Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
File: Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft (raw, json)
Hash identifier: CvuUiVFTYScMnz1ecY4T04yn3wINgAAgb7vwViiaYhM=
Subject key identifier: 2C:D4:51:9E:67:AF:5C:52:41:6C:55:D7:1F:7E:1C:10:60:E5:EE:82
Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
Certificate issuer: /CN=5a3b1dddab33e45506ad977040924720417d5688
Certificate serial: 01965E3AAA20F57A8AEABA502A2ABDA95377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
Manifest number: 0A4B
Signing time: Tue 22 Apr 2025 16:00:24 +0000
Manifest this update: Tue 22 Apr 2025 16:00:24 +0000
Manifest next update: Wed 23 Apr 2025 16:00:24 +0000
Files and hashes: 1: Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl (hash: Amuaj7QRmn7UmsuGpJj384uY1o2pT4OMvwb3jsLlXyc=)
2: y0QD6cVeHITeOOUrewdmduPjNyw.roa (hash: d578B+uX2xF03DWPlSDJU4G4ivlMPauq0XylCe7obdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:aa:20:f5:7a:8a:ea:ba:50:2a:2a:bd:a9:53:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688
Validity
Not Before: Apr 22 16:00:24 2025 GMT
Not After : Apr 23 16:00:24 2025 GMT
Subject: CN=2cd4519e67af5c52416c55d71f7e1c1060e5ee82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:7d:8d:a1:5b:c0:10:f0:50:94:a2:9d:ad:
17:75:c0:ae:89:0c:36:fe:88:06:a3:f2:65:78:06:
f3:85:c6:eb:03:2f:af:f7:e8:6b:97:96:f4:97:b3:
83:f2:6c:05:bb:7d:db:69:2b:c3:55:57:89:d0:c3:
22:13:fa:3f:a6:f4:61:a2:a8:51:69:5a:af:0f:7d:
85:bc:15:96:9a:c9:b8:dc:cc:3e:df:4d:ab:ac:42:
18:08:66:5b:c0:57:96:72:a1:97:f0:ca:08:f5:a9:
20:63:46:26:06:35:68:36:66:e1:1b:e9:7a:78:b1:
80:72:ae:42:e5:f9:21:64:11:14:87:79:6b:a6:ac:
b2:00:e0:c7:47:9c:d7:bf:74:83:eb:9d:18:c5:23:
aa:fb:66:cd:4a:f0:c3:4b:60:3a:ee:d6:98:dd:6f:
0a:af:00:42:fb:5e:de:e5:3c:93:99:ff:65:44:1f:
14:d1:df:84:5d:40:f4:d6:b1:35:36:32:59:ac:a8:
a5:9e:74:e6:be:21:45:d2:3b:57:40:22:13:1e:79:
6d:6e:12:e7:24:1d:3a:93:93:e8:6f:c6:a6:94:03:
b6:cc:25:b8:2f:47:c7:cd:85:1c:37:92:b4:db:e9:
d1:9e:f8:54:30:0e:c5:19:8f:08:19:5c:20:45:68:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D4:51:9E:67:AF:5C:52:41:6C:55:D7:1F:7E:1C:10:60:E5:EE:82
X509v3 Authority Key Identifier:
keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:e1:35:ab:6d:f7:43:f3:1c:c9:10:10:15:96:4e:78:40:93:
62:19:dd:07:d4:a7:f7:20:31:f4:38:db:db:06:72:21:00:ac:
6c:cd:8e:07:d3:ec:b4:cf:32:c0:3d:f5:a3:b5:17:0d:a9:ae:
37:2f:96:a9:f1:25:00:59:64:22:cf:ab:9c:0d:2c:04:57:b4:
e7:6c:ae:fd:ec:aa:8e:b2:a8:61:58:13:e0:7f:cd:8c:99:ef:
f9:d2:bb:c1:74:30:4d:bb:00:44:93:19:b9:dc:38:35:73:38:
78:27:b0:7f:6f:2c:fc:ab:64:aa:b4:ad:b2:c1:a5:04:f9:b2:
60:7d:de:44:38:fc:6c:5a:12:d1:f6:95:a0:f3:d8:64:1a:fa:
90:c0:7c:09:32:82:91:11:33:63:af:5e:43:d8:42:96:f3:81:
4f:15:fc:96:8e:7d:af:2b:12:84:75:f5:a6:51:ea:d5:59:bc:
de:ab:fa:04:3f:4d:19:c1:e2:b4:d6:c7:4a:f4:ca:28:be:30:
10:d9:6c:6b:00:ed:af:ea:0d:4c:6c:cd:d8:20:78:87:60:38:
6f:5f:d5:2a:e9:83:5e:1d:26:f7:a0:b3:5f:53:61:e1:bb:51:
2e:14:e3:2c:11:3d:52:08:b6:b6:32:36:4b:f6:30:a3:fe:66:
55:59:30:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZeOqog9XqK6rpQKiq9qVN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhM2IxZGRkYWIzM2U0NTUwNmFkOTc3MDQwOTI0NzIwNDE3
ZDU2ODgwHhcNMjUwNDIyMTYwMDI0WhcNMjUwNDIzMTYwMDI0WjAzMTEwLwYDVQQD
EygyY2Q0NTE5ZTY3YWY1YzUyNDE2YzU1ZDcxZjdlMWMxMDYwZTVlZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD19jaFbwBDwUJSina0XdcCuiQw2
/ogGo/JleAbzhcbrAy+v9+hrl5b0l7OD8mwFu33baSvDVVeJ0MMiE/o/pvRhoqhR
aVqvD32FvBWWmsm43Mw+302rrEIYCGZbwFeWcqGX8MoI9akgY0YmBjVoNmbhG+l6
eLGAcq5C5fkhZBEUh3lrpqyyAODHR5zXv3SD650YxSOq+2bNSvDDS2A67taY3W8K
rwBC+17e5TyTmf9lRB8U0d+EXUD01rE1NjJZrKilnnTmviFF0jtXQCITHnltbhLn
JB06k5Pob8amlAO2zCW4L0fHzYUcN5K02+nRnvhUMA7FGY8IGVwgRWi+YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzUUZ5nr1xSQWxV1x9+HBBg5e6CMB8GA1UdIwQY
MBaAFFo7Hd2rM+RVBq2XcECSRyBBfVaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xNzliZDgtZmM2OC00Zjc2LTg2ZmYt
NjhmMzE2NjA3Mzc2LzEvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xNzliZDgtZmM2OC00Zjc2LTg2ZmYtNjhmMzE2NjA3Mzc2
LzEvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2eE1q233
Q/McyRAQFZZOeECTYhndB9Sn9yAx9Djb2wZyIQCsbM2OB9PstM8ywD31o7UXDamu
Ny+WqfElAFlkIs+rnA0sBFe052yu/eyqjrKoYVgT4H/NjJnv+dK7wXQwTbsARJMZ
udw4NXM4eCewf28s/KtkqrStssGlBPmyYH3eRDj8bFoS0faVoPPYZBr6kMB8CTKC
kREzY69eQ9hClvOBTxX8lo59rysShHX1plHq1Vm83qv6BD9NGcHitNbHSvTKKL4w
ENlsawDtr+oNTGzN2CB4h2A4b1/VKumDXh0m96CzX1Nh4btRLhTjLBE9Ugi2tjI2
S/Ywo/5mVVkwgQ==
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:54:00 2025 by rpki-client