Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: 9YmyzQUxXmHcA67nnZAhTCf5KCAaSi9kB0P9QaBcuwc=
Subject key identifier: 15:DC:6D:DE:30:E2:12:3A:64:34:52:C6:61:FA:2D:5A:20:0A:DE:C2
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 019655A54287190836B9BB6F8BA698E8BF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 0F86
Signing time: Mon 21 Apr 2025 00:00:15 +0000
Manifest this update: Mon 21 Apr 2025 00:00:15 +0000
Manifest next update: Tue 22 Apr 2025 00:00:15 +0000
Files and hashes: 1: 7kdmagU4QbQazPFAKJN_jh3ESjI.roa (hash: UKie7fx67vGuUXCr+OJM9sf2md8+FYbcDpZ0gOMQ3f0=)
2: oMWup55nUaojGXh2IYtrkxVaIxk.roa (hash: IgvfZQFj2syunyqqYTcXoGNSKYWlXxrN3iDEjFeptJ0=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: p1mUYtET5mMEUJK9K3TqBE1yRjrtunTP493zJeRJME4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:42:87:19:08:36:b9:bb:6f:8b:a6:98:e8:bf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: Apr 21 00:00:15 2025 GMT
Not After : Apr 22 00:00:15 2025 GMT
Subject: CN=15dc6dde30e2123a643452c661fa2d5a200adec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:bb:6d:31:02:01:87:43:ae:cb:9f:7f:c6:
c0:e2:11:eb:36:66:8e:80:a2:9e:e3:11:45:54:75:
bf:38:6f:34:27:cb:9f:48:d5:d9:3e:57:92:9f:90:
ee:b2:f4:b1:21:1e:bd:a8:d7:30:14:4f:28:30:01:
6b:20:bd:46:0d:d8:19:1c:19:6e:5e:21:f9:b6:23:
68:5e:81:95:ec:82:4e:4e:9d:48:09:a3:d5:70:b7:
60:44:0b:c7:66:87:0e:64:74:1d:7d:0b:46:df:e9:
ed:4a:f1:41:b3:b1:c4:7e:54:30:47:f7:7a:c3:c3:
8d:73:58:ba:36:1b:76:61:c4:52:67:54:c5:f5:b5:
02:53:5d:92:5d:9a:8d:d4:7a:64:58:c4:b0:96:3a:
c4:50:a1:1a:fe:5e:df:1a:f6:ad:2d:73:a1:fc:33:
87:a2:f2:f5:49:4b:3a:91:48:82:a7:9e:0c:9a:db:
09:38:6d:f3:02:ae:70:ec:4c:42:5c:1f:93:f8:ff:
71:9d:ac:ad:7d:df:80:89:18:4b:ee:d5:9c:2f:6a:
d2:d7:5f:e9:3c:51:42:90:1b:0d:df:c6:2c:6b:8f:
98:d4:be:70:0c:2b:dd:5b:4a:8a:69:9d:00:bb:f8:
b4:c7:25:37:d2:e7:5a:3d:70:0a:e9:2f:6a:f1:e0:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:6D:DE:30:E2:12:3A:64:34:52:C6:61:FA:2D:5A:20:0A:DE:C2
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:57:27:bd:c7:ab:5f:67:6f:46:05:20:0f:41:c4:43:ac:e7:
da:5f:e1:50:ed:b5:4b:1f:a7:40:0f:10:65:dc:43:91:2e:cc:
b9:4a:4e:70:38:a5:d3:f4:75:94:5c:9e:c2:6e:cf:f8:ac:0b:
95:82:b0:a1:2e:da:88:53:0b:9e:9f:79:2a:2d:c9:3e:62:ab:
9d:15:b9:d2:ba:fc:99:25:2c:ca:bf:84:88:58:b4:76:4d:eb:
17:50:ea:39:67:3f:41:fb:7b:27:09:d8:0f:81:e5:34:f5:da:
a1:aa:d9:50:44:1f:74:38:56:9f:c3:b6:e6:3b:1f:8f:00:77:
2a:6a:e5:2d:2f:8a:a8:04:67:9b:79:48:d7:d0:2c:9c:14:22:
43:81:26:f0:1c:a0:fc:a7:5c:06:70:a7:c8:c2:0d:7f:21:07:
f7:b4:dc:d4:0e:1d:c2:63:a4:df:b1:ea:ed:0d:8e:29:62:88:
36:7c:43:3c:0c:60:d6:55:fb:4d:b5:21:97:25:ab:e0:bc:b4:
95:10:0d:53:51:86:58:44:1b:b6:9f:f4:69:42:ff:b8:8e:e4:
31:ac:d2:19:e8:21:2f:6a:61:ba:5b:51:bd:0a:26:34:e3:25:
ff:56:fc:1b:99:80:40:91:68:87:48:97:d5:2f:d3:8b:10:8e:
59:05:72:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpUKHGQg2ubtvi6aY6L9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMGU2NWNhZGRiZWNkNDhkMmY4Nzc4Nzk5MzExMzg0MmJk
ZmNlNWQwHhcNMjUwNDIxMDAwMDE1WhcNMjUwNDIyMDAwMDE1WjAzMTEwLwYDVQQD
EygxNWRjNmRkZTMwZTIxMjNhNjQzNDUyYzY2MWZhMmQ1YTIwMGFkZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqi7bTECAYdDrsuff8bA4hHrNmaO
gKKe4xFFVHW/OG80J8ufSNXZPleSn5DusvSxIR69qNcwFE8oMAFrIL1GDdgZHBlu
XiH5tiNoXoGV7IJOTp1ICaPVcLdgRAvHZocOZHQdfQtG3+ntSvFBs7HEflQwR/d6
w8ONc1i6Nht2YcRSZ1TF9bUCU12SXZqN1HpkWMSwljrEUKEa/l7fGvatLXOh/DOH
ovL1SUs6kUiCp54MmtsJOG3zAq5w7ExCXB+T+P9xnaytfd+AiRhL7tWcL2rS11/p
PFFCkBsN38Ysa4+Y1L5wDCvdW0qKaZ0Au/i0xyU30udaPXAK6S9q8eC9WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXcbd4w4hI6ZDRSxmH6LVogCt7CMB8GA1UdIwQY
MBaAFMIOZcrdvs1I0vh3h5kxE4Qr385dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2It
N2VmYWE0YTc0Zjk3LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2ItN2VmYWE0YTc0Zjk3
LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVcnvcer
X2dvRgUgD0HEQ6zn2l/hUO21Sx+nQA8QZdxDkS7MuUpOcDil0/R1lFyewm7P+KwL
lYKwoS7aiFMLnp95Ki3JPmKrnRW50rr8mSUsyr+EiFi0dk3rF1DqOWc/Qft7JwnY
D4HlNPXaoarZUEQfdDhWn8O25jsfjwB3KmrlLS+KqARnm3lI19AsnBQiQ4Em8Byg
/KdcBnCnyMINfyEH97Tc1A4dwmOk37Hq7Q2OKWKINnxDPAxg1lX7TbUhlyWr4Ly0
lRANU1GGWEQbtp/0aUL/uI7kMazSGeghL2phultRvQomNOMl/1b8G5mAQJFoh0iX
1S/TixCOWQVyBA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:50 2025 by rpki-client