Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
File: WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json)
Hash identifier: cABbXO+vH/v0F5oSmpSfGGkiGncBoGdAlANEBxeQiUk=
Subject key identifier: 11:1E:E9:B4:22:07:6E:01:00:70:55:0E:C4:AB:DF:45:C4:AE:56:04
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial: 0196545C7DBA777A849214749214B50F68FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
Manifest number: 0C1D
Signing time: Sun 20 Apr 2025 18:01:09 +0000
Manifest this update: Sun 20 Apr 2025 18:01:09 +0000
Manifest next update: Mon 21 Apr 2025 18:01:09 +0000
Files and hashes: 1: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: qYpOGz3rfUqSF8wUbt6o6tCo4A6wWz4BhzdOjJAYx5M=)
2: hNIAp98aMKo8_sMHQg1HRKY3DlY.roa (hash: rldqTVSbz4XdzrBIUsjcfeUfYNq78azu2krskuL3dgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:7d:ba:77:7a:84:92:14:74:92:14:b5:0f:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Validity
Not Before: Apr 20 18:01:09 2025 GMT
Not After : Apr 21 18:01:09 2025 GMT
Subject: CN=111ee9b422076e010070550ec4abdf45c4ae5604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:55:55:2b:9f:5b:01:9f:2b:c8:05:79:f4:
94:24:c9:9d:7e:df:ad:f7:e7:5c:e0:e3:dd:ee:98:
2a:36:09:9f:fb:bc:49:d1:d9:5c:4e:33:1c:76:8a:
c0:06:18:ef:3a:d3:d0:21:08:05:1b:d5:1c:c1:51:
73:89:dc:26:83:40:61:1c:f6:cd:9b:10:b3:3b:ba:
26:73:e8:69:7f:63:eb:f9:4e:5c:e7:6c:c9:59:b4:
75:9c:0a:55:11:92:26:f5:7f:4f:c9:56:bc:86:ed:
36:5d:f0:0f:7a:ff:be:c9:3e:b2:0a:4a:27:37:14:
d3:25:42:13:90:6f:00:72:39:56:4f:b7:d7:02:8f:
98:9c:d3:94:4e:61:ff:21:e6:82:a8:ef:0c:9f:10:
50:b2:7c:ad:08:50:31:f4:37:9e:6d:5c:5b:13:0d:
e6:23:37:fe:7a:89:6c:8d:f6:73:e2:3c:48:9c:5d:
3f:58:05:84:d7:7b:c1:39:1f:46:8f:4f:06:22:87:
34:f9:06:a5:df:1a:48:4a:26:d8:d6:a6:9c:77:bc:
0c:41:7c:f5:4a:4b:c9:15:36:35:b7:e1:97:1a:5d:
16:cf:02:77:78:9e:28:0b:0b:98:41:88:80:8b:dd:
d0:f8:1c:5f:cb:08:fd:36:84:24:48:28:39:50:44:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1E:E9:B4:22:07:6E:01:00:70:55:0E:C4:AB:DF:45:C4:AE:56:04
X509v3 Authority Key Identifier:
keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0d:8d:f4:cb:06:fd:9f:df:7f:c9:10:37:a7:a2:49:bf:e0:
89:06:78:fa:c0:75:94:79:5c:13:80:39:03:37:b4:bb:cf:10:
27:13:fe:bf:e5:f6:01:47:d7:63:c1:8b:b3:91:da:19:76:d0:
6b:72:29:fc:12:92:1d:1a:31:02:48:e1:ff:0c:ee:4e:ae:91:
4a:9a:69:b4:a0:92:85:ac:e2:9d:da:82:4c:94:d4:e6:21:4d:
e3:88:22:4d:56:84:40:34:41:a8:04:18:ed:d0:d0:21:99:55:
3b:ea:28:dc:86:94:34:77:ab:38:c5:d4:81:4f:61:1f:58:21:
55:c7:5d:c2:69:1c:fc:54:97:2e:e3:98:b0:a2:e5:93:e5:eb:
b0:49:43:af:39:40:15:14:87:98:ff:44:4b:14:b2:b6:6d:c7:
6c:a5:be:24:50:01:c3:3d:ab:c7:3c:b5:a1:79:10:01:ee:85:
69:65:fc:6b:0c:7a:eb:9c:59:d1:db:68:41:a2:fc:d3:f9:2a:
9e:02:22:42:16:d5:d3:7e:d6:f9:b5:10:d6:e1:00:0a:c3:4b:
bf:c2:49:f7:b2:32:e1:78:dc:35:10:ac:88:65:76:c9:70:35:
dd:a3:52:9d:c3:3d:f8:89:b5:bc:aa:b2:70:c6:57:dc:89:66:
8d:d1:49:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUXH26d3qEkhR0khS1D2j6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTI2YzJiYzUwM2E3YzY4MTI4ZDJhZTFhYjRjZDM3ZGVi
OTkzMjUwHhcNMjUwNDIwMTgwMTA5WhcNMjUwNDIxMTgwMTA5WjAzMTEwLwYDVQQD
EygxMTFlZTliNDIyMDc2ZTAxMDA3MDU1MGVjNGFiZGY0NWM0YWU1NjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppxVVSufWwGfK8gFefSUJMmdft+t
9+dc4OPd7pgqNgmf+7xJ0dlcTjMcdorABhjvOtPQIQgFG9UcwVFzidwmg0BhHPbN
mxCzO7omc+hpf2Pr+U5c52zJWbR1nApVEZIm9X9PyVa8hu02XfAPev++yT6yCkon
NxTTJUITkG8AcjlWT7fXAo+YnNOUTmH/IeaCqO8MnxBQsnytCFAx9DeebVxbEw3m
Izf+eolsjfZz4jxInF0/WAWE13vBOR9Gj08GIoc0+Qal3xpISibY1qacd7wMQXz1
SkvJFTY1t+GXGl0WzwJ3eJ4oCwuYQYiAi93Q+Bxfywj9NoQkSCg5UEQrLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEe6bQiB24BAHBVDsSr30XErlYEMB8GA1UdIwQY
MBaAFFiibCvFA6fGgSjSrhq0zTfeuZMlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80ODUzMDUtNGMyMy00ZjM3LTg1NGIt
YTlkM2VlZjA2YzY3LzEvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy80ODUzMDUtNGMyMy00ZjM3LTg1NGItYTlkM2VlZjA2YzY3
LzEvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkg2N9MsG
/Z/ff8kQN6eiSb/giQZ4+sB1lHlcE4A5Aze0u88QJxP+v+X2AUfXY8GLs5HaGXbQ
a3Ip/BKSHRoxAkjh/wzuTq6RSppptKCShazindqCTJTU5iFN44giTVaEQDRBqAQY
7dDQIZlVO+oo3IaUNHerOMXUgU9hH1ghVcddwmkc/FSXLuOYsKLlk+XrsElDrzlA
FRSHmP9ESxSytm3HbKW+JFABwz2rxzy1oXkQAe6FaWX8awx665xZ0dtoQaL80/kq
ngIiQhbV037W+bUQ1uEACsNLv8JJ97Iy4XjcNRCsiGV2yXA13aNSncM9+Im1vKqy
cMZX3IlmjdFJXw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:52 2025 by rpki-client