Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
File: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft (raw, json)
Hash identifier: DNJN5oLejgRDwSUMFWS+4BQ3BNPV39/UZRyolxRhSYw=
Subject key identifier: 29:14:04:03:47:93:AC:24:8C:C0:C2:70:F7:DB:0C:A4:30:59:4C:B2
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Certificate issuer: /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial: 01960BD5F8E492C1687F2ED5FE77BA758C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
Manifest number: 14DC
Signing time: Sun 06 Apr 2025 16:01:34 +0000
Manifest this update: Sun 06 Apr 2025 16:01:34 +0000
Manifest next update: Mon 07 Apr 2025 16:01:34 +0000
Files and hashes: 1: 3kN5HczaKLC1vDzc4T6OQ767Uq0.roa (hash: ZGwS+xHk4JSopWZ3QlH5/tdsWooS6ScieKAhsK9alu4=)
2: KOtOprlo9eWM-S3ee18Bkra0s7U.roa (hash: YzsVJr77Droy7DJXTIqItUpDk3Xa+3GyD3WsTRtaj84=)
3: VJASrMOyLg85AblR9YiVSWxHxZs.roa (hash: REvGVujT8OfpbkY6GeJPSg8UwmOkMcFqkev3bGvsPwQ=)
4: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl (hash: XFbStB1DtsYIWWVr2w0tmtb+i7b3YUDYtQqgSHazBbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:d5:f8:e4:92:c1:68:7f:2e:d5:fe:77:ba:75:8c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Validity
Not Before: Apr 6 16:01:34 2025 GMT
Not After : Apr 7 16:01:34 2025 GMT
Subject: CN=291404034793ac248cc0c270f7db0ca430594cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:3b:f3:e7:5d:ee:e3:cc:b9:32:8c:48:9d:
89:75:92:4d:df:fe:f5:f0:33:83:f5:10:b2:d9:bc:
7b:74:19:30:7e:68:3b:41:2e:d1:4d:9f:08:85:19:
13:ba:7c:48:eb:26:ed:3f:36:a6:40:f7:db:99:b5:
8b:c0:cf:fd:2d:c0:07:81:d4:86:16:89:71:40:ef:
30:b3:a7:66:fc:08:7b:b3:72:d9:89:7d:2c:aa:de:
50:67:0c:a8:76:52:95:fa:c9:e2:6f:92:e4:89:3f:
42:f7:d2:bb:5a:40:f9:7f:43:28:47:2b:47:67:4b:
17:1d:76:1b:eb:25:2a:60:d0:ac:d6:b1:62:fa:bd:
7d:f4:ba:0b:ca:ea:b5:59:45:8b:ad:6a:fd:9b:ab:
f3:5d:9b:89:51:89:2e:53:bf:44:0f:6f:4b:2b:d0:
f4:e0:68:40:80:59:db:3f:c0:39:83:92:1e:b8:c5:
33:60:3e:9f:75:7b:41:f3:bd:0a:a9:fc:d6:7b:4d:
3a:eb:d1:29:bd:7c:d4:a5:46:f7:f9:7a:f8:00:57:
6b:33:ee:c8:87:d5:e5:d8:7e:b6:db:a5:df:ec:74:
82:df:ef:80:16:47:a7:fa:80:62:8d:f8:20:e9:6b:
39:74:cc:95:bb:11:32:d8:a2:dd:e1:ca:87:e8:ec:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:14:04:03:47:93:AC:24:8C:C0:C2:70:F7:DB:0C:A4:30:59:4C:B2
X509v3 Authority Key Identifier:
keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:08:22:25:1d:ea:6f:1d:00:c2:00:5b:78:61:bc:91:16:45:
de:d7:13:e8:04:b1:7d:60:2b:ad:60:fb:8c:fb:0f:36:ea:ff:
84:23:92:09:9a:92:53:7a:c3:e7:24:2d:72:09:0d:e0:67:7d:
c4:22:d8:c8:00:93:05:d8:f7:e5:1d:e7:ee:04:8d:fa:5f:fe:
fc:31:7e:52:2a:50:12:5d:d5:cd:d5:f2:23:a2:54:76:56:a8:
91:23:24:59:8d:b0:df:df:a9:9f:d8:fe:a0:1a:8c:3f:28:32:
4e:80:ca:9b:3b:00:14:c1:23:82:c8:f5:31:93:2e:5f:08:0f:
b4:9a:a0:92:89:cf:16:da:f5:ad:69:5a:7c:83:37:30:56:cc:
6a:f1:1a:ff:44:11:c1:f4:ab:d9:47:43:68:9b:89:f1:de:b3:
91:46:a2:39:68:a7:83:86:65:2b:53:7c:41:f4:81:f0:22:75:
a7:f6:ba:15:d3:e2:d1:ae:01:61:76:cf:fa:ab:a5:93:4c:f2:
b0:b7:cc:7d:c5:d2:52:b3:2f:6e:a2:9b:c9:d1:82:da:f3:77:
02:e3:34:3f:9c:34:13:cd:06:e8:d9:d5:52:fb:fc:c6:92:b5:
1a:b6:75:1e:69:03:37:d9:4b:ab:71:28:05:bf:b0:b2:08:45:
cc:e0:de:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYL1fjkksFofy7V/ne6dYxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNjhkNjk5ZDFhOTQ1N2M3OGFjZmJlYzAwNGY5ODY3N2Fh
NGNjMTYwHhcNMjUwNDA2MTYwMTM0WhcNMjUwNDA3MTYwMTM0WjAzMTEwLwYDVQQD
EygyOTE0MDQwMzQ3OTNhYzI0OGNjMGMyNzBmN2RiMGNhNDMwNTk0Y2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4o78+dd7uPMuTKMSJ2JdZJN3/71
8DOD9RCy2bx7dBkwfmg7QS7RTZ8IhRkTunxI6ybtPzamQPfbmbWLwM/9LcAHgdSG
FolxQO8ws6dm/Ah7s3LZiX0sqt5QZwyodlKV+snib5LkiT9C99K7WkD5f0MoRytH
Z0sXHXYb6yUqYNCs1rFi+r199LoLyuq1WUWLrWr9m6vzXZuJUYkuU79ED29LK9D0
4GhAgFnbP8A5g5IeuMUzYD6fdXtB870KqfzWe00669EpvXzUpUb3+Xr4AFdrM+7I
h9Xl2H6226Xf7HSC3++AFken+oBijfgg6Ws5dMyVuxEy2KLd4cqH6OxT2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkUBANHk6wkjMDCcPfbDKQwWUyyMB8GA1UdIwQY
MBaAFFpo1pnRqUV8eKz77ABPmGd6pMwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMt
MGFlZTM2MGIwYmE0LzEvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMtMGFlZTM2MGIwYmE0
LzEvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwgiJR3q
bx0AwgBbeGG8kRZF3tcT6ASxfWArrWD7jPsPNur/hCOSCZqSU3rD5yQtcgkN4Gd9
xCLYyACTBdj35R3n7gSN+l/+/DF+UipQEl3VzdXyI6JUdlaokSMkWY2w39+pn9j+
oBqMPygyToDKmzsAFMEjgsj1MZMuXwgPtJqgkonPFtr1rWlafIM3MFbMavEa/0QR
wfSr2UdDaJuJ8d6zkUaiOWing4ZlK1N8QfSB8CJ1p/a6FdPi0a4BYXbP+qulk0zy
sLfMfcXSUrMvbqKbydGC2vN3AuM0P5w0E80G6NnVUvv8xpK1GrZ1HmkDN9lLq3Eo
Bb+wsghFzODeOA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:53 2025 by rpki-client