Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: zyT041S3TLcmUcL8OCNAfXX3xha0RPVijK1poq4etiE=
Subject key identifier: B9:A9:E9:D4:59:A4:FA:CF:8E:F5:37:2B:D3:91:1C:DF:82:21:79:A1
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 019675302E6B36DD1D280EDCC0173888C637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 0E0B
Signing time: Sun 27 Apr 2025 03:00:13 +0000
Manifest this update: Sun 27 Apr 2025 03:00:13 +0000
Manifest next update: Mon 28 Apr 2025 03:00:13 +0000
Files and hashes: 1: 2if-W7_9B6ndVwa4CXKbXlfYipY.roa (hash: x6w8qlU6igwl5cXDxoZUE8Lr1i8+UZJJXlmem9XWOSg=)
2: iNIpA6NRoHEtD1Gdwv0RcZxMEOY.roa (hash: QoWSCTkZW/GH9j1mmy2Sv0c+Jd5oUQpoqRVhrzgy26s=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: r+5H7pQOrAOfftoHZa5HbPh7IJTZHNNDolXbLsCVOTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:2e:6b:36:dd:1d:28:0e:dc:c0:17:38:88:c6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Apr 27 03:00:13 2025 GMT
Not After : Apr 28 03:00:13 2025 GMT
Subject: CN=b9a9e9d459a4facf8ef5372bd3911cdf822179a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:22:d0:b1:6b:2e:21:9c:d8:f3:ee:b0:64:39:
cd:2b:8d:bf:1e:ee:84:31:fc:78:2f:a0:41:5e:9a:
a9:db:75:2f:4f:9d:0d:a8:ce:74:b0:43:ed:5a:c9:
ad:fa:cf:46:c2:09:d9:8b:92:15:b5:41:08:37:ca:
7e:62:79:a6:97:df:9e:fc:65:1d:1e:a0:e4:09:56:
a7:66:15:94:7a:95:68:17:30:75:b7:72:28:73:ad:
30:ae:7e:95:d5:ef:53:0f:07:fe:4b:72:f5:18:ae:
4a:27:7e:41:d8:24:30:6f:2b:24:e0:fc:74:cf:b7:
d8:ba:e9:dc:34:14:d3:4f:87:56:1d:ff:91:54:c6:
45:00:af:c9:03:5f:53:34:6b:e3:d0:c9:07:f6:15:
0b:f6:73:93:35:ab:f7:11:0a:48:59:cf:11:28:c6:
e6:f1:fe:cb:57:71:9c:da:df:0b:b5:f3:28:65:35:
fb:91:8a:e8:78:09:42:1e:48:d0:54:3d:46:de:4f:
ee:60:fa:94:28:33:f2:fa:db:2e:a0:39:14:15:da:
eb:5d:5e:f5:03:79:94:93:82:51:38:ae:7c:ed:58:
6f:86:0b:a7:82:af:4d:f2:53:ec:91:b0:91:6c:f4:
d1:3d:3e:b0:f2:ee:be:dc:1f:5b:1e:4e:46:28:d0:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A9:E9:D4:59:A4:FA:CF:8E:F5:37:2B:D3:91:1C:DF:82:21:79:A1
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f8:b9:02:47:53:3d:f5:9d:0f:74:61:ae:30:14:7e:f6:f8:
67:77:4a:4f:ed:8e:08:e1:bb:05:f6:05:e7:e7:ba:b9:f6:b8:
11:a0:c2:b4:2d:29:2a:69:1e:4b:ab:11:04:c2:97:81:81:36:
06:aa:3d:1b:ef:2a:5b:0c:1a:f6:c8:e9:0e:75:20:24:02:db:
db:8b:56:a2:23:13:a1:cb:01:72:8c:e3:09:4f:92:a0:b9:63:
db:19:11:f5:ae:87:bc:26:60:f4:a7:21:d7:f1:c0:f4:1f:d8:
72:c1:49:3d:ef:62:0c:66:c4:86:df:43:ab:8e:1e:2c:24:2b:
b3:d7:79:26:9e:f1:7c:6b:13:48:6a:e9:c8:08:bc:a6:2c:b2:
5f:98:34:01:76:4d:19:99:c1:24:b4:6e:13:dc:72:e5:af:cf:
e3:33:3f:fe:5f:1a:12:95:8e:b4:b8:b0:08:ac:82:c7:95:74:
06:2a:43:94:7f:7b:dd:64:a3:03:04:b2:1c:fc:53:a4:fc:1c:
0e:16:2f:19:da:fa:44:54:31:3f:90:5b:a4:60:ac:a5:da:08:
2b:47:97:5b:05:e0:7c:45:ad:7b:02:11:ce:74:d4:c2:d7:85:
ce:69:c6:9a:0f:d1:7e:9d:c5:eb:c3:49:03:de:05:e1:73:a8:
01:4a:a5:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MC5rNt0dKA7cwBc4iMY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMmQ1NTNiMjhjNWQwZWE1YjFlZjYwYzliY2UzM2RmNTBi
Y2I0OTMwHhcNMjUwNDI3MDMwMDEzWhcNMjUwNDI4MDMwMDEzWjAzMTEwLwYDVQQD
EyhiOWE5ZTlkNDU5YTRmYWNmOGVmNTM3MmJkMzkxMWNkZjgyMjE3OWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SLQsWsuIZzY8+6wZDnNK42/Hu6E
Mfx4L6BBXpqp23UvT50NqM50sEPtWsmt+s9GwgnZi5IVtUEIN8p+Ynmml9+e/GUd
HqDkCVanZhWUepVoFzB1t3Ioc60wrn6V1e9TDwf+S3L1GK5KJ35B2CQwbysk4Px0
z7fYuuncNBTTT4dWHf+RVMZFAK/JA19TNGvj0MkH9hUL9nOTNav3EQpIWc8RKMbm
8f7LV3Gc2t8LtfMoZTX7kYroeAlCHkjQVD1G3k/uYPqUKDPy+tsuoDkUFdrrXV71
A3mUk4JROK587Vhvhgungq9N8lPskbCRbPTRPT6w8u6+3B9bHk5GKNCFAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmp6dRZpPrPjvU3K9ORHN+CIXmhMB8GA1UdIwQY
MBaAFMItVTsoxdDqWx72DJvOM99QvLSTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTc2NDQtOTNkNC00NDU3LThlNWUt
OTY3NTA2ODg1N2YxLzEvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lMTc2NDQtOTNkNC00NDU3LThlNWUtOTY3NTA2ODg1N2Yx
LzEvd2kxVk95akYwT3BiSHZZTW04NHozMUM4dEpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPi5AkdT
PfWdD3RhrjAUfvb4Z3dKT+2OCOG7BfYF5+e6ufa4EaDCtC0pKmkeS6sRBMKXgYE2
Bqo9G+8qWwwa9sjpDnUgJALb24tWoiMTocsBcozjCU+SoLlj2xkR9a6HvCZg9Kch
1/HA9B/YcsFJPe9iDGbEht9Dq44eLCQrs9d5Jp7xfGsTSGrpyAi8piyyX5g0AXZN
GZnBJLRuE9xy5a/P4zM//l8aEpWOtLiwCKyCx5V0BipDlH973WSjAwSyHPxTpPwc
DhYvGdr6RFQxP5BbpGCspdoIK0eXWwXgfEWtewIRznTUwteFzmnGmg/Rfp3F68NJ
A94F4XOoAUql9A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:09 2025 by rpki-client