Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
File: WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json)
Hash identifier: CQVB3wm/o0jlmHvBGQR4izzm3Kb6E1pT6liQ9Lxg5o0=
Subject key identifier: 6F:A3:AF:3D:EB:C1:A0:6A:10:10:E8:4C:C6:A8:AF:8E:BE:F5:60:90
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Certificate issuer: /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial: 0196759E9DA7E28F57E7326745142D73B87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
Manifest number: 13C4
Signing time: Sun 27 Apr 2025 05:00:51 +0000
Manifest this update: Sun 27 Apr 2025 05:00:51 +0000
Manifest next update: Mon 28 Apr 2025 05:00:51 +0000
Files and hashes: 1: FEdxURaOUkYL0WbDVp9BT5YoCGg.roa (hash: V1bhzQdOv21eP2L8drvzUoPqsAJ8/f8TJjg7qCBB23Q=)
2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: I8yj1Tds0cIeMIQp7TzUweEt8e8DlI6GKk6b0kIXecA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:9d:a7:e2:8f:57:e7:32:67:45:14:2d:73:b8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Validity
Not Before: Apr 27 05:00:51 2025 GMT
Not After : Apr 28 05:00:51 2025 GMT
Subject: CN=6fa3af3debc1a06a1010e84cc6a8af8ebef56090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:88:1e:59:b9:b5:be:c7:a4:de:82:9a:ec:
27:69:09:2d:c0:44:5f:94:b1:97:0b:96:0b:59:0a:
28:e6:05:21:4b:a4:58:ed:c1:de:0e:f0:18:50:2b:
3d:2a:bd:0f:c3:52:95:33:4e:d9:47:3f:8d:10:e7:
8d:64:db:c4:f8:f8:75:c7:bc:8e:84:0d:09:cd:45:
8a:36:38:1e:16:82:ff:89:ff:40:fa:5c:4b:5e:bd:
c8:6d:69:ac:f9:43:4c:29:f6:5a:22:17:54:fe:04:
78:50:f7:ac:ff:99:58:64:13:f9:f4:73:13:ca:2d:
fc:c0:ec:b5:50:76:ed:54:98:55:fc:18:8b:72:b2:
60:05:69:c9:6a:5e:76:ef:8a:a7:e0:2b:6a:b2:86:
f1:1f:53:ea:b8:1d:78:7c:12:c9:8a:9c:77:a6:4c:
10:ba:9d:19:4c:46:42:c9:60:52:e2:f2:bb:65:ea:
bc:6a:ee:d6:7c:da:8b:f9:1a:e6:26:65:cc:10:d1:
3f:c9:3b:29:09:fe:13:ee:a1:e1:8b:87:42:2f:c8:
44:50:28:40:d7:fd:de:37:ce:72:e3:99:c8:fb:92:
9f:b7:b1:85:58:26:a0:23:17:24:f7:b5:cb:81:84:
ff:a6:b5:6c:85:ca:47:4b:66:da:33:63:0f:03:1d:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A3:AF:3D:EB:C1:A0:6A:10:10:E8:4C:C6:A8:AF:8E:BE:F5:60:90
X509v3 Authority Key Identifier:
keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:71:48:7b:92:eb:77:6c:86:3c:50:d6:fc:18:f0:9f:3e:fe:
6f:06:6c:b1:8e:55:66:51:f2:06:ee:bf:8c:c7:0b:2c:d0:32:
b7:4e:4c:16:20:d6:14:73:46:ee:ba:ac:52:47:fe:cb:f8:ab:
3e:8b:2c:4a:3f:a5:14:e6:f6:08:13:25:43:7a:bb:dc:a5:6a:
ad:7c:12:65:de:ad:37:7e:16:69:a6:bb:55:4b:1a:76:9c:16:
b1:ea:bd:3d:35:52:94:0a:12:2c:b3:cc:c3:76:c7:54:73:94:
de:61:6d:d1:86:50:44:d3:4e:88:f5:d7:1e:3b:94:16:29:1f:
77:cd:15:45:91:24:3e:fd:26:6b:17:de:d9:71:7a:61:fc:a8:
40:83:d9:ea:40:c6:42:b9:a7:8d:35:aa:34:82:81:5b:64:4c:
1a:1b:b3:6c:fb:b4:4e:16:47:a4:a1:55:03:a2:89:cd:7c:5e:
4d:cc:46:fd:4c:2f:b5:81:eb:54:9b:19:5f:cb:fb:b8:b3:09:
06:98:ef:e8:d0:2a:70:aa:18:1b:d0:c7:ce:60:18:2a:09:1c:
15:a6:8d:67:c1:ac:9f:77:19:ac:d9:8c:0c:c5:d8:6c:e2:ff:
a6:65:26:59:a3:74:54:60:05:c7:a0:39:50:73:6a:f5:f3:90:
b5:15:ba:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1np2n4o9X5zJnRRQtc7h9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMjU5MDlmM2I5NGU1NWY1ZWYzMzZhMjdkMjc0YTdkZmQw
ZDk2YjIwHhcNMjUwNDI3MDUwMDUxWhcNMjUwNDI4MDUwMDUxWjAzMTEwLwYDVQQD
Eyg2ZmEzYWYzZGViYzFhMDZhMTAxMGU4NGNjNmE4YWY4ZWJlZjU2MDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuyIHlm5tb7HpN6CmuwnaQktwERf
lLGXC5YLWQoo5gUhS6RY7cHeDvAYUCs9Kr0Pw1KVM07ZRz+NEOeNZNvE+Ph1x7yO
hA0JzUWKNjgeFoL/if9A+lxLXr3IbWms+UNMKfZaIhdU/gR4UPes/5lYZBP59HMT
yi38wOy1UHbtVJhV/BiLcrJgBWnJal5274qn4CtqsobxH1PquB14fBLJipx3pkwQ
up0ZTEZCyWBS4vK7Zeq8au7WfNqL+RrmJmXMENE/yTspCf4T7qHhi4dCL8hEUChA
1/3eN85y45nI+5Kft7GFWCagIxck97XLgYT/prVshcpHS2baM2MPAx0R0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+jrz3rwaBqEBDoTMaor46+9WCQMB8GA1UdIwQY
MBaAFFslkJ87lOVfXvM2on0nSn39DZayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEt
M2YxN2NiY2JhNWNhLzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEtM2YxN2NiY2JhNWNh
LzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXFIe5Lr
d2yGPFDW/Bjwnz7+bwZssY5VZlHyBu6/jMcLLNAyt05MFiDWFHNG7rqsUkf+y/ir
PossSj+lFOb2CBMlQ3q73KVqrXwSZd6tN34Waaa7VUsadpwWseq9PTVSlAoSLLPM
w3bHVHOU3mFt0YZQRNNOiPXXHjuUFikfd80VRZEkPv0maxfe2XF6YfyoQIPZ6kDG
QrmnjTWqNIKBW2RMGhuzbPu0ThZHpKFVA6KJzXxeTcxG/UwvtYHrVJsZX8v7uLMJ
Bpjv6NAqcKoYG9DHzmAYKgkcFaaNZ8Gsn3cZrNmMDMXYbOL/pmUmWaN0VGAFx6A5
UHNq9fOQtRW6AQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:05:01 2025 by rpki-client