Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: PV5bm3cPc+M4D1zwSc2+/eocn8laJYX2tq61BbobB0E=
Subject key identifier: D9:DF:5B:F6:01:C7:49:A9:88:43:8F:68:9B:A8:B6:75:8B:7D:80:7A
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 019674C29A1FE6FCA954998D291772AE3FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 12DF
Signing time: Sun 27 Apr 2025 01:00:32 +0000
Manifest this update: Sun 27 Apr 2025 01:00:32 +0000
Manifest next update: Mon 28 Apr 2025 01:00:32 +0000
Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=)
2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: VDmm2CUm80v7Nnv/Qvsa4Wvt7xzorprD8xwpZCj+h44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:9a:1f:e6:fc:a9:54:99:8d:29:17:72:ae:3f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Apr 27 01:00:32 2025 GMT
Not After : Apr 28 01:00:32 2025 GMT
Subject: CN=d9df5bf601c749a988438f689ba8b6758b7d807a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:70:1a:68:a4:0f:b1:ff:47:9c:8b:6c:b0:
80:64:a4:c8:6a:8a:a3:9f:4a:e6:ae:f3:a3:00:62:
db:a6:43:6d:8a:5e:78:95:ee:c0:19:7c:31:88:cc:
34:db:6a:da:25:c2:46:24:ed:57:32:49:a7:a8:ec:
97:76:b6:e7:b7:70:fc:70:0b:3a:3a:62:d6:d7:6f:
f3:e7:a1:ce:08:57:87:14:e4:4b:c6:53:9e:94:fb:
63:0d:7f:2c:4f:67:4b:37:c6:40:f8:85:15:6e:a4:
e7:06:83:20:b0:5d:47:d3:03:86:26:52:21:7a:1a:
0b:03:5a:19:5e:53:c1:6a:9f:0c:9d:6a:a6:9b:38:
10:03:fa:1c:59:39:91:fe:2a:0a:1f:f9:6d:f9:68:
82:8f:ed:15:cb:35:d3:2c:59:62:f7:f8:35:26:84:
69:d4:28:b3:8e:2e:b0:5b:15:79:d0:bb:8c:ae:ee:
4e:e5:10:4e:95:85:e3:cf:ce:44:04:36:30:0d:8b:
f3:06:03:1d:e3:2f:0f:63:ef:81:49:b5:17:a7:54:
67:d1:b2:82:f1:ed:ec:9f:ed:b2:aa:e9:ea:55:48:
1f:eb:19:07:57:c7:27:6b:24:c0:90:ea:16:60:5b:
85:2f:c7:19:14:ed:ab:76:b8:a8:5e:29:9d:27:cf:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DF:5B:F6:01:C7:49:A9:88:43:8F:68:9B:A8:B6:75:8B:7D:80:7A
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:4e:30:89:b4:6c:90:12:24:a2:55:fc:e5:b9:b2:c6:02:d5:
e9:9c:4e:29:4c:9a:2e:46:b0:d2:aa:35:f2:b9:89:0e:f6:c4:
40:de:a3:eb:3c:70:f0:fc:75:ad:ae:bd:49:1d:1b:6a:06:73:
22:81:c5:1d:93:a4:97:62:04:8b:36:bc:da:e8:37:d7:90:8b:
61:fd:80:f4:fe:92:ef:ef:b1:42:37:a0:c6:61:2b:77:e3:82:
66:a4:f0:35:e3:e3:b1:56:61:7d:f3:37:7b:28:1f:0e:3e:36:
c0:de:96:6c:8d:ff:03:07:b5:b3:bf:7a:4d:20:4f:92:31:81:
aa:00:b9:62:42:57:0b:58:4d:2d:1f:99:c7:f5:96:4f:f1:e8:
c0:45:1e:cd:46:f8:01:84:85:eb:58:93:2e:1b:13:94:25:85:
f6:92:65:03:78:ee:c9:ab:f8:b7:51:9b:b8:a6:d9:06:52:47:
27:c3:46:79:e0:b4:2a:0a:86:f5:f2:46:26:ce:eb:a4:ca:a4:
8b:36:f8:fe:f5:a2:7b:3f:c8:b7:6f:e3:e8:f2:8a:8c:c8:85:
db:7f:39:56:9e:a5:3b:1c:60:b8:46:2f:5f:d3:28:74:32:69:
ac:9a:b8:b5:47:19:d1:ef:41:e2:c3:f1:ad:19:9d:83:19:1a:
5d:e3:34:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wpof5vypVJmNKRdyrj+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzQ4NzQ3MmQzN2NiZDcyNjE4MWY5ZjNhMjAzODZmMDM5
YjNiYTgwHhcNMjUwNDI3MDEwMDMyWhcNMjUwNDI4MDEwMDMyWjAzMTEwLwYDVQQD
EyhkOWRmNWJmNjAxYzc0OWE5ODg0MzhmNjg5YmE4YjY3NThiN2Q4MDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhFwGmikD7H/R5yLbLCAZKTIaoqj
n0rmrvOjAGLbpkNtil54le7AGXwxiMw022raJcJGJO1XMkmnqOyXdrbnt3D8cAs6
OmLW12/z56HOCFeHFORLxlOelPtjDX8sT2dLN8ZA+IUVbqTnBoMgsF1H0wOGJlIh
ehoLA1oZXlPBap8MnWqmmzgQA/ocWTmR/ioKH/lt+WiCj+0VyzXTLFli9/g1JoRp
1Cizji6wWxV50LuMru5O5RBOlYXjz85EBDYwDYvzBgMd4y8PY++BSbUXp1Rn0bKC
8e3sn+2yqunqVUgf6xkHV8cnayTAkOoWYFuFL8cZFO2rdrioXimdJ88LBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnfW/YBx0mpiEOPaJuotnWLfYB6MB8GA1UdIwQY
MBaAFFl0h0ctN8vXJhgfnzogOG8DmzuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMt
MDM1MjgxMjg5YmIwLzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMtMDM1MjgxMjg5YmIw
LzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuk4wibRs
kBIkolX85bmyxgLV6ZxOKUyaLkaw0qo18rmJDvbEQN6j6zxw8Px1ra69SR0bagZz
IoHFHZOkl2IEiza82ug315CLYf2A9P6S7++xQjegxmErd+OCZqTwNePjsVZhffM3
eygfDj42wN6WbI3/Awe1s796TSBPkjGBqgC5YkJXC1hNLR+Zx/WWT/HowEUezUb4
AYSF61iTLhsTlCWF9pJlA3juyav4t1GbuKbZBlJHJ8NGeeC0KgqG9fJGJs7rpMqk
izb4/vWiez/It2/j6PKKjMiF2385Vp6lOxxguEYvX9ModDJprJq4tUcZ0e9B4sPx
rRmdgxkaXeM0Ug==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:07:48 2025 by rpki-client