Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
File: wXPRwALuqv2ht1iN1WIcTm_Jn64.mft (raw, json)
Hash identifier: XbN+6MiVJe532VbDVBKoqzG0yzyKhHLa15AK2zpftd4=
Subject key identifier: 89:AB:63:F7:61:55:16:EE:CA:16:60:54:0B:B4:E6:DE:AF:09:18:04
Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
Certificate issuer: /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Certificate serial: 01967BD798483AFC400D55492A32E2083A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
Manifest number: 03D6
Signing time: Mon 28 Apr 2025 10:00:48 +0000
Manifest this update: Mon 28 Apr 2025 10:00:48 +0000
Manifest next update: Tue 29 Apr 2025 10:00:48 +0000
Files and hashes: 1: JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa (hash: h8BGg/oG3iccU6NMytqMgx4YDS4KmCfVV7fVMEeYu2Y=)
2: wXPRwALuqv2ht1iN1WIcTm_Jn64.crl (hash: 2SOYfZTwKrvdbEU58EM6vzoOFVOEqzE7nPIAR27YUec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:98:48:3a:fc:40:0d:55:49:2a:32:e2:08:3a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Validity
Not Before: Apr 28 10:00:48 2025 GMT
Not After : Apr 29 10:00:48 2025 GMT
Subject: CN=89ab63f7615516eeca1660540bb4e6deaf091804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:48:2d:df:57:a2:32:0b:da:53:0a:16:f1:58:
34:2b:52:58:2b:fd:a7:0e:8e:7f:42:f2:6f:ad:d1:
0d:15:4f:f8:b9:51:37:ef:ae:77:57:b2:db:14:4f:
2a:85:7d:b2:e5:b5:73:25:6e:cc:73:71:bb:b0:05:
9b:7f:bc:e1:a6:13:97:ad:77:1d:51:23:49:78:7d:
6f:71:bc:54:41:16:ca:29:42:9a:cb:f2:75:c0:84:
e8:60:61:3a:2c:0a:c5:f5:cd:ff:d4:61:9e:0c:b0:
c9:be:7d:ce:e3:02:a0:8e:a9:21:92:42:8e:4e:b9:
f3:1d:c9:07:8f:e6:8d:b2:5e:4b:5b:27:5c:3c:86:
0f:ff:3a:24:d3:f5:fd:ab:9b:6b:73:fa:8e:57:71:
7d:f9:6a:a7:8c:e9:f5:19:07:3f:0b:09:de:20:e5:
63:5b:23:19:fe:93:b7:41:18:e3:c8:30:c6:e3:a0:
f7:c2:04:32:63:a1:fe:b1:6d:01:fe:21:6c:17:25:
92:2d:5b:d8:43:5a:8b:1e:f2:a4:5e:f6:1d:9d:9f:
d1:a7:09:f4:3d:38:50:79:3b:b7:09:3d:cd:44:eb:
2a:e0:48:cb:2b:ab:26:5e:da:95:b8:9d:30:51:75:
1c:1d:3d:98:8b:ef:c1:b5:7a:46:93:0a:66:a9:8e:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AB:63:F7:61:55:16:EE:CA:16:60:54:0B:B4:E6:DE:AF:09:18:04
X509v3 Authority Key Identifier:
keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0a:33:f9:11:f2:5f:c1:f4:68:5a:87:8d:8d:47:3d:0f:d5:
8b:fc:b3:d4:e6:da:25:5d:89:c7:c9:aa:d2:49:30:23:30:9f:
38:ea:4c:c5:ac:dd:09:5a:6a:6a:f0:8d:ea:ff:77:c2:42:e9:
31:77:a7:47:45:59:eb:8b:d9:02:da:1b:df:55:67:ec:a8:68:
7f:d9:00:33:67:fc:90:ba:66:e1:24:40:d1:76:01:cc:79:0b:
08:71:08:ed:b8:09:39:3d:d4:9d:f1:11:c4:7e:a0:bf:e6:3d:
53:b6:b5:08:5e:92:11:cf:9c:91:d0:bb:b4:a3:3a:76:f0:79:
c6:8b:60:49:d6:25:00:70:85:46:e4:b6:83:e4:bd:61:eb:d8:
a9:be:1f:8e:4d:81:53:80:d0:39:f2:01:1a:b0:fd:e0:05:13:
58:1b:36:e4:73:18:6f:c0:f4:d6:82:f5:69:80:3f:69:13:e0:
60:02:0f:4f:dc:58:ae:3c:b6:e9:e8:8c:84:f8:53:0f:af:37:
33:4c:18:35:e3:81:f1:79:4f:a3:06:87:fe:d7:f7:ee:5b:d7:
b3:54:db:c7:05:ca:da:b3:49:e7:7c:cf:ea:80:8e:77:38:06:
4b:45:3d:5b:42:c3:8f:d7:14:17:fe:4f:a6:c4:d8:8e:5d:f5:
2c:d1:75:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ715hIOvxADVVJKjLiCDo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNzNkMWMwMDJlZWFhZmRhMWI3NTg4ZGQ1NjIxYzRlNmZj
OTlmYWUwHhcNMjUwNDI4MTAwMDQ4WhcNMjUwNDI5MTAwMDQ4WjAzMTEwLwYDVQQD
Eyg4OWFiNjNmNzYxNTUxNmVlY2ExNjYwNTQwYmI0ZTZkZWFmMDkxODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikgt31eiMgvaUwoW8Vg0K1JYK/2n
Do5/QvJvrdENFU/4uVE37653V7LbFE8qhX2y5bVzJW7Mc3G7sAWbf7zhphOXrXcd
USNJeH1vcbxUQRbKKUKay/J1wIToYGE6LArF9c3/1GGeDLDJvn3O4wKgjqkhkkKO
TrnzHckHj+aNsl5LWydcPIYP/zok0/X9q5trc/qOV3F9+WqnjOn1GQc/CwneIOVj
WyMZ/pO3QRjjyDDG46D3wgQyY6H+sW0B/iFsFyWSLVvYQ1qLHvKkXvYdnZ/Rpwn0
PThQeTu3CT3NROsq4EjLK6smXtqVuJ0wUXUcHT2Yi+/BtXpGkwpmqY4d4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImrY/dhVRbuyhZgVAu05t6vCRgEMB8GA1UdIwQY
MBaAFMFz0cAC7qr9obdYjdViHE5vyZ+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jNGZlMDQtMDYzYi00N2I3LWJlYmIt
YjJjMGE0ZTdhZmMzLzEvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jNGZlMDQtMDYzYi00N2I3LWJlYmItYjJjMGE0ZTdhZmMz
LzEvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwoz+RHy
X8H0aFqHjY1HPQ/Vi/yz1ObaJV2Jx8mq0kkwIzCfOOpMxazdCVpqavCN6v93wkLp
MXenR0VZ64vZAtob31Vn7Khof9kAM2f8kLpm4SRA0XYBzHkLCHEI7bgJOT3UnfER
xH6gv+Y9U7a1CF6SEc+ckdC7tKM6dvB5xotgSdYlAHCFRuS2g+S9YevYqb4fjk2B
U4DQOfIBGrD94AUTWBs25HMYb8D01oL1aYA/aRPgYAIPT9xYrjy26eiMhPhTD683
M0wYNeOB8XlPowaH/tf37lvXs1TbxwXK2rNJ53zP6oCOdzgGS0U9W0LDj9cUF/5P
psTYjl31LNF1Pg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:58 2025 by rpki-client