Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: QnyLTkF5x7W/WL3TMRmKTnZSUq2Mtp/tPIf9YFOb/rc=
Subject key identifier: 63:44:64:1F:27:3B:24:6E:D5:54:01:30:7E:5E:CD:49:89:DE:D4:D2
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 0196729CF9253CE47D536693F9E0FB9FCFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1516
Signing time: Sat 26 Apr 2025 15:00:12 +0000
Manifest this update: Sat 26 Apr 2025 15:00:12 +0000
Manifest next update: Sun 27 Apr 2025 15:00:12 +0000
Files and hashes: 1: 9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa (hash: IAS+DSX7WNtHYk4j+RDYn0qWAwRUWPxJ+A4Wt+jMAHQ=)
2: Jue_aw4zHx1sp-mJmowMMM2tGGA.roa (hash: 0Yitoumoz1xxoSRol/a1PWMjCmZIGDa9duJ/3vMhBiw=)
3: MpJGW61wsAY2na2GoCEJeo5HvXk.roa (hash: vRlmBz0iiqrk+J7PazbAwX0O6F7JU+iRJTTbiLqVjxU=)
4: PNxKt9EExJcdff8t4PlXHS3Zp8E.roa (hash: l/sm5m0RtWP1FamD6nvtIs4Wmty8En19TqcjOBknuMY=)
5: SNph92J-Xcf8IveNNNu0MkGJVWI.roa (hash: VJRwO2aW7uM1HccqCjhKGDaLckqIJFkhu3+W4SavOHw=)
6: U8yyp-JTHsc4PzNj0KNOVG9KECs.roa (hash: XL8cza6Y6dTsPDS6Eb2/zXU0zrVRVcGlEc/rkfzZaj0=)
7: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: l88kaizqomEIJk5Pot0IPM/h0OzqTt68xhVjigOfUwI=)
8: ve4iz1Nb8DcHS9BJwN65K0mM0-E.roa (hash: KrskrDJ9DRb/ge1dc1ifB8Oiho4jbO0ADnVg8CJqCCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9c:f9:25:3c:e4:7d:53:66:93:f9:e0:fb:9f:cf:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Apr 26 15:00:12 2025 GMT
Not After : Apr 27 15:00:12 2025 GMT
Subject: CN=6344641f273b246ed55401307e5ecd4989ded4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:0f:67:a1:ac:e6:5b:28:62:c7:28:6b:bd:
84:fc:0d:72:16:92:e8:ee:b4:7d:1c:18:b9:a3:97:
36:d6:c5:49:de:6b:14:84:67:4e:6d:fd:bb:5f:25:
9c:f3:37:e4:18:57:4c:f9:5e:11:76:2c:92:b6:0c:
f9:eb:c5:88:05:89:9e:98:23:39:7b:d2:35:a4:87:
8c:3c:14:8c:0d:be:ba:d8:31:95:5d:65:ab:66:54:
64:7c:b4:c5:dc:3d:94:b3:d0:a3:9b:16:79:61:31:
bb:58:8d:d3:d7:25:e8:96:70:e6:16:2b:5a:04:36:
a9:5e:51:07:13:e2:5a:02:c7:94:e8:1f:bb:bd:fd:
1d:6c:40:70:52:21:4c:87:17:04:b8:03:c7:58:6e:
8f:ab:19:ad:81:8d:0e:de:72:9c:2a:af:a0:12:00:
5d:d3:ec:57:bf:4d:25:63:b0:91:4b:24:b4:15:2c:
e5:7c:82:d3:0b:6d:ea:73:53:04:0a:9e:5d:21:3c:
3e:8b:82:f2:be:b6:35:67:1c:4f:b9:68:81:7c:4d:
38:f5:55:ac:93:0f:e2:b0:2a:45:20:be:29:5c:5d:
e7:99:ea:5b:fa:fd:de:b5:1f:1b:ae:35:eb:61:8e:
