Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: qH8IuLxYPlSIkth9cRgc75j9J83qXkQimxu2rUNffjM=
Subject key identifier: E9:FE:5F:4D:C3:E1:5B:E9:35:4E:78:C2:24:2F:26:A3:96:14:73:8D
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 019619FEFCACE3E2D7F4526B746F9D9E395B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 1024
Signing time: Wed 09 Apr 2025 10:01:03 +0000
Manifest this update: Wed 09 Apr 2025 10:01:03 +0000
Manifest next update: Thu 10 Apr 2025 10:01:03 +0000
Files and hashes: 1: NvAPv-l4cBrLTji2iXv6GfI0gZg.roa (hash: BBOKh5jKHRu7y0Xpwzm9dX9BwYJwDLK16Nc2ib6JODU=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: OWwFuiBI+vZFbDJX82m43ptD1BrOjCSuKxNp3+uYzoo=)
3: aKrvV8xBl8sCHisqRYKu_FgNh7A.roa (hash: VWMQXxpmmku9lvmyl+DypVcQSIrG+GnuaLnSwfYRfGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:fe:fc:ac:e3:e2:d7:f4:52:6b:74:6f:9d:9e:39:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Apr 9 10:01:03 2025 GMT
Not After : Apr 10 10:01:03 2025 GMT
Subject: CN=e9fe5f4dc3e15be9354e78c2242f26a39614738d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:91:4f:fe:1c:94:28:e7:e9:a2:4f:81:1f:
78:9e:2a:9a:05:0c:e2:e6:62:1d:6a:c6:4e:8a:a7:
91:72:fd:ec:b9:38:24:4e:8c:e3:7a:d2:17:63:a1:
99:83:3a:69:e0:73:8d:c8:a4:8f:12:1c:06:cf:0b:
7c:ee:bb:a8:5e:e8:3c:9b:4b:ad:2a:fc:1e:00:43:
dd:ee:7e:3e:c8:f9:e2:c7:7d:85:d1:c7:b0:62:cf:
c8:ed:f2:82:b1:b1:ec:18:92:92:9b:ad:40:b0:b6:
53:d8:5c:b4:c4:d2:98:91:56:e3:79:14:17:c0:b0:
9b:82:47:6f:6b:63:29:a6:63:e0:0b:86:40:f9:db:
a7:17:b0:12:66:f7:a7:cd:84:95:c6:84:b2:b1:cc:
10:41:28:83:be:70:7d:1f:44:93:87:3c:1c:55:ec:
db:0d:0f:32:2e:99:4e:bd:48:4d:08:05:6d:87:64:
91:75:72:c1:8d:f3:55:4c:a5:2b:c3:7a:66:c1:2d:
37:35:da:2b:93:08:22:51:be:5a:6e:38:f5:c5:f0:
14:2e:40:f9:ff:ef:ae:51:28:41:a4:76:5e:a6:bd:
98:0a:1b:41:3c:4f:a1:ec:1f:bf:30:f4:fe:c7:de:
16:bc:c5:11:05:24:7e:27:be:7c:82:14:ed:bd:8c:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FE:5F:4D:C3:E1:5B:E9:35:4E:78:C2:24:2F:26:A3:96:14:73:8D
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fe:8a:10:9d:1e:6a:47:f3:0a:0a:7a:7f:06:06:04:c9:94:
42:1e:06:73:61:38:d9:fa:21:c4:76:7a:64:d9:3d:a1:80:d0:
2b:61:bd:c7:5e:32:8b:4e:02:19:dd:9c:43:f1:3f:54:f5:b3:
0f:e4:9b:d2:46:aa:8a:b8:87:1c:d0:ab:5d:c3:97:7d:d3:32:
