Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: O5LtBNGEVsvO40iN3ZNdG7fJrX372tM6RPqeyMAJFJw=
Subject key identifier: 6F:77:23:6B:E8:EB:B4:70:83:78:25:F2:81:A4:A5:8E:5C:C2:B7:C8
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 019645C5D9DB53252E87D1DE597E1507D01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 1508
Signing time: Thu 17 Apr 2025 22:01:56 +0000
Manifest this update: Thu 17 Apr 2025 22:01:56 +0000
Manifest next update: Fri 18 Apr 2025 22:01:56 +0000
Files and hashes: 1: 3IRgLqbP_ec1EGoarWc4xpisfyQ.roa (hash: GZRzYUts0dDxW36RNVg638JimijfwAxJcVtkZHDVq/A=)
2: 96CIMKKoqN02QJYrluNPvEhoHEk.roa (hash: PH9kqz02Fz7yivfLv32cVnK1ToPORdX94byNA/yE6eo=)
3: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (hash: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=)
4: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: f4AJkYRrwqMaLnp8hltGGLZatFU7g3OA8z7IXxaXZ68=)
5: g81BDZuaFjsKwaBqFnyHLcFPLZs.roa (hash: jSl9q0mLuOCF9O2+fEMHTTPvVPdoA/bqHU0pF52USoE=)
6: hVkEcV5BYqMN66hJqLsfxmtD6-I.roa (hash: qGjxxeMK37L3nzimP1DFdWK9NxQEtXmgcd3DzWsOUEg=)
7: i7LPx3k5NSVEBiacqO7vPHaWiwU.roa (hash: gYTLRIvfaUJXoKPS7pQ+Cpl5E8jxQVsdISY+9vzV8lg=)
8: p4_2wcOawugaSj43rAVSkkmPf8k.roa (hash: Y3pbjD0B2GwO/FNWMPam+BoxaGEQd85k797hs416lA8=)
9: t7xFNtek28TRqAwV5AsSOdRcmio.roa (hash: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:d9:db:53:25:2e:87:d1:de:59:7e:15:07:d0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Apr 17 22:01:56 2025 GMT
Not After : Apr 18 22:01:56 2025 GMT
Subject: CN=6f77236be8ebb470837825f281a4a58e5cc2b7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:10:e2:31:0e:25:75:23:db:67:1f:8c:49:
ab:f1:d1:a7:2a:c0:0b:71:a8:09:bb:24:c5:16:6d:
4d:6b:d4:7f:7e:96:14:f1:9f:84:a6:55:5c:ab:c6:
83:48:c7:96:7e:ac:a3:ed:6b:63:0e:b0:10:00:96:
45:9a:4f:0d:65:ed:d2:0b:49:dc:fe:4e:71:d4:30:
75:e8:ea:e2:0a:9e:e4:5f:6b:3b:7f:c6:51:6a:77:
ac:47:51:0a:2a:eb:5e:9d:01:31:eb:b5:5a:8b:15:
bb:9e:c6:ee:08:7d:bf:d7:87:e1:b2:a1:46:35:72:
fa:c8:59:2e:d6:01:35:f5:54:bb:1b:8c:d0:cd:69:
b5:14:9f:76:05:90:de:87:61:67:3e:20:b4:a8:94:
33:ee:e4:e1:0b:8e:18:a8:55:5c:b1:ed:f3:df:37:
4e:35:a9:ba:3d:55:d3:e1:74:c5:5a:3c:20:3a:1b:
13:cc:09:e6:cf:76:25:26:02:cd:e8:e9:38:ce:c2:
34:2f:e5:64:81:15:5f:15:e2:b7:b3:3e:3b:e8:7d:
df:62:b1:ec:2d:14:88:57:9b:da:5e:97:24:b7:7f:
07:57:f6:3e:a9:d4:f9:e3:0e:56:3a:04:48:d9:19:
