Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
File: WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft (raw, json)
Hash identifier: H+iBBrctuTafm3EF1YIHGWOet4NxzUIe8bj0bUXd2Oo=
Subject key identifier: 1F:BC:8E:35:35:87:ED:8A:DD:4D:76:5A:27:B3:30:F1:21:0D:B7:2C
Authority key identifier: 59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A
Certificate issuer: /CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
Certificate serial: 019651FF940DC2AEBCA5A7545012E1C73DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
Manifest number: 0909
Signing time: Sun 20 Apr 2025 07:00:26 +0000
Manifest this update: Sun 20 Apr 2025 07:00:26 +0000
Manifest next update: Mon 21 Apr 2025 07:00:26 +0000
Files and hashes: 1: WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl (hash: 1SdvP4nyjR5TtIPpje75eap1CQfq4aU8jdmo0NFx+9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:94:0d:c2:ae:bc:a5:a7:54:50:12:e1:c7:3d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
Validity
Not Before: Apr 20 07:00:26 2025 GMT
Not After : Apr 21 07:00:26 2025 GMT
Subject: CN=1fbc8e353587ed8add4d765a27b330f1210db72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a5:59:52:59:71:40:b7:7c:18:2d:83:0a:84:
48:60:62:3a:f1:bc:79:5c:40:54:b3:2c:09:e7:32:
fd:01:f8:9e:54:c3:da:1d:b0:14:09:b4:ac:fb:1b:
f7:6f:11:e0:37:f3:33:6a:fe:61:52:a8:b0:c1:d9:
c7:ae:0f:82:55:be:40:3e:e9:32:92:11:ec:39:3b:
07:c4:6c:55:ca:ae:71:47:a5:c1:02:38:3b:ff:8f:
29:74:c3:48:82:50:17:c1:ac:2c:22:06:75:74:b4:
7e:eb:cd:1b:5e:68:3d:b0:b1:9e:72:85:ba:44:cb:
fd:58:04:0b:83:85:34:09:50:20:a8:18:db:cc:67:
1b:de:ba:50:46:4b:c0:7a:b8:ff:33:b0:73:fa:d8:
65:83:69:8c:b9:4e:18:38:cc:19:65:53:ad:c8:6d:
b0:2f:19:46:3b:46:b9:a2:11:41:d4:0d:19:54:de:
87:da:ca:f1:1a:21:60:f3:ff:e3:ec:c9:9f:30:9c:
ec:88:b8:49:9c:8f:1b:c4:1b:fa:13:1c:d9:1e:69:
6c:c6:8d:ae:5b:b8:af:74:ac:e3:d5:c2:3f:34:d5:
e5:b0:fb:86:01:b2:95:5e:65:c1:46:96:9f:77:ad:
c7:d1:47:07:6d:49:28:1e:d5:4c:91:21:c2:5f:69:
b5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BC:8E:35:35:87:ED:8A:DD:4D:76:5A:27:B3:30:F1:21:0D:B7:2C
X509v3 Authority Key Identifier:
keyid:59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8a:db:c5:eb:87:1d:21:d8:8b:24:a3:b8:e6:c6:46:c6:76:
b7:5d:82:31:27:20:b3:b0:6f:38:f3:b3:99:d5:74:ca:70:ba:
c1:1b:d8:de:5a:d3:62:eb:97:ff:64:e7:21:3d:32:ee:2e:fb:
89:0b:53:d8:78:5c:ff:7a:07:3f:d0:65:2f:e0:21:32:00:3a:
4d:c1:04:e3:41:cf:59:48:8f:10:96:86:e0:a9:6b:16:8f:02:
24:a2:d7:8e:7b:f5:51:eb:a3:e6:fc:e0:5a:55:f7:b0:54:8a:
3c:75:69:cc:36:26:22:a8:20:9b:d6:8a:15:69:80:5e:b7:ec:
20:05:58:01:a8:d1:d5:e4:3d:02:ee:b3:b1:5b:a9:8b:77:2c:
22:c3:d5:1d:d6:1f:69:8d:a6:e0:67:e0:1c:18:fd:ea:2d:f1:
cc:01:fe:95:b6:51:15:30:03:53:33:be:fe:d3:96:23:3d:a8:
17:2b:92:72:24:90:cf:86:3e:8e:e9:da:07:9a:d5:91:ba:d2:
7d:19:ac:4d:d2:fe:59:39:24:98:98:3e:fc:4b:fc:26:97:bc:
08:56:6f:4b:f6:ad:ee:28:a7:78:3d:ab:c6:82:26:37:0d:3d:
56:9e:b7:18:31:e4:0c:14:7b:16:93:d4:65:f8:44:e5:74:5e:
60:5e:73:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZR/5QNwq68padUUBLhxz3PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NWE1MWY0NWMwY2I2Mzc5MTQyMGQwOTQzYzI4MzUxZDFi
YmJkMGEwHhcNMjUwNDIwMDcwMDI2WhcNMjUwNDIxMDcwMDI2WjAzMTEwLwYDVQQD
EygxZmJjOGUzNTM1ODdlZDhhZGQ0ZDc2NWEyN2IzMzBmMTIxMGRiNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaVZUllxQLd8GC2DCoRIYGI68bx5
XEBUsywJ5zL9AfieVMPaHbAUCbSs+xv3bxHgN/Mzav5hUqiwwdnHrg+CVb5APuky
khHsOTsHxGxVyq5xR6XBAjg7/48pdMNIglAXwawsIgZ1dLR+680bXmg9sLGecoW6
RMv9WAQLg4U0CVAgqBjbzGcb3rpQRkvAerj/M7Bz+thlg2mMuU4YOMwZZVOtyG2w
LxlGO0a5ohFB1A0ZVN6H2srxGiFg8//j7MmfMJzsiLhJnI8bxBv6ExzZHmlsxo2u
W7ivdKzj1cI/NNXlsPuGAbKVXmXBRpafd63H0UcHbUkoHtVMkSHCX2m1IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+8jjU1h+2K3U12WiezMPEhDbcsMB8GA1UdIwQY
MBaAFFlaUfRcDLY3kUINCUPCg1HRu70KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZwUjlGd010amVSUWcwSlE4S0RVZEc3dlFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zOTA0YmItMGI2Yy00ZGE1LWE1YWYt
YWFmYWFlYWVkOGJiLzEvV1ZwUjlGd010amVSUWcwSlE4S0RVZEc3dlFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zOTA0YmItMGI2Yy00ZGE1LWE1YWYtYWFmYWFlYWVkOGJi
LzEvV1ZwUjlGd010amVSUWcwSlE4S0RVZEc3dlFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYrbxeuH
HSHYiySjuObGRsZ2t12CMScgs7BvOPOzmdV0ynC6wRvY3lrTYuuX/2TnIT0y7i77
iQtT2Hhc/3oHP9BlL+AhMgA6TcEE40HPWUiPEJaG4KlrFo8CJKLXjnv1Ueuj5vzg
WlX3sFSKPHVpzDYmIqggm9aKFWmAXrfsIAVYAajR1eQ9Au6zsVupi3csIsPVHdYf
aY2m4GfgHBj96i3xzAH+lbZRFTADUzO+/tOWIz2oFyuSciSQz4Y+junaB5rVkbrS
fRmsTdL+WTkkmJg+/Ev8Jpe8CFZvS/at7iineD2rxoImNw09Vp63GDHkDBR7FpPU
ZfhE5XReYF5zfw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:27:31 2025 by rpki-client