Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
File: WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json)
Hash identifier: BwUPy074v5OXHl+FA0INQiEq0YSJ5neCiDjic+zY4Uo=
Subject key identifier: FF:06:79:3F:17:4E:A7:45:23:3F:84:F4:FD:CC:64:B5:53:7B:3E:8B
Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
Certificate issuer: /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Certificate serial: 01965D5F65754080A6094659E6A3EC64AD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
Manifest number: 085E
Signing time: Tue 22 Apr 2025 12:00:54 +0000
Manifest this update: Tue 22 Apr 2025 12:00:54 +0000
Manifest next update: Wed 23 Apr 2025 12:00:54 +0000
Files and hashes: 1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: 1hpF3s8qaia9rgKq6s/mtF2/Bqayf3fpj0yoDPJtkiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:65:75:40:80:a6:09:46:59:e6:a3:ec:64:ad:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Validity
Not Before: Apr 22 12:00:54 2025 GMT
Not After : Apr 23 12:00:54 2025 GMT
Subject: CN=ff06793f174ea745233f84f4fdcc64b5537b3e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:ea:b1:52:c3:78:56:84:fd:09:22:ed:0d:
44:89:46:d2:d8:73:2c:51:cc:6d:a3:2f:9f:59:e2:
66:2d:71:90:93:cd:e3:79:0b:5a:ee:6c:ea:23:01:
35:26:25:19:cb:d1:c0:ad:2e:4e:b1:5e:f5:bb:7e:
0b:17:88:20:aa:6f:6d:84:c2:ce:a7:2a:69:19:47:
11:3f:e2:19:b6:9a:f8:82:a6:27:47:2f:fc:aa:f3:
02:a7:16:34:3a:51:8c:3b:72:16:6c:7c:84:22:8f:
fe:f7:f8:bb:06:d5:28:9f:79:56:c5:eb:6a:f8:d7:
52:08:c2:5e:6a:59:19:88:00:02:95:23:c8:f4:ef:
51:f3:a9:b9:5b:71:36:5f:b2:52:b1:5e:08:33:3d:
5a:a1:8b:7d:cd:4a:91:6c:a9:5d:c3:44:04:7d:4d:
e5:11:f0:af:d1:e5:86:bf:d6:d2:87:a4:43:fe:06:
be:6d:d8:2b:2f:a2:c2:e9:c4:f6:57:c1:cf:19:e6:
d4:ba:6f:3b:5f:71:45:a9:86:86:ad:fb:1a:3e:5b:
0a:20:82:36:ae:dc:e9:be:63:9d:ad:e2:0a:6f:40:
f7:e0:94:a1:de:71:23:b4:3c:3d:ff:4e:75:c7:60:
66:9f:dd:f1:93:1a:20:6b:e2:1f:c2:98:a5:db:3b:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:06:79:3F:17:4E:A7:45:23:3F:84:F4:FD:CC:64:B5:53:7B:3E:8B
X509v3 Authority Key Identifier:
keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d5:72:b2:3e:77:39:91:4b:d8:d8:6a:e9:33:ec:d8:5e:f2:
e7:9f:d3:07:8f:bc:10:57:36:ee:a3:17:6a:a3:85:99:1a:69:
0f:5a:51:26:a0:07:1c:50:52:75:49:e2:bd:e5:a9:b0:13:91:
a7:11:aa:f5:54:1a:e1:9e:d4:88:ca:96:df:79:56:7b:b4:06:
be:20:ce:a2:5c:f9:fa:57:26:8a:db:5a:0a:90:3b:0e:41:dc:
07:72:27:45:23:4a:0f:4a:c1:2a:f4:6c:6b:e0:fa:a7:27:94:
fb:40:ea:06:7c:e2:dd:1f:bd:e0:a9:cf:a9:18:16:5d:d3:20:
19:93:bd:f6:12:74:01:6a:f9:09:90:60:da:1b:52:01:36:bf:
e6:94:c0:55:91:0f:3a:02:10:7d:18:28:fb:23:ff:37:c0:87:
c2:ca:88:4a:25:06:39:69:c3:67:39:9b:dc:2c:07:bc:62:50:
a9:9f:8f:10:c7:46:5c:b6:7f:03:67:23:30:92:2d:a1:4e:3d:
61:7e:97:f0:b7:e7:ff:56:62:a5:1b:0f:dd:1f:04:64:b1:c9:
1e:96:a0:75:8c:4c:eb:18:87:c7:d4:34:53:9b:e4:0a:a0:d8:
16:76:1d:e2:c2:97:7e:19:37:1b:29:a4:ed:8c:2e:d7:51:0f:
20:72:7e:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdX2V1QICmCUZZ5qPsZK0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMGFjMzhkZWE2YTcwNGFkYmFiYTkzODFjMWRjMDIzNTZk
M2FhOTAwHhcNMjUwNDIyMTIwMDU0WhcNMjUwNDIzMTIwMDU0WjAzMTEwLwYDVQQD
EyhmZjA2NzkzZjE3NGVhNzQ1MjMzZjg0ZjRmZGNjNjRiNTUzN2IzZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5TqsVLDeFaE/Qki7Q1EiUbS2HMs
Ucxtoy+fWeJmLXGQk83jeQta7mzqIwE1JiUZy9HArS5OsV71u34LF4ggqm9thMLO
pyppGUcRP+IZtpr4gqYnRy/8qvMCpxY0OlGMO3IWbHyEIo/+9/i7BtUon3lWxetq
+NdSCMJealkZiAAClSPI9O9R86m5W3E2X7JSsV4IMz1aoYt9zUqRbKldw0QEfU3l
EfCv0eWGv9bSh6RD/ga+bdgrL6LC6cT2V8HPGebUum87X3FFqYaGrfsaPlsKIII2
rtzpvmOdreIKb0D34JSh3nEjtDw9/051x2Bmn93xkxoga+Ifwpil2zvI1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8GeT8XTqdFIz+E9P3MZLVTez6LMB8GA1UdIwQY
MBaAFFsKw43qanBK26upOBwdwCNW06qQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dyRGplcHFjRXJicTZrNEhCM0FJMWJUcXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83MjJiZDYtYmNlZi00MzRmLWIwMTEt
OTQ4ZDg2OTEzNTM4LzEvV3dyRGplcHFjRXJicTZrNEhCM0FJMWJUcXBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83MjJiZDYtYmNlZi00MzRmLWIwMTEtOTQ4ZDg2OTEzNTM4
LzEvV3dyRGplcHFjRXJicTZrNEhCM0FJMWJUcXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9Vysj53
OZFL2Nhq6TPs2F7y55/TB4+8EFc27qMXaqOFmRppD1pRJqAHHFBSdUniveWpsBOR
pxGq9VQa4Z7UiMqW33lWe7QGviDOolz5+lcmittaCpA7DkHcB3InRSNKD0rBKvRs
a+D6pyeU+0DqBnzi3R+94KnPqRgWXdMgGZO99hJ0AWr5CZBg2htSATa/5pTAVZEP
OgIQfRgo+yP/N8CHwsqISiUGOWnDZzmb3CwHvGJQqZ+PEMdGXLZ/A2cjMJItoU49
YX6X8Lfn/1ZipRsP3R8EZLHJHpagdYxM6xiHx9Q0U5vkCqDYFnYd4sKXfhk3Gymk
7Ywu11EPIHJ++A==
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:28:40 2025 by rpki-client