Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File: WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier: NBYfqxlm+Eqg3qJjKpYDcdBgACpTsMn3FIiJwvn4IL4=
Subject key identifier: 80:D8:BF:16:A6:1B:4D:5D:49:76:D1:76:9B:D6:5A:6F:1B:59:BE:D2
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer: /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial: 019654C9C22243FBBF015A2A7D0D16339A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number: 03
Signing time: Sun 20 Apr 2025 20:00:30 +0000
Manifest this update: Sun 20 Apr 2025 20:00:30 +0000
Manifest next update: Mon 21 Apr 2025 20:00:30 +0000
Files and hashes: 1: 28vwddYYnn-BejsfrgsHjSgfzQ4.roa (hash: UAZDR9r94HPPd9OVOKpoGQIjU2FUXfM+rJVeuMGWG0Y=)
2: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: fU9TWgyyqARFbikF4BIRf5nxoje/3mmOvUYHgXYz/m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:c2:22:43:fb:bf:01:5a:2a:7d:0d:16:33:9a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
Validity
Not Before: Apr 20 20:00:30 2025 GMT
Not After : Apr 21 20:00:30 2025 GMT
Subject: CN=80d8bf16a61b4d5d4976d1769bd65a6f1b59bed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:41:20:71:a3:3b:c0:95:30:15:99:63:fd:57:
25:68:20:39:20:d7:70:b1:c0:09:1a:37:2d:27:0b:
a2:04:00:77:3e:e0:e1:6d:81:62:89:18:fb:d7:b3:
14:13:32:cf:98:7a:e1:bc:ca:d8:f7:6b:e8:bd:82:
45:f0:9f:92:0a:34:a7:c5:51:82:5e:06:7d:f5:c7:
62:08:b2:a3:ab:c3:90:2c:da:bb:96:1a:b2:43:54:
ce:1b:e1:06:17:6e:7d:3d:36:7f:5e:a6:99:d3:8a:
d6:77:80:3e:58:c6:9a:12:1d:42:47:19:c7:e4:b7:
0d:3e:c2:b8:df:6e:6b:c7:7b:13:da:f4:29:bc:0e:
7d:3f:73:a8:13:7f:cd:e8:a4:d2:aa:19:3d:ab:e3:
15:c4:64:1f:b0:3e:06:ec:6f:f7:24:42:5e:10:7a:
f0:5c:1a:96:8d:ad:53:48:75:4d:ea:40:ff:20:69:
48:5f:17:5b:63:68:2e:a1:21:e0:03:36:11:ac:16:
d0:51:9c:3d:2d:33:5f:aa:b6:cb:a5:00:d5:c6:0e:
74:33:76:c2:64:31:c8:96:e2:e8:52:b5:9f:f3:f1:
4e:31:49:26:1e:08:9c:a6:b7:1c:70:4f:68:90:16:
a1:70:1c:eb:1b:4a:8f:6b:92:c3:e2:da:53:06:65:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D8:BF:16:A6:1B:4D:5D:49:76:D1:76:9B:D6:5A:6F:1B:59:BE:D2
X509v3 Authority Key Identifier:
keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ce:c7:8a:a4:f9:27:2b:6e:f8:83:44:ab:ed:99:4e:0f:fe:
45:fd:7c:02:4f:84:5e:f4:bf:86:bd:00:be:d1:d2:33:4e:f1:
91:ee:8f:bb:7e:31:9c:c7:a7:7e:76:30:6d:60:22:9d:04:bd:
ca:16:8a:94:2d:f7:08:f7:0e:98:96:ac:a0:5d:b7:60:5a:20:
61:98:59:ea:e9:a1:e7:0c:89:fe:1f:a4:3c:41:cb:71:5c:4b:
49:a9:e6:92:d6:af:c2:a4:14:de:0a:0f:12:0f:88:b3:73:0f:
41:ab:01:aa:32:54:34:b1:a9:ad:6a:a7:39:4c:ab:eb:11:93:
9e:cf:9a:1e:a7:8e:0d:d4:98:56:e2:18:96:47:e5:84:42:de:
40:4f:3b:8e:cc:73:ff:42:8e:ce:89:8b:97:ae:78:f4:5e:3f:
94:f4:c7:8f:17:f5:58:d9:eb:08:f0:ba:98:9f:b5:b5:78:45:
17:5e:a7:a4:33:df:ef:f8:0f:cb:b8:db:6d:78:06:b0:97:d9:
d2:dc:61:7c:20:e0:7b:41:3d:08:f2:16:26:7f:0c:f3:0c:8b:
b6:3d:8c:05:fd:c8:52:a9:a5:b3:90:5d:ed:2f:40:bc:48:e5:
9b:51:1a:12:84:a8:6c:9c:5f:96:ff:07:b5:53:a8:e0:bf:2b:
98:bd:d7:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUycIiQ/u/AVoqfQ0WM5pJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDg5ZGMxODllMDA5MzYxYWNiMjY1NTY4MGU2NjljMGJj
NDc0NTYwHhcNMjUwNDIwMjAwMDMwWhcNMjUwNDIxMjAwMDMwWjAzMTEwLwYDVQQD
Eyg4MGQ4YmYxNmE2MWI0ZDVkNDk3NmQxNzY5YmQ2NWE2ZjFiNTliZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30EgcaM7wJUwFZlj/VclaCA5INdw
scAJGjctJwuiBAB3PuDhbYFiiRj717MUEzLPmHrhvMrY92vovYJF8J+SCjSnxVGC
XgZ99cdiCLKjq8OQLNq7lhqyQ1TOG+EGF259PTZ/XqaZ04rWd4A+WMaaEh1CRxnH
5LcNPsK4325rx3sT2vQpvA59P3OoE3/N6KTSqhk9q+MVxGQfsD4G7G/3JEJeEHrw
XBqWja1TSHVN6kD/IGlIXxdbY2guoSHgAzYRrBbQUZw9LTNfqrbLpQDVxg50M3bC
ZDHIluLoUrWf8/FOMUkmHgicprcccE9okBahcBzrG0qPa5LD4tpTBmUBOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDYvxamG01dSXbRdpvWWm8bWb7SMB8GA1UdIwQY
MBaAFFjYncGJ4Ak2GssmVWgOZpwLxHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGIt
OWRmZjViZDU0ODhhLzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGItOWRmZjViZDU0ODhh
LzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANc7HiqT5
Jytu+INEq+2ZTg/+Rf18Ak+EXvS/hr0AvtHSM07xke6Pu34xnMenfnYwbWAinQS9
yhaKlC33CPcOmJasoF23YFogYZhZ6umh5wyJ/h+kPEHLcVxLSanmktavwqQU3goP
Eg+Is3MPQasBqjJUNLGprWqnOUyr6xGTns+aHqeODdSYVuIYlkflhELeQE87jsxz
/0KOzomLl6549F4/lPTHjxf1WNnrCPC6mJ+1tXhFF16npDPf7/gPy7jbbXgGsJfZ
0txhfCDge0E9CPIWJn8M8wyLtj2MBf3IUqmls5Bd7S9AvEjlm1EaEoSobJxflv8H
tVOo4L8rmL3XFw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:46 2025 by rpki-client