46:2f:40:6e:66:cf:91:84:e8:c6:2d:90:54:58:26:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:77:23:6B:E8:EB:B4:70:83:78:25:F2:81:A4:A5:8E:5C:C2:B7:C8
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d8:5e:c5:20:2e:3e:f3:c4:03:a7:d5:bf:77:3e:b8:4b:9c:
2d:9b:c8:fb:32:e4:ad:d6:42:8e:57:d3:be:bc:f7:4b:59:fc:
2d:8b:c5:f0:12:c4:7a:28:eb:5c:03:27:26:ba:9e:af:31:77:
d2:f2:3f:64:b8:c7:05:9a:83:d2:76:14:e4:47:34:5c:df:b5:
61:36:63:f6:93:e0:de:95:bf:9a:3f:df:cd:20:1d:dc:56:e9:
79:e5:10:e6:58:c7:03:19:b3:10:bc:22:a1:97:b6:29:f7:5a:
46:f3:de:73:df:fa:58:5b:bc:c7:62:11:79:ed:6a:52:46:92:
19:dd:ee:c5:fe:69:a5:3a:e6:92:72:22:3e:71:15:15:61:11:
83:6c:41:22:3b:32:91:ec:47:8c:5f:c1:15:d8:4c:42:aa:19:
ce:81:dd:7b:07:aa:bb:64:44:19:91:63:91:7a:c3:d9:c8:dc:
b4:33:a8:0b:ea:c4:7d:d0:db:46:b0:fc:2d:45:61:9a:86:f2:
c8:dd:03:08:dd:80:17:b2:55:81:91:94:a9:d1:a0:43:49:60:
0d:a6:c9:96:82:60:eb:77:c0:09:37:58:cb:d4:09:c2:8e:00:
93:26:ca:dd:36:58:8d:df:bc:9a:cc:2a:c6:2d:dc:6f:2d:2c:
9f:ce:1f:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFxdnbUyUuh9HeWX4VB9AdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2
MDk4YjcwHhcNMjUwNDE3MjIwMTU2WhcNMjUwNDE4MjIwMTU2WjAzMTEwLwYDVQQD
Eyg2Zjc3MjM2YmU4ZWJiNDcwODM3ODI1ZjI4MWE0YTU4ZTVjYzJiN2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdQQ4jEOJXUj22cfjEmr8dGnKsAL
cagJuyTFFm1Na9R/fpYU8Z+EplVcq8aDSMeWfqyj7WtjDrAQAJZFmk8NZe3SC0nc
/k5x1DB16OriCp7kX2s7f8ZRanesR1EKKutenQEx67VaixW7nsbuCH2/14fhsqFG
NXL6yFku1gE19VS7G4zQzWm1FJ92BZDeh2FnPiC0qJQz7uThC44YqFVcse3z3zdO
Nam6PVXT4XTFWjwgOhsTzAnmz3YlJgLN6Ok4zsI0L+VkgRVfFeK3sz476H3fYrHs
LRSIV5vaXpckt38HV/Y+qdT54w5WOgRI2RlGL0BuZs+RhOjGLZBUWCa/ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG93I2vo67Rwg3gl8oGkpY5cwrfIMB8GA1UdIwQY
MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt
NDQzYmU2M2ZjMTIzLzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz
LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNhexSAu
PvPEA6fVv3c+uEucLZvI+zLkrdZCjlfTvrz3S1n8LYvF8BLEeijrXAMnJrqerzF3
0vI/ZLjHBZqD0nYU5Ec0XN+1YTZj9pPg3pW/mj/fzSAd3FbpeeUQ5ljHAxmzELwi
oZe2KfdaRvPec9/6WFu8x2IRee1qUkaSGd3uxf5ppTrmknIiPnEVFWERg2xBIjsy
kexHjF/BFdhMQqoZzoHdewequ2REGZFjkXrD2cjctDOoC+rEfdDbRrD8LUVhmoby
yN0DCN2AF7JVgZGUqdGgQ0lgDabJloJg63fACTdYy9QJwo4AkybK3TZYjd+8mswq
xi3cby0sn84fMw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:39:44 2025 by rpki-client