Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
File: wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft (raw, json)
Hash identifier: OiqFHUq97l81bdmA+ARq4VJ4oUR6VaGWPfmCHhIbMWA=
Subject key identifier: 5C:14:F0:59:B1:D1:FF:F1:10:27:6A:C2:B6:64:AF:95:BA:FB:C0:28
Authority key identifier: C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
Certificate issuer: /CN=c2c140c8218970ef60e689354f16b63af4900ad5
Certificate serial: 01964820BE0B293BF2FA847D9471AED3A0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
Manifest number: 0976
Signing time: Fri 18 Apr 2025 09:00:27 +0000
Manifest this update: Fri 18 Apr 2025 09:00:27 +0000
Manifest next update: Sat 19 Apr 2025 09:00:27 +0000
Files and hashes: 1: wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl (hash: dnswnnmPf7EJPSihhVOt9IxLQIa4jt4k/jOOSObmD1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:20:be:0b:29:3b:f2:fa:84:7d:94:71:ae:d3:a0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c140c8218970ef60e689354f16b63af4900ad5
Validity
Not Before: Apr 18 09:00:27 2025 GMT
Not After : Apr 19 09:00:27 2025 GMT
Subject: CN=5c14f059b1d1fff110276ac2b664af95bafbc028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:e2:a0:50:e5:ed:2f:ea:13:2c:c2:40:86:
71:90:6d:60:da:0d:8e:bf:bb:96:aa:f2:e4:95:14:
44:db:95:54:5b:46:c2:95:08:3f:50:7b:48:5b:a4:
12:88:07:84:f8:6d:a4:a8:4d:52:d1:3f:c9:99:91:
da:32:a9:c4:c4:d7:b9:ef:16:6d:89:4e:6e:c3:1e:
5d:56:9f:5f:d1:76:78:01:73:f9:25:22:46:5f:b0:
54:19:06:51:b7:97:d4:0d:fb:c5:de:ec:a2:47:88:
e5:70:e3:a2:7c:4f:b0:57:86:1e:3a:53:23:e6:c3:
f8:49:87:31:7f:e4:ed:3d:5d:05:5b:8f:3a:7f:07:
56:7e:c6:30:94:0c:d7:ed:0f:cb:68:1e:a5:ac:b1:
47:6b:87:87:df:92:67:06:cc:e2:34:ac:7e:d9:c9:
99:9e:c6:3c:ee:35:3d:d4:e4:24:41:1b:b6:94:41:
77:f9:ef:6a:f6:cc:63:44:75:20:4f:c8:36:41:b1:
c9:fe:6a:20:72:0e:b5:4d:4c:d3:f3:17:28:91:66:
73:81:5d:a8:a7:71:1d:95:34:a9:c4:6b:c2:52:df:
aa:cf:6a:3c:fc:a9:9b:cd:f0:b0:e3:d2:d6:60:17:
4c:0b:36:3f:af:a3:5d:2f:ce:7c:c3:8e:f0:0f:04:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:14:F0:59:B1:D1:FF:F1:10:27:6A:C2:B6:64:AF:95:BA:FB:C0:28
X509v3 Authority Key Identifier:
keyid:C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b7:04:bf:76:93:ce:aa:1f:ab:42:12:fd:b5:54:37:da:c2:
97:7f:41:2e:53:62:13:22:da:d4:39:26:b9:5d:50:a3:6a:b5:
71:95:03:d6:c8:2a:6d:fc:22:9b:f6:8e:66:76:01:44:41:44:
fc:ca:89:d9:7d:94:a8:7a:37:55:33:02:42:b5:35:fc:a2:ff:
6f:d1:01:60:10:66:4b:0a:79:a1:b3:24:dc:de:a4:be:27:ab:
29:88:f7:4a:d1:89:35:63:bf:3f:d2:fb:58:bb:54:a5:c2:77:
8a:50:12:7c:93:e7:3d:19:78:1e:e5:a3:01:19:6c:a1:5c:c2:
48:86:ea:43:8d:16:e6:e9:c6:d8:2e:e6:bb:cc:f5:0c:50:4d:
53:d5:07:8a:1c:48:0d:50:1d:18:62:df:e6:7f:a4:f6:6e:2c:
53:5e:f6:d9:4d:5c:d6:cf:ce:fa:89:c5:49:88:38:8b:04:5d:
08:76:2b:fa:56:4c:4a:6a:03:d9:3c:d1:95:ad:12:d0:05:b5:
b3:ec:64:dc:df:58:1d:9d:36:d5:dc:35:ca:1b:61:2c:77:40:
02:6a:c7:0c:52:1e:a0:dd:8a:7d:d0:16:94:a3:5e:cb:e4:86:
0b:70:7f:68:d1:79:fb:27:a8:75:d9:04:62:6f:76:13:de:d3:
10:0f:dc:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIIL4LKTvy+oR9lHGu06C4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzE0MGM4MjE4OTcwZWY2MGU2ODkzNTRmMTZiNjNhZjQ5
MDBhZDUwHhcNMjUwNDE4MDkwMDI3WhcNMjUwNDE5MDkwMDI3WjAzMTEwLwYDVQQD
Eyg1YzE0ZjA1OWIxZDFmZmYxMTAyNzZhYzJiNjY0YWY5NWJhZmJjMDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGTioFDl7S/qEyzCQIZxkG1g2g2O
v7uWqvLklRRE25VUW0bClQg/UHtIW6QSiAeE+G2kqE1S0T/JmZHaMqnExNe57xZt
iU5uwx5dVp9f0XZ4AXP5JSJGX7BUGQZRt5fUDfvF3uyiR4jlcOOifE+wV4YeOlMj
5sP4SYcxf+TtPV0FW486fwdWfsYwlAzX7Q/LaB6lrLFHa4eH35JnBsziNKx+2cmZ
nsY87jU91OQkQRu2lEF3+e9q9sxjRHUgT8g2QbHJ/mogcg61TUzT8xcokWZzgV2o
p3EdlTSpxGvCUt+qz2o8/KmbzfCw49LWYBdMCzY/r6NdL858w47wDwTjKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwU8Fmx0f/xECdqwrZkr5W6+8AoMB8GA1UdIwQY
MBaAFMLBQMghiXDvYOaJNU8Wtjr0kArVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2Qt
YWQ1ODY4ODI1YzM2LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2QtYWQ1ODY4ODI1YzM2
LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7cEv3aT
zqofq0IS/bVUN9rCl39BLlNiEyLa1DkmuV1Qo2q1cZUD1sgqbfwim/aOZnYBREFE
/MqJ2X2UqHo3VTMCQrU1/KL/b9EBYBBmSwp5obMk3N6kvierKYj3StGJNWO/P9L7
WLtUpcJ3ilASfJPnPRl4HuWjARlsoVzCSIbqQ40W5unG2C7mu8z1DFBNU9UHihxI
DVAdGGLf5n+k9m4sU1722U1c1s/O+onFSYg4iwRdCHYr+lZMSmoD2TzRla0S0AW1
s+xk3N9YHZ021dw1yhthLHdAAmrHDFIeoN2KfdAWlKNey+SGC3B/aNF5+yeoddkE
Ym92E97TEA/cWg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:26:20 2025 by rpki-client