Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
File: w-cV2UkPUh42oFb5mb-1bg8h_IY.mft (raw, json)
Hash identifier: FBfwc/AVj//129gBtq98rUJrx4Z8Wag5eBC5jTNj+k0=
Subject key identifier: 23:26:D5:44:27:13:32:65:55:B9:E0:28:08:5B:3E:E9:49:55:24:34
Authority key identifier: C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86
Certificate issuer: /CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
Certificate serial: 01967AC52487179350F36549CCE79A796E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 05:01:02 +0000
Manifest this update: Mon 28 Apr 2025 05:01:02 +0000
Manifest next update: Tue 29 Apr 2025 05:01:02 +0000
Files and hashes: 1: 93cxze7c4JAF56bmAgg1bcYIt74.roa (hash: iEbAMOM9WFYV3hM+y+EZ0P2K3mOE4Q2PoJ4nGQhO9MQ=)
2: w-cV2UkPUh42oFb5mb-1bg8h_IY.crl (hash: aKxh1kftLAY2Ki2mIws1j8ribs2swEd2FxXIafbk+2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:24:87:17:93:50:f3:65:49:cc:e7:9a:79:6e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
Validity
Not Before: Apr 28 05:01:02 2025 GMT
Not After : Apr 29 05:01:02 2025 GMT
Subject: CN=2326d5442713326555b9e028085b3ee949552434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:5b:6a:3a:6d:df:e1:c8:5e:59:8f:92:50:
90:53:96:c7:66:2e:20:80:17:eb:5c:47:d8:9f:73:
c4:54:e4:74:50:4f:a4:c9:5d:f6:f5:97:97:58:ad:
0b:bd:1f:06:5a:09:7a:f5:11:42:9f:40:ef:14:6d:
44:f9:48:da:dc:01:40:e1:67:e5:fa:87:b6:ef:9e:
65:90:d9:b6:82:6c:8e:e1:18:61:39:08:49:02:ba:
fe:81:cc:0a:4c:e4:12:32:28:03:f8:0c:3d:4b:97:
c8:53:0b:51:24:cd:fa:69:7d:ac:5a:1a:1a:24:25:
7a:f9:1d:53:af:04:a5:81:85:2d:a9:ea:a0:95:32:
b5:83:a8:79:13:c7:9d:55:d8:c0:b6:08:86:a0:cf:
00:41:fb:5f:d7:ac:21:11:97:45:e1:2f:1f:01:21:
d8:00:17:c0:68:74:c9:d8:3e:aa:2b:e6:21:53:cf:
29:48:f5:52:b9:f0:98:c5:35:70:5f:f0:53:64:97:
f4:bb:40:00:9e:d8:be:87:34:ad:4d:50:1d:dc:d5:
8f:7d:27:a6:75:09:5a:e2:69:17:ed:ff:cf:e3:61:
e1:a4:5b:3e:65:4c:f1:31:de:6e:c5:b7:fa:62:70:
86:67:73:23:a2:d5:7c:c7:a8:56:b6:d5:56:ac:51:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:26:D5:44:27:13:32:65:55:B9:E0:28:08:5B:3E:E9:49:55:24:34
X509v3 Authority Key Identifier:
keyid:C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e3:91:92:8b:90:13:56:3d:eb:99:2e:55:bf:a3:82:c3:47:
c2:3e:d6:02:3a:c4:13:9b:99:fb:31:3b:17:9f:e1:60:dd:db:
ec:c3:aa:84:ce:b4:98:a9:78:1d:65:93:92:91:76:1f:0e:de:
