Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
File: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json)
Hash identifier: n5YP69lQ+WBLYx1fl4p7c+kFRtwb7wPNzdi4WjiE6hE=
Subject key identifier: 03:93:06:05:41:E6:63:4A:90:1D:EA:F1:5F:C0:6A:7A:8D:21:0E:91
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial: 01967BD85AD3A55C4F509711B19430844E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
Manifest number: 0753
Signing time: Mon 28 Apr 2025 10:01:38 +0000
Manifest this update: Mon 28 Apr 2025 10:01:38 +0000
Manifest next update: Tue 29 Apr 2025 10:01:38 +0000
Files and hashes: 1: 9VRbY37PKRH0-UJUOvI3sW7GRqg.roa (hash: JnDLn69G2OWz5ad5UI+dtO7s/dZ3uGdaBQeH20/IDXs=)
2: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: lGkWR2j88ntKeMtlpFZSibNO82kaS2B4ru8bP6PbgWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:5a:d3:a5:5c:4f:50:97:11:b1:94:30:84:4e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
Validity
Not Before: Apr 28 10:01:38 2025 GMT
Not After : Apr 29 10:01:38 2025 GMT
Subject: CN=0393060541e6634a901deaf15fc06a7a8d210e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:2e:9a:52:95:c0:53:ce:ce:1f:04:47:9e:
ac:97:cf:6c:07:31:3d:3c:c2:ea:ca:b9:d8:0e:14:
42:ca:10:58:2f:25:09:4a:09:01:c6:2f:92:2c:b7:
a2:0b:9a:33:6b:be:99:29:72:27:64:e6:95:66:4e:
dc:89:d3:4e:df:24:d1:4a:1a:f9:17:7d:52:27:fc:
8a:16:cf:9f:7d:59:3f:a9:8d:2e:96:df:58:77:d7:
e9:24:43:67:26:35:a0:d3:ef:66:70:9c:fe:83:c6:
69:a0:b6:a3:e9:34:f1:d4:43:4a:f0:d3:4b:db:37:
81:fb:ac:19:5e:9c:5f:bb:b7:b6:87:9c:cb:ba:a6:
87:f6:bc:f3:49:63:fc:39:21:13:f4:9a:6f:be:47:
bb:70:22:97:9f:43:49:ea:b8:ad:6a:30:49:4f:39:
b5:46:75:91:01:7a:ef:dc:08:b5:9c:82:5f:4c:87:
5d:17:8e:ef:0d:87:af:69:43:da:44:a5:78:74:71:
cf:7a:f0:e1:ea:19:0b:19:0d:15:b6:e8:e6:76:e6:
dc:6d:e8:f4:85:1f:7c:fa:ed:70:53:95:ca:5d:63:
b0:02:04:2d:2c:32:b4:2b:5e:0f:ae:e2:a5:03:98:
86:4f:a0:60:3b:f4:d7:ff:2a:9b:19:e7:d7:f4:3c:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:93:06:05:41:E6:63:4A:90:1D:EA:F1:5F:C0:6A:7A:8D:21:0E:91
X509v3 Authority Key Identifier:
keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:dc:4b:40:06:6a:c5:cc:0d:88:4d:8a:d0:a4:22:57:44:c9:
3c:0d:33:54:c1:2e:d3:26:58:f3:46:4c:54:a7:aa:33:5c:03:
b8:63:5c:1b:fa:84:2a:5b:96:87:21:ba:20:56:80:12:de:b1:
f0:a2:f4:8c:fe:d8:4d:e5:91:be:ac:e0:3e:8b:cd:76:dd:01:
7f:78:cb:f5:a7:4b:3b:04:ad:2e:83:db:b4:e3:6a:af:9d:96:
13:63:4e:da:7f:43:b3:d2:a5:e1:38:f8:c0:a2:f7:2d:b4:88:
62:26:a0:cc:2f:2c:e7:bc:ae:6f:8d:47:31:8c:bd:36:d5:88:
16:5e:59:14:ad:4b:5c:08:73:1d:c2:34:da:b5:ff:04:fe:54:
cc:0f:4f:03:03:2b:21:16:5e:8f:9b:5f:dc:31:e9:49:fc:47:
a7:22:21:48:15:7a:3c:ea:7c:e9:3e:c9:e1:70:1e:a7:55:9c:
93:fe:ee:7b:13:e9:28:9e:32:11:1e:45:97:bf:63:f1:c5:4d:
6c:78:c2:11:52:e4:02:37:08:cb:06:d5:e2:ee:a0:62:80:af:
d5:b2:4a:68:f8:b1:b7:23:1f:ac:a1:fc:c8:2b:a9:98:33:3c:
9c:be:d6:27:de:12:f9:d9:c2:14:10:f3:91:06:a2:16:cf:33:
37:48:7b:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ72FrTpVxPUJcRsZQwhE5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNWQ0NTY1NGZhNTk3ZDM1MjJlZGExNjg4MzkxOTNlYmU3
ODJlZWYwHhcNMjUwNDI4MTAwMTM4WhcNMjUwNDI5MTAwMTM4WjAzMTEwLwYDVQQD
EygwMzkzMDYwNTQxZTY2MzRhOTAxZGVhZjE1ZmMwNmE3YThkMjEwZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I8umlKVwFPOzh8ER56sl89sBzE9
PMLqyrnYDhRCyhBYLyUJSgkBxi+SLLeiC5oza76ZKXInZOaVZk7cidNO3yTRShr5
F31SJ/yKFs+ffVk/qY0ult9Yd9fpJENnJjWg0+9mcJz+g8ZpoLaj6TTx1ENK8NNL
2zeB+6wZXpxfu7e2h5zLuqaH9rzzSWP8OSET9Jpvvke7cCKXn0NJ6ritajBJTzm1
RnWRAXrv3Ai1nIJfTIddF47vDYevaUPaRKV4dHHPevDh6hkLGQ0Vtujmdubcbej0
hR98+u1wU5XKXWOwAgQtLDK0K14PruKlA5iGT6BgO/TX/yqbGefX9DwYAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOTBgVB5mNKkB3q8V/AanqNIQ6RMB8GA1UdIwQY
MBaAFFpdRWVPpZfTUi7aFog5GT6+eC7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzIt
Yzk2NDBkMjUwYWZjLzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzItYzk2NDBkMjUwYWZj
LzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitxLQAZq
xcwNiE2K0KQiV0TJPA0zVMEu0yZY80ZMVKeqM1wDuGNcG/qEKluWhyG6IFaAEt6x
8KL0jP7YTeWRvqzgPovNdt0Bf3jL9adLOwStLoPbtONqr52WE2NO2n9Ds9Kl4Tj4
wKL3LbSIYiagzC8s57yub41HMYy9NtWIFl5ZFK1LXAhzHcI02rX/BP5UzA9PAwMr
IRZej5tf3DHpSfxHpyIhSBV6POp86T7J4XAep1Wck/7uexPpKJ4yER5Fl79j8cVN
bHjCEVLkAjcIywbV4u6gYoCv1bJKaPixtyMfrKH8yCupmDM8nL7WJ94S+dnCFBDz
kQaiFs8zN0h7Mw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:17:33 2025 by rpki-client