Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
File: WArULGTE9V_s54skJwcf5mhMIMk.mft (raw, json)
Hash identifier: rda/7HH81RgDDsnmE5QCl3fA+8w0tSQSe03tLuDa74Y=
Subject key identifier: C3:FF:9D:61:81:98:D5:BC:8E:58:46:37:4C:3C:24:61:73:D9:87:B9
Authority key identifier: 58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
Certificate issuer: /CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Certificate serial: 01964F35814C7BB993FBDC71D193A08EEBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 18:00:28 +0000
Manifest this update: Sat 19 Apr 2025 18:00:28 +0000
Manifest next update: Sun 20 Apr 2025 18:00:28 +0000
Files and hashes: 1: WArULGTE9V_s54skJwcf5mhMIMk.crl (hash: owpj1lsbtTuk49oMD+FXRNdRBcPH1ri6aWK0VDoFKQc=)
2: oz4j6XAA3JSDTaFAUqvMD6Q_gKU.roa (hash: alaiQ7nYgvlQJD63x0493TKwZeIQqdX8mBDJEuCO9ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:81:4c:7b:b9:93:fb:dc:71:d1:93:a0:8e:eb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Validity
Not Before: Apr 19 18:00:28 2025 GMT
Not After : Apr 20 18:00:28 2025 GMT
Subject: CN=c3ff9d618198d5bc8e5846374c3c246173d987b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:59:88:4b:33:ee:27:c5:50:d9:a2:6a:fd:59:
13:6b:ff:e6:bd:bd:40:22:17:73:5c:17:63:f0:de:
38:70:74:b5:2a:1e:27:a1:d8:de:81:aa:5c:50:96:
72:83:33:b2:5f:1b:e0:93:4d:be:96:d3:81:11:b1:
b6:b0:e9:7f:31:02:98:ab:ec:73:93:47:08:e3:9a:
bc:03:a6:83:df:90:e3:15:09:6b:49:db:b3:04:02:
97:72:2a:a0:ea:ae:8b:2d:91:fc:2b:33:2b:c5:32:
b5:9e:41:b7:93:8a:fb:04:75:2a:4d:b7:b7:bd:42:
5b:0e:b9:83:2b:f0:fd:17:f9:9e:47:96:95:13:4a:
26:c3:b1:48:4f:37:32:70:88:1d:a1:f8:55:e0:4b:
38:55:b0:4d:95:06:4b:f1:07:38:0e:d2:17:34:e9:
fc:0e:dd:50:4d:98:e8:3c:9e:1f:d6:91:c3:69:7d:
ec:97:99:8c:8e:5d:86:0f:33:24:1d:e9:06:fb:c9:
6c:3d:da:65:42:a1:73:e5:87:9b:12:df:6e:17:fd:
31:41:a5:7f:44:f8:cc:82:a0:0e:69:3a:34:f5:83:
be:ef:da:93:23:d8:fd:69:41:58:6a:1d:f1:c8:10:
43:44:7d:85:c5:bd:23:2f:d7:ed:95:62:00:fe:22:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FF:9D:61:81:98:D5:BC:8E:58:46:37:4C:3C:24:61:73:D9:87:B9
X509v3 Authority Key Identifier:
keyid:58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b6:f6:4e:9d:79:43:95:22:7a:ed:ac:d0:04:8f:18:f7:59:
39:62:25:91:03:87:28:b4:79:db:59:b3:71:fc:e7:32:58:fb:
6e:e4:11:16:61:e0:8a:5e:4f:d2:8f:33:db:ba:22:43:07:75:
b3:63:a5:96:77:b1:58:81:7f:54:33:1d:82:91:50:59:ac:15:
0b:95:dd:75:27:78:d7:1b:13:e4:81:42:14:b4:63:03:c0:20:
d8:35:48:d9:66:a7:5e:04:2e:0a:2a:6d:be:31:a2:90:e1:b7:
fa:ff:3a:2d:b7:61:39:87:c2:f1:4e:f6:ef:1c:1a:da:56:d5:
39:ba:74:9e:d7:b8:8f:6b:b8:92:c7:cc:e0:ef:4c:f1:fe:55:
04:73:a1:de:fb:42:87:c4:1a:b0:c9:77:94:39:ec:07:8b:a7:
69:c5:d1:29:1d:a9:72:08:a7:20:2c:93:74:7e:90:08:3b:d5:
fd:30:7d:89:32:94:43:08:48:5d:d6:e7:72:4c:86:28:74:2e:
9b:3e:d8:5f:e8:9f:a0:05:58:b1:f8:69:39:89:29:58:1b:36:
be:89:d7:b4:39:f9:9f:76:18:22:cf:17:42:f2:ff:58:d7:f9:
94:c4:80:4f:9f:ad:2b:96:43:32:d4:4d:79:e5:dd:aa:31:e0:
f9:95:02:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPNYFMe7mT+9xx0ZOgjuvLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MGFkNDJjNjRjNGY1NWZlY2U3OGIyNDI3MDcxZmU2Njg0
YzIwYzkwHhcNMjUwNDE5MTgwMDI4WhcNMjUwNDIwMTgwMDI4WjAzMTEwLwYDVQQD
EyhjM2ZmOWQ2MTgxOThkNWJjOGU1ODQ2Mzc0YzNjMjQ2MTczZDk4N2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VmISzPuJ8VQ2aJq/VkTa//mvb1A
IhdzXBdj8N44cHS1Kh4nodjegapcUJZygzOyXxvgk02+ltOBEbG2sOl/MQKYq+xz
k0cI45q8A6aD35DjFQlrSduzBAKXciqg6q6LLZH8KzMrxTK1nkG3k4r7BHUqTbe3
vUJbDrmDK/D9F/meR5aVE0omw7FITzcycIgdofhV4Es4VbBNlQZL8Qc4DtIXNOn8
Dt1QTZjoPJ4f1pHDaX3sl5mMjl2GDzMkHekG+8lsPdplQqFz5YebEt9uF/0xQaV/
RPjMgqAOaTo09YO+79qTI9j9aUFYah3xyBBDRH2Fxb0jL9ftlWIA/iKjWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMP/nWGBmNW8jlhGN0w8JGFz2Ye5MB8GA1UdIwQY
MBaAFFgK1CxkxPVf7OeLJCcHH+ZoTCDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84Y2IzNGQtOTRlNy00ZTU3LTk4YjEt
NzM2OWE0MjU3MDE0LzEvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84Y2IzNGQtOTRlNy00ZTU3LTk4YjEtNzM2OWE0MjU3MDE0
LzEvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7b2Tp15
Q5Uieu2s0ASPGPdZOWIlkQOHKLR521mzcfznMlj7buQRFmHgil5P0o8z27oiQwd1
s2OllnexWIF/VDMdgpFQWawVC5XddSd41xsT5IFCFLRjA8Ag2DVI2WanXgQuCipt
vjGikOG3+v86LbdhOYfC8U727xwa2lbVObp0nte4j2u4ksfM4O9M8f5VBHOh3vtC
h8QasMl3lDnsB4unacXRKR2pcginICyTdH6QCDvV/TB9iTKUQwhIXdbnckyGKHQu
mz7YX+ifoAVYsfhpOYkpWBs2vonXtDn5n3YYIs8XQvL/WNf5lMSAT5+tK5ZDMtRN
eeXdqjHg+ZUCTg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:06 2025 by rpki-client