
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File: WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier: MQwA0mdnHO/6exlfzSZjJjiKu5P2H0KhJUtqlDT34gU=
Subject key identifier: 99:4A:FB:45:ED:23:33:F1:69:5F:FA:CE:AC:C4:93:69:47:1A:1F:04
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer: /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial: 01963FC295AF770DB23968A57ADD4E90B9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 18:00:39 +0000
Manifest this update: Wed 16 Apr 2025 18:00:39 +0000
Manifest next update: Thu 17 Apr 2025 18:00:39 +0000
Files and hashes: 1: BfcfF2b1LL5M2AE__W3yCJVNAKA.roa (hash: +bgWpcxXbBLXQoTPRn9MMXKJT/S9VM5GWgJ62Kc9z/4=)
2: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: 9u6kYMqhlnWOlCudwwkPA2fVLSnGpQkEaY65/JuQ7/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:95:af:77:0d:b2:39:68:a5:7a:dd:4e:90:b9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Validity
Not Before: Apr 16 18:00:39 2025 GMT
Not After : Apr 17 18:00:39 2025 GMT
Subject: CN=994afb45ed2333f1695ffaceacc49369471a1f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:80:8d:45:db:62:62:a9:2b:da:43:c6:f6:
0b:b7:ed:86:27:37:42:b8:c7:09:b5:f5:bb:bc:d1:
3f:fd:cd:27:31:50:91:53:a6:79:f1:4b:9e:a9:3a:
53:55:68:38:e9:4e:e1:03:d6:ce:e3:48:c1:b7:66:
28:96:ed:7b:40:ac:e9:14:c6:f7:8a:38:29:b2:af:
1d:53:a2:4f:e4:94:fd:17:ea:3f:d5:a3:35:77:ea:
41:cc:9d:68:c1:56:59:3c:63:53:10:d6:a1:3d:42:
f8:c6:ce:3f:a5:ec:be:25:65:a7:2b:d4:8c:ba:24:
ba:ab:ec:e3:41:56:5c:9b:a4:e0:fe:ee:d2:f4:37:
02:a7:d2:95:43:85:09:99:e3:f7:89:30:bb:12:92:
86:9a:49:e0:74:e3:37:42:31:48:21:69:95:ac:34:
b6:b2:18:ba:dd:24:ba:d8:09:7e:24:ae:52:2d:95:
1d:61:4e:99:1d:86:1f:79:77:cd:0d:1a:1e:36:d5:
f8:19:b9:5b:e5:81:8e:e7:33:88:f4:21:bc:19:34:
52:b2:88:0c:e7:0f:9f:cf:52:cd:8f:39:f1:2b:cb:
8e:c6:9d:14:fd:1e:56:47:43:48:80:77:45:7d:1a:
e1:9a:d3:9c:6d:fa:84:d8:62:db:cc:18:c9:05:67:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4A:FB:45:ED:23:33:F1:69:5F:FA:CE:AC:C4:93:69:47:1A:1F:04
X509v3 Authority Key Identifier:
keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:10:e3:ca:85:db:03:ba:7e:6b:fc:ba:3f:07:11:79:41:62:
3e:db:f2:c3:c0:9a:bc:38:6a:a8:2f:2a:96:8e:0f:b2:20:36:
4e:7c:92:8c:ac:93:46:da:fb:21:7a:c1:fc:bf:87:d3:1f:6f:
64:6f:70:47:94:b8:1d:1f:25:67:de:8d:3c:24:b6:b5:88:6f:
8a:2c:ac:bf:fa:6f:77:69:01:a6:70:39:c1:9b:5c:fc:db:73:
0b:cc:1e:84:9e:4b:39:68:f1:60:fa:00:e8:2c:ae:7a:80:99:
00:6b:d8:ee:4a:57:72:9c:e1:91:d5:42:15:62:a4:27:21:f1:
a6:8f:6a:a2:cb:c9:e0:23:f4:8d:b3:a5:cb:68:c5:0a:95:8c:
b9:99:52:27:03:6c:dc:61:ed:43:07:09:bc:c7:20:81:78:2e:
48:67:f1:74:74:02:7e:66:99:a7:49:ba:99:d0:fe:fd:82:31:
6e:10:db:6f:c8:70:8f:32:91:51:a8:69:4a:83:1a:79:50:69:
d7:dd:8b:82:b2:8e:0d:03:ff:55:b4:a5:27:d9:df:92:a8:d9:
56:8d:ba:49:06:aa:05:83:48:bb:80:70:dc:c6:69:e8:e9:87:
e1:01:e0:64:47:84:6e:04:5d:7c:ce:63:c1:92:ab:d5:99:88:
78:d9:86:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/wpWvdw2yOWilet1OkLnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmI1NDk4NzYzOWJhMGM2Y2ZiY2FkNTk4YzNmNWUzOWZj
YTk0NWMwHhcNMjUwNDE2MTgwMDM5WhcNMjUwNDE3MTgwMDM5WjAzMTEwLwYDVQQD
Eyg5OTRhZmI0NWVkMjMzM2YxNjk1ZmZhY2VhY2M0OTM2OTQ3MWExZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteiAjUXbYmKpK9pDxvYLt+2GJzdC
uMcJtfW7vNE//c0nMVCRU6Z58UueqTpTVWg46U7hA9bO40jBt2Yolu17QKzpFMb3
ijgpsq8dU6JP5JT9F+o/1aM1d+pBzJ1owVZZPGNTENahPUL4xs4/pey+JWWnK9SM
uiS6q+zjQVZcm6Tg/u7S9DcCp9KVQ4UJmeP3iTC7EpKGmkngdOM3QjFIIWmVrDS2
shi63SS62Al+JK5SLZUdYU6ZHYYfeXfNDRoeNtX4Gblb5YGO5zOI9CG8GTRSsogM
5w+fz1LNjznxK8uOxp0U/R5WR0NIgHdFfRrhmtOcbfqE2GLbzBjJBWf+wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlK+0XtIzPxaV/6zqzEk2lHGh8EMB8GA1UdIwQY
MBaAFFi7VJh2OboMbPvK1ZjD9eOfypRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yM2EyYjItNjliYi00OTMzLWFlNmYt
OGM5ZjJkNzA1OTQ4LzEvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8yM2EyYjItNjliYi00OTMzLWFlNmYtOGM5ZjJkNzA1OTQ4
LzEvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORDjyoXb
A7p+a/y6PwcReUFiPtvyw8CavDhqqC8qlo4PsiA2TnySjKyTRtr7IXrB/L+H0x9v
ZG9wR5S4HR8lZ96NPCS2tYhviiysv/pvd2kBpnA5wZtc/NtzC8wehJ5LOWjxYPoA
6CyueoCZAGvY7kpXcpzhkdVCFWKkJyHxpo9qosvJ4CP0jbOly2jFCpWMuZlSJwNs
3GHtQwcJvMcggXguSGfxdHQCfmaZp0m6mdD+/YIxbhDbb8hwjzKRUahpSoMaeVBp
192LgrKODQP/VbSlJ9nfkqjZVo26SQaqBYNIu4Bw3MZp6OmH4QHgZEeEbgRdfM5j
wZKr1ZmIeNmGFQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:42:27 2025 by rpki-client