Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
File: WfJfgmyjg6C3pcA2eteB_id_Z88.mft (raw, json)
Hash identifier: yIqCScq50XIGFkmCJpbjy6cmfUrqqi1anUfo9LhYgew=
Subject key identifier: 87:FB:4E:84:88:E3:C3:80:DC:F2:F7:B4:AC:25:6E:7C:7A:12:83:57
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 01968210727CB533EBAD5163184C71AFEC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 15:00:37 +0000
Manifest this update: Tue 29 Apr 2025 15:00:37 +0000
Manifest next update: Wed 30 Apr 2025 15:00:37 +0000
Files and hashes: 1: WfJfgmyjg6C3pcA2eteB_id_Z88.crl (hash: 8jddzKFw0sbYvyZqGkVW8c3g/ct0GcI8zlzMyvif1xM=)
2: Wmojj5WI86DdYFq5g4bYA7Nw2eQ.roa (hash: zUiZqLG6W26ho//gZg9iQz5Nrd2fw/u+RT7b1CbWXkM=)
3: kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa (hash: GmszFqPnsf/cmc4G3XaWK6S4KreytGM4kW7CsuDRkfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:72:7c:b5:33:eb:ad:51:63:18:4c:71:af:ec:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Apr 29 15:00:37 2025 GMT
Not After : Apr 30 15:00:37 2025 GMT
Subject: CN=87fb4e8488e3c380dcf2f7b4ac256e7c7a128357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9a:2b:ee:8c:67:88:f9:72:94:5e:ae:8f:c0:
4c:8c:8e:6d:0d:d7:b4:07:33:2d:5a:f8:b9:2d:42:
5a:c0:a6:ee:a8:81:f8:40:51:91:96:a3:2c:52:bd:
44:1f:f8:b7:79:8d:8c:1e:d6:64:aa:c1:77:08:73:
1b:4e:8e:d1:00:ed:54:f7:79:5a:0b:7b:ac:0a:e2:
42:c1:d3:5f:66:13:37:e2:ff:ab:2c:71:61:b4:41:
90:08:cc:fa:82:5f:bb:f8:76:da:94:a1:70:2d:25:
4a:1a:95:42:a8:a2:f9:6c:b6:d7:a6:5c:4d:67:b2:
3f:3a:49:5a:00:c1:bd:ef:de:6d:07:4d:c1:22:d2:
db:b9:df:05:c1:cd:66:fe:9c:10:1d:a1:35:83:ac:
ad:76:9f:72:7e:56:3e:03:ce:8f:fe:f5:2a:63:b9:
0c:a4:44:b7:07:1f:50:52:13:a3:44:47:d7:76:ca:
10:03:32:3d:8b:7a:e3:14:3e:f5:e6:93:08:46:91:
5b:b3:da:de:73:4f:7a:2a:51:7e:b6:6e:1c:17:c5:
d8:fe:cf:57:41:6a:53:c3:a6:01:95:6f:aa:d4:c5:
72:1e:a8:82:81:46:81:44:b1:f2:00:e8:9e:70:78:
07:3d:d0:cb:6d:92:96:71:17:34:11:65:09:58:84:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FB:4E:84:88:E3:C3:80:DC:F2:F7:B4:AC:25:6E:7C:7A:12:83:57
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:52:62:3b:2e:3a:96:0d:34:da:53:a8:30:d6:f0:74:e8:12:
db:96:31:75:9f:48:97:66:43:40:b4:ec:95:ce:ac:7a:9a:0d:
b3:9b:e9:51:7c:c5:38:84:ec:fe:b9:8f:91:89:fe:79:b6:d1:
