Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: E/fY1XbAH+n1fBl7xe16x/MCprV8DnyL5ghhAPrIFaw=
Subject key identifier: 36:E6:DE:87:3F:DB:74:41:67:2E:B9:89:FA:59:86:DC:52:DD:AC:2D
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 01967C45B2A8352D4768AB274FA3FAD406A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0B12
Signing time: Mon 28 Apr 2025 12:01:04 +0000
Manifest this update: Mon 28 Apr 2025 12:01:04 +0000
Manifest next update: Tue 29 Apr 2025 12:01:04 +0000
Files and hashes: 1: J8g7cZ3te-XjH4vB99S63bY5jw8.roa (hash: kTqC/5LOxbM1zdbO1odgPNoINkirS3IzV43BF84XudQ=)
2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: xY5UVCtRbYL1zPSHToAucIytCwIgQ1GX8ymNShor18U=)
3: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (hash: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:b2:a8:35:2d:47:68:ab:27:4f:a3:fa:d4:06:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Apr 28 12:01:04 2025 GMT
Not After : Apr 29 12:01:04 2025 GMT
Subject: CN=36e6de873fdb7441672eb989fa5986dc52ddac2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:38:28:40:5c:17:9d:ad:17:b0:24:26:35:
8c:78:06:79:49:d8:3a:d6:14:85:26:9c:da:d5:cd:
63:d8:0c:66:af:27:8c:6f:ea:63:eb:45:9a:7e:c5:
b5:c0:13:98:fa:27:7c:33:98:b4:4b:4e:73:0c:dc:
85:fd:b6:d5:9a:3e:1b:c1:70:3a:4a:77:65:5e:14:
36:43:90:07:c6:70:91:7a:ba:9b:da:dd:b2:6d:16:
49:5f:8c:4a:ae:05:0b:7c:63:8c:b2:9d:7a:b9:b6:
18:99:82:76:84:c5:56:03:f5:9b:0b:eb:36:65:59:
8b:2c:34:4b:72:d4:18:2b:c8:38:b4:a0:14:b3:c8:
e5:51:74:ac:68:1e:d6:48:09:07:cc:02:a8:90:5a:
e7:3a:20:42:9c:66:40:e3:02:3c:dc:6c:6d:73:11:
fa:07:55:8f:25:ff:fa:95:64:c8:2b:03:67:67:28:
e6:b1:0c:0b:2f:9e:af:61:5d:95:a3:c3:3b:1f:aa:
ea:e5:1d:c9:22:67:4f:25:43:50:0a:3a:7f:e2:d3:
1b:e1:3f:f6:8a:94:52:2a:0d:14:1c:63:9b:a6:bf:
24:96:02:24:d8:f7:22:fd:4b:24:f4:7a:3b:a8:76:
4d:ef:d5:48:e7:4d:40:bc:9d:f3:a5:cf:d7:eb:2c:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:DE:87:3F:DB:74:41:67:2E:B9:89:FA:59:86:DC:52:DD:AC:2D
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fe:03:53:0a:8f:ba:94:62:6a:21:8d:fd:fd:14:e3:b1:28:
1a:f2:c3:4f:03:4f:90:09:e6:57:b8:5a:c5:0c:f1:3e:e7:8b:
e5:5c:9e:de:bb:4b:3f:98:31:71:39:44:80:59:a5:b4:e5:e0:
49:9b:42:3d:d3:9a:08:66:e0:eb:f3:86:0b:d0:cd:6f:4b:a7:
38:2e:ef:e5:7b:d0:a2:ee:9d:4f:71:df:0f:90:eb:47:8f:51:
b8:a3:e3:04:a5:32:88:49:4e:e5:40:76:09:52:92:96:ee:d8:
bf:d5:16:8a:f9:e9:95:93:1e:f2:be:1e:81:4f:ce:23:32:af:
aa:3d:f0:1c:3c:6a:ea:8d:03:f2:dc:99:1f:7e:73:7a:6d:89:
25:9f:51:cd:43:70:af:ea:78:a2:68:3d:d7:c9:5d:3a:5e:75:
a6:ec:63:1b:55:92:6f:68:f6:85:f2:20:bf:85:21:40:32:90:
f0:36:78:6b:97:3e:81:0b:93:b8:ed:a3:6b:13:e2:7d:87:6d:
0b:72:2d:bf:6c:79:3f:f9:a1:18:e9:ac:17:7c:30:c9:76:f9:
6d:02:4f:6f:7c:24:82:7b:83:f5:01:5c:f9:e5:82:49:33:67:
c4:43:d9:6d:8a:67:5b:03:ea:a0:7a:c7:a0:db:4d:e3:86:1c:
26:34:1b:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8RbKoNS1HaKsnT6P61AajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWMxZTA2MjQwMzliZDFmMWE5NDZjYjUxM2M5MzM4NmZh
YjZiMTkwHhcNMjUwNDI4MTIwMTA0WhcNMjUwNDI5MTIwMTA0WjAzMTEwLwYDVQQD
EygzNmU2ZGU4NzNmZGI3NDQxNjcyZWI5ODlmYTU5ODZkYzUyZGRhYzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtI4KEBcF52tF7AkJjWMeAZ5Sdg6
1hSFJpza1c1j2AxmryeMb+pj60WafsW1wBOY+id8M5i0S05zDNyF/bbVmj4bwXA6
SndlXhQ2Q5AHxnCRerqb2t2ybRZJX4xKrgULfGOMsp16ubYYmYJ2hMVWA/WbC+s2
ZVmLLDRLctQYK8g4tKAUs8jlUXSsaB7WSAkHzAKokFrnOiBCnGZA4wI83GxtcxH6
B1WPJf/6lWTIKwNnZyjmsQwLL56vYV2Vo8M7H6rq5R3JImdPJUNQCjp/4tMb4T/2
ipRSKg0UHGObpr8klgIk2Pci/Usk9Ho7qHZN79VI501AvJ3zpc/X6yxPmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbm3oc/23RBZy65ifpZhtxS3awtMB8GA1UdIwQY
MBaAFFscHgYkA5vR8alGy1E8kzhvq2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgt
YmZiNmNmMGYwODM1LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgtYmZiNmNmMGYwODM1
LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/4DUwqP
upRiaiGN/f0U47EoGvLDTwNPkAnmV7haxQzxPueL5Vye3rtLP5gxcTlEgFmltOXg
SZtCPdOaCGbg6/OGC9DNb0unOC7v5XvQou6dT3HfD5DrR49RuKPjBKUyiElO5UB2
CVKSlu7Yv9UWivnplZMe8r4egU/OIzKvqj3wHDxq6o0D8tyZH35zem2JJZ9RzUNw
r+p4omg918ldOl51puxjG1WSb2j2hfIgv4UhQDKQ8DZ4a5c+gQuTuO2jaxPifYdt
C3Itv2x5P/mhGOmsF3wwyXb5bQJPb3wkgnuD9QFc+eWCSTNnxEPZbYpnWwPqoHrH
oNtN44YcJjQbVA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:01:40 2025 by rpki-client