Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
File: w7iL5VE_Guckk1Ivpml-_zNpKuA.mft (raw, json)
Hash identifier: T7w+IRVF83J90jnw3nzRB1BEovR3Nr/Wd8aqUpEldRA=
Subject key identifier: 86:9B:78:1C:99:04:08:38:10:EF:CB:DD:2D:2C:D5:B4:0E:6D:37:FF
Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
Certificate issuer: /CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Certificate serial: 019655DCA77335A2836870C68132A760963C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
Manifest number: 07A0
Signing time: Mon 21 Apr 2025 01:00:46 +0000
Manifest this update: Mon 21 Apr 2025 01:00:46 +0000
Manifest next update: Tue 22 Apr 2025 01:00:46 +0000
Files and hashes: 1: NrQlovA-ENvWm52W_XszKtgFuEM.roa (hash: CEb3/pIl0j5Q+iEy5jGadkT0Uot6DJeWgORkKHAYYJw=)
2: w7iL5VE_Guckk1Ivpml-_zNpKuA.crl (hash: MpA8MPnmk8ps3JehjfjMzWMU4PCbDtzC23Jhf/+//Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:a7:73:35:a2:83:68:70:c6:81:32:a7:60:96:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Validity
Not Before: Apr 21 01:00:46 2025 GMT
Not After : Apr 22 01:00:46 2025 GMT
Subject: CN=869b781c9904083810efcbdd2d2cd5b40e6d37ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:35:1e:95:36:5c:90:2b:af:d9:3a:bb:9c:
ab:80:bf:15:a0:5d:3f:e9:aa:26:e9:47:e7:1c:7f:
5e:a9:40:83:9e:db:be:4b:32:12:67:d2:4a:74:81:
80:69:fa:16:4b:5f:21:57:3e:dc:6f:4e:f5:c9:99:
6e:5f:9f:c1:d4:05:c8:49:91:60:b3:b2:80:d5:ae:
26:0c:5d:c0:fc:77:72:f6:4e:15:da:cb:31:d0:98:
3c:5f:20:97:13:ce:d7:df:27:5c:a3:eb:4a:76:44:
3c:da:7d:40:79:18:ee:18:79:f1:80:65:ad:dd:c2:
c2:63:a1:53:35:ba:51:d8:8d:11:0f:52:c6:d6:a0:
1d:52:27:e6:e2:af:d9:59:6c:e3:79:4c:54:5a:5f:
67:a2:b5:6d:5f:30:9e:4c:8e:26:f6:05:5a:4a:2f:
ef:fd:36:28:fb:d1:c8:4a:93:d4:07:9b:e2:cc:6d:
24:2c:af:0e:b8:3e:99:bb:65:ee:e2:74:da:23:8a:
e8:f7:68:18:7d:e3:f7:e1:e1:23:04:82:b0:54:b7:
ec:c9:7e:ae:05:48:78:49:fd:55:7c:9a:ae:e9:07:
5b:17:3a:10:54:94:5d:96:9c:d9:bb:be:12:8e:67:
18:6e:b2:6a:e8:de:13:f9:48:71:55:d4:75:ed:2a:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9B:78:1C:99:04:08:38:10:EF:CB:DD:2D:2C:D5:B4:0E:6D:37:FF
X509v3 Authority Key Identifier:
keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3f:f0:24:cc:2b:b4:c1:e8:bd:d4:6b:a2:56:a7:b1:39:6c:
bd:0b:b9:92:dd:66:20:c0:0c:bc:4b:27:09:22:b3:75:ae:79:
32:2a:fd:6f:25:c9:0b:fb:2e:0b:d5:c7:43:02:e4:ee:6a:c2:
fa:f6:80:ae:73:75:34:18:ba:c2:02:e0:13:9b:76:5b:ec:b1:
e1:c0:ad:4a:41:aa:43:2e:f9:96:db:a5:75:2a:33:03:8c:56:
ec:c9:0d:be:57:a5:2c:bf:4b:9a:f3:57:15:22:e5:c6:a4:28:
4a:e3:7e:60:3f:e1:af:c8:ac:b4:f1:ec:0d:3f:61:f3:d3:e0:
b0:38:ae:13:91:53:b1:e0:15:97:f9:c7:5b:92:37:bf:8c:ed:
ae:a9:21:c8:2c:61:38:4f:96:f7:bb:08:cc:5b:f0:59:18:93:
a6:f3:37:2b:c2:47:e8:12:b2:f5:84:51:56:08:2a:40:8a:d1:
aa:77:9c:eb:7b:ef:f9:9e:9a:b3:3f:58:0c:0d:94:aa:95:c2:
83:d4:62:57:72:40:bf:73:76:31:bc:da:66:95:9f:7f:21:0f:
8b:e3:f0:c0:9c:ef:9e:e7:13:da:95:d8:34:8a:c1:f3:0c:7a:
d4:d0:2a:39:c2:15:ac:19:8b:4c:9a:c3:89:60:8a:5e:ba:63:
b1:9d:fd:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3KdzNaKDaHDGgTKnYJY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjg4YmU1NTEzZjFhZTcyNDkzNTIyZmE2Njk3ZWZmMzM2
OTJhZTAwHhcNMjUwNDIxMDEwMDQ2WhcNMjUwNDIyMDEwMDQ2WjAzMTEwLwYDVQQD
Eyg4NjliNzgxYzk5MDQwODM4MTBlZmNiZGQyZDJjZDViNDBlNmQzN2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrs1HpU2XJArr9k6u5yrgL8VoF0/
6aom6UfnHH9eqUCDntu+SzISZ9JKdIGAafoWS18hVz7cb071yZluX5/B1AXISZFg
s7KA1a4mDF3A/Hdy9k4V2ssx0Jg8XyCXE87X3ydco+tKdkQ82n1AeRjuGHnxgGWt
3cLCY6FTNbpR2I0RD1LG1qAdUifm4q/ZWWzjeUxUWl9norVtXzCeTI4m9gVaSi/v
/TYo+9HISpPUB5vizG0kLK8OuD6Zu2Xu4nTaI4ro92gYfeP34eEjBIKwVLfsyX6u
BUh4Sf1VfJqu6QdbFzoQVJRdlpzZu74SjmcYbrJq6N4T+UhxVdR17Srv3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIabeByZBAg4EO/L3S0s1bQObTf/MB8GA1UdIwQY
MBaAFMO4i+VRPxrnJJNSL6Zpfv8zaSrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgt
MGU0N2VkZTMwNWIzLzEvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgtMGU0N2VkZTMwNWIz
LzEvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhD/wJMwr
tMHovdRrolansTlsvQu5kt1mIMAMvEsnCSKzda55Mir9byXJC/suC9XHQwLk7mrC
+vaArnN1NBi6wgLgE5t2W+yx4cCtSkGqQy75ltuldSozA4xW7MkNvlelLL9LmvNX
FSLlxqQoSuN+YD/hr8istPHsDT9h89PgsDiuE5FTseAVl/nHW5I3v4ztrqkhyCxh
OE+W97sIzFvwWRiTpvM3K8JH6BKy9YRRVggqQIrRqnec63vv+Z6asz9YDA2UqpXC
g9RiV3JAv3N2MbzaZpWffyEPi+PwwJzvnucT2pXYNIrB8wx61NAqOcIVrBmLTJrD
iWCKXrpjsZ39RQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:33 2025 by rpki-client