Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File: wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier: tqxQHK9Ibf3gW0MtEVFyVaXZ5+bz7yibr1r/M1Ya1QQ=
Subject key identifier: A3:61:67:9D:CA:93:B3:9C:43:89:E2:18:69:21:9D:C9:65:9F:DC:FB
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 019655007CB50ED14E86E904D7F4C5651ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number: 150D
Signing time: Sun 20 Apr 2025 21:00:17 +0000
Manifest this update: Sun 20 Apr 2025 21:00:17 +0000
Manifest next update: Mon 21 Apr 2025 21:00:17 +0000
Files and hashes: 1: 2oAVyU2seJGTQFfvnoLEW0LxBMw.roa (hash: ZURqts9j5VKp8XJN1Pz3dvi3R29PhjPq43deEFPHUGM=)
2: AT0dJX8We-n1OQnzvfJggA9FrB4.roa (hash: 9UAeHkptLtx/0ySMZUXtLEVDmGoLUOk5U9+no/9RFDk=)
3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: MN1UaVFrbgtLHQiyNpWCRG4duzvEucORqu7hG7TWBtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:7c:b5:0e:d1:4e:86:e9:04:d7:f4:c5:65:1e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Apr 20 21:00:17 2025 GMT
Not After : Apr 21 21:00:17 2025 GMT
Subject: CN=a361679dca93b39c4389e21869219dc9659fdcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:57:9e:01:94:ff:da:05:30:bf:68:1a:91:
ea:bd:14:d9:f2:18:17:70:20:ff:92:9e:52:dd:39:
7a:86:1d:6d:bb:51:d9:1f:43:7e:70:91:80:c2:60:
e7:62:05:c3:63:3f:b6:1c:8e:3c:c1:ba:b8:da:59:
aa:73:9f:fd:4b:8c:10:c7:15:04:21:61:7b:c5:83:
07:6a:38:ce:ab:a7:83:39:f9:b4:48:0d:ea:2e:6b:
1a:af:65:d2:18:ff:24:d5:35:68:bc:93:e2:46:65:
cf:ad:0d:4d:2b:68:aa:7f:57:51:d5:7a:15:cc:3f:
6f:98:b7:76:50:c3:25:7c:a2:2b:a5:19:79:35:75:
9e:76:4d:11:cc:52:f2:b5:e0:b6:0e:42:01:02:16:
76:d3:43:f9:88:4b:a0:02:85:32:b3:ec:54:1b:1a:
2c:20:d2:2f:a5:69:08:67:7c:61:cb:e7:a4:3f:4a:
a4:1d:3a:45:84:56:2b:7c:1a:bd:45:f7:2c:0b:99:
1c:e7:60:87:ec:09:29:50:15:83:b6:c3:0f:04:62:
7d:45:c7:03:70:16:26:5a:4c:4b:2b:8a:35:a8:75:
ee:f3:36:1e:d7:af:7f:13:f2:d3:23:1f:d9:1d:00:
77:8a:e8:4f:bc:c6:a4:ab:bb:02:b4:3f:0b:b5:0c:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:61:67:9D:CA:93:B3:9C:43:89:E2:18:69:21:9D:C9:65:9F:DC:FB
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c8:9d:44:46:88:6f:c4:05:b4:be:da:54:93:af:8e:de:1e:
7a:c9:51:db:05:f2:3e:11:ee:92:f1:b4:64:b5:2b:2f:36:49:
f6:ec:64:14:07:b2:91:78:6e:d7:b0:d8:5d:34:9e:ed:84:ec:
