Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File: WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier: YlBtSS19bjQCN/Pzur7gsPNcP0Gg4Vl6juO7lZ6GRf4=
Subject key identifier: 77:4A:40:DF:03:54:D8:8E:A1:59:24:40:D3:03:C3:39:82:A4:7B:B4
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial: 01959005F474BADA02FB34F3B7DCFF3CE1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number: 0AB3
Signing time: Thu 13 Mar 2025 15:01:04 +0000
Manifest this update: Thu 13 Mar 2025 15:01:04 +0000
Manifest next update: Fri 14 Mar 2025 15:01:04 +0000
Files and hashes: 1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: RpiAtgh+MMqJ7N6yTo1aYTtStbmdLF/6+1J/v/uxa70=)
2: eTD5X7eUVxPbE-bCRH9QGxLRZDs.roa (hash: IG853MFkGaq1sWpTd3DWggMITF7We7r2IbsZKj9lAZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:05:f4:74:ba:da:02:fb:34:f3:b7:dc:ff:3c:e1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Validity
Not Before: Mