Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: 3xIq3mj5Z9e1PRBqIY7vA2oPLCtVIDvQVjtRiUn/Bxg=
Subject key identifier: D5:B3:7B:BA:68:63:02:4D:46:F9:99:3E:7B:52:A4:9B:08:46:BB:07
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 01962B2A72119F0B661EDE9361F7BD546B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 0F48
Signing time: Sat 12 Apr 2025 18:02:04 +0000
Manifest this update: Sat 12 Apr 2025 18:02:04 +0000
Manifest next update: Sun 13 Apr 2025 18:02:04 +0000
Files and hashes: 1: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (hash: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=)
2: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (hash: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=)
3: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: S3kjk7RzpWJbJsc4mRhVwRidmV5hkYSvLwaw8umWXZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:2a:72:11:9f:0b:66:1e:de:93:61:f7:bd:54:6b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Apr 12 18:02:04 2025 GMT
Not After : Apr 13 18:02:04 2025 GMT
Subject: CN=d5b37bba6863024d46f9993e7b52a49b0846bb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:53:8b:6c:10:8b:9d:9d:c4:53:8b:d5:47:
f0:6b:19:ed:96:d8:09:92:a0:e9:6a:02:76:8e:dc:
54:57:60:2d:cc:1e:0e:99:aa:79:8a:4c:2f:6a:f2:
71:02:2b:45:d5:73:18:bf:91:5c:5b:b4:43:cf:00:
91:65:4e:9e:3a:ea:49:59:12:29:4e:fe:d0:b6:a1:
45:ee:12:5a:5a:da:ec:1f:6e:bf:64:72:7f:50:69:
0c:37:4e:95:bf:9d:29:b1:b7:af:9d:29:3b:a9:d8:
f4:e1:39:25:81:e6:7a:df:6c:e6:d4:d0:1a:9b:db:
62:52:93:bf:7e:9c:b2:11:93:d9:ad:b9:ab:ef:ef:
8d:e0:9b:49:b4:b5:da:38:6b:95:96:ec:db:30:f8:
b0:7e:d6:d1:6f:ee:39:dd:9c:14:2e:c2:14:4e:9a:
6d:24:9d:46:d8:64:88:53:1d:e7:88:b5:c0:3d:52:
d4:e4:9a:64:54:40:fc:40:dc:6d:6b:54:12:ce:c6:
d1:ea:cb:bf:b1:e0:fc:93:54:7b:6c:f8:c0:d3:4f:
ad:5d:36:52:af:82:8e:34:ce:d2:32:79:a0:39:2c:
cf:ba:3e:3a:e2:d4:0a:24:ca:72:db:0d:cb:c7:4b:
1e:8e:9d:82:37:71:cb:1b:84:b9:88:63:bc:ef:eb:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B3:7B:BA:68:63:02:4D:46:F9:99:3E:7B:52:A4:9B:08:46:BB:07
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:63:43:96:0c:c1:42:70:8b:ba:4d:f0:39:22:40:d8:a4:a5:
32:eb:4c:09:fb:1c:d6:57:fb:7e:32:da:35:e7:6c:12:c3:7f:
ed:24:ab:0a:32:ef:66:8e:b7:f9:00:22:df:68:43:2b:85:fb:
da:7c:84:2b:82:4b:0a:52:34:3f:14:c4:70:76:b3:0e:43:13:
60:7c:e4:e1:68:8b:e8:fd:c3:f0:d1:a2:24:50:dd:b8:5d:7f:
71:18:5d:46:f1:07:80:ae:c4:74:fc:39:fe:f7:d4:60:43:35:
c6:47:a7:01:45:bc:26:a7:ec:93:b1:ee:dd:9e:9a:e6:3e:9e:
dc:17:94:e4:3a:b6:34:0a:83:5f:4b:0e:8c:bc:97:6e:a6:61:
bf:39:ad:6f:d2:69:55:e3:b6:7a:93:92:9f:9d:57:01:20:d4:
c8:90:9f:86:91:89:3f:01:ac:de:46:9e:9d:37:f7:f8:2b:48:
03:e1:1a:c0:14:ee:ed:54:18:6a:70:a3:0c:e5:c7:f0:b3:90:
35:4c:5a:b0:52:c5:6c:ad:19:17:e8:f5:2e:1b:85:6a:82:fb:
69:16:5f:3f:83:a8:7b:89:09:5a:c0:90:55:15:c4:20:7c:59:
99:05:30:75:c7:bd:8f:78:81:4e:a3:fc:12:96:25:5a:38:5a:
ed:f2:68:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYrKnIRnwtmHt6TYfe9VGseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ODc3NzIwYzAxNDY4ODQ5NGVhNjkxMGM4MzQ3NGRlMTNl
OTk4MDIwHhcNMjUwNDEyMTgwMjA0WhcNMjUwNDEzMTgwMjA0WjAzMTEwLwYDVQQD
EyhkNWIzN2JiYTY4NjMwMjRkNDZmOTk5M2U3YjUyYTQ5YjA4NDZiYjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5BTi2wQi52dxFOL1UfwaxntltgJ
kqDpagJ2jtxUV2AtzB4Omap5ikwvavJxAitF1XMYv5FcW7RDzwCRZU6eOupJWRIp
Tv7QtqFF7hJaWtrsH26/ZHJ/UGkMN06Vv50psbevnSk7qdj04TklgeZ632zm1NAa
m9tiUpO/fpyyEZPZrbmr7++N4JtJtLXaOGuVluzbMPiwftbRb+453ZwULsIUTppt
JJ1G2GSIUx3niLXAPVLU5JpkVED8QNxta1QSzsbR6su/seD8k1R7bPjA00+tXTZS
r4KONM7SMnmgOSzPuj464tQKJMpy2w3Lx0sejp2CN3HLG4S5iGO87+svDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWze7poYwJNRvmZPntSpJsIRrsHMB8GA1UdIwQY
MBaAFFmHdyDAFGiElOppEMg0dN4T6ZgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmIt
NzRjY2Q4MjQwYmFkLzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmItNzRjY2Q4MjQwYmFk
LzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2NDlgzB
QnCLuk3wOSJA2KSlMutMCfsc1lf7fjLaNedsEsN/7SSrCjLvZo63+QAi32hDK4X7
2nyEK4JLClI0PxTEcHazDkMTYHzk4WiL6P3D8NGiJFDduF1/cRhdRvEHgK7EdPw5
/vfUYEM1xkenAUW8Jqfsk7Hu3Z6a5j6e3BeU5Dq2NAqDX0sOjLyXbqZhvzmtb9Jp
VeO2epOSn51XASDUyJCfhpGJPwGs3kaenTf3+CtIA+EawBTu7VQYanCjDOXH8LOQ
NUxasFLFbK0ZF+j1LhuFaoL7aRZfP4Ooe4kJWsCQVRXEIHxZmQUwdce9j3iBTqP8
EpYlWjha7fJoxw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:15:19 2025 by rpki-client