Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
File: Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json)
Hash identifier: sl7An10f7qoNyWyLNybELFwJ7EY8adBQho+zuB28Oiw=
Subject key identifier: C7:9C:1D:00:E0:DD:FE:2A:C6:C3:9F:0E:7E:F9:65:81:77:7B:28:84
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Certificate issuer: /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial: 0196760C93EEBCDE86370040682FA3973250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
Manifest number: 1377
Signing time: Sun 27 Apr 2025 07:00:57 +0000
Manifest this update: Sun 27 Apr 2025 07:00:57 +0000
Manifest next update: Mon 28 Apr 2025 07:00:57 +0000
Files and hashes: 1: 9QUsRCAhmLwTzTZMFA3QwgGkN-o.roa (hash: BYkBRt5u6iYa0bSjaJlYJJH3gyP0JFZinNO6dVWDgNQ=)
2: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: 1iFH4d+5pHQhYn1QGtafbUdgJuyJialnfitknGUvVKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:93:ee:bc:de:86:37:00:40:68:2f:a3:97:32:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Validity
Not Before: Apr 27 07:00:57 2025 GMT
Not After : Apr 28 07:00:57 2025 GMT
Subject: CN=c79c1d00e0ddfe2ac6c39f0e7ef96581777b2884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:c2:08:53:f1:ae:32:81:2a:c3:fd:89:6f:
a9:03:df:37:4c:06:1f:e8:29:b5:05:95:80:ad:c6:
8a:46:83:78:a9:0e:46:19:52:86:11:6f:e4:12:9a:
e7:b7:81:c8:f8:8d:46:c7:ed:90:42:b3:e6:e6:68:
56:36:b0:4b:16:4b:c1:de:7e:d4:06:4f:01:f8:66:
bb:1c:a9:a8:5c:26:ba:62:49:99:24:c0:17:e8:86:
ca:a7:8c:04:b2:2c:9f:b6:83:a9:a3:9f:e3:f8:39:
ba:88:2a:a8:98:3b:a0:dc:cb:61:f0:3d:70:2b:8e:
12:7f:20:be:70:81:fe:55:4e:90:59:88:0f:e0:eb:
85:da:78:99:d9:ab:5b:3f:8f:2b:1c:db:aa:01:ea:
fd:d1:57:bc:09:e2:d6:c0:27:d0:dd:4d:89:b1:e9:
dd:af:32:44:d5:2f:df:a6:ef:63:06:dd:b2:4d:b4:
79:ce:33:f0:b1:05:89:2c:28:25:ea:34:07:4c:c8:
64:d9:c7:23:2d:14:65:50:a9:33:10:08:14:43:cd:
9c:f5:b6:a8:0e:7d:b3:df:49:f6:22:37:30:f2:34:
cb:a9:f6:7d:33:c3:29:04:df:e7:c4:07:44:91:ef:
b1:cc:45:0e:0b:c5:8d:18:cb:37:50:26:ed:69:13:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9C:1D:00:E0:DD:FE:2A:C6:C3:9F:0E:7E:F9:65:81:77:7B:28:84
X509v3 Authority Key Identifier:
keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f2:46:06:ab:a3:3c:94:19:26:4d:98:cd:12:73:29:3a:f0:
2d:d4:b9:c4:e7:68:28:8a:f9:90:ba:ac:2b:6a:b1:de:8e:1f:
15:1a:fc:ee:e3:2e:72:9c:db:80:7b:a0:6b:d7:35:67:3e:23:
4e:bf:0a:10:b1:ea:38:71:d7:00:55:6c:73:d5:65:f2:e0:89:
08:29:f7:fb:15:b6:8f:fe:f3:12:92:65:14:c0:70:fc:4f:76:
5d:99:58:f6:d3:8a:03:98:61:47:ca:cc:ff:35:61:68:19:ed:
3b:60:af:f1:e8:c2:d4:34:7e:cc:fb:69:86:ab:81:f4:87:11:
b2:83:aa:3f:35:07:37:21:74:42:c9:7a:bd:a0:3d:72:b6:b8:
21:6a:e6:2d:4c:02:1b:dd:b0:c3:06:1b:a9:3d:08:80:22:02:
74:a5:a3:ef:74:02:2a:e0:25:1b:b1:7c:51:0e:24:43:de:80:
ce:4c:90:35:66:25:80:fa:20:91:78:04:e4:35:34:99:d1:db:
53:af:77:0a:60:14:6b:c1:20:a9:2b:2a:6b:a1:ac:10:51:b0:
07:4d:10:0a:e2:9a:7c:4c:65:c8:4f:3b:38:f2:51:ae:4a:76:
e5:6f:1d:73:1b:09:c9:31:2c:e4:3d:7d:da:e1:82:f2:ae:cc:
a7:d9:31:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DJPuvN6GNwBAaC+jlzJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOGQzODkyNzg0ODVlZGQ1MGQzMmNmNWNhODRjZTI3Mjhj
MDhjYzYwHhcNMjUwNDI3MDcwMDU3WhcNMjUwNDI4MDcwMDU3WjAzMTEwLwYDVQQD
EyhjNzljMWQwMGUwZGRmZTJhYzZjMzlmMGU3ZWY5NjU4MTc3N2IyODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DnCCFPxrjKBKsP9iW+pA983TAYf
6Cm1BZWArcaKRoN4qQ5GGVKGEW/kEprnt4HI+I1Gx+2QQrPm5mhWNrBLFkvB3n7U
Bk8B+Ga7HKmoXCa6YkmZJMAX6IbKp4wEsiyftoOpo5/j+Dm6iCqomDug3Mth8D1w
K44SfyC+cIH+VU6QWYgP4OuF2niZ2atbP48rHNuqAer90Ve8CeLWwCfQ3U2Jsend
rzJE1S/fpu9jBt2yTbR5zjPwsQWJLCgl6jQHTMhk2ccjLRRlUKkzEAgUQ82c9bao
Dn2z30n2Ijcw8jTLqfZ9M8MpBN/nxAdEke+xzEUOC8WNGMs3UCbtaRNLIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMecHQDg3f4qxsOfDn75ZYF3eyiEMB8GA1UdIwQY
MBaAFFqNOJJ4SF7dUNMs9cqEzicowIzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82MDFkNmYtYjMxYS00OTJlLThlZjAt
NTJiY2NiMDZhZjNjLzEvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82MDFkNmYtYjMxYS00OTJlLThlZjAtNTJiY2NiMDZhZjNj
LzEvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvJGBquj
PJQZJk2YzRJzKTrwLdS5xOdoKIr5kLqsK2qx3o4fFRr87uMucpzbgHuga9c1Zz4j
Tr8KELHqOHHXAFVsc9Vl8uCJCCn3+xW2j/7zEpJlFMBw/E92XZlY9tOKA5hhR8rM
/zVhaBntO2Cv8ejC1DR+zPtphquB9IcRsoOqPzUHNyF0Qsl6vaA9cra4IWrmLUwC
G92wwwYbqT0IgCICdKWj73QCKuAlG7F8UQ4kQ96AzkyQNWYlgPogkXgE5DU0mdHb
U693CmAUa8EgqSsqa6GsEFGwB00QCuKafExlyE87OPJRrkp25W8dcxsJyTEs5D19
2uGC8q7Mp9kx3Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:30 2025 by rpki-client