Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File: WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier: nWWivk59hZ8m6LPnOJz93WGNrLrJUD2pnN99myGv7SI=
Subject key identifier: 76:10:9E:72:3A:11:1F:CC:CE:5C:7A:7D:DD:28:91:ED:D4:59:A1:B0
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 0196974EF0AC8A39E44DAFE6EC16E8056025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number: 0D40
Signing time: Sat 03 May 2025 18:00:55 +0000
Manifest this update: Sat 03 May 2025 18:00:55 +0000
Manifest next update: Sun 04 May 2025 18:00:55 +0000
Files and hashes: 1: CyjhjoDiSo7WFimizlr7VkadJR8.roa (hash: cM6TG/2qfvLGo5XP6sM8MTNGlbdx/5vkQ91bz6yRUQw=)
2: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: bKrOpO5tEJh/xL680QK9jlozCQ2UQSFjCmuFSinflD0=)
3: hWPfJRigBwQrXXI_iYiIoMMdvMI.roa (hash: wsY9wU/Uh/qwSah/fwLqo3Fci0fOUVaJuSLnsVDw8zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:4e:f0:ac:8a:39:e4:4d:af:e6:ec:16:e8:05:60:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: May 3 18:00:55 2025 GMT
Not After : May 4 18:00:55 2025 GMT
Subject: CN=76109e723a111fccce5c7a7ddd2891edd459a1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8f:d2:cc:c3:36:d0:be:84:06:2c:d4:0b:11:
82:eb:8d:84:c5:07:96:d1:54:c1:e2:82:73:de:49:
6f:a9:c5:e4:16:ce:9c:9d:c4:b2:ed:70:bd:f2:56:
14:29:08:ce:ed:34:1a:fc:92:80:eb:28:23:8e:36:
b1:7b:93:7b:bd:f8:6b:6f:1b:ee:45:86:63:dc:50:
90:6b:2f:2b:10:a8:7b:34:83:a5:08:6a:26:e4:3b:
9c:7d:18:03:20:a1:33:bc:ea:2c:21:af:92:fa:90:
c0:d8:ce:74:09:76:7b:a2:91:36:11:fe:58:7e:8c:
f0:74:a5:e8:c8:b9:f4:cd:fd:2f:14:56:00:97:e5:
33:0f:57:18:a8:42:07:78:ae:44:4b:48:7b:57:68:
57:87:d9:21:82:14:1f:d0:2f:13:56:b1:bc:20:e8:
f8:73:05:71:9d:54:8a:4e:02:a5:13:22:65:aa:12:
f7:cd:99:b4:54:0d:e9:6f:f4:b2:01:96:cb:41:68:
05:c8:d1:63:63:5d:b7:c4:3d:f7:af:3b:a2:48:6b:
62:e8:32:4b:9e:69:b9:eb:7c:25:bd:f7:be:3c:94:
e4:57:2e:9c:6d:aa:aa:55:e5:ef:46:7e:40:48:29:
31:e5:2c:c8:82:a9:06:fa:61:79:ba:cf:9d:6b:a3:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:10:9E:72:3A:11:1F:CC:CE:5C:7A:7D:DD:28:91:ED:D4:59:A1:B0
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:23:8c:bc:a0:b6:87:a8:5e:c2:f5:7a:16:ed:1a:88:83:67:
10:7f:c0:b1:cf:d5:fd:fa:a0:cf:5a:d8:c8:54:70:72:7c:86:
5f:2c:a8:2d:c3:a3:6f:35:8e:94:07:35:99:ab:5a:c6:d8:ec:
