:a8:e4:8a:bf:08:eb:f4:06:
1d:9a:13:4c:bd:54:dd:06:58:8a:b6:96:63:e8:47:
e6:84:56:fe:ef:4d:99:5a:ba:5a:9d:95:3f:da:58:
cb:5d:b4:79:84:7a:ba:c8:79:91:e9:72:39:64:d0:
05:cb:b0:41:ef:cf:ac:b9:a9:1e:9e:79:a9:d6:e2:
1b:13:66:21:6c:92:01:e4:61:82:d5:92:e5:5f:83:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5A:DE:1F:13:D6:CB:FC:02:13:C5:22:86:8A:03:B9:8B:8F:3F:5E
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5e:52:0f:ac:ed:83:ad:e9:7e:db:7f:a6:24:f2:55:19:1d:
e9:04:33:bb:42:f2:e5:e5:bc:08:22:a9:6f:d0:97:f8:16:b7:
11:3f:06:bd:2a:74:3f:c2:c2:a5:06:08:8c:6e:de:6f:30:d4:
21:fd:55:0a:d7:3c:8a:a8:c1:f0:9e:ee:b1:8d:94:03:b5:c6:
64:25:4e:73:be:ee:e0:ea:0b:4c:9d:4a:85:ec:ba:73:4c:03:
e5:80:20:65:be:91:17:c4:85:08:47:3c:dd:8c:d3:ae:78:3b:
17:4b:01:fb:9c:c7:0d:35:d6:1b:36:7e:30:66:23:48:34:27:
83:ee:c5:cf:f7:bf:72:c9:c0:03:d4:53:69:b7:f2:25:09:d6:
5d:c4:28:9e:61:83:a2:ef:3a:e7:48:75:73:5d:40:64:22:0f:
4b:bd:d3:9b:b6:8c:5b:15:ca:e6:dd:86:20:65:eb:37:c3:b7:
0b:91:67:f6:eb:56:b0:dd:1e:77:09:0a:b5:ba:59:0d:2e:cb:
62:a8:2e:be:6f:f3:8c:fa:48:e2:4f:34:93:83:5d:16:d8:b7:
b6:01:f2:87:d2:95:07:45:40:8a:0d:66:55:c3:29:e1:5d:8c:
c9:30:b9:d3:8d:43:a5:be:76:7b:a4:f5:a3:70:88:19:03:10:
0f:9b:7b:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0VI8M81yC/z44OB9xfT2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWVlMmNhYjg2YjVlZTQwZmMyNzcwY2E4Y2I1YzUwYzYy
Yjc1NWIwHhcNMjUwNDI2MjMwMDIwWhcNMjUwNDI3MjMwMDIwWjAzMTEwLwYDVQQD
EyhjNDVhZGUxZjEzZDZjYmZjMDIxM2M1MjI4NjhhMDNiOThiOGYzZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyuE5qDj6Y5R0x+TIWalzIOzEzhi
gNlHVY6te8yLyBFXrKMpwQm5TXlcXlidYdR4DoKJ2oo3GQZai2NI5vnaq4a+kXVf
0PM+dGcQLoOLGEBGlfVUdSiJcpIyRMazDjL1ScUNMl8GhXuxJ09AzrarNqaKO21P
RsbD3pUnlIkFF10RaJhsz57cQoPZXT8L+jhy6UeRBCrgtKLNqKbS2vGt5Jv5K5Zy
tG/IN+oqqOSKvwjr9AYdmhNMvVTdBliKtpZj6EfmhFb+702ZWrpanZU/2ljLXbR5
hHq6yHmR6XI5ZNAFy7BB78+suakennmp1uIbE2YhbJIB5GGC1ZLlX4N+eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRa3h8T1sv8AhPFIoaKA7mLjz9eMB8GA1UdIwQY
MBaAFMHu4sq4a17kD8J3DKjLXFDGK3VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjIt
MGQwNzY1MmU0Y2FiLzEvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjItMGQwNzY1MmU0Y2Fi
LzEvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXV5SD6zt
g63pftt/piTyVRkd6QQzu0Ly5eW8CCKpb9CX+Ba3ET8GvSp0P8LCpQYIjG7ebzDU
If1VCtc8iqjB8J7usY2UA7XGZCVOc77u4OoLTJ1Khey6c0wD5YAgZb6RF8SFCEc8
3YzTrng7F0sB+5zHDTXWGzZ+MGYjSDQng+7Fz/e/csnAA9RTabfyJQnWXcQonmGD
ou8650h1c11AZCIPS73Tm7aMWxXK5t2GIGXrN8O3C5Fn9utWsN0edwkKtbpZDS7L
Yqguvm/zjPpI4k80k4NdFti3tgHyh9KVB0VAig1mVcMp4V2MyTC5041Dpb52e6T1
o3CIGQMQD5t7yw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:48 2025 by rpki-client