Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
File: WMTqejhe-jZyQZa0NDlguqR8vrc.mft (raw, json)
Hash identifier: vFyQpCNS/wdTpdXOsiao+i92TZBibiA7qnbMqzPOJBA=
Subject key identifier: 75:A5:76:B2:E1:9B:CB:CB:2E:D0:3F:65:DC:5E:23:FB:6A:19:72:05
Authority key identifier: 58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
Certificate issuer: /CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Certificate serial: 01951135433680B20AAECCB59BAD040D4B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
Manifest number: 0D31
Signing time: Mon 17 Feb 2025 00:00:57 +0000
Manifest this update: Mon 17 Feb 2025 00:00:57 +0000
Manifest next update: Tue 18 Feb 2025 00:00:57 +0000
Files and hashes: 1: WMTqejhe-jZyQZa0NDlguqR8vrc.crl (hash: HXzED9V1dHMUdqXkqKuq1oiioEEQddUYBjfLjn8CNqA=)
2: mFnUZao6jHrrA3z87rGBpSOdTUg.roa (hash: 1fZ4TbgHvorfr9usJsO+SOpspxtknAWHwxdZ49h/ILc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:43:36:80:b2:0a:ae:cc:b5:9b:ad:04:0d:4b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Validity
Not Before: Feb 17 00:00:57 2025 GMT
Not After : Feb 18 00:00:57 2025 GMT
Subject: CN=75a576b2e19bcbcb2ed03f65dc5e23fb6a197205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:17:75:d0:42:ea:7e:bf:d0:1d:a8:6c:26:
97:16:2c:d6:30:ed:38:db:69:0d:09:00:28:0a:35:
33:7e:e4:ae:16:c5:96:af:09:59:c1:c6:de:2d:a2:
0d:e0:55:e5:61:7b:b5:b2:76:d1:1a:09:9e:b8:00:
ec:6f:f5:47:25:33:0d:cf:ef:c6:27:7d:15:0e:da:
57:eb:f1:d8:34:6c:96:9c:9a:e2:b1:d4:71:8d:98:
30:61:10:c5:37:bf:c4:94:e9:04:50:ed:fc:d4:27:
76:b5:52:44:cd:5e:2f:c6:80:9c:57:cf:65:9e:30:
94:52:e7:fd:d4:43:8b:43:b2:28:52:40:5b:b2:5b:
ea:fe:bc:79:c3:4f:85:7d:fa:57:b3:10:13:24:fc:
b3:1e:09:9b:16:43:58:54:d1:b7:a1:f7:c3:28:94:
23:03:37:0e:18:f1:1a:2b:1b:65:08:8a:01:7a:b5:
25:64:b4:85:14:29:5e:a5:2c:77:0b:82:b3:57:e3:
06:64:e0:4f:6c:c5:cc:bd:75:cb:ce:28:85:c6:a1:
39:08:7f:00:50:1a:a2:0f:57:f6:4c:55:72:b7:de:
58:a7:a3:25:b4:ce:d9:51:d5:fa:92:55:60:46:f4:
19:0e:10:0e:8e:42:38:ad:25:db:60:84:72:89:05:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A5:76:B2:E1:9B:CB:CB:2E:D0:3F:65:DC:5E:23:FB:6A:19:72:05
X509v3 Authority Key Identifier:
keyid:58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b2:66:9d:5c:8b:16:a4:4c:71:8f:63:ed:c6:21:9e:66:c7:
69:aa:84:99:33:cd:13:3c:ec:fd:75:26:3d:af:e1:03:df:6c:
