Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File: woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier: 29r9TxjwuHsWu5N94y+HqbZQAVzImzsIc2bFeZsohwI=
Subject key identifier: 7B:92:FB:EA:F7:E4:FE:35:50:0A:AA:61:01:3F:EB:FC:BF:6C:47:44
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 01968210FD1500EB360EC74ED4795E76D622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 15:01:13 +0000
Manifest this update: Tue 29 Apr 2025 15:01:13 +0000
Manifest next update: Wed 30 Apr 2025 15:01:13 +0000
Files and hashes: 1: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (hash: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=)
2: TKlbM4JoTI14SvlWl9KxKwEmigw.roa (hash: YEHXScxruB3ZAlC0fbNpVAnfjw2qlaMRSrlrmf/M0XY=)
3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: D6oDgMsiBD76ZUxqjQ75bD13k89E25vCb1psazjuvc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:fd:15:00:eb:36:0e:c7:4e:d4:79:5e:76:d6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Apr 29 15:01:13 2025 GMT
Not After : Apr 30 15:01:13 2025 GMT
Subject: CN=7b92fbeaf7e4fe35500aaa61013febfcbf6c4744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:71:c2:e4:b0:71:5c:07:2a:28:22:8f:af:
11:99:4d:1a:d7:ea:97:4a:ba:eb:c4:6d:f6:dd:eb:
a4:f5:84:01:10:17:d2:86:17:47:fe:d6:b4:e7:0e:
da:28:53:a9:5e:20:ca:77:85:00:40:d3:eb:69:e4:
c3:4c:5a:ce:c3:39:e6:16:0f:1b:8a:a7:31:05:b3:
33:c5:8a:11:16:c7:bb:45:6d:a1:e9:cf:2f:1a:e8:
ca:4c:1e:89:19:5e:de:c4:23:74:1d:36:d3:1a:77:
d3:38:25:1e:b0:1a:0f:fa:91:a1:06:3b:4a:8f:49:
f2:50:44:fb:0c:85:b2:cf:4d:d7:43:51:1c:d6:dd:
51:2d:bf:a7:0f:18:56:04:af:59:aa:d5:30:24:75:
b6:30:40:16:96:da:af:ba:d9:a5:8d:b3:05:a8:93:
30:a7:b1:a1:25:83:45:b4:90:05:cd:5f:4e:1c:b9:
9c:0a:03:dc:40:ea:62:2b:6f:db:08:60:5f:78:43:
39:c3:ca:ff:0b:12:28:cb:2a:5a:a2:89:ee:36:fb:
03:f4:90:14:e2:cb:67:2a:c1:04:20:ce:f1:26:88:
cd:cc:42:01:25:3a:6e:b9:74:02:1d:b7:3c:17:bc:
75:64:e2:ec:1b:0b:34:27:d0:2b:bc:05:bc:48:0c:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:92:FB:EA:F7:E4:FE:35:50:0A:AA:61:01:3F:EB:FC:BF:6C:47:44
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a2:15:24:2a:08:d3:a0:0a:b5:70:0a:83:b4:c3:54:e4:bd:
09:a5:91:f2:59:d2:ea:51:79:60:18:51:84:0b:7d:5b:d4:2b:
96:63:13:14:e9:cb:78:47:b8:10:1d:48:ec:7c:07:3d:a4:b5:
8e:b9:c1:19:9c:c8:cd:48:0f:20:49:08:68:85:58:b6:fd:ee:
8f:79:16:22:fb:ec:fd:03:d1:40:51:6c:ad:51:33:4f:e8:5a:
bf:6d:15:80:60:25:ae:88:4b:58:0d:2d:7b:75:b7:73:a7:c9:
c9:74:ed:8a:a5:78:43:28:ea:7b:8d:24:51:e6:69:ef:65:dc:
ba:26:2e:8d:39:ee:89:17:b6:9e:8e:70:c0:4d:db:1a:cb:1f:
41:5d:90:e9:13:70:f5:36:df:f1:d2:94:0e:4d:06:83:7b:0d:
50:94:af:e6:e5:38:df:32:04:0e:0d:ca:a7:2e:82:45:19:d5:
43:d6:ed:0d:da:1c:a0:6d:92:30:19:15:26:92:6a:19:4b:ef:
1c:f6:b3:2d:99:af:a9:8c:c2:0e:a1:df:8e:59:5f:79:a9:cf:
17:02:09:3c:f5:3f:4d:73:d8:42:e8:61:66:d0:b4:fb:23:16:
04:61:ca:ae:bc:16:8f:35:4d:c6:9b:54:08:de:3f:7c:d6:05:
c8:a7:cc:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCEP0VAOs2DsdO1HledtYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyODVhMTQ3NGUzODYyN2UzMDFhNTUxYmUzNGVmYTQ1ODJh
NWNmMzkwHhcNMjUwNDI5MTUwMTEzWhcNMjUwNDMwMTUwMTEzWjAzMTEwLwYDVQQD
Eyg3YjkyZmJlYWY3ZTRmZTM1NTAwYWFhNjEwMTNmZWJmY2JmNmM0NzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2lxwuSwcVwHKigij68RmU0a1+qX
SrrrxG323euk9YQBEBfShhdH/ta05w7aKFOpXiDKd4UAQNPraeTDTFrOwznmFg8b
iqcxBbMzxYoRFse7RW2h6c8vGujKTB6JGV7exCN0HTbTGnfTOCUesBoP+pGhBjtK
j0nyUET7DIWyz03XQ1Ec1t1RLb+nDxhWBK9ZqtUwJHW2MEAWltqvutmljbMFqJMw
p7GhJYNFtJAFzV9OHLmcCgPcQOpiK2/bCGBfeEM5w8r/CxIoyypaoonuNvsD9JAU
4stnKsEEIM7xJojNzEIBJTpuuXQCHbc8F7x1ZOLsGws0J9ArvAW8SAx2VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuS++r35P41UAqqYQE/6/y/bEdEMB8GA1UdIwQY
MBaAFMKFoUdOOGJ+MBpVG+NO+kWCpc85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd29XaFIwNDRZbjR3R2xVYjQwNzZSWUtsenprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9iNDlmODEtODUzNi00YTY3LTg5OWYt
ZDVlNjM4NTZkNTVkLzEvd29XaFIwNDRZbjR3R2xVYjQwNzZSWUtsenprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9iNDlmODEtODUzNi00YTY3LTg5OWYtZDVlNjM4NTZkNTVk
LzEvd29XaFIwNDRZbjR3R2xVYjQwNzZSWUtsenprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaIVJCoI
06AKtXAKg7TDVOS9CaWR8lnS6lF5YBhRhAt9W9QrlmMTFOnLeEe4EB1I7HwHPaS1
jrnBGZzIzUgPIEkIaIVYtv3uj3kWIvvs/QPRQFFsrVEzT+hav20VgGAlrohLWA0t
e3W3c6fJyXTtiqV4Qyjqe40kUeZp72XcuiYujTnuiRe2no5wwE3bGssfQV2Q6RNw
9Tbf8dKUDk0Gg3sNUJSv5uU43zIEDg3Kpy6CRRnVQ9btDdocoG2SMBkVJpJqGUvv
HPazLZmvqYzCDqHfjllfeanPFwIJPPU/TXPYQuhhZtC0+yMWBGHKrrwWjzVNxptU
CN4/fNYFyKfMQg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:13:00 2025 by rpki-client