Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
File: WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json)
Hash identifier: 59jGgGAvJlmW/XXWKbFyOIRda1EPbwxIGT4/dNijYjY=
Subject key identifier: 62:90:9B:84:1E:26:30:AF:7F:02:69:F9:74:A0:F5:E1:34:DE:90:5E
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial: 01965C833BDABBFB1BEFE018A881320735C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
Manifest number: 0CA1
Signing time: Tue 22 Apr 2025 08:00:26 +0000
Manifest this update: Tue 22 Apr 2025 08:00:26 +0000
Manifest next update: Wed 23 Apr 2025 08:00:26 +0000
Files and hashes: 1: Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa (hash: 6OpDkd4to1irtWv8vpsm2jxisQw9dR70exo6gT09Ccs=)
2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: BREJh1f67idvMylfBbD/VYbStWH5Y52tPSLsGClwdrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:3b:da:bb:fb:1b:ef:e0:18:a8:81:32:07:35:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Validity
Not Before: Apr 22 08:00:26 2025 GMT
Not After : Apr 23 08:00:26 2025 GMT
Subject: CN=62909b841e2630af7f0269f974a0f5e134de905e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:00:bf:06:c5:d9:f5:2b:97:c4:ff:1f:b6:
4d:9b:90:2b:b0:7d:2e:bd:ce:a2:cc:34:2d:35:ad:
f5:83:0b:76:91:41:3e:e9:f2:8f:0f:9e:47:4c:23:
6a:a4:b4:7e:59:7c:42:c2:7e:78:60:c1:55:95:7c:
d1:31:f4:88:87:e5:17:d8:d9:3b:c4:fd:b5:22:0d:
f9:5e:09:21:f8:71:4f:87:f2:da:0b:8c:34:17:b8:
c2:ef:1d:6c:ab:dd:f9:4a:51:be:0d:64:6c:e5:48:
02:e0:23:e4:d1:29:0c:b3:61:c9:0a:a3:41:63:77:
5a:1b:0c:27:f0:c6:d0:d3:80:90:d6:d8:2e:3e:6c:
12:f4:8b:2e:10:b5:8e:43:e5:54:52:66:40:97:4f:
a8:98:ff:85:60:05:e9:47:61:b5:ac:0f:5e:ff:e6:
a8:a8:3a:f1:d9:23:3a:6e:4d:4b:eb:ad:4e:6a:48:
fd:4a:74:45:1b:60:16:91:cd:76:eb:8e:fd:ed:52:
e0:24:96:d7:ae:79:d3:6e:dc:78:bb:10:05:3d:9c:
65:57:81:ab:c7:4b:87:78:44:d4:9e:74:78:ec:e8:
b8:da:4a:50:95:98:5e:74:69:63:88:f7:f6:ad:d0:
4d:19:76:5f:bc:6e:aa:1e:d5:ac:88:a0:53:0b:f2:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:90:9B:84:1E:26:30:AF:7F:02:69:F9:74:A0:F5:E1:34:DE:90:5E
X509v3 Authority Key Identifier:
keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ae:92:3c:58:f8:77:3f:5f:6b:b5:15:48:9d:8a:b6:ef:23:
17:38:23:09:2d:6e:c6:ea:aa:71:ca:ed:ac:a6:84:2d:fc:b4:
f4:af:59:5d:5c:3c:e5:a9:88:46:94:22:16:61:a3:70:7a:a3:
8f:21:2e:27:e3:88:19:92:eb:9a:9f:e3:41:5f:60:cc:e1:bc:
01:f0:c3:5c:a9:1c:a5:3b:11:e8:e5:4a:b8:ff:03:c9:6f:60:
f8:73:96:1b:39:37:b7:09:3b:27:99:49:fe:13:07:73:13:f3:
39:c1:47:34:a3:4d:d5:47:d1:af:cc:49:fa:b4:cc:7f:84:40:
e8:35:90:b2:6a:77:00:12:67:b6:08:5f:ca:6e:6d:f4:e3:dc:
97:b7:7e:44:6e:8c:e9:00:8d:94:d4:e1:f2:da:ac:19:5d:d7:
00:fe:49:ea:90:08:92:98:57:a2:e3:63:e9:dc:d8:3a:88:8d:
7a:83:8c:3e:7c:91:62:d9:46:af:20:8a:10:f3:71:24:0b:3a:
59:4f:f0:9f:75:1e:e7:90:5a:2d:5b:4d:9a:56:2c:7f:fb:98:
46:f3:33:30:ec:5b:32:ad:0b:78:f4:9c:89:05:55:fc:d3:fb:
48:22:49:0e:d1:db:bb:67:0a:48:3a:a4:71:8c:c0:b9:8f:e9:
a5:e1:e8:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcgzvau/sb7+AYqIEyBzXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNGM0Zjk2YWE1YTAyY2FkYTgzZDRiODhkNDllNmE3M2Fi
ZDI1ZjAwHhcNMjUwNDIyMDgwMDI2WhcNMjUwNDIzMDgwMDI2WjAzMTEwLwYDVQQD
Eyg2MjkwOWI4NDFlMjYzMGFmN2YwMjY5Zjk3NGEwZjVlMTM0ZGU5MDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v8AvwbF2fUrl8T/H7ZNm5ArsH0u
vc6izDQtNa31gwt2kUE+6fKPD55HTCNqpLR+WXxCwn54YMFVlXzRMfSIh+UX2Nk7
xP21Ig35Xgkh+HFPh/LaC4w0F7jC7x1sq935SlG+DWRs5UgC4CPk0SkMs2HJCqNB
Y3daGwwn8MbQ04CQ1tguPmwS9IsuELWOQ+VUUmZAl0+omP+FYAXpR2G1rA9e/+ao
qDrx2SM6bk1L661Oakj9SnRFG2AWkc1264797VLgJJbXrnnTbtx4uxAFPZxlV4Gr
x0uHeETUnnR47Oi42kpQlZhedGljiPf2rdBNGXZfvG6qHtWsiKBTC/JYgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKQm4QeJjCvfwJp+XSg9eE03pBeMB8GA1UdIwQY
MBaAFFpMT5aqWgLK2oPUuI1J5qc6vSXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMt
OGE5MjEwOTk4OWVmLzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMtOGE5MjEwOTk4OWVm
LzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVq6SPFj4
dz9fa7UVSJ2Ktu8jFzgjCS1uxuqqccrtrKaELfy09K9ZXVw85amIRpQiFmGjcHqj
jyEuJ+OIGZLrmp/jQV9gzOG8AfDDXKkcpTsR6OVKuP8DyW9g+HOWGzk3twk7J5lJ
/hMHcxPzOcFHNKNN1UfRr8xJ+rTMf4RA6DWQsmp3ABJntghfym5t9OPcl7d+RG6M
6QCNlNTh8tqsGV3XAP5J6pAIkphXouNj6dzYOoiNeoOMPnyRYtlGryCKEPNxJAs6
WU/wn3Ue55BaLVtNmlYsf/uYRvMzMOxbMq0LePSciQVV/NP7SCJJDtHbu2cKSDqk
cYzAuY/ppeHocw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:18:31 2025 by rpki-client