57:3b:bc:02:68:fc:79:e8:de:f9:93:21:1b:2c:81:44:0a:3d:
5d:45:c9:88:f8:1e:8e:70:e1:67:9e:0d:ba:bd:15:9a:d8:61:
90:73:ab:31:99:b6:59:05:ec:bd:2a:63:67:b3:97:c3:c7:f3:
4d:ac:e8:56:d6:70:55:f3:9c:8d:22:2f:fe:55:b3:31:3b:25:
61:35:80:a0:26:cb:1a:5a:2b:e8:35:88:cc:04:9e:27:3f:18:
ee:4b:aa:dd:6c:9c:f7:da:d6:d6:b6:43:10:8d:13:92:36:cc:
d8:c5:09:c6:92:57:a9:8e:ec:f9:40:fd:ff:c2:6c:42:c1:06:
e0:a1:d6:c1:ef:24:f7:63:c6:69:6c:d0:4f:01:7b:af:15:1f:
fb:cb:a1:e4:25:c0:01:90:86:f9:9a:a8:d5:ac:88:6c:85:b3:
2d:bf:e3:83:b1:a3:6d:ac:c2:2a:92:f3:b4:59:b3:a4:7f:19:
fb:ef:23:01:19:2c:24:e8:59:fc:9c:de:cd:f4:8b:52:6c:bf:
e6:90:89:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xSSHF5NQ82VJzOeaeW5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZTcxNWQ5NDkwZjUyMWUzNmEwNTZmOTk5YmZiNTZlMGYy
MWZjODYwHhcNMjUwNDI4MDUwMTAyWhcNMjUwNDI5MDUwMTAyWjAzMTEwLwYDVQQD
EygyMzI2ZDU0NDI3MTMzMjY1NTViOWUwMjgwODViM2VlOTQ5NTUyNDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknRbajpt3+HIXlmPklCQU5bHZi4g
gBfrXEfYn3PEVOR0UE+kyV329ZeXWK0LvR8GWgl69RFCn0DvFG1E+Uja3AFA4Wfl
+oe2755lkNm2gmyO4RhhOQhJArr+gcwKTOQSMigD+Aw9S5fIUwtRJM36aX2sWhoa
JCV6+R1TrwSlgYUtqeqglTK1g6h5E8edVdjAtgiGoM8AQftf16whEZdF4S8fASHY
ABfAaHTJ2D6qK+YhU88pSPVSufCYxTVwX/BTZJf0u0AAnti+hzStTVAd3NWPfSem
dQla4mkX7f/P42HhpFs+ZUzxMd5uxbf6YnCGZ3MjotV8x6hWttVWrFFlUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMm1UQnEzJlVbngKAhbPulJVSQ0MB8GA1UdIwQY
MBaAFMPnFdlJD1IeNqBW+Zm/tW4PIfyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdy1jVjJVa1BVaDQyb0ZiNW1iLTFiZzhoX0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS81MmIyNzktNGUwMi00NDBmLTgzYzAt
YjkzNjAyNGEyNTRhLzEvdy1jVjJVa1BVaDQyb0ZiNW1iLTFiZzhoX0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS81MmIyNzktNGUwMi00NDBmLTgzYzAtYjkzNjAyNGEyNTRh
LzEvdy1jVjJVa1BVaDQyb0ZiNW1iLTFiZzhoX0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUeORkouQ
E1Y965kuVb+jgsNHwj7WAjrEE5uZ+zE7F5/hYN3b7MOqhM60mKl4HWWTkpF2Hw7e
Vzu8Amj8eeje+ZMhGyyBRAo9XUXJiPgejnDhZ54Nur0VmthhkHOrMZm2WQXsvSpj
Z7OXw8fzTazoVtZwVfOcjSIv/lWzMTslYTWAoCbLGlor6DWIzASeJz8Y7kuq3Wyc
99rW1rZDEI0TkjbM2MUJxpJXqY7s+UD9/8JsQsEG4KHWwe8k92PGaWzQTwF7rxUf
+8uh5CXAAZCG+Zqo1ayIbIWzLb/jg7GjbazCKpLztFmzpH8Z++8jARksJOhZ/Jze
zfSLUmy/5pCJiQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:35:28 2025 by rpki-client