32:b1:ae:68:bb:e6:25:53:23:9b:6e:7e:c0:39:59:5e:23:41:
05:45:6a:d9:83:bb:23:64:ce:a9:46:6d:46:b0:c4:e7:24:54:
b8:34:d1:ad:c0:d4:3a:8d:16:aa:11:8f:e1:f5:18:bc:fe:2a:
c3:9d:f9:ca:b6:dc:3b:28:47:d0:a8:cc:26:79:ac:a3:24:30:
3a:d2:14:4b:91:cd:e3:37:c0:fc:d6:bb:76:b8:7d:75:9b:87:
66:b3:0d:17:b4:c6:4b:02:9b:6c:d4:ad:5f:33:0f:93:f0:93:
08:86:34:a0:cb:0c:16:51:49:a2:f9:9e:4b:99:e3:87:38:c8:
6c:41:d6:a4:9f:f0:04:e3:f3:9c:22:7f:e7:d4:86:62:c8:23:
0a:54:a2:e6:f9:58:60:b7:74:62:6f:35:56:e0:46:b9:3d:e5:
74:45:ce:31:71:0e:ae:6c:4f:97:03:bf:5c:75:8a:ab:57:9e:
df:91:17:ce:eb:a0:0d:98:47:0b:a1:1e:70:a0:98:d5:f5:02:
a8:68:05:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCEHJ8tTPrrVFjGExxr+yFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZjI1ZjgyNmNhMzgzYTBiN2E1YzAzNjdhZDc4MWZlMjc3
ZjY3Y2YwHhcNMjUwNDI5MTUwMDM3WhcNMjUwNDMwMTUwMDM3WjAzMTEwLwYDVQQD
Eyg4N2ZiNGU4NDg4ZTNjMzgwZGNmMmY3YjRhYzI1NmU3YzdhMTI4MzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Jor7oxniPlylF6uj8BMjI5tDde0
BzMtWvi5LUJawKbuqIH4QFGRlqMsUr1EH/i3eY2MHtZkqsF3CHMbTo7RAO1U93la
C3usCuJCwdNfZhM34v+rLHFhtEGQCMz6gl+7+HbalKFwLSVKGpVCqKL5bLbXplxN
Z7I/OklaAMG9795tB03BItLbud8Fwc1m/pwQHaE1g6ytdp9yflY+A86P/vUqY7kM
pES3Bx9QUhOjREfXdsoQAzI9i3rjFD715pMIRpFbs9rec096KlF+tm4cF8XY/s9X
QWpTw6YBlW+q1MVyHqiCgUaBRLHyAOiecHgHPdDLbZKWcRc0EWUJWITlxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf7ToSI48OA3PL3tKwlbnx6EoNXMB8GA1UdIwQY
MBaAFFnyX4Jso4Ogt6XANnrXgf4nf2fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZKZmdteWpnNkMzcGNBMmV0ZUJfaWRfWjg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wZjA2ZmItYTgyMi00NWU1LTk3M2Ut
NjQyNWU0MzgyMzMzLzEvV2ZKZmdteWpnNkMzcGNBMmV0ZUJfaWRfWjg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wZjA2ZmItYTgyMi00NWU1LTk3M2UtNjQyNWU0MzgyMzMz
LzEvV2ZKZmdteWpnNkMzcGNBMmV0ZUJfaWRfWjg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVJiOy46
lg002lOoMNbwdOgS25YxdZ9Il2ZDQLTslc6sepoNs5vpUXzFOITs/rmPkYn+ebbR
MrGuaLvmJVMjm25+wDlZXiNBBUVq2YO7I2TOqUZtRrDE5yRUuDTRrcDUOo0WqhGP
4fUYvP4qw535yrbcOyhH0KjMJnmsoyQwOtIUS5HN4zfA/Na7drh9dZuHZrMNF7TG
SwKbbNStXzMPk/CTCIY0oMsMFlFJovmeS5njhzjIbEHWpJ/wBOPznCJ/59SGYsgj
ClSi5vlYYLd0Ym81VuBGuT3ldEXOMXEOrmxPlwO/XHWKq1ee35EXzuugDZhHC6Ee
cKCY1fUCqGgFzA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:23:51 2025 by rpki-client