Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier: 4nFjMt9SMqEVjAKLG+D6NpHGlxPv5UK9PuvJ5SYHrQw=
Subject key identifier: 93:70:92:D2:E3:5C:FF:CB:FE:17:00:53:8E:8B:E4:A5:2E:01:A2:5D
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 01964E22FA4EA527EFC9E8ED7A0E1BB001C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number: 0FF2
Signing time: Sat 19 Apr 2025 13:00:37 +0000
Manifest this update: Sat 19 Apr 2025 13:00:37 +0000
Manifest next update: Sun 20 Apr 2025 13:00:37 +0000
Files and hashes: 1: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: Pe2kn3aIJGIzyaq8pMII2Jq75XTqAuEWFelH6d5rOok=)
2: aq4ogcfzZpEnM-qzTShzrKkmLVI.roa (hash: lrZqdOLgogubh9kYu+yXTtvdVJVSGrLVk+ZXNc+U3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:22:fa:4e:a5:27:ef:c9:e8:ed:7a:0e:1b:b0:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: Apr 19 13:00:37 2025 GMT
Not After : Apr 20 13:00:37 2025 GMT
Subject: CN=937092d2e35cffcbfe1700538e8be4a52e01a25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f5:7a:78:44:ba:41:88:86:0a:22:4e:c2:64:
95:4d:8b:3b:e4:02:f8:da:a3:74:9d:3f:1f:3a:15:
36:43:0b:61:23:a3:1f:be:9f:a1:27:e4:6a:e8:ca:
6e:66:ac:8b:9c:d1:45:d3:cd:d6:be:be:ae:d8:97:
d7:87:89:0c:fe:1c:56:02:ed:03:1c:1b:ec:58:84:
43:34:d5:92:e9:21:a1:a6:b7:05:80:36:65:70:35:
ad:e9:db:4d:20:c4:a9:31:9a:4a:1f:cf:d1:78:bb:
5e:ef:28:36:ec:b3:ea:e1:20:f1:d2:0d:68:5a:f0:
e7:9b:db:51:c8:0b:f7:ac:99:42:71:1a:7e:89:2a:
98:41:d5:e0:6c:ad:2c:36:3a:c1:08:67:6c:9c:47:
a0:62:83:cd:d2:90:df:d6:29:90:4b:ef:ef:4d:7a:
bc:0a:dc:f0:38:ae:3b:5c:16:f1:ff:73:d3:92:2e:
aa:7b:4d:5a:d7:f8:9a:64:c5:17:2d:e9:91:81:8d:
29:ec:36:f5:f6:22:8a:7a:cc:08:8a:11:a2:f1:15:
c3:85:a3:e9:e5:15:5a:f6:81:27:5c:4d:ae:be:68:
2a:8c:25:df:f6:7b:f7:97:30:7b:4a:e5:7e:d8:bd:
aa:ec:97:9e:b0:17:cd:5e:f1:9b:a9:07:79:30:5a:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:70:92:D2:E3:5C:FF:CB:FE:17:00:53:8E:8B:E4:A5:2E:01:A2:5D
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6b:50:4b:48:61:8b:d0:4e:39:f1:a6:a7:f2:df:da:bf:ca:
76:83:95:ae:90:bc:06:8c:23:19:f8:38:ad:94:17:28:cd:0c:
c6:58:e6:cb:23:5a:6a:f2:86:d9:e7:1c:a2:12:a2:63:37:8a:
a8:f1:6b:93:2f:5e:3a:66:93:6c:f9:52:65:18:22:0b:be:c8:
99:97:c0:94:d2:7d:16:3e:93:3b:fc:8e:5e:f7:3b:b0:14:30:
1d:55:60:2b:f4:2e:73:9c:1b:a3:b8:80:3b:d1:44:13:d2:7a:
c7:02:e6:50:34:5d:57:9c:0c:70:d0:57:65:24:6c:42:72:08:
0c:8a:62:80:da:64:cf:c5:50:84:07:25:8e:92:6a:d5:00:f9:
d7:d8:a3:a4:21:a9:5f:aa:5e:85:c2:c1:92:12:88:3f:d6:b5:
5b:fc:6c:34:a7:37:b2:90:84:27:bd:3b:28:36:68:0b:2b:2c:
ef:61:0a:03:35:64:24:52:0a:a9:18:b6:96:76:13:36:39:ab:
34:b0:79:10:30:e3:c2:07:b5:d6:1c:02:ab:2f:70:eb:19:b1:
9b:b7:2c:23:14:2e:d4:cc:a1:e0:45:12:dd:30:68:d9:23:b6:
69:dd:f3:e4:f0:88:32:c5:6d:37:79:83:ec:d1:00:67:e1:cc:
c2:26:95:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOIvpOpSfvyejteg4bsAHAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNjExMDJlZDRkNjZkY2Q5NTJkZTAxMzA0ZTBhZmUxMzg0
ZDAwYmYwHhcNMjUwNDE5MTMwMDM3WhcNMjUwNDIwMTMwMDM3WjAzMTEwLwYDVQQD
Eyg5MzcwOTJkMmUzNWNmZmNiZmUxNzAwNTM4ZThiZTRhNTJlMDFhMjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/V6eES6QYiGCiJOwmSVTYs75AL4
2qN0nT8fOhU2QwthI6Mfvp+hJ+Rq6MpuZqyLnNFF083Wvr6u2JfXh4kM/hxWAu0D
HBvsWIRDNNWS6SGhprcFgDZlcDWt6dtNIMSpMZpKH8/ReLte7yg27LPq4SDx0g1o
WvDnm9tRyAv3rJlCcRp+iSqYQdXgbK0sNjrBCGdsnEegYoPN0pDf1imQS+/vTXq8
CtzwOK47XBbx/3PTki6qe01a1/iaZMUXLemRgY0p7Db19iKKeswIihGi8RXDhaPp
5RVa9oEnXE2uvmgqjCXf9nv3lzB7SuV+2L2q7JeesBfNXvGbqQd5MFrU6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNwktLjXP/L/hcAU46L5KUuAaJdMB8GA1UdIwQY
MBaAFFphEC7U1m3NlS3gEwTgr+E4TQC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYt
Mjg4YmQ2YjllMDkyLzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYtMjg4YmQ2YjllMDky
LzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGtQS0hh
i9BOOfGmp/Lf2r/KdoOVrpC8BowjGfg4rZQXKM0MxljmyyNaavKG2eccohKiYzeK
qPFrky9eOmaTbPlSZRgiC77ImZfAlNJ9Fj6TO/yOXvc7sBQwHVVgK/Quc5wbo7iA
O9FEE9J6xwLmUDRdV5wMcNBXZSRsQnIIDIpigNpkz8VQhAcljpJq1QD519ijpCGp
X6pehcLBkhKIP9a1W/xsNKc3spCEJ707KDZoCyss72EKAzVkJFIKqRi2lnYTNjmr
NLB5EDDjwge11hwCqy9w6xmxm7csIxQu1Myh4EUS3TBo2SO2ad3z5PCIMsVtN3mD
7NEAZ+HMwiaVTA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:04:20 2025 by rpki-client