
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
File: wzdo22Ch8ho07lwqNDVFYXvvi0A.mft (raw, json)
Hash identifier: J5Urf4duWXfNZ45FD36O+JRqEAaYd8yrG3fJwTJO06M=
Subject key identifier: B7:7B:85:54:36:38:B6:94:BD:38:7E:08:51:E7:26:2F:29:5F:02:09
Authority key identifier: C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
Certificate issuer: /CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Certificate serial: 01968E82718C9E05DAF14E94458B7770DA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
Manifest number: 1517
Signing time: Fri 02 May 2025 01:00:35 +0000
Manifest this update: Fri 02 May 2025 01:00:35 +0000
Manifest next update: Sat 03 May 2025 01:00:35 +0000
Files and hashes: 1: wzdo22Ch8ho07lwqNDVFYXvvi0A.crl (hash: 5rRStZSkN749mtTCkffXkTS9MIpIPTqDpKSyIRnbf7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:71:8c:9e:05:da:f1:4e:94:45:8b:77:70:da:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Validity
Not Before: May 2 01:00:35 2025 GMT
Not After : May 3 01:00:35 2025 GMT
Subject: CN=b77b85543638b694bd387e0851e7262f295f0209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:54:eb:8c:44:e1:90:66:fe:78:21:cd:bd:55:
80:c2:bb:8c:22:b4:40:62:de:75:75:d8:4b:5c:9a:
44:3b:95:01:8e:e5:a5:c1:22:16:44:81:3c:3a:29:
d2:ba:f3:0a:75:b8:bf:11:b8:17:63:5f:b4:28:85:
42:56:f4:41:1d:9b:6b:00:5f:3a:0a:6a:43:6f:35:
53:1c:4b:7b:a1:f0:79:31:5a:23:91:55:78:7e:56:
26:e9:b4:4e:97:74:05:7a:d2:66:58:2c:56:b4:d3:
89:bf:8b:a5:93:12:46:10:f6:75:20:e3:fa:35:f4:
8b:28:ca:c4:78:01:c5:e4:a3:7c:5f:b1:e7:5c:13:
0a:e6:84:e0:97:94:42:17:43:f9:55:a3:1d:61:ca:
95:f2:3d:97:60:7c:4a:81:3c:83:00:93:2d:74:92:
99:d9:96:33:36:1d:0e:03:9f:a9:54:12:5b:7a:77:
40:96:30:4c:7d:34:e3:20:06:1e:0d:73:e0:4b:35:
27:90:09:ee:f4:7b:19:a0:35:99:6c:53:e4:59:2a:
f9:6a:d7:51:9e:40:5f:e1:f3:cd:0d:3c:cc:be:3a:
79:8e:2e:f1:dd:cc:79:b8:4f:e4:f3:c4:d5:8a:22:
88:bb:7d:33:e9:42:54:08:e2:80:ad:11:20:f5:b5:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7B:85:54:36:38:B6:94:BD:38:7E:08:51:E7:26:2F:29:5F:02:09
X509v3 Authority Key Identifier:
keyid:C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1d:f8:38:ea:14:28:b1:0f:18:e8:f6:67:88:fc:df:22:27:
60:48:6f:6c:62:bc:bb:0d:02:8a:6c:fe:fa:b7:ba:4c:7b:a6:
08:e4:5c:c5:8a:19:23:e8:c2:22:ff:59:8b:de:a0:cc:e9:51:
e0:c5:d7:90:fb:dc:b7:1c:04:c8:07:9c:1e:1b:65:f7:cd:e9:
0a:2a:cd:17:62:bd:1b:05:c4:42:05:c3:da:84:5a:f9:7b:d8:
7c:60:bb:c7:61:2d:03:a1:c4:a8:6f:16:ff:65:01:53:ed:df:
b1:66:0d:5b:27:16:87:45:dc:08:d3:1d:b9:4b:49:b4:d8:d2:
37:d5:0f:2e:d5:bd:a3:e5:65:4f:d1:be:53:3c:af:67:fe:17:
48:af:78:2c:a1:59:d0:8f:90:24:19:a9:cd:69:40:85:8f:35:
3d:78:68:0e:56:fd:8d:f5:72:61:4f:87:82:e1:a2:cb:fd:e5:
29:22:67:20:6d:d0:ba:8c:df:da:57:a2:38:40:7a:c8:26:52:
6e:01:4e:d1:6b:75:6f:de:65:43:28:f0:02:79:b8:1d:30:66:
ce:59:9d:ad:33:29:6e:42:a3:b3:a0:2b:0f:26:d0:4f:b7:cb:
01:d1:07:1b:5d:29:f4:53:65:8e:f3:1a:5e:26:85:0a:69:c0:
c7:bf:a9:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaOgnGMngXa8U6URYt3cNonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzc2OGRiNjBhMWYyMWEzNGVlNWMyYTM0MzU0NTYxN2Jl
ZjhiNDAwHhcNMjUwNTAyMDEwMDM1WhcNMjUwNTAzMDEwMDM1WjAzMTEwLwYDVQQD
EyhiNzdiODU1NDM2MzhiNjk0YmQzODdlMDg1MWU3MjYyZjI5NWYwMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91TrjEThkGb+eCHNvVWAwruMIrRA
Yt51ddhLXJpEO5UBjuWlwSIWRIE8OinSuvMKdbi/EbgXY1+0KIVCVvRBHZtrAF86
CmpDbzVTHEt7ofB5MVojkVV4flYm6bROl3QFetJmWCxWtNOJv4ulkxJGEPZ1IOP6
NfSLKMrEeAHF5KN8X7HnXBMK5oTgl5RCF0P5VaMdYcqV8j2XYHxKgTyDAJMtdJKZ
2ZYzNh0OA5+pVBJbendAljBMfTTjIAYeDXPgSzUnkAnu9HsZoDWZbFPkWSr5atdR
nkBf4fPNDTzMvjp5ji7x3cx5uE/k88TViiKIu30z6UJUCOKArREg9bWcpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd7hVQ2OLaUvTh+CFHnJi8pXwIJMB8GA1UdIwQY
MBaAFMM3aNtgofIaNO5cKjQ1RWF774tAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iMWVjNWMtMTc3MC00YjFhLTg5NGIt
YzI2MTFiNzQyMGYyLzEvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9iMWVjNWMtMTc3MC00YjFhLTg5NGItYzI2MTFiNzQyMGYy
LzEvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACh34OOoU
KLEPGOj2Z4j83yInYEhvbGK8uw0Cimz++re6THumCORcxYoZI+jCIv9Zi96gzOlR
4MXXkPvctxwEyAecHhtl983pCirNF2K9GwXEQgXD2oRa+XvYfGC7x2EtA6HEqG8W
/2UBU+3fsWYNWycWh0XcCNMduUtJtNjSN9UPLtW9o+VlT9G+UzyvZ/4XSK94LKFZ
0I+QJBmpzWlAhY81PXhoDlb9jfVyYU+HguGiy/3lKSJnIG3Quozf2leiOEB6yCZS
bgFO0Wt1b95lQyjwAnm4HTBmzlmdrTMpbkKjs6ArDybQT7fLAdEHG10p9FNljvMa
XiaFCmnAx7+pSg==
-----END CERTIFICATE-----
Generated at Fri May 2 06:23:20 2025 by rpki-client