Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier: 4uwvHNQ1dwwd5GHqK+3JBzP6UA7FFiXzaXBCRPWylDI=
Subject key identifier: E1:4D:C4:0B:9D:B2:B7:39:F5:6F:E7:10:48:E0:74:AB:6B:CC:5A:97
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial: 019652A4F18EE6C4BE9B22420A1B3B29D4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 10:01:03 +0000
Manifest this update: Sun 20 Apr 2025 10:01:03 +0000
Manifest next update: Mon 21 Apr 2025 10:01:03 +0000
Files and hashes: 1: VI7MbqfUntVnN_kMd5I5Qw5bl-4.roa (hash: yObUZYg1Kq2iUCPpFKIeS8ZVs5ZMohWqBvzb45a6JFM=)
2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: h3evLDMAJC70nkiNEnluqHYRFKoBMQhjUBcYOlNrCXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:f1:8e:e6:c4:be:9b:22:42:0a:1b:3b:29:d4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Validity
Not Before: Apr 20 10:01:03 2025 GMT
Not After : Apr 21 10:01:03 2025 GMT
Subject: CN=e14dc40b9db2b739f56fe71048e074ab6bcc5a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:f1:a6:14:eb:d0:c5:9b:42:1c:b0:19:37:
79:29:72:52:f8:78:b8:30:b5:11:c4:5d:dc:74:2c:
ec:4d:bd:9a:2c:bf:49:43:eb:92:fc:e7:af:d3:4c:
5b:69:78:63:d3:f7:c7:66:aa:45:09:8c:a1:de:88:
60:d7:4f:b0:18:d3:b5:89:e7:88:c9:d0:24:23:fa:
27:d7:98:d0:c2:10:a3:c3:0b:f2:30:76:74:cf:e9:
1b:a6:90:9d:c5:0b:ec:3b:68:39:ed:3d:7d:42:3b:
8c:12:47:d5:b2:3b:47:02:3f:23:e5:b8:51:dd:53:
68:91:9b:83:0a:3e:ee:34:9b:36:fc:53:26:08:d7:
26:6b:a1:fd:20:4a:d2:32:f9:3b:7b:9d:08:7d:d5:
7f:6f:74:1a:48:37:4d:88:75:95:a3:45:dc:e0:c9:
b5:43:d0:12:56:0c:ac:1b:43:38:b4:fb:58:0f:fe:
d0:7c:18:05:45:17:94:9e:3b:df:f5:24:f1:40:ab:
40:f7:30:a3:7f:7e:85:e9:25:13:51:82:e9:58:dd:
3a:e6:50:d3:2d:86:35:02:d5:2f:23:b9:4c:d9:03:
02:20:e3:79:92:59:28:1a:e8:71:b9:cb:0f:3d:f2:
cb:24:ee:75:e8:6f:8f:e7:86:3e:48:93:ac:f6:04:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4D:C4:0B:9D:B2:B7:39:F5:6F:E7:10:48:E0:74:AB:6B:CC:5A:97
X509v3 Authority Key Identifier:
keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d2:4a:d9:7c:88:46:44:e2:1c:a9:a8:c4:80:fe:e4:2a:84:
21:d2:0d:7e:1b:da:d8:54:03:23:0b:20:3a:0c:e9:8c:25:80:
8b:5c:bf:aa:90:d4:4b:08:b1:ed:d7:88:db:10:b5:f6:af:df:
03:4f:80:f9:9c:39:f1:4c:ee:6f:2b:a2:5c:2a:83:f8:05:64:
19:29:4d:c1:16:6d:1c:cc:f4:48:64:09:ac:f1:2d:e7:49:2d:
16:5a:c1:84:cf:07:4c:ea:4f:39:54:ef:b7:22:f5:2b:29:86:
0d:4a:ae:1d:3a:b8:2b:c2:86:af:52:61:5e:c6:11:5c:a8:9b:
25:30:c8:16:c2:ff:b1:c5:c8:46:90:5d:d8:7f:48:fa:f6:8a:
8a:06:3c:cc:be:ca:c9:c0:66:90:eb:46:06:c6:ce:12:d6:4e:
f0:f2:e6:31:72:51:7d:3f:16:c6:1f:32:b3:c5:c2:ed:f0:c9:
b7:b5:83:04:74:bc:b6:c4:66:96:e0:28:e1:0a:a0:be:f1:7e:
59:04:b3:32:1d:71:43:35:09:c0:21:46:6b:57:01:f5:40:3a:
63:e4:03:ac:e7:de:c8:0c:24:b6:0f:80:b9:95:69:d7:58:44:
9f:e3:6c:06:86:8f:d9:2d:e8:1e:c7:ea:cf:74:1a:f5:0b:48:
fe:a2:87:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpPGO5sS+myJCChs7KdTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGQxNmMzMzU0MDdiZjBkMGE1MWNlZjliOWMxYzUzMTAy
ODBmNDgwHhcNMjUwNDIwMTAwMTAzWhcNMjUwNDIxMTAwMTAzWjAzMTEwLwYDVQQD
EyhlMTRkYzQwYjlkYjJiNzM5ZjU2ZmU3MTA0OGUwNzRhYjZiY2M1YTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1HxphTr0MWbQhywGTd5KXJS+Hi4
MLURxF3cdCzsTb2aLL9JQ+uS/Oev00xbaXhj0/fHZqpFCYyh3ohg10+wGNO1ieeI
ydAkI/on15jQwhCjwwvyMHZ0z+kbppCdxQvsO2g57T19QjuMEkfVsjtHAj8j5bhR
3VNokZuDCj7uNJs2/FMmCNcma6H9IErSMvk7e50IfdV/b3QaSDdNiHWVo0Xc4Mm1
Q9ASVgysG0M4tPtYD/7QfBgFRReUnjvf9STxQKtA9zCjf36F6SUTUYLpWN065lDT
LYY1AtUvI7lM2QMCION5klkoGuhxucsPPfLLJO516G+P54Y+SJOs9gS/LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFNxAudsrc59W/nEEjgdKtrzFqXMB8GA1UdIwQY
MBaAFK9NFsM1QHvw0KUc75ucHFMQKA9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjAwV3d6VkFlX0RRcFJ6dm01d2NVeEFvRDBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kYmMwZTYtMjU1NS00YmYzLTlhYjEt
OTkxNTk5MGJjYjU5LzEvcjAwV3d6VkFlX0RRcFJ6dm01d2NVeEFvRDBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kYmMwZTYtMjU1NS00YmYzLTlhYjEtOTkxNTk5MGJjYjU5
LzEvcjAwV3d6VkFlX0RRcFJ6dm01d2NVeEFvRDBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9JK2XyI
RkTiHKmoxID+5CqEIdINfhva2FQDIwsgOgzpjCWAi1y/qpDUSwix7deI2xC19q/f
A0+A+Zw58UzubyuiXCqD+AVkGSlNwRZtHMz0SGQJrPEt50ktFlrBhM8HTOpPOVTv
tyL1KymGDUquHTq4K8KGr1JhXsYRXKibJTDIFsL/scXIRpBd2H9I+vaKigY8zL7K
ycBmkOtGBsbOEtZO8PLmMXJRfT8Wxh8ys8XC7fDJt7WDBHS8tsRmluAo4QqgvvF+
WQSzMh1xQzUJwCFGa1cB9UA6Y+QDrOfeyAwktg+AuZVp11hEn+NsBoaP2S3oHsfq
z3Qa9QtI/qKH4w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:08 2025 by rpki-client