Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
File: WOAvLKgauAKTlTAVbpYxsY9RWEA.mft (raw, json)
Hash identifier: TqflmVeSYOhYf0iEcKWLueflTd0m+3wtBSklpxw4m/M=
Subject key identifier: 39:89:43:64:10:22:93:08:22:53:1B:EA:3B:48:C9:94:AB:53:29:3F
Authority key identifier: 58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40
Certificate issuer: /CN=58e02f2ca81ab802939530156e9631b18f515840
Certificate serial: 01965BA80303982F258B7005B9BE32E87D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
Manifest number: 32
Signing time: Tue 22 Apr 2025 04:00:59 +0000
Manifest this update: Tue 22 Apr 2025 04:00:59 +0000
Manifest next update: Wed 23 Apr 2025 04:00:59 +0000
Files and hashes: 1: WOAvLKgauAKTlTAVbpYxsY9RWEA.crl (hash: vzJkZA0qDkeuE5zFA9e2g6lZ3r4hmCyb2YBYt8ZgsN8=)
2: wKFImUWqJAZ63I73CUY6kU8vkUQ.roa (hash: 6TgnMHnPVKyV4LoYC0bcNEIls6efji/PtDzWQK1yR8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a8:03:03:98:2f:25:8b:70:05:b9:be:32:e8:7d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e02f2ca81ab802939530156e9631b18f515840
Validity
Not Before: Apr 22 04:00:59 2025 GMT
Not After : Apr 23 04:00:59 2025 GMT
Subject: CN=398943641022930822531bea3b48c994ab53293f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:da:40:12:13:c1:00:63:1a:6c:b7:d0:21:
b4:96:7b:cd:28:8e:0b:49:e6:cf:03:78:7f:35:3f:
c1:4e:55:eb:ef:05:13:9c:3d:ad:d1:f9:e4:92:79:
67:19:d7:0f:84:b6:d5:55:d6:db:2f:00:8b:a2:54:
cf:6e:46:14:bf:f6:04:de:b9:68:72:76:c5:71:d1:
ad:35:52:1d:66:91:b8:5a:4f:b3:5e:38:4a:76:33:
8d:63:d5:eb:10:83:33:66:f3:62:78:3f:37:24:f8:
38:bb:c2:a2:36:1c:7e:c9:b6:de:db:a6:73:ea:96:
fc:2b:7d:f2:9e:1e:e9:89:b0:0a:24:63:b4:02:77:
93:4b:4c:22:7e:d2:cf:7a:15:f9:36:a0:a8:82:58:
5d:04:9d:4b:1a:9e:ba:b0:28:39:a0:93:74:20:39:
49:15:7a:3b:df:5d:b2:e6:91:0e:e8:0b:21:41:e9:
0a:87:3e:72:c3:20:5a:fe:1d:f9:a5:7f:83:b0:ea:
79:b1:e6:2b:c2:45:83:74:e0:a0:81:bd:f6:da:5e:
a9:17:b7:f6:6f:da:07:c0:82:4c:64:df:4b:00:e2:
f2:9e:94:9f:02:e9:33:11:63:f8:4f:0c:70:14:84:
16:b8:ea:f7:be:c6:33:97:0e:4f:de:d5:08:88:fc:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:89:43:64:10:22:93:08:22:53:1B:EA:3B:48:C9:94:AB:53:29:3F
X509v3 Authority Key Identifier:
keyid:58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:11:83:59:4e:65:f3:be:d3:70:f9:f8:b1:56:cb:2d:61:6e:
c8:79:af:11:e3:fb:58:2a:ce:67:ba:98:13:b3:36:2a:6d:03:
f8:da:fb:a8:69:df:50:b5:e7:48:4c:9f:fd:95:10:da:99:de:
cb:68:8f:0a:c9:4d:58:76:c0:ae:87:0b:0d:36:6c:b1:c9:0a:
46:1f:ff:91:39:74:ce:12:0a:d1:81:1b:0c:be:b7:11:fa:cc:
28:a8:a7:e3:74:d1:45:05:2b:95:0a:68:bc:c1:45:73:de:84:
b4:5b:39:21:77:19:89:59:70:ec:0a:06:dd:5a:f1:0e:40:55:
a6:09:ca:f5:29:d4:fe:f7:4a:93:9b:cc:6d:8a:fc:f1:b2:bd:
5d:a1:e5:0a:4f:e7:07:c5:cc:da:89:50:be:c7:c7:5f:94:4a:
53:c6:9e:44:27:2b:f3:13:91:0c:2d:3f:11:7d:f8:84:53:b4:
e9:97:cd:db:c5:31:df:ed:39:37:77:a6:40:fb:9f:ec:fd:ad:
40:3a:35:69:cc:8b:86:bb:50:08:0b:cb:5d:34:68:ff:b2:c7:
7a:88:20:d1:8b:ff:45:c2:63:b4:65:ca:f0:46:cb:fd:aa:24:
85:69:e5:20:19:1a:50:91:a9:47:64:e4:9d:99:e2:ba:f8:ac:
c9:76:ba:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbqAMDmC8li3AFub4y6H0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZTAyZjJjYTgxYWI4MDI5Mzk1MzAxNTZlOTYzMWIxOGY1
MTU4NDAwHhcNMjUwNDIyMDQwMDU5WhcNMjUwNDIzMDQwMDU5WjAzMTEwLwYDVQQD
EygzOTg5NDM2NDEwMjI5MzA4MjI1MzFiZWEzYjQ4Yzk5NGFiNTMyOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLHaQBITwQBjGmy30CG0lnvNKI4L
SebPA3h/NT/BTlXr7wUTnD2t0fnkknlnGdcPhLbVVdbbLwCLolTPbkYUv/YE3rlo
cnbFcdGtNVIdZpG4Wk+zXjhKdjONY9XrEIMzZvNieD83JPg4u8KiNhx+ybbe26Zz
6pb8K33ynh7pibAKJGO0AneTS0wiftLPehX5NqCoglhdBJ1LGp66sCg5oJN0IDlJ
FXo7312y5pEO6AshQekKhz5ywyBa/h35pX+DsOp5seYrwkWDdOCggb322l6pF7f2
b9oHwIJMZN9LAOLynpSfAukzEWP4TwxwFIQWuOr3vsYzlw5P3tUIiPzyaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmJQ2QQIpMIIlMb6jtIyZSrUyk/MB8GA1UdIwQY
MBaAFFjgLyyoGrgCk5UwFW6WMbGPUVhAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85Zjg3MjgtMzM1ZS00ZjdiLWExZGMt
ZDQ4ZDEzYTRkZTM4LzEvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85Zjg3MjgtMzM1ZS00ZjdiLWExZGMtZDQ4ZDEzYTRkZTM4
LzEvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxGDWU5l
877TcPn4sVbLLWFuyHmvEeP7WCrOZ7qYE7M2Km0D+Nr7qGnfULXnSEyf/ZUQ2pne
y2iPCslNWHbArocLDTZssckKRh//kTl0zhIK0YEbDL63EfrMKKin43TRRQUrlQpo
vMFFc96EtFs5IXcZiVlw7AoG3VrxDkBVpgnK9SnU/vdKk5vMbYr88bK9XaHlCk/n
B8XM2olQvsfHX5RKU8aeRCcr8xORDC0/EX34hFO06ZfN28Ux3+05N3emQPuf7P2t
QDo1acyLhrtQCAvLXTRo/7LHeogg0Yv/RcJjtGXK8EbL/aokhWnlIBkaUJGpR2Tk
nZniuvisyXa62A==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:42 2025 by rpki-client