Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier: DwnfU4wI2ydmQ3ip8Z+6LJ8GVUgoLUdPJnFRIhmjWFQ=
Subject key identifier: 90:0F:BC:DB:24:53:5D:C3:34:92:04:B0:D1:78:9C:7F:1C:38:60:B9
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 01968359BB2765941D93C52BBA77A2B6F726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number: 027C
Signing time: Tue 29 Apr 2025 21:00:18 +0000
Manifest this update: Tue 29 Apr 2025 21:00:18 +0000
Manifest next update: Wed 30 Apr 2025 21:00:18 +0000
Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: X2tpX1LdcdkYUo5lerQbn/BBJwnxtL4MRPCLnApQkj4=)
2: e0MNfuXlfvKgRvC9CopzDlR6QJs.roa (hash: EP4IKQWQkDtxiqLTMMk/RcDKJIiLy3Rh0R6YqC1qh6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:bb:27:65:94:1d:93:c5:2b:ba:77:a2:b6:f7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Apr 29 21:00:18 2025 GMT
Not After : Apr 30 21:00:18 2025 GMT
Subject: CN=900fbcdb24535dc3349204b0d1789c7f1c3860b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:0d:d0:c9:d7:a9:93:6b:69:ad:27:05:a3:
08:d7:35:cd:8a:9a:18:fb:f4:3c:a0:e5:9a:ef:18:
c5:e0:6c:c0:a1:29:3f:92:ac:3c:45:c1:2c:5b:c9:
74:38:06:5b:fd:89:4d:e0:2b:ef:78:2e:ed:96:ed:
eb:12:64:b1:36:4d:9d:86:ba:39:a9:42:67:4c:d0:
d4:2b:4d:34:74:2e:a6:17:bf:c7:29:a8:7e:36:4f:
5e:23:9e:9d:de:59:e9:0a:15:0e:e0:0b:ce:c4:e7:
74:fe:45:40:0a:86:b3:0c:6b:59:36:5f:b1:92:a0:
67:61:ec:d4:0e:ec:54:f4:6c:3c:9a:58:48:65:8d:
56:7d:43:0d:bc:37:bd:85:54:42:40:c2:bf:39:7f:
be:7b:f5:d5:0e:24:93:55:a6:b5:75:96:dc:c7:7c:
d3:59:a4:7e:6e:1f:21:1e:1d:a6:35:10:b4:3e:65:
53:35:2e:bf:48:90:90:0a:9b:30:20:f4:9c:8e:19:
90:4f:c6:60:67:53:20:54:d1:1a:4a:30:4c:61:d1:
ee:3e:3d:a3:ff:3a:99:31:2e:d4:25:7d:00:5b:7e:
3d:6d:6d:ff:67:2f:3e:cd:3b:47:ec:d3:e9:28:48:
f7:c3:cb:47:ee:f5:61:1e:b1:45:1e:25:32:90:ce:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0F:BC:DB:24:53:5D:C3:34:92:04:B0:D1:78:9C:7F:1C:38:60:B9
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e0:44:fc:99:7d:e0:5b:05:a9:37:5b:8b:45:af:3a:00:95:
31:d3:96:62:80:6c:5d:7b:30:67:fa:9e:6b:e1:ec:71:b9:0b:
91:06:69:77:df:ce:7a:f7:71:4d:7e:51:fd:5b:1b:2e:bb:42:
5b:7a:af:f0:8c:34:22:e7:19:1d:88:74:78:1d:76:98:66:6e:
9b:26:26:8b:d3:c5:76:98:2a:fe:7d:ba:f6:69:8c:8d:1b:0a:
75:09:5d:0b:f5:73:c4:77:53:67:e8:38:18:04:c5:65:74:ad:
89:eb:b0:5d:84:9e:ac:ca:13:f8:f0:1e:13:5e:de:f7:5f:06:
1e:51:13:99:0c:72:6e:72:c7:f4:f1:5b:c2:f2:75:58:f2:9f:
ab:b7:88:47:3e:d7:c2:0d:3e:59:ac:27:ef:2a:81:56:65:9b:
33:06:b6:d4:d7:2b:1d:9e:67:4c:11:e7:c8:52:c8:36:81:21:
9a:da:5c:68:7f:15:c8:ca:c9:49:15:c2:dd:88:08:cd:1f:0a:
27:52:91:48:4a:e9:cc:6f:a5:47:8a:b6:e3:44:52:f9:ce:d3:
aa:3b:3d:68:a9:25:17:fe:75:21:0d:d9:92:75:e2:32:9f:6d:
cb:9c:6c:59:ae:56:43:36:f2:04:b9:8b:18:da:40:c8:c9:8f:
d3:9d:a4:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDWbsnZZQdk8UruneitvcmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MGRkZGI1MTE2MDNlNDFjMmI3YWJiYTNkMjQ5ZDVlZjVl
ZDRkMTEwHhcNMjUwNDI5MjEwMDE4WhcNMjUwNDMwMjEwMDE4WjAzMTEwLwYDVQQD
Eyg5MDBmYmNkYjI0NTM1ZGMzMzQ5MjA0YjBkMTc4OWM3ZjFjMzg2MGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA4N0MnXqZNraa0nBaMI1zXNipoY
+/Q8oOWa7xjF4GzAoSk/kqw8RcEsW8l0OAZb/YlN4CvveC7tlu3rEmSxNk2dhro5
qUJnTNDUK000dC6mF7/HKah+Nk9eI56d3lnpChUO4AvOxOd0/kVACoazDGtZNl+x
kqBnYezUDuxU9Gw8mlhIZY1WfUMNvDe9hVRCQMK/OX++e/XVDiSTVaa1dZbcx3zT
WaR+bh8hHh2mNRC0PmVTNS6/SJCQCpswIPScjhmQT8ZgZ1MgVNEaSjBMYdHuPj2j
/zqZMS7UJX0AW349bW3/Zy8+zTtH7NPpKEj3w8tH7vVhHrFFHiUykM5AGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAPvNskU13DNJIEsNF4nH8cOGC5MB8GA1UdIwQY
MBaAFFgN3bURYD5Bwreruj0knV717U0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGIt
M2NkNDE3YWVlOWNlLzEvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGItM2NkNDE3YWVlOWNl
LzEvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuBE/Jl9
4FsFqTdbi0WvOgCVMdOWYoBsXXswZ/qea+HscbkLkQZpd9/OevdxTX5R/VsbLrtC
W3qv8Iw0IucZHYh0eB12mGZumyYmi9PFdpgq/n269mmMjRsKdQldC/VzxHdTZ+g4
GATFZXStieuwXYSerMoT+PAeE17e918GHlETmQxybnLH9PFbwvJ1WPKfq7eIRz7X
wg0+Wawn7yqBVmWbMwa21NcrHZ5nTBHnyFLINoEhmtpcaH8VyMrJSRXC3YgIzR8K
J1KRSErpzG+lR4q240RS+c7Tqjs9aKklF/51IQ3ZknXiMp9ty5xsWa5WQzbyBLmL
GNpAyMmP052keA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 06:57:44 2025 by rpki-client