Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
File: WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json)
Hash identifier: yDlYxAzQTy3bAlsAnQ5TzwrxNu04VYlmvNFfMLTQp/o=
Subject key identifier: 85:E0:9D:76:B8:EB:02:BE:0C:7D:CE:D5:D2:DA:E2:14:65:73:22:41
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Certificate issuer: /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial: 0196440D2EFF458907B8D75CD70AECEA8AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
Manifest number: 087E
Signing time: Thu 17 Apr 2025 14:00:36 +0000
Manifest this update: Thu 17 Apr 2025 14:00:36 +0000
Manifest next update: Fri 18 Apr 2025 14:00:36 +0000
Files and hashes: 1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: qO2MmH4PW3WwpFQI4VHiiMMEi0GLV/468JD62h1uRvE=)
2: zKInD_uJ0MzVuNFZ1nxujfzo5eE.roa (hash: ywKe3EUqcRYUSRMVsCEquUk7tolOVlQ1ahf+CyiEesM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:2e:ff:45:89:07:b8:d7:5c:d7:0a:ec:ea:8a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Validity
Not Before: Apr 17 14:00:36 2025 GMT
Not After : Apr 18 14:00:36 2025 GMT
Subject: CN=85e09d76b8eb02be0c7dced5d2dae21465732241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:90:36:c6:5b:d9:e0:f1:68:15:1e:c1:7d:
f8:83:1a:f7:80:13:02:32:bd:ed:29:8c:ba:22:23:
3f:ed:1c:c2:13:dd:46:65:e2:95:57:2c:40:54:ee:
be:0f:c8:44:39:81:18:ad:77:16:6e:83:db:ce:3d:
ef:22:1a:26:1d:bd:1f:78:07:09:af:04:b1:c1:e6:
83:0d:a7:73:d0:35:1c:6b:fc:09:2e:72:31:8d:f8:
81:d1:a9:7d:a1:5e:c0:70:66:2d:94:71:f2:ee:df:
f4:b0:19:c0:87:bb:72:e0:d6:c8:c1:6e:99:cf:24:
ae:5e:ae:65:34:b4:fb:18:98:3b:0a:a8:ed:51:66:
1b:15:5b:c7:85:e0:53:19:05:bc:92:d6:f0:24:38:
4c:b8:bd:f6:8d:7b:a0:ee:98:2f:69:b4:b1:fe:4d:
44:ae:98:11:ca:da:f0:96:40:5d:e8:91:30:52:cd:
92:bd:df:27:6a:e8:ec:68:1e:a0:16:bc:eb:fd:09:
ea:39:a9:99:01:06:35:75:a7:1a:76:89:5f:4d:7a:
22:de:08:8f:db:de:2e:54:95:ab:47:b5:63:b0:e7:
02:92:c8:16:ce:5a:8c:cd:ff:7b:58:e5:6e:98:5c:
a9:36:46:6f:12:ff:8c:c1:3b:95:00:68:51:7b:47:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E0:9D:76:B8:EB:02:BE:0C:7D:CE:D5:D2:DA:E2:14:65:73:22:41
X509v3 Authority Key Identifier:
keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:02:f2:62:88:8f:8e:16:9b:ee:f1:cd:f2:51:b9:b4:40:99:
cc:89:21:40:50:2c:7a:56:12:94:d1:2a:b7:b1:4c:03:ae:25:
5a:a5:47:1a:20:e8:88:ba:37:00:83:8c:84:ab:99:16:b6:26:
44:91:13:89:a4:f1:f1:ee:06:9f:45:98:c2:b7:48:e9:70:46:
86:12:a1:eb:43:f3:8e:b5:a4:d0:d1:50:30:92:4d:9a:de:21:
f2:90:c6:75:99:c3:84:d4:e5:5b:a4:26:26:77:a2:25:ad:12:
14:3b:2d:80:ac:98:c7:2b:83:61:5f:e2:4f:71:97:0c:6b:df:
da:07:29:04:d9:3e:9d:d6:8c:e7:8e:a6:07:c6:9b:7e:34:be:
6f:f2:06:59:29:c8:d8:78:f2:b0:d0:07:53:25:68:48:36:aa:
ec:ff:56:16:07:08:05:11:73:40:b1:b1:56:3b:13:82:a8:75:
fc:df:b8:3c:97:ea:4c:4b:eb:30:de:58:3b:4d:02:7c:1c:df:
ce:18:f3:ba:1d:4b:6b:bd:59:f8:9c:ac:a5:8d:9c:51:66:c3:
25:dc:11:92:8e:51:2e:04:26:40:9b:94:e2:a1:fb:73:d8:3a:
32:d3:72:c5:e4:39:73:31:b5:4b:1d:4e:df:e3:07:ab:92:57:
0b:96:7e:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEDS7/RYkHuNdc1wrs6or9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NDdmMWY0ZjZiY2IyYTQ3NThhYzhhOTk3YmMxMDgwMDBl
NDE4ZDEwHhcNMjUwNDE3MTQwMDM2WhcNMjUwNDE4MTQwMDM2WjAzMTEwLwYDVQQD
Eyg4NWUwOWQ3NmI4ZWIwMmJlMGM3ZGNlZDVkMmRhZTIxNDY1NzMyMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2KQNsZb2eDxaBUewX34gxr3gBMC
Mr3tKYy6IiM/7RzCE91GZeKVVyxAVO6+D8hEOYEYrXcWboPbzj3vIhomHb0feAcJ
rwSxweaDDadz0DUca/wJLnIxjfiB0al9oV7AcGYtlHHy7t/0sBnAh7ty4NbIwW6Z
zySuXq5lNLT7GJg7CqjtUWYbFVvHheBTGQW8ktbwJDhMuL32jXug7pgvabSx/k1E
rpgRytrwlkBd6JEwUs2Svd8naujsaB6gFrzr/QnqOamZAQY1dacadolfTXoi3giP
294uVJWrR7VjsOcCksgWzlqMzf97WOVumFypNkZvEv+MwTuVAGhRe0f2AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXgnXa46wK+DH3O1dLa4hRlcyJBMB8GA1UdIwQY
MBaAFFhH8fT2vLKkdYrIqZe8EIAA5BjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zODAwNmYtZmJmYy00OGFhLTg1ZWYt
MDY1YmMyOGMyYTUyLzEvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zODAwNmYtZmJmYy00OGFhLTg1ZWYtMDY1YmMyOGMyYTUy
LzEvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwLyYoiP
jhab7vHN8lG5tECZzIkhQFAselYSlNEqt7FMA64lWqVHGiDoiLo3AIOMhKuZFrYm
RJETiaTx8e4Gn0WYwrdI6XBGhhKh60PzjrWk0NFQMJJNmt4h8pDGdZnDhNTlW6Qm
JneiJa0SFDstgKyYxyuDYV/iT3GXDGvf2gcpBNk+ndaM546mB8abfjS+b/IGWSnI
2HjysNAHUyVoSDaq7P9WFgcIBRFzQLGxVjsTgqh1/N+4PJfqTEvrMN5YO00CfBzf
zhjzuh1La71Z+JyspY2cUWbDJdwRko5RLgQmQJuU4qH7c9g6MtNyxeQ5czG1Sx1O
3+MHq5JXC5Z+Ww==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:25 2025 by rpki-client