05:67:51:e8:fe:6a:ec:b4:65:fa:88:dc:49:74:93:4d:8e:63:
3f:df:77:a0:49:f5:0c:3a:9d:24:e6:42:2e:74:c5:dc:9d:7a:
70:0e:79:7d:1d:a9:5b:97:cb:8d:40:03:ec:83:f2:5a:1d:fa:
54:12:6c:49:60:59:0a:47:df:de:83:0e:3a:15:b6:28:3b:28:
f7:75:70:ea:e1:e9:f6:ef:9e:d1:ce:4f:17:7f:5f:cb:20:1a:
bd:56:33:8c:e8:ff:40:af:06:64:55:2d:c1:8b:df:26:46:13:
27:f1:1d:15:63:9e:4d:91:a2:f7:02:c6:f4:ab:53:55:81:c2:
2d:58:40:60:de:63:3f:8c:e2:35:ee:0a:08:4f:04:73:ab:03:
1c:20:36:8b:89:44:d8:9d:51:a0:08:02:0b:57:6f:fa:62:f5:
64:cc:3c:49:c5:0e:56:3d:55:61:1e:4a:26:e5:10:11:ae:84:
42:80:30:90:8c:d9:f5:af:1c:54:0b:71:0c:21:aa:ce:e0:69:
e5:76:52:23:77:77:c1:dd:d9:f8:d9:70:24:23:11:90:43:ff:
fe:4e:41:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNUM2gLIKrsy1m60EDUuCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YzRlYTdhMzg1ZWZhMzY3MjQxOTZiNDM0Mzk2MGJhYTQ3
Y2JlYjcwHhcNMjUwMjE3MDAwMDU3WhcNMjUwMjE4MDAwMDU3WjAzMTEwLwYDVQQD
Eyg3NWE1NzZiMmUxOWJjYmNiMmVkMDNmNjVkYzVlMjNmYjZhMTk3MjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOkXddBC6n6/0B2obCaXFizWMO04
22kNCQAoCjUzfuSuFsWWrwlZwcbeLaIN4FXlYXu1snbRGgmeuADsb/VHJTMNz+/G
J30VDtpX6/HYNGyWnJrisdRxjZgwYRDFN7/ElOkEUO381Cd2tVJEzV4vxoCcV89l
njCUUuf91EOLQ7IoUkBbslvq/rx5w0+FffpXsxATJPyzHgmbFkNYVNG3offDKJQj
AzcOGPEaKxtlCIoBerUlZLSFFClepSx3C4KzV+MGZOBPbMXMvXXLziiFxqE5CH8A
UBqiD1f2TFVyt95Yp6MltM7ZUdX6klVgRvQZDhAOjkI4rSXbYIRyiQWC2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWldrLhm8vLLtA/ZdxeI/tqGXIFMB8GA1UdIwQY
MBaAFFjE6no4Xvo2ckGWtDQ5YLqkfL63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV01UcWVqaGUtalp5UVphME5EbGd1cVI4dnJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZmEwMDctMjllOS00ZmM3LTk1NmQt
YjBlOGMzMzA0MGZhLzEvV01UcWVqaGUtalp5UVphME5EbGd1cVI4dnJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9iZmEwMDctMjllOS00ZmM3LTk1NmQtYjBlOGMzMzA0MGZh
LzEvV01UcWVqaGUtalp5UVphME5EbGd1cVI4dnJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbJmnVyL
FqRMcY9j7cYhnmbHaaqEmTPNEzzs/XUmPa/hA99sBWdR6P5q7LRl+ojcSXSTTY5j
P993oEn1DDqdJOZCLnTF3J16cA55fR2pW5fLjUAD7IPyWh36VBJsSWBZCkff3oMO
OhW2KDso93Vw6uHp9u+e0c5PF39fyyAavVYzjOj/QK8GZFUtwYvfJkYTJ/EdFWOe
TZGi9wLG9KtTVYHCLVhAYN5jP4ziNe4KCE8Ec6sDHCA2i4lE2J1RoAgCC1dv+mL1
ZMw8ScUOVj1VYR5KJuUQEa6EQoAwkIzZ9a8cVAtxDCGqzuBp5XZSI3d3wd3Z+Nlw
JCMRkEP//k5BDA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:32 2025 by rpki-client