Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
File: wpN7lGGj0mbpNYNOUEehgiODYsg.mft (raw, json)
Hash identifier: w88MJpbbKjqCrEHrraa0RxrGP1rGGTF9svSi2ahlG34=
Subject key identifier: 34:1A:B6:74:03:50:E0:1F:84:8D:29:AF:49:09:A9:95:1D:C9:08:FC
Authority key identifier: C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
Certificate issuer: /CN=c2937b9461a3d266e935834e5047a182238362c8
Certificate serial: 01967FEB31D9294A9B150E6A4D6B8CE59511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 05:00:42 +0000
Manifest this update: Tue 29 Apr 2025 05:00:42 +0000
Manifest next update: Wed 30 Apr 2025 05:00:42 +0000
Files and hashes: 1: kDT6d1olq2g9PhBud1lpevtgwMM.roa (hash: GVT4b+j1f9W7ipFuYf2UE8OPchdOvhrHWTWGtiol0Gg=)
2: wpN7lGGj0mbpNYNOUEehgiODYsg.crl (hash: wiIrcdlJiEtYKxnP0boqlWRGcXNQUcGQVQzcV1Cpbxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:31:d9:29:4a:9b:15:0e:6a:4d:6b:8c:e5:95:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2937b9461a3d266e935834e5047a182238362c8
Validity
Not Before: Apr 29 05:00:42 2025 GMT
Not After : Apr 30 05:00:42 2025 GMT
Subject: CN=341ab6740350e01f848d29af4909a9951dc908fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:75:c2:e9:ba:61:ee:35:a2:d1:ed:de:f7:
28:3b:78:2a:ed:e4:fd:1b:36:dd:e5:02:38:8d:bd:
9a:7f:19:39:23:ab:34:cd:7f:8a:04:ae:ed:b2:c6:
a8:e6:1e:e3:84:4d:53:55:c1:49:3f:5e:d7:e6:2e:
6d:9f:ce:5e:8d:10:26:64:13:db:ee:cb:8d:8c:18:
8d:5f:16:51:a1:d7:1d:82:98:96:41:40:74:b4:81:
af:40:14:26:50:7b:38:b0:76:ec:c2:13:59:ec:e8:
0e:8e:02:82:67:a5:02:7d:02:c0:77:04:4a:07:94:
23:c2:eb:24:27:f2:a2:59:14:ca:21:29:ab:03:03:
cd:a9:60:70:1d:bc:85:cb:91:05:db:e7:56:42:96:
e6:ba:e5:4a:7d:eb:d3:85:ef:8e:22:ce:8a:36:cb:
7e:df:57:8f:70:f0:67:47:5e:9d:d8:af:90:42:14:
2b:b2:76:de:97:b4:48:58:87:7e:d9:f4:3e:e3:d8:
50:4f:e1:6a:2d:ea:ce:27:5a:b7:d0:b7:6b:5b:96:
a5:d1:66:bb:b6:7b:af:cb:a8:8d:11:a5:40:8b:4f:
05:00:e6:9d:c1:38:bd:d2:a7:b6:11:2d:a0:e2:9b:
2f:78:2f:8c:53:55:a1:e3:d0:0c:36:86:5f:03:54:
45:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1A:B6:74:03:50:E0:1F:84:8D:29:AF:49:09:A9:95:1D:C9:08:FC
X509v3 Authority Key Identifier:
keyid:C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0e:7f:e7:3e:a8:25:76:df:d0:a7:3f:53:3a:80:fb:f5:79:
59:b9:1f:9c:f9:f5:a8:5b:42:8e:a9:ca:ac:37:59:f4:3b:4d:
10:e9:2f:b3:f2:88:91:f4:e7:2d:54:6c:83:90:c5:b4:74:05:
3b:4c:5b:4f:50:11:bc:27:02:e9:1a:cf:80:30:d2:40:da:74:
6f:bf:9e:95:ca:83:2b:6f:9e:5f:9a:8f:6c:66:f0:67:56:48:
82:ff:fb:f7:f3:93:9c:b8:fc:7a:a1:17:ed:9a:5f:21:f8:11:
ef:c4:ab:6b:67:e5:ae:e2:19:d3:ca:75:90:26:80:9a:e7:9f:
3f:72:cf:1c:2e:b9:ca:e4:3c:a2:94:a9:7a:2f:3b:de:b1:f6:
dd:f6:88:9a:a0:5c:01:79:06:51:80:76:74:d6:26:bb:79:de:
0d:24:88:51:25:c0:2a:ef:b5:d8:4a:06:8c:81:37:74:12:3a:
c1:76:b0:68:12:81:66:c6:f0:36:49:c1:83:d3:a5:5a:19:a3:
81:1b:45:bf:48:f2:38:b6:87:35:c5:c4:ab:a8:f3:50:3e:72:
52:20:33:d0:32:43:c2:38:c4:22:39:4f:78:41:9b:1c:dc:70:
90:2e:74:49:a8:ac:6e:d7:e7:2c:ad:fb:4e:45:53:1e:13:cd:
a1:18:18:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/6zHZKUqbFQ5qTWuM5ZURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTM3Yjk0NjFhM2QyNjZlOTM1ODM0ZTUwNDdhMTgyMjM4
MzYyYzgwHhcNMjUwNDI5MDUwMDQyWhcNMjUwNDMwMDUwMDQyWjAzMTEwLwYDVQQD
EygzNDFhYjY3NDAzNTBlMDFmODQ4ZDI5YWY0OTA5YTk5NTFkYzkwOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+V1wum6Ye41otHt3vcoO3gq7eT9
Gzbd5QI4jb2afxk5I6s0zX+KBK7tssao5h7jhE1TVcFJP17X5i5tn85ejRAmZBPb
7suNjBiNXxZRodcdgpiWQUB0tIGvQBQmUHs4sHbswhNZ7OgOjgKCZ6UCfQLAdwRK
B5QjwuskJ/KiWRTKISmrAwPNqWBwHbyFy5EF2+dWQpbmuuVKfevThe+OIs6KNst+
31ePcPBnR16d2K+QQhQrsnbel7RIWId+2fQ+49hQT+FqLerOJ1q30LdrW5al0Wa7
tnuvy6iNEaVAi08FAOadwTi90qe2ES2g4psveC+MU1Wh49AMNoZfA1RFlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQatnQDUOAfhI0pr0kJqZUdyQj8MB8GA1UdIwQY
MBaAFMKTe5Rho9Jm6TWDTlBHoYIjg2LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZGVkMmUtMzk3My00YmNmLTk1NjIt
Mzc3NDg4MWU3ZTFlLzEvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZGVkMmUtMzk3My00YmNmLTk1NjItMzc3NDg4MWU3ZTFl
LzEvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYg5/5z6o
JXbf0Kc/UzqA+/V5WbkfnPn1qFtCjqnKrDdZ9DtNEOkvs/KIkfTnLVRsg5DFtHQF
O0xbT1ARvCcC6RrPgDDSQNp0b7+elcqDK2+eX5qPbGbwZ1ZIgv/79/OTnLj8eqEX
7ZpfIfgR78Sra2flruIZ08p1kCaAmuefP3LPHC65yuQ8opSpei873rH23faImqBc
AXkGUYB2dNYmu3neDSSIUSXAKu+12EoGjIE3dBI6wXawaBKBZsbwNknBg9OlWhmj
gRtFv0jyOLaHNcXEq6jzUD5yUiAz0DJDwjjEIjlPeEGbHNxwkC50SaisbtfnLK37
TkVTHhPNoRgYag==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:08:14 2025 by rpki-client