9f:17:82:0e:c9:46:1d:22:14:83:be:45:e6:0e:4e:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:44:64:1F:27:3B:24:6E:D5:54:01:30:7E:5E:CD:49:89:DE:D4:D2
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:91:19:f9:c6:27:b6:a7:8e:ed:e6:8a:27:24:8e:76:a7:bb:
db:49:fa:4e:67:b2:fb:8c:58:01:42:78:5b:d8:95:ac:75:45:
cb:cf:fd:4a:dd:9f:d2:bf:9e:6c:c6:8e:ce:9b:f6:23:c3:0c:
bf:d7:09:fd:da:54:c3:88:52:b4:9f:75:fe:5a:0b:f4:17:5d:
b1:fa:80:1c:3f:96:ac:54:1c:8c:0d:24:36:08:8a:5a:97:2a:
a6:de:69:9f:d3:55:09:19:73:13:fa:db:43:d8:2f:41:9d:60:
06:dc:df:f6:09:7a:fc:d1:eb:b0:e3:5a:dc:5a:16:cd:7c:e0:
aa:9d:66:69:70:c1:f4:02:80:38:8c:f7:56:a5:23:7f:59:b7:
b5:63:6e:e9:f8:0e:e7:d6:d3:0a:31:f5:2a:88:b3:19:68:89:
20:00:82:7f:e3:43:ac:a9:17:13:03:2f:e5:c1:ff:9f:e2:96:
87:fc:4f:46:32:3c:72:73:de:09:a5:ba:52:c6:20:91:b8:c7:
8c:58:c1:23:b5:69:2b:00:1c:a4:c2:cd:c8:a1:9a:46:2e:c5:
dc:fd:86:9f:e4:3e:7c:92:6b:9c:f8:0e:6c:73:5f:e0:9c:bd:
fc:71:95:21:6b:1f:89:38:5d:ac:40:6f:81:42:b2:1e:ae:d2:
48:df:a8:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynPklPOR9U2aT+eD7n8//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx
M2ZiZGEwHhcNMjUwNDI2MTUwMDEyWhcNMjUwNDI3MTUwMDEyWjAzMTEwLwYDVQQD
Eyg2MzQ0NjQxZjI3M2IyNDZlZDU1NDAxMzA3ZTVlY2Q0OTg5ZGVkNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoocPZ6Gs5lsoYscoa72E/A1yFpLo
7rR9HBi5o5c21sVJ3msUhGdObf27XyWc8zfkGFdM+V4RdiyStgz568WIBYmemCM5
e9I1pIeMPBSMDb662DGVXWWrZlRkfLTF3D2Us9CjmxZ5YTG7WI3T1yXolnDmFita
BDapXlEHE+JaAseU6B+7vf0dbEBwUiFMhxcEuAPHWG6PqxmtgY0O3nKcKq+gEgBd
0+xXv00lY7CRSyS0FSzlfILTC23qc1MECp5dITw+i4LyvrY1ZxxPuWiBfE049VWs
kw/isCpFIL4pXF3nmepb+v3etR8brjXrYY6fF4IOyUYdIhSDvkXmDk46xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNEZB8nOyRu1VQBMH5ezUmJ3tTSMB8GA1UdIwQY
MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt
ZWNlZWZmOGU4NGUwLzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw
LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJEZ+cYn
tqeO7eaKJySOdqe720n6Tmey+4xYAUJ4W9iVrHVFy8/9St2f0r+ebMaOzpv2I8MM
v9cJ/dpUw4hStJ91/loL9BddsfqAHD+WrFQcjA0kNgiKWpcqpt5pn9NVCRlzE/rb
Q9gvQZ1gBtzf9gl6/NHrsONa3FoWzXzgqp1maXDB9AKAOIz3VqUjf1m3tWNu6fgO
59bTCjH1KoizGWiJIACCf+NDrKkXEwMv5cH/n+KWh/xPRjI8cnPeCaW6UsYgkbjH
jFjBI7VpKwAcpMLNyKGaRi7F3P2Gn+Q+fJJrnPgObHNf4Jy9/HGVIWsfiThdrEBv
gUKyHq7SSN+o8g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:36 2025 by rpki-client