b9:4d:67:aa:aa:07:69:12:74:a8:f1:ff:bf:0c:0b:42:c4:d6:
ab:30:e5:16:7a:44:e7:94:2e:32:e9:9d:0e:ab:d0:04:e6:84:
fd:e5:10:fa:99:cc:d1:51:53:cc:bf:cf:68:b7:46:99:c2:03:
24:3a:8e:fb:bb:ef:46:0c:04:3c:48:97:e8:59:88:28:c6:75:
4e:af:ec:f0:11:6c:da:75:35:bb:7d:97:1b:c5:8f:d8:69:da:
b1:60:c7:cd:bf:a8:a9:83:55:b6:8b:fb:b1:fe:bf:64:2a:6e:
04:1a:48:b0:55:97:d4:c4:64:0f:8b:e4:26:35:8c:80:71:0b:
95:7b:ba:9b:98:dc:7d:58:5b:69:56:7a:03:21:d3:5f:b3:ae:
54:42:9d:ea:03:3e:3a:08:92:fb:9b:f7:68:4a:a8:4f:db:23:
bc:5e:af:6f:10:ec:92:6c:76:d9:90:01:96:37:66:f4:a0:37:
75:ea:fa:bd:75:67:5d:07:42:a4:9d:0a:6f:1e:65:b0:e8:5c:
76:c3:67:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVAHy1DtFOhukE1/TFZR7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDJhMjM0ZTIyNGJmODc5OTZmMmYwZGY1NTllYWQ4ODJm
OWU2NTEwHhcNMjUwNDIwMjEwMDE3WhcNMjUwNDIxMjEwMDE3WjAzMTEwLwYDVQQD
EyhhMzYxNjc5ZGNhOTNiMzljNDM4OWUyMTg2OTIxOWRjOTY1OWZkY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza5XngGU/9oFML9oGpHqvRTZ8hgX
cCD/kp5S3Tl6hh1tu1HZH0N+cJGAwmDnYgXDYz+2HI48wbq42lmqc5/9S4wQxxUE
IWF7xYMHajjOq6eDOfm0SA3qLmsar2XSGP8k1TVovJPiRmXPrQ1NK2iqf1dR1XoV
zD9vmLd2UMMlfKIrpRl5NXWedk0RzFLyteC2DkIBAhZ200P5iEugAoUys+xUGxos
INIvpWkIZ3xhy+ekP0qkHTpFhFYrfBq9RfcsC5kc52CH7AkpUBWDtsMPBGJ9RccD
cBYmWkxLK4o1qHXu8zYe169/E/LTIx/ZHQB3iuhPvMakq7sCtD8LtQwXiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNhZ53Kk7OcQ4niGGkhnclln9z7MB8GA1UdIwQY
MBaAFMLSojTiJL+HmW8vDfVZ6tiC+eZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RLaU5PSWt2NGVaYnk4TjlWbnEySUw1NWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kMWVlNGItZTg4YS00ZTQxLWE2MTYt
NGIyNDhkYTZjOTZjLzEvd3RLaU5PSWt2NGVaYnk4TjlWbnEySUw1NWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kMWVlNGItZTg4YS00ZTQxLWE2MTYtNGIyNDhkYTZjOTZj
LzEvd3RLaU5PSWt2NGVaYnk4TjlWbnEySUw1NWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcidREaI
b8QFtL7aVJOvjt4eeslR2wXyPhHukvG0ZLUrLzZJ9uxkFAeykXhu17DYXTSe7YTs
uU1nqqoHaRJ0qPH/vwwLQsTWqzDlFnpE55QuMumdDqvQBOaE/eUQ+pnM0VFTzL/P
aLdGmcIDJDqO+7vvRgwEPEiX6FmIKMZ1Tq/s8BFs2nU1u32XG8WP2GnasWDHzb+o
qYNVtov7sf6/ZCpuBBpIsFWX1MRkD4vkJjWMgHELlXu6m5jcfVhbaVZ6AyHTX7Ou
VEKd6gM+OgiS+5v3aEqoT9sjvF6vbxDskmx22ZABljdm9KA3der6vXVnXQdCpJ0K
bx5lsOhcdsNnpw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:13 2025 by rpki-client