Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
File: WRgezM-jp4ELruDwW_Oge7j3jWY.mft (raw, json)
Hash identifier: o8a1LeirMbkTdQJWlhn+QMHsyeRuuzkbV1XQUWFBTIM=
Subject key identifier: 6E:CF:CD:19:82:EA:3E:46:2F:22:8A:D9:59:E5:ED:59:F4:3D:28:18
Authority key identifier: 59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
Certificate issuer: /CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Certificate serial: 01965236E1846C91B3C618340D644CE5CEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
Manifest number: 0D8B
Signing time: Sun 20 Apr 2025 08:00:50 +0000
Manifest this update: Sun 20 Apr 2025 08:00:50 +0000
Manifest next update: Mon 21 Apr 2025 08:00:50 +0000
Files and hashes: 1: WRgezM-jp4ELruDwW_Oge7j3jWY.crl (hash: 7G+cGKdRbH4z36yF0FhScKD4eXJWpHl/b4h5y+PVcys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:e1:84:6c:91:b3:c6:18:34:0d:64:4c:e5:ce:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Validity
Not Before: Apr 20 08:00:50 2025 GMT
Not After : Apr 21 08:00:50 2025 GMT
Subject: CN=6ecfcd1982ea3e462f228ad959e5ed59f43d2818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:67:01:ed:9c:a6:28:99:65:60:ea:db:1c:fe:
09:6f:12:2c:6d:6b:a0:d2:b5:99:7e:60:7f:60:ad:
51:fd:fd:0c:e3:24:1e:59:85:9c:d6:bb:68:0e:6d:
bc:25:62:51:c9:fc:35:44:88:bf:d5:45:0e:66:be:
88:54:64:32:a1:2f:3b:fd:e1:1e:da:96:0e:0a:da:
42:e2:4b:30:bc:11:3a:88:c8:b0:22:53:54:97:d0:
3d:db:6c:cb:5e:8b:bb:69:00:19:48:b4:25:9f:b5:
8b:a4:af:d5:b3:6d:33:01:90:25:f1:f3:60:a0:74:
f7:2e:ae:33:06:47:50:f8:26:51:90:d4:82:ac:77:
88:69:04:d6:f2:7f:9e:45:e2:61:3c:6e:4a:c4:ee:
d2:71:51:e9:bc:39:e9:24:f7:d0:b5:17:b0:00:3f:
ed:3e:ed:08:bf:52:71:2a:b1:67:e3:2b:6c:8a:e8:
68:81:cc:ab:70:6d:40:ae:d3:6e:e5:c5:4a:34:c0:
5b:ec:ca:72:08:ec:c4:6c:54:67:ef:b7:d1:14:be:
e7:af:b8:8b:a5:04:f6:6a:2d:90:8e:15:c1:65:d1:
03:50:f0:d3:8d:1d:ac:15:21:4a:d8:c5:f2:72:f3:
bc:4e:4b:5a:9d:28:ce:08:81:a6:23:42:1a:d3:1c:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CF:CD:19:82:EA:3E:46:2F:22:8A:D9:59:E5:ED:59:F4:3D:28:18
X509v3 Authority Key Identifier:
keyid:59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:64:c3:ba:1d:88:a7:3b:ef:ea:ab:fb:cc:ec:1d:0c:0a:4d:
3c:46:43:41:df:5e:07:44:98:40:8a:a7:aa:a8:73:f4:73:1d:
da:6b:34:bc:66:c1:19:b7:d2:f6:2f:f3:fa:e0:e7:99:87:e9:
5c:41:37:17:4d:e1:78:db:a4:fe:43:42:c2:e5:c9:45:38:84:
8b:a6:c9:3d:03:f1:ab:59:1c:b7:c5:32:d5:a2:7d:3a:d2:24:
5b:52:5d:1c:1f:f0:91:d7:c6:fa:1d:6b:4c:f6:17:f6:33:26:
88:20:6d:85:24:a9:06:d4:62:de:2e:ad:73:d4:03:19:aa:14:
c0:c8:55:ce:db:9a:bd:2c:ce:1b:e0:95:d5:54:b9:8e:94:d7:
5d:1a:4b:85:60:05:92:d7:86:9c:c8:a5:6a:a6:c3:e1:7d:2e:
d2:99:3d:18:b9:50:4d:c6:5d:be:f5:98:1f:c3:4d:a1:bc:e9:
12:db:1a:99:00:c2:96:25:c7:c2:2a:e5:a8:66:1e:17:de:58:
9a:76:7f:1a:5c:37:15:93:15:23:24:8d:9f:6f:2b:d6:62:5b:
af:69:a0:99:03:71:d8:1a:1b:02:cc:f3:42:19:41:06:50:5f:
55:60:91:bc:5d:82:6e:24:a9:41:55:29:93:b0:dc:63:3c:ee:
f6:ca:69:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNuGEbJGzxhg0DWRM5c76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MTgxZWNjY2ZhM2E3ODEwYmFlZTBmMDViZjNhMDdiYjhm
NzhkNjYwHhcNMjUwNDIwMDgwMDUwWhcNMjUwNDIxMDgwMDUwWjAzMTEwLwYDVQQD
Eyg2ZWNmY2QxOTgyZWEzZTQ2MmYyMjhhZDk1OWU1ZWQ1OWY0M2QyODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmcB7ZymKJllYOrbHP4JbxIsbWug
0rWZfmB/YK1R/f0M4yQeWYWc1rtoDm28JWJRyfw1RIi/1UUOZr6IVGQyoS87/eEe
2pYOCtpC4kswvBE6iMiwIlNUl9A922zLXou7aQAZSLQln7WLpK/Vs20zAZAl8fNg
oHT3Lq4zBkdQ+CZRkNSCrHeIaQTW8n+eReJhPG5KxO7ScVHpvDnpJPfQtRewAD/t
Pu0Iv1JxKrFn4ytsiuhogcyrcG1ArtNu5cVKNMBb7MpyCOzEbFRn77fRFL7nr7iL
pQT2ai2QjhXBZdEDUPDTjR2sFSFK2MXycvO8TktanSjOCIGmI0Ia0xwhVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7PzRmC6j5GLyKK2Vnl7Vn0PSgYMB8GA1UdIwQY
MBaAFFkYHszPo6eBC67g8FvzoHu4941mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1JnZXpNLWpwNEVMcnVEd1dfT2dlN2ozaldZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84MzQ4NzUtYWFmYi00NWI0LWFiNTgt
NTE5MzY4Yjc3YzVkLzEvV1JnZXpNLWpwNEVMcnVEd1dfT2dlN2ozaldZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS84MzQ4NzUtYWFmYi00NWI0LWFiNTgtNTE5MzY4Yjc3YzVk
LzEvV1JnZXpNLWpwNEVMcnVEd1dfT2dlN2ozaldZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGTDuh2I
pzvv6qv7zOwdDApNPEZDQd9eB0SYQIqnqqhz9HMd2ms0vGbBGbfS9i/z+uDnmYfp
XEE3F03heNuk/kNCwuXJRTiEi6bJPQPxq1kct8Uy1aJ9OtIkW1JdHB/wkdfG+h1r
TPYX9jMmiCBthSSpBtRi3i6tc9QDGaoUwMhVztuavSzOG+CV1VS5jpTXXRpLhWAF
kteGnMilaqbD4X0u0pk9GLlQTcZdvvWYH8NNobzpEtsamQDCliXHwirlqGYeF95Y
mnZ/Glw3FZMVIySNn28r1mJbr2mgmQNx2BobAszzQhlBBlBfVWCRvF2CbiSpQVUp
k7DcYzzu9sppag==
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:03:58 2025 by rpki-client