Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
File: WwyVAj-g0zsibu8vIsjso5BSa_A.mft (raw, json)
Hash identifier: RShc+Y/AxAQ3cAk0oyeBCfuk4ViYD2PQ2yMyAFsj7KQ=
Subject key identifier: B0:8E:BC:70:03:50:19:A2:E7:56:45:DF:0B:40:6A:E9:3C:6F:EB:8F
Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Certificate serial: 019652A48CF4952F7F2502E2ADF0AD2F350A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
Manifest number: 0C31
Signing time: Sun 20 Apr 2025 10:00:37 +0000
Manifest this update: Sun 20 Apr 2025 10:00:37 +0000
Manifest next update: Mon 21 Apr 2025 10:00:37 +0000
Files and hashes: 1: WwyVAj-g0zsibu8vIsjso5BSa_A.crl (hash: w0D966E5bZktEIm5KxpMumX8NMIpClbeVLMkYZVwjsQ=)
2: wllNqt1P393lVw_WgHLjVq0jQ3M.roa (hash: BBqAMtasXCpwxv6WN/tQ+Ub2hvQgjIJGzl78O7sCb5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:8c:f4:95:2f:7f:25:02:e2:ad:f0:ad:2f:35:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Validity
Not Before: Apr 20 10:00:37 2025 GMT
Not After : Apr 21 10:00:37 2025 GMT
Subject: CN=b08ebc70035019a2e75645df0b406ae93c6feb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:8e:82:f6:fa:6a:6a:d4:59:fa:82:96:1d:
24:0a:6d:2e:ab:01:2e:03:ed:a1:0a:cb:38:7b:1d:
47:78:7d:5e:98:33:93:88:a0:e8:a0:83:36:a8:4d:
f8:eb:03:e1:f4:4f:7b:ae:9c:c7:72:d3:5c:d6:1a:
f6:c6:85:25:92:63:91:f6:db:20:31:ea:54:2d:9f:
43:16:17:77:db:f5:66:db:30:46:f0:24:a8:68:29:
8c:cf:f7:e6:45:d8:ad:27:f7:49:7f:18:ec:cc:0a:
70:3e:ac:b5:e7:16:46:4c:da:04:14:5a:79:dc:76:
60:34:b7:fa:2d:e3:51:3d:27:70:db:44:e5:40:21:
4a:60:28:08:fb:62:c2:8f:ee:6b:c4:1d:af:c1:3f:
cf:2f:78:dc:3d:76:8e:d7:cc:a1:30:61:c2:75:02:
ca:5f:84:24:47:11:fe:12:30:65:95:00:88:e6:05:
e6:46:c6:3a:3f:dd:9a:93:67:af:95:42:ec:ba:25:
95:ad:ed:44:6b:26:0e:b8:eb:07:6a:a6:f6:ca:35:
d1:9c:be:95:14:ab:9c:7d:88:6a:9f:a9:59:45:60:
24:73:2b:1b:c7:25:6b:6b:b0:cf:3d:67:4e:ea:10:
ce:2c:67:48:a0:c3:80:24:1e:0a:48:a5:c6:44:42:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8E:BC:70:03:50:19:A2:E7:56:45:DF:0B:40:6A:E9:3C:6F:EB:8F
X509v3 Authority Key Identifier:
keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9c:57:08:41:e8:15:5d:c7:7c:84:af:8b:13:25:0f:46:32:
3c:6a:85:7d:23:e5:23:72:6c:63:5e:ea:fa:6f:14:48:9e:5c:
f3:01:41:06:3d:c1:e7:0d:93:14:6f:5d:dc:78:a1:14:c4:fa:
e8:a3:5d:f7:db:2e:53:5a:b4:37:3f:ac:7b:c7:1d:32:90:41:
8d:34:bc:30:ba:73:fe:2e:8b:3b:1a:aa:ed:c4:10:90:e4:da:
13:57:65:a1:13:60:ad:53:f7:2e:ca:0e:f3:d3:02:c9:df:11:
cd:24:f4:c7:ae:af:22:9a:3d:de:03:1f:c0:1f:b0:cd:3e:28:
c4:a0:56:c1:49:cb:db:e4:e1:e4:73:70:28:b6:4f:eb:32:a9:
a8:43:b4:84:72:2c:71:33:13:66:60:ea:a3:fb:ab:45:bf:ba:
33:a3:d9:9b:c8:d0:18:a9:05:78:1b:08:bc:41:d9:40:fa:b8:
40:1a:03:fe:cd:ff:8e:67:e9:53:a1:6e:39:cc:10:f7:0f:c5:
88:c6:59:e0:d4:9e:94:2e:c6:2e:ca:0f:41:5d:3a:8b:fc:73:
dd:5c:8f:f9:04:07:eb:c8:b8:1b:32:8e:e9:ad:12:5e:50:57:
21:ed:d8:9b:5e:ba:af:6a:81:90:36:fd:54:4d:5d:fd:90:63:
2f:23:c6:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpIz0lS9/JQLirfCtLzUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMGM5NTAyM2ZhMGQzM2IyMjZlZWYyZjIyYzhlY2EzOTA1
MjZiZjAwHhcNMjUwNDIwMTAwMDM3WhcNMjUwNDIxMTAwMDM3WjAzMTEwLwYDVQQD
EyhiMDhlYmM3MDAzNTAxOWEyZTc1NjQ1ZGYwYjQwNmFlOTNjNmZlYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WCOgvb6amrUWfqClh0kCm0uqwEu
A+2hCss4ex1HeH1emDOTiKDooIM2qE346wPh9E97rpzHctNc1hr2xoUlkmOR9tsg
MepULZ9DFhd32/Vm2zBG8CSoaCmMz/fmRditJ/dJfxjszApwPqy15xZGTNoEFFp5
3HZgNLf6LeNRPSdw20TlQCFKYCgI+2LCj+5rxB2vwT/PL3jcPXaO18yhMGHCdQLK
X4QkRxH+EjBllQCI5gXmRsY6P92ak2evlULsuiWVre1EayYOuOsHaqb2yjXRnL6V
FKucfYhqn6lZRWAkcysbxyVra7DPPWdO6hDOLGdIoMOAJB4KSKXGREK4GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCOvHADUBmi51ZF3wtAauk8b+uPMB8GA1UdIwQY
MBaAFFsMlQI/oNM7Im7vLyLI7KOQUmvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEt
ZTBlOTBlMDg0NTA4LzEvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEtZTBlOTBlMDg0NTA4
LzEvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5xXCEHo
FV3HfISvixMlD0YyPGqFfSPlI3JsY17q+m8USJ5c8wFBBj3B5w2TFG9d3HihFMT6
6KNd99suU1q0Nz+se8cdMpBBjTS8MLpz/i6LOxqq7cQQkOTaE1dloRNgrVP3LsoO
89MCyd8RzST0x66vIpo93gMfwB+wzT4oxKBWwUnL2+Th5HNwKLZP6zKpqEO0hHIs
cTMTZmDqo/urRb+6M6PZm8jQGKkFeBsIvEHZQPq4QBoD/s3/jmfpU6FuOcwQ9w/F
iMZZ4NSelC7GLsoPQV06i/xz3VyP+QQH68i4GzKO6a0SXlBXIe3Ym166r2qBkDb9
VE1d/ZBjLyPGMg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:04:12 2025 by rpki-client