6d:60:2f:3f:34:10:50:ae:cf:b9:f6:a8:f4:e6:ec:c9:18:a9:
43:5f:2a:8e:a5:c5:d6:b9:59:19:79:ff:40:2b:73:e8:85:a6:
f1:bd:b3:59:74:3e:f6:94:7b:41:fb:60:e9:47:65:fe:93:12:
65:21:60:03:e5:04:01:e9:82:b6:c0:cb:8a:77:80:7a:d3:94:
85:67:8e:31:bb:bd:e0:0f:28:fa:5f:1c:b3:a4:ec:b8:46:9b:
71:2c:78:cc:b8:09:d1:e6:6c:dc:3e:40:70:f0:f7:9f:ef:92:
a2:b1:f0:ae:42:96:dd:49:ad:5e:2c:70:eb:69:8b:e2:84:2f:
f3:e4:a7:29:5f:d1:a4:b6:f2:36:35:e3:37:b3:49:ab:dd:25:
03:11:85:f9:45:e0:39:43:84:1d:e6:82:aa:b9:3d:f1:ae:6e:
8c:89:06:43:5a:c9:bf:32:57:22:df:b6:d0:ac:ec:44:f8:f7:
70:2c:be:80:5c:3b:35:c1:0f:6f:09:67:62:86:6d:13:84:76:
e5:fb:3c:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaXTvCsijnkTa/m7BboBWAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDBjNDFmZGU5OTY1MWIxMzI5MDZmZjA2MDJiNDdiNTYw
N2E1YmUwHhcNMjUwNTAzMTgwMDU1WhcNMjUwNTA0MTgwMDU1WjAzMTEwLwYDVQQD
Eyg3NjEwOWU3MjNhMTExZmNjY2U1YzdhN2RkZDI4OTFlZGQ0NTlhMWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9I/SzMM20L6EBizUCxGC642ExQeW
0VTB4oJz3klvqcXkFs6cncSy7XC98lYUKQjO7TQa/JKA6ygjjjaxe5N7vfhrbxvu
RYZj3FCQay8rEKh7NIOlCGom5DucfRgDIKEzvOosIa+S+pDA2M50CXZ7opE2Ef5Y
fozwdKXoyLn0zf0vFFYAl+UzD1cYqEIHeK5ES0h7V2hXh9khghQf0C8TVrG8IOj4
cwVxnVSKTgKlEyJlqhL3zZm0VA3pb/SyAZbLQWgFyNFjY123xD33rzuiSGti6DJL
nmm563wlvfe+PJTkVy6cbaqqVeXvRn5ASCkx5SzIgqkG+mF5us+da6MAGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYQnnI6ER/Mzlx6fd0oke3UWaGwMB8GA1UdIwQY
MBaAFFrQxB/emWUbEykG/wYCtHtWB6W+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RERUg5NlpaUnNUS1FiX0JnSzBlMVlIcGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8xYmMwY2ItZGZhNC00MTUxLWE2MWIt
MzM1YTdlNDM4NGIxLzEvV3RERUg5NlpaUnNUS1FiX0JnSzBlMVlIcGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8xYmMwY2ItZGZhNC00MTUxLWE2MWItMzM1YTdlNDM4NGIx
LzEvV3RERUg5NlpaUnNUS1FiX0JnSzBlMVlIcGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSOMvKC2
h6hewvV6Fu0aiINnEH/Asc/V/fqgz1rYyFRwcnyGXyyoLcOjbzWOlAc1mataxtjs
bWAvPzQQUK7Pufao9ObsyRipQ18qjqXF1rlZGXn/QCtz6IWm8b2zWXQ+9pR7Qftg
6Udl/pMSZSFgA+UEAemCtsDLineAetOUhWeOMbu94A8o+l8cs6TsuEabcSx4zLgJ
0eZs3D5AcPD3n++SorHwrkKW3UmtXixw62mL4oQv8+SnKV/RpLbyNjXjN7NJq90l
AxGF+UXgOUOEHeaCqrk98a5ujIkGQ1rJvzJXIt+20KzsRPj3cCy+gFw7NcEPbwln
YoZtE4R25fs8HQ==
-----END CERTIFICATE-----
Generated at Sat May 3 21:10:44 2025 by rpki-client