Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
File: WnVplLspLknsxjN7f5XWnuKvYeE.mft (raw, json)
Hash identifier: +UakZ7U6neSD7VOgwa49efzEOyQb8iwZ648ah07WpWw=
Subject key identifier: 54:EA:25:12:B6:0E:1F:B6:A9:25:B4:4F:65:0C:BB:A4:3C:13:26:B9
Authority key identifier: 5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
Certificate issuer: /CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Certificate serial: 0194BAF2614E3988B1CE0B6B28EE69BF5282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 06:00:34 +0000
Manifest this update: Fri 31 Jan 2025 06:00:34 +0000
Manifest next update: Sat 01 Feb 2025 06:00:34 +0000
Files and hashes: 1: 2GHxfiOPwbVOTy5G53i5QmAAwSg.roa (hash: iadwsn+4MKu/mlQdggoj9cx+xrbMZwAE31ck5bH3Eho=)
2: WnVplLspLknsxjN7f5XWnuKvYeE.crl (hash: sPfcJXo1LtsRSibFCFpID0UtYbfFksslAlKpYg/ZwJc=)
3: bWzRkWCt3v3bm-IZIROioFCJ8mo.roa (hash: Gh5JxyL071JSfkk/OFs2Jh7lq9MVbiHj6edZCvfMErQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:61:4e:39:88:b1:ce:0b:6b:28:ee:69:bf:52:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Validity
Not Before: Jan 31 06:00:34 2025 GMT
Not After : Feb 1 06:00:34 2025 GMT
Subject: CN=54ea2512b60e1fb6a925b44f650cbba43c1326b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:c5:a5:29:cc:89:cb:fc:eb:9a:60:3f:99:
b6:a5:ae:f1:71:d0:c8:4a:62:db:d8:35:0b:52:a4:
71:b8:1c:58:ab:d2:4f:04:e3:1f:ab:8f:fa:c9:3c:
60:9f:66:12:f9:d2:06:4a:37:52:32:81:6a:a4:9c:
98:32:59:3a:f1:f9:fd:16:32:f5:fe:99:06:5e:a9:
53:ab:5a:53:da:15:54:e6:8a:c2:21:1c:4c:e3:3b:
d7:0d:ac:11:d9:1c:49:9b:d9:b0:23:b6:53:20:24:
2d:59:38:3e:4e:d4:8e:dc:d4:57:f3:39:84:8a:83:
3f:cd:3b:eb:ed:71:4c:7d:28:bd:e3:a3:27:13:4a:
c3:dd:18:b7:f8:a8:2f:0d:03:06:32:09:bf:34:6e:
15:4a:ee:0f:1f:d4:03:4d:77:ac:2a:36:af:89:09:
19:1e:b0:97:06:92:96:4d:66:25:f6:13:0b:a3:03:
bf:8a:64:68:68:a5:c8:c9:9d:1c:5a:15:5e:d2:03:
e4:d3:16:70:b5:6e:de:6f:a5:ed:34:54:91:ad:bf:
43:5c:6e:5e:c0:f2:fd:17:54:8e:c2:fa:01:8b:c8:
15:df:8d:70:9b:1d:c4:a8:9e:da:1f:c5:5f:a6:13:
6f:ce:53:cf:f7:9e:f0:0a:9d:6e:df:3c:50:8a:6a:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EA:25:12:B6:0E:1F:B6:A9:25:B4:4F:65:0C:BB:A4:3C:13:26:B9
X509v3 Authority Key Identifier:
keyid:5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:5e:8f:0e:95:1c:3a:35:b2:43:32:a0:34:89:4a:36:8c:
04:2f:10:d9:3e:0b:95:9c:9c:f0:7a:5a:8e:3f:f4:1e:ad:9f:
