Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
File: WPde8NYw4dCGeQygt45-744qz7s.mft (raw, json)
Hash identifier: r70bgRfZxFvrrR432TEqXFXznkzgCblOaSazJyWqhv0=
Subject key identifier: 66:E3:41:0E:8C:01:10:FC:D7:C1:0D:BB:E9:41:AE:23:08:4C:4F:68
Authority key identifier: 58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
Certificate issuer: /CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Certificate serial: 0194BAF2628DE65D191E7E36F80AF5180061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 06:00:34 +0000
Manifest this update: Fri 31 Jan 2025 06:00:34 +0000
Manifest next update: Sat 01 Feb 2025 06:00:34 +0000
Files and hashes: 1: WPde8NYw4dCGeQygt45-744qz7s.crl (hash: YNDifAn9ilPHy/rUndwJjWhLIpFLXf/mewHMFf0SmDQ=)
2: x5rquIVhJ13GXmSiEvGgLAga1-w.roa (hash: 89X00FnyaHqizMTzCA2kNKHXqUvFiwqZlo80Pxfjk08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:62:8d:e6:5d:19:1e:7e:36:f8:0a:f5:18:00:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Validity
Not Before: Jan 31 06:00:34 2025 GMT
Not After : Feb 1 06:00:34 2025 GMT
Subject: CN=66e3410e8c0110fcd7c10dbbe941ae23084c4f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:65:f1:e6:4c:a4:f8:fb:60:ce:73:b5:5f:
48:69:0e:1e:f0:84:b6:e7:a3:5e:1f:45:be:00:82:
46:5d:c8:c0:6b:77:c1:b6:43:63:b0:3f:57:c6:37:
b8:39:ae:32:dd:a0:83:b3:b0:17:b2:cf:82:f1:e7:
67:d5:58:a3:a3:d3:c4:73:a1:c9:d9:a2:25:60:1d:
2e:2d:13:67:20:fc:af:6d:c7:17:74:62:4a:ee:9a:
f0:4c:20:c2:27:45:ca:c2:03:16:13:3d:f6:1e:9b:
51:57:33:1b:c8:72:aa:96:61:87:f1:5f:4e:00:e3:
d9:e3:85:93:74:c4:af:4e:a2:6a:09:1f:c1:24:48:
cd:14:36:15:e6:dd:a6:01:83:2b:be:14:0b:c5:eb:
63:ea:2d:ab:69:5d:44:cd:fc:45:21:9e:01:86:20:
c0:c6:99:fd:49:cc:36:e7:c8:95:eb:8c:92:c9:6e:
d3:18:39:e2:5c:61:8b:c6:09:6b:15:21:9e:78:fd:
81:c0:7d:34:f8:61:8e:cd:73:08:d1:91:8e:62:60:
54:90:05:0a:ed:ec:65:19:ba:92:4f:90:88:7a:d1:
98:a0:2d:21:00:6b:97:b6:f1:77:a2:51:08:e9:20:
9a:a3:ab:23:ca:e6:4c:a1:76:05:bf:71:72:43:2c:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E3:41:0E:8C:01:10:FC:D7:C1:0D:BB:E9:41:AE:23:08:4C:4F:68
X509v3 Authority Key Identifier:
keyid:58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5d:a1:1b:39:75:ce:33:d0:e0:ce:1c:e1:64:21:61:1e:5e:
93:7b:6c:1c:cc:af:c7:b1:a1:36:f0:5f:c7:75:15:5a:de:f6:
4a:5f:f9:91:65:e0:78:64:e9:bb:a1:f2:4e:3c:fb:2c:4e:e1:
71:4e:87:30:04:e2:f7:f3:52:95:db:c9:a3:b0:6c:29:a6:05:
05:b9:bb:06:69:6b:7f:5b:1e:87:4c:21:0e:9d:1b:1e:ef:3c:
b2:6a:a5:08:ea:1e:76:83:4b:9b:1a:ed:28:d7:a5:b4:70:7d:
1f:82:cf:37:83:b9:35:0a:04:7f:04:05:fc:98:8e:9a:02:9d:
c4:d4:b8:d9:7f:84:99:60:78:22:a1:2c:b6:9a:17:32:c7:78:
d1:40:01:e0:05:6b:51:83:e1:d8:9a:f6:36:b9:66:08:e3:52:
16:9c:91:03:d8:99:25:74:3b:ca:89:0d:08:75:5f:77:96:66:
9b:c9:ae:af:e6:0a:7e:35:09:b1:e7:4f:c6:85:e3:02:c3:dd:
34:bc:fb:9f:a2:cb:19:b8:3b:6a:e6:03:a6:96:89:6b:2c:9c:
37:ee:7a:17:b1:d7:fa:47:01:06:8c:53:a2:a4:75:e6:7d:95:
47:32:61:90:50:ae:5c:2a:4e:2c:46:bf:bf:3c:98:5e:89:66:
a0:bc:ba:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68mKN5l0ZHn42+Ar1GABhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Zjc1ZWYwZDYzMGUxZDA4Njc5MGNhMGI3OGU3ZWVmOGUy
YWNmYmIwHhcNMjUwMTMxMDYwMDM0WhcNMjUwMjAxMDYwMDM0WjAzMTEwLwYDVQQD
Eyg2NmUzNDEwZThjMDExMGZjZDdjMTBkYmJlOTQxYWUyMzA4NGM0ZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswVl8eZMpPj7YM5ztV9IaQ4e8IS2
56NeH0W+AIJGXcjAa3fBtkNjsD9Xxje4Oa4y3aCDs7AXss+C8edn1Vijo9PEc6HJ
2aIlYB0uLRNnIPyvbccXdGJK7prwTCDCJ0XKwgMWEz32HptRVzMbyHKqlmGH8V9O
AOPZ44WTdMSvTqJqCR/BJEjNFDYV5t2mAYMrvhQLxetj6i2raV1EzfxFIZ4BhiDA
xpn9Scw258iV64ySyW7TGDniXGGLxglrFSGeeP2BwH00+GGOzXMI0ZGOYmBUkAUK
7exlGbqST5CIetGYoC0hAGuXtvF3olEI6SCao6sjyuZMoXYFv3FyQyxLAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbjQQ6MARD818ENu+lBriMITE9oMB8GA1UdIwQY
MBaAFFj3XvDWMOHQhnkMoLeOfu+OKs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zNGJkNmUtNzlhNy00MTI2LThhMzIt
MmZkMjgwZTBkNTRhLzEvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8zNGJkNmUtNzlhNy00MTI2LThhMzItMmZkMjgwZTBkNTRh
LzEvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADF2hGzl1
zjPQ4M4c4WQhYR5ek3tsHMyvx7GhNvBfx3UVWt72Sl/5kWXgeGTpu6HyTjz7LE7h
cU6HMATi9/NSldvJo7BsKaYFBbm7Bmlrf1seh0whDp0bHu88smqlCOoedoNLmxrt
KNeltHB9H4LPN4O5NQoEfwQF/JiOmgKdxNS42X+EmWB4IqEstpoXMsd40UAB4AVr
UYPh2Jr2NrlmCONSFpyRA9iZJXQ7yokNCHVfd5Zmm8mur+YKfjUJsedPxoXjAsPd
NLz7n6LLGbg7auYDppaJayycN+56F7HX+kcBBoxToqR15n2VRzJhkFCuXCpOLEa/
vzyYXolmoLy6DQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:29 2025 by rpki-client on console-fra.rpki-client.org