Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
File: WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft (raw, json)
Hash identifier: HOitpxJtYDgvKg3WR64FriAEKvymMLtVBc7ZrYtgItM=
Subject key identifier: F3:6F:F2:A9:D3:02:DE:26:DD:15:1D:46:BE:EF:F3:F2:7D:92:76:3A
Authority key identifier: 58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
Certificate issuer: /CN=584d44ad55c262d84efd442dc8767b0413e1b162
Certificate serial: 01967EA191A968D3E0FED970D9E61B0C1865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
Manifest number: 0136
Signing time: Mon 28 Apr 2025 23:00:39 +0000
Manifest this update: Mon 28 Apr 2025 23:00:39 +0000
Manifest next update: Tue 29 Apr 2025 23:00:39 +0000
Files and hashes: 1: NlmDLH5wWMGr_vzUkJAwntWEnjQ.roa (hash: 1/yiZpsUjLuoNGo0Ku/rpHLpaDxTkI6zMzawihAJCgI=)
2: WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl (hash: 4mJs5DXg99GjOsruGmq+nHA4AOmS08VV5rpUxuJRh/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:91:a9:68:d3:e0:fe:d9:70:d9:e6:1b:0c:18:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=584d44ad55c262d84efd442dc8767b0413e1b162
Validity
Not Before: Apr 28 23:00:39 2025 GMT
Not After : Apr 29 23:00:39 2025 GMT
Subject: CN=f36ff2a9d302de26dd151d46beeff3f27d92763a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e8:86:e1:89:d2:e1:a8:63:d1:82:1d:38:e7:
ea:6e:13:c2:14:6d:e9:ee:ab:14:ef:1b:85:7e:5a:
b7:1c:d8:59:2b:cc:49:f9:37:8a:d6:8b:b7:0d:63:
38:41:ed:bf:73:59:c6:7c:c6:f2:d1:d6:f3:f4:5f:
7a:94:6e:4f:8e:ea:2f:13:8f:b3:61:c4:3d:4e:be:
df:13:04:61:08:1b:37:25:27:62:f7:68:68:23:44:
cb:fa:25:69:d2:f3:0d:60:f0:b9:b7:e2:56:44:ca:
78:09:20:e6:02:24:e4:a9:8f:99:9d:2e:d8:4f:6b:
e6:d2:bb:c2:93:41:79:21:db:41:41:30:df:46:1a:
3f:78:88:bb:6f:64:3c:08:72:cf:6c:9f:ff:a3:17:
11:eb:41:3d:11:de:e8:58:67:a5:54:3b:2a:4d:22:
6a:08:e9:c5:57:da:45:51:10:1e:29:54:ed:81:fa:
36:80:2b:e1:bb:96:9d:d8:71:17:f2:8d:63:8e:f7:
16:c7:d5:55:55:5b:73:96:1a:49:7c:2e:0a:ab:b1:
45:f3:92:34:e9:c9:c7:6b:51:48:3e:af:89:1b:c7:
ea:10:fe:a3:b7:53:f8:90:0d:d9:d8:d5:93:bf:4e:
2c:8d:f7:1b:32:74:5b:4d:ff:53:87:5c:50:9a:42:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:F2:A9:D3:02:DE:26:DD:15:1D:46:BE:EF:F3:F2:7D:92:76:3A
X509v3 Authority Key Identifier:
keyid:58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d3:30:d7:40:31:08:f6:61:c8:d1:31:71:05:32:3b:0e:88:
6b:02:6d:d9:be:29:76:e3:b9:df:49:75:ee:95:85:59:54:0d:
b8:94:2b:16:35:f6:a7:8f:40:dc:bf:89:d6:8d:6b:a7:d1:50:
66:20:87:73:76:ea:48:7e:e9:f9:6a:07:52:8d:bf:11:e4:21:
33:39:99:db:0c:75:e2:f4:64:ae:3c:56:87:21:17:dc:cf:79:
9d:36:48:99:10:53:74:8f:c0:25:a3:92:05:28:96:dd:13:0a:
5b:9e:29:d8:45:d6:de:9d:c2:f4:cd:f6:69:d8:d9:2c:2f:dd:
aa:01:d6:11:fb:f1:34:db:0e:57:47:de:23:72:77:d9:06:b7:
b5:41:25:ac:03:20:f8:4c:a5:49:22:a2:44:34:fd:1b:5f:f2:
89:63:6f:03:6f:3f:d4:e9:59:d2:5d:b2:2f:52:45:f8:6e:14:
28:c7:60:b3:ab:7a:e9:8e:84:c8:d8:4d:02:14:fb:d6:11:a0:
8e:04:85:4d:14:eb:d8:0b:05:cc:ca:9b:76:fb:c3:0a:45:33:
5a:b1:0c:74:f2:bf:21:5d:3b:86:6f:c1:2b:8e:b7:95:09:07:
d5:fd:77:25:a5:f2:53:ed:14:a5:29:e1:e7:58:07:0e:78:ec:
27:a6:df:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+oZGpaNPg/tlw2eYbDBhlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NGQ0NGFkNTVjMjYyZDg0ZWZkNDQyZGM4NzY3YjA0MTNl
MWIxNjIwHhcNMjUwNDI4MjMwMDM5WhcNMjUwNDI5MjMwMDM5WjAzMTEwLwYDVQQD
EyhmMzZmZjJhOWQzMDJkZTI2ZGQxNTFkNDZiZWVmZjNmMjdkOTI3NjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+uiG4YnS4ahj0YIdOOfqbhPCFG3p
7qsU7xuFflq3HNhZK8xJ+TeK1ou3DWM4Qe2/c1nGfMby0dbz9F96lG5PjuovE4+z
YcQ9Tr7fEwRhCBs3JSdi92hoI0TL+iVp0vMNYPC5t+JWRMp4CSDmAiTkqY+ZnS7Y
T2vm0rvCk0F5IdtBQTDfRho/eIi7b2Q8CHLPbJ//oxcR60E9Ed7oWGelVDsqTSJq
COnFV9pFURAeKVTtgfo2gCvhu5ad2HEX8o1jjvcWx9VVVVtzlhpJfC4Kq7FF85I0
6cnHa1FIPq+JG8fqEP6jt1P4kA3Z2NWTv04sjfcbMnRbTf9Th1xQmkJqCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNv8qnTAt4m3RUdRr7v8/J9knY6MB8GA1UdIwQY
MBaAFFhNRK1VwmLYTv1ELch2ewQT4bFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0UxRXJWWENZdGhPX1VRdHlIWjdCQlBoc1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jZGMwMjQtZWE5Yy00NTA4LWI5MzYt
ODBiOTEyMDczOGNhLzEvV0UxRXJWWENZdGhPX1VRdHlIWjdCQlBoc1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jZGMwMjQtZWE5Yy00NTA4LWI5MzYtODBiOTEyMDczOGNh
LzEvV0UxRXJWWENZdGhPX1VRdHlIWjdCQlBoc1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9Mw10Ax
CPZhyNExcQUyOw6IawJt2b4pduO530l17pWFWVQNuJQrFjX2p49A3L+J1o1rp9FQ
ZiCHc3bqSH7p+WoHUo2/EeQhMzmZ2wx14vRkrjxWhyEX3M95nTZImRBTdI/AJaOS
BSiW3RMKW54p2EXW3p3C9M32adjZLC/dqgHWEfvxNNsOV0feI3J32Qa3tUElrAMg
+EylSSKiRDT9G1/yiWNvA28/1OlZ0l2yL1JF+G4UKMdgs6t66Y6EyNhNAhT71hGg
jgSFTRTr2AsFzMqbdvvDCkUzWrEMdPK/IV07hm/BK463lQkH1f13JaXyU+0UpSnh
51gHDnjsJ6bfbg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:08 2025 by rpki-client