92:71:fd:35:06:5f:28:b8:b8:0f:e9:62:f1:28:4b:fa:ad:8c:
bc:1b:2a:2b:e8:58:94:e1:63:f0:78:67:6f:ae:92:c5:4a:75:
4f:82:40:a2:a2:97:c5:76:d6:a0:53:7d:c4:3e:e9:4e:e3:14:
7b:02:a8:61:37:d0:26:c9:90:ce:ff:a2:fb:3d:a9:6d:6e:ca:
18:ca:8c:09:db:58:ad:d5:9a:9e:7f:40:d0:da:02:ba:89:b1:
db:3e:65:3d:36:98:c1:2e:ae:35:eb:79:8a:65:30:96:a8:bb:
0c:d3:2e:08:69:0c:4b:49:6b:31:d3:91:c7:8b:bd:e7:99:44:
d2:39:e9:77:f2:d9:4c:99:69:df:3d:16:ff:2c:95:bd:51:ab:
92:e3:c2:ed:b9:4e:28:d6:dc:e4:dc:79:a6:f0:ed:be:39:28:
01:73:82:04:cf:3e:61:1b:16:17:8b:37:19:00:1d:71:b4:eb:
24:37:d5:c9:4b:38:d4:d0:7a:63:f6:13:ca:df:fc:2e:0c:65:
57:2a:13:41:68:34:a1:7e:52:d6:94:c4:59:43:fa:a1:22:1a:
df:e5:95:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68mFOOYixzgtrKO5pv1KCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNzU2OTk0YmIyOTJlNDllY2M2MzM3YjdmOTVkNjllZTJh
ZjYxZTEwHhcNMjUwMTMxMDYwMDM0WhcNMjUwMjAxMDYwMDM0WjAzMTEwLwYDVQQD
Eyg1NGVhMjUxMmI2MGUxZmI2YTkyNWI0NGY2NTBjYmJhNDNjMTMyNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvXFpSnMicv865pgP5m2pa7xcdDI
SmLb2DULUqRxuBxYq9JPBOMfq4/6yTxgn2YS+dIGSjdSMoFqpJyYMlk68fn9FjL1
/pkGXqlTq1pT2hVU5orCIRxM4zvXDawR2RxJm9mwI7ZTICQtWTg+TtSO3NRX8zmE
ioM/zTvr7XFMfSi946MnE0rD3Ri3+KgvDQMGMgm/NG4VSu4PH9QDTXesKjaviQkZ
HrCXBpKWTWYl9hMLowO/imRoaKXIyZ0cWhVe0gPk0xZwtW7eb6XtNFSRrb9DXG5e
wPL9F1SOwvoBi8gV341wmx3EqJ7aH8VfphNvzlPP957wCp1u3zxQimqbXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTqJRK2Dh+2qSW0T2UMu6Q8Eya5MB8GA1UdIwQY
MBaAFFp1aZS7KS5J7MYze3+V1p7ir2HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV25WcGxMc3BMa25zeGpON2Y1WFdudUt2WWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84M2IwN2YtMWQyMi00YWUwLWEyZGUt
NGUwYWE0MmExNWE4LzEvV25WcGxMc3BMa25zeGpON2Y1WFdudUt2WWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84M2IwN2YtMWQyMi00YWUwLWEyZGUtNGUwYWE0MmExNWE4
LzEvV25WcGxMc3BMa25zeGpON2Y1WFdudUt2WWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzVejw6V
HDo1skMyoDSJSjaMBC8Q2T4LlZyc8Hpajj/0Hq2fknH9NQZfKLi4D+li8ShL+q2M
vBsqK+hYlOFj8Hhnb66SxUp1T4JAoqKXxXbWoFN9xD7pTuMUewKoYTfQJsmQzv+i
+z2pbW7KGMqMCdtYrdWann9A0NoCuomx2z5lPTaYwS6uNet5imUwlqi7DNMuCGkM
S0lrMdORx4u955lE0jnpd/LZTJlp3z0W/yyVvVGrkuPC7blOKNbc5Nx5pvDtvjko
AXOCBM8+YRsWF4s3GQAdcbTrJDfVyUs41NB6Y/YTyt/8LgxlVyoTQWg0oX5S1pTE
WUP6oSIa3+WVSw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:26 2025 by rpki-client on console-fra.rpki-client.org