Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.mft
File: WggaUqycsIVt9lY-2H04sMrKfMw.mft (raw, json)
Hash identifier: 5S+ARduah7Y5Cy0HPR5oVNONrvoXrWzjRCFSnWrTXQY=
Subject key identifier: 5D:33:8E:3D:7D:E4:0D:0F:47:DF:DC:3E:FB:93:8D:E1:30:8A:D3:A1
Authority key identifier: 5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC
Certificate issuer: /CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc
Certificate serial: 01967DC6EA7DB043652BB8D8FAFA55605F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.mft
Manifest number: 106E
Signing time: Mon 28 Apr 2025 19:01:50 +0000
Manifest this update: Mon 28 Apr 2025 19:01:50 +0000
Manifest next update: Tue 29 Apr 2025 19:01:50 +0000
Files and hashes: 1: EiR11fr6TM-xIWtB9B_S9WHDhyg.roa (hash: W7TwQaP1ljwu3y/NoaNHpEvMwxHlKGr1Z26uiUftCq0=)
2: OMxHi5JK05DSMGK7ve_zhY-IUTA.roa (hash: 35sYR6BG69zLQEok7pk/D7dgz6S6dUuxJp8Ecka7Hac=)
3: WggaUqycsIVt9lY-2H04sMrKfMw.crl (hash: SJuRXwJW/YHnzporepr93uSIMBTKk7LYPiP+hS7rloY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:ea:7d:b0:43:65:2b:b8:d8:fa:fa:55:60:5f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc
Validity
Not Before: Apr 28 19:01:50 2025 GMT
Not After : Apr 29 19:01:50 2025 GMT
Subject: CN=5d338e3d7de40d0f47dfdc3efb938de1308ad3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:11:84:44:a2:13:86:f6:d8:1b:cb:e9:23:
7c:19:63:39:30:92:7a:66:aa:20:75:95:9f:50:1b:
7e:2e:15:bf:b8:28:46:08:fc:ca:e4:33:d8:1e:23:
49:a6:e9:17:da:24:3a:ca:77:b7:4b:f8:a0:ce:ee:
ec:b5:52:31:82:fa:14:0d:a2:d9:27:1f:44:12:45:
15:cb:69:65:ca:73:ef:e7:f2:b3:2c:bf:76:90:54:
e2:f5:66:5f:2b:fa:16:3c:20:ed:ea:34:f7:51:44:
f4:65:bd:15:19:1d:be:df:ce:82:ae:de:8c:65:72:
3d:96:7f:cf:44:62:a9:8d:75:f1:3c:2a:22:ba:cd:
a4:c2:70:26:3a:84:ab:a9:76:91:56:db:89:a6:41:
02:cd:cb:c9:ca:b1:5c:57:5f:5d:53:9a:d9:2a:3f:
3b:db:a6:94:23:6a:85:ed:47:10:7a:42:9d:d3:ea:
9f:94:21:16:48:d1:b3:52:3e:78:54:6e:50:a5:8f:
93:42:14:82:e4:1f:ed:b2:e4:c5:0c:0f:0d:08:78:
53:ea:d4:ed:34:35:77:8f:e8:43:75:dc:69:ab:84:
97:2c:32:16:86:a8:20:0c:ff:f3:5a:e2:14:31:c9:
c2:47:cb:5b:3b:ba:f8:37:3d:a4:c9:e2:c7:79:fc:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:33:8E:3D:7D:E4:0D:0F:47:DF:DC:3E:FB:93:8D:E1:30:8A:D3:A1
X509v3 Authority Key Identifier:
keyid:5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1d:6e:40:9a:a6:ed:54:b0:01:37:45:39:0d:11:50:82:5a:
e2:d5:ca:de:0a:e3:a4:d3:d8:20:31:00:34:2a:70:7b:56:7e:
0d:c0:50:fb:c1:1a:d5:3d:1f:80:59:14:a7:df:0d:f1:75:c5:
48:1d:cf:95:30:a3:f0:98:14:9a:d9:d1:3e:0c:1a:d5:1b:c6:
8c:dc:60:60:7f:7e:f8:eb:a1:d5:19:1b:e1:2d:3c:e3:80:06:
78:ff:74:e3:b9:4e:81:61:00:d0:b3:34:07:93:6c:fe:24:65:
5b:47:0f:13:e2:25:33:9d:dc:81:1c:8b:ef:6b:42:bd:c0:b2:
92:ec:72:f8:99:a5:a3:a4:11:fe:52:64:87:4e:2a:c7:b0:f9:
d7:4d:27:43:71:53:f6:77:4c:57:ef:f3:02:4c:0e:50:a7:9c:
84:b1:58:a1:8c:13:a4:3a:c1:e5:11:f5:cc:8c:28:21:e5:fa:
e6:70:6c:8b:84:15:26:e9:5d:5b:e6:a9:0a:49:e6:30:af:d8:
f4:14:14:b5:10:0a:88:a2:ab:fc:66:8a:30:58:58:fe:7e:37:
79:62:61:64:b4:2e:5a:22:86:2d:30:c7:c8:37:93:81:95:e5:
2e:9c:5f:be:d0:52:3a:2f:0f:26:dd:e7:85:9f:99:75:e4:4c:
ac:24:22:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9xup9sENlK7jY+vpVYF93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMDgxYTUyYWM5Y2IwODU2ZGY2NTYzZWQ4N2QzOGIwY2Fj
YTdjY2MwHhcNMjUwNDI4MTkwMTUwWhcNMjUwNDI5MTkwMTUwWjAzMTEwLwYDVQQD
Eyg1ZDMzOGUzZDdkZTQwZDBmNDdkZmRjM2VmYjkzOGRlMTMwOGFkM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylgRhESiE4b22BvL6SN8GWM5MJJ6
ZqogdZWfUBt+LhW/uChGCPzK5DPYHiNJpukX2iQ6yne3S/igzu7stVIxgvoUDaLZ
Jx9EEkUVy2llynPv5/KzLL92kFTi9WZfK/oWPCDt6jT3UUT0Zb0VGR2+386Crt6M
ZXI9ln/PRGKpjXXxPCoius2kwnAmOoSrqXaRVtuJpkECzcvJyrFcV19dU5rZKj87
26aUI2qF7UcQekKd0+qflCEWSNGzUj54VG5QpY+TQhSC5B/tsuTFDA8NCHhT6tTt
NDV3j+hDddxpq4SXLDIWhqggDP/zWuIUMcnCR8tbO7r4Nz2kyeLHefwRPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0zjj195A0PR9/cPvuTjeEwitOhMB8GA1UdIwQY
MBaAFFoIGlKsnLCFbfZWPth9OLDKynzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dnYVVxeWNzSVZ0OWxZLTJIMDRzTXJLZk13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jNmYzMWEtN2NhNy00OGM0LTkzZmYt
YzQ4MGRhMDI2NGNhLzEvV2dnYVVxeWNzSVZ0OWxZLTJIMDRzTXJLZk13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9jNmYzMWEtN2NhNy00OGM0LTkzZmYtYzQ4MGRhMDI2NGNh
LzEvV2dnYVVxeWNzSVZ0OWxZLTJIMDRzTXJLZk13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbh1uQJqm
7VSwATdFOQ0RUIJa4tXK3grjpNPYIDEANCpwe1Z+DcBQ+8Ea1T0fgFkUp98N8XXF
SB3PlTCj8JgUmtnRPgwa1RvGjNxgYH9++Ouh1Rkb4S0844AGeP9047lOgWEA0LM0
B5Ns/iRlW0cPE+IlM53cgRyL72tCvcCykuxy+Jmlo6QR/lJkh04qx7D5100nQ3FT
9ndMV+/zAkwOUKechLFYoYwTpDrB5RH1zIwoIeX65nBsi4QVJuldW+apCknmMK/Y
9BQUtRAKiKKr/GaKMFhY/n43eWJhZLQuWiKGLTDHyDeTgZXlLpxfvtBSOi8PJt3n
hZ+ZdeRMrCQi9A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:56:56 2025 by rpki-client