Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
File: WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json)
Hash identifier: VO3/2s9xSwYQIxJTMnapfaM9Ux8mxagVMi1uNUIzbgo=
Subject key identifier: 97:DB:1D:77:71:53:98:5A:FC:E4:B4:57:54:5B:54:AF:83:F8:FD:DB
Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
Certificate issuer: /CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Certificate serial: 0196439F20BAB780F85F8610C5AA1E48891A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
Manifest number: 0BD5
Signing time: Thu 17 Apr 2025 12:00:24 +0000
Manifest this update: Thu 17 Apr 2025 12:00:24 +0000
Manifest next update: Fri 18 Apr 2025 12:00:24 +0000
Files and hashes: 1: PrK_NQRYp13y-DfvxtWGnq4X0dE.roa (hash: ZI/puUUas0tVvfAZ0vd46exqVsLLctxI+01KKUrwu2o=)
2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: +KIGdDcUx5P8UnQlSQ4/hAtPGIdkJBSrMiZVEP+rxbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:20:ba:b7:80:f8:5f:86:10:c5:aa:1e:48:89:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Validity
Not Before: Apr 17 12:00:24 2025 GMT
Not After : Apr 18 12:00:24 2025 GMT
Subject: CN=97db1d777153985afce4b457545b54af83f8fddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:b9:3c:86:92:56:a0:f3:d0:96:0b:93:b8:
f3:3c:f1:02:d4:a3:29:b8:b6:cb:d2:6a:1e:71:cc:
1b:a8:b7:3d:ab:55:f5:95:27:25:85:dc:31:84:31:
3c:9f:20:8b:36:10:37:61:9e:1f:b0:19:4c:05:d1:
3f:ac:3b:cb:27:cb:8f:1b:b1:bd:84:a2:d5:30:49:
98:6d:1a:7b:fa:4e:82:31:60:aa:7b:1e:20:7a:c0:
49:0d:55:e4:09:52:0c:75:fe:24:05:24:f0:cc:70:
d1:20:87:3b:6d:53:48:66:1d:03:7c:22:0b:09:52:
6b:c6:84:1b:61:5d:10:4a:69:73:97:16:1f:88:ef:
f3:95:d9:69:cf:aa:08:58:e0:5b:93:bd:bd:33:86:
b4:2d:6b:21:ac:5f:c4:f5:8a:b1:29:e1:4c:5d:30:
46:44:78:cf:30:f9:e7:74:bc:ae:19:ef:50:00:9b:
26:95:4a:e4:bb:96:2a:39:df:1f:19:87:ac:18:86:
8a:b0:08:e6:9b:e2:00:9e:69:49:ab:e1:d9:bd:b5:
12:3c:81:12:a8:bc:03:ae:33:88:c5:9b:dc:35:07:
33:2b:86:1f:26:34:76:ee:f3:57:0d:3a:f4:9a:6d:
22:ee:4e:5e:ce:c0:4b:7c:cc:5d:4e:a3:b6:b8:48:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DB:1D:77:71:53:98:5A:FC:E4:B4:57:54:5B:54:AF:83:F8:FD:DB
X509v3 Authority Key Identifier:
keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:88:8a:b0:0e:75:5a:dc:e8:31:fc:a3:bb:58:f4:e4:7d:43:
b3:87:51:ea:bb:16:de:0d:9a:8d:3c:7f:1e:0f:5f:a3:1c:ef:
57:6d:e9:81:4e:91:0d:df:12:55:ea:86:fb:3a:9f:6b:de:52:
fd:48:0e:e3:46:95:08:58:c2:a4:9e:39:cb:e7:a2:dd:f7:48:
86:bc:ad:3e:78:3d:1f:c8:ca:cc:e7:be:fc:be:39:00:93:28:
e2:0b:4b:86:de:d6:6f:ea:fa:18:bb:78:1c:94:55:ee:95:70:
a6:cb:a1:ae:7b:57:b6:7f:aa:5f:bd:7a:43:ce:ed:ff:4f:c3:
f3:a1:c5:40:1d:6b:c3:6c:54:9d:4f:54:48:56:67:b9:c5:66:
44:03:5a:b9:29:6c:ca:b1:9c:f8:69:e9:58:43:be:bb:20:ca:
2d:36:67:43:a3:cc:81:8b:ba:4c:ef:54:81:af:ae:5c:a2:e1:
a4:9d:de:8a:bc:35:63:f3:7f:59:f2:03:65:c2:d1:34:89:7f:
14:5b:27:5c:61:e9:41:aa:f6:5c:a2:d9:a4:06:6f:96:9d:fb:
fb:96:2f:03:4f:1c:14:19:b7:80:aa:a6:e2:7f:52:a0:b9:1f:
2b:a9:35:e9:61:4a:80:2f:2f:35:cd:00:a4:3e:94:b8:67:2d:
01:ed:2c:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZDnyC6t4D4X4YQxaoeSIkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MjBkNjcwNjQ5YTRhNGE5Y2IyZTY2NzcyMTcwNzQxYWRm
N2M1MWEwHhcNMjUwNDE3MTIwMDI0WhcNMjUwNDE4MTIwMDI0WjAzMTEwLwYDVQQD
Eyg5N2RiMWQ3NzcxNTM5ODVhZmNlNGI0NTc1NDViNTRhZjgzZjhmZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4u5PIaSVqDz0JYLk7jzPPEC1KMp
uLbL0moeccwbqLc9q1X1lSclhdwxhDE8nyCLNhA3YZ4fsBlMBdE/rDvLJ8uPG7G9
hKLVMEmYbRp7+k6CMWCqex4gesBJDVXkCVIMdf4kBSTwzHDRIIc7bVNIZh0DfCIL
CVJrxoQbYV0QSmlzlxYfiO/zldlpz6oIWOBbk729M4a0LWshrF/E9YqxKeFMXTBG
RHjPMPnndLyuGe9QAJsmlUrku5YqOd8fGYesGIaKsAjmm+IAnmlJq+HZvbUSPIES
qLwDrjOIxZvcNQczK4YfJjR27vNXDTr0mm0i7k5ezsBLfMxdTqO2uEjmmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfbHXdxU5ha/OS0V1RbVK+D+P3bMB8GA1UdIwQY
MBaAFFkg1nBkmkpKnLLmZ3IXB0Gt98UaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yYjhlNmQtYTJjOC00ZTdkLTk2Y2Et
YWM3NjRjOTUyMzU3LzEvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8yYjhlNmQtYTJjOC00ZTdkLTk2Y2EtYWM3NjRjOTUyMzU3
LzEvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIiKsA51
WtzoMfyju1j05H1Ds4dR6rsW3g2ajTx/Hg9foxzvV23pgU6RDd8SVeqG+zqfa95S
/UgO40aVCFjCpJ45y+ei3fdIhrytPng9H8jKzOe+/L45AJMo4gtLht7Wb+r6GLt4
HJRV7pVwpsuhrntXtn+qX716Q87t/0/D86HFQB1rw2xUnU9USFZnucVmRANauSls
yrGc+GnpWEO+uyDKLTZnQ6PMgYu6TO9Uga+uXKLhpJ3eirw1Y/N/WfIDZcLRNIl/
FFsnXGHpQar2XKLZpAZvlp37+5YvA08cFBm3gKqm4n9SoLkfK6k16WFKgC8vNc0A
pD6UuGctAe0svw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:21:26 2025 by rpki-client