a9:44:5d:45:27:72:02:e8:b1:94:7a:82:ad:e9:8f:c3:0b:eb:
f4:94:01:49:2d:3f:26:0b:f5:8a:a0:28:22:3f:3b:7d:e1:bc:
65:86:2e:99:d3:df:69:30:2c:24:d9:61:7e:3f:5f:46:1a:9b:
99:68:3a:3c:09:0e:31:b0:8c:3b:6a:38:7b:60:77:43:13:4d:
2e:9f:26:bd:25:5c:ce:fb:96:12:cc:db:1d:40:89:71:a0:d9:
0f:40:f8:8b:d5:b9:27:f7:0d:8b:2e:ba:9d:f6:4a:47:40:9d:
44:b1:b3:35:19:93:7b:66:da:be:3a:0c:88:87:52:71:22:0b:
59:ce:22:a6:13:f1:4f:0b:c7:e3:b3:fb:b2:51:ed:b2:ca:64:
65:89:b8:21:f8:2b:23:28:25:4b:ec:8b:c5:45:b5:6e:41:f7:
8e:93:eb:f6:3f:ca:0f:a5:56:73:86:74:23:e2:56:b9:c5:81:
c6:1e:9f:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYZ/vys4+LX9FJrdG+dnjlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMGFkNDY1NWFlZDA3YzQ3NDE2ZTdhOTQ1NjA0Nzk0ZWJh
ODk3YWMwHhcNMjUwNDA5MTAwMTAzWhcNMjUwNDEwMTAwMTAzWjAzMTEwLwYDVQQD
EyhlOWZlNWY0ZGMzZTE1YmU5MzU0ZTc4YzIyNDJmMjZhMzk2MTQ3MzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKGRT/4clCjn6aJPgR94niqaBQzi
5mIdasZOiqeRcv3suTgkTozjetIXY6GZgzpp4HONyKSPEhwGzwt87ruoXug8m0ut
KvweAEPd7n4+yPnix32F0cewYs/I7fKCsbHsGJKSm61AsLZT2Fy0xNKYkVbjeRQX
wLCbgkdva2MppmPgC4ZA+dunF7ASZvenzYSVxoSyscwQQSiDvnB9H0SThzwcVezb
DQ8yLplOvUhNCAVth2SRdXLBjfNVTKUrw3pmwS03NdorkwgiUb5abjj1xfAULkD5
/++uUShBpHZepr2YChtBPE+h7B+/MPT+x94WvMURBSR+J758ghTtvYwPSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOn+X03D4VvpNU54wiQvJqOWFHONMB8GA1UdIwQY
MBaAFFoK1GVa7QfEdBbnqUVgR5TrqJesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dyVVpWcnRCOFIwRnVlcFJXQkhsT3VvbDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80MWI3MmEtMGZjMC00YTBmLWFjYmYt
ZWZjMzFlMDhlN2NkLzEvV2dyVVpWcnRCOFIwRnVlcFJXQkhsT3VvbDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy80MWI3MmEtMGZjMC00YTBmLWFjYmYtZWZjMzFlMDhlN2Nk
LzEvV2dyVVpWcnRCOFIwRnVlcFJXQkhsT3VvbDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhf6KEJ0e
akfzCgp6fwYGBMmUQh4Gc2E42fohxHZ6ZNk9oYDQK2G9x14yi04CGd2cQ/E/VPWz
D+Sb0kaqiriHHNCrXcOXfdMyqURdRSdyAuixlHqCremPwwvr9JQBSS0/Jgv1iqAo
Ij87feG8ZYYumdPfaTAsJNlhfj9fRhqbmWg6PAkOMbCMO2o4e2B3QxNNLp8mvSVc
zvuWEszbHUCJcaDZD0D4i9W5J/cNiy66nfZKR0CdRLGzNRmTe2bavjoMiIdScSIL
Wc4iphPxTwvH47P7slHtsspkZYm4IfgrIyglS+yLxUW1bkH3jpPr9j/KD6VWc4Z0
I+JWucWBxh6fPw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:20:54 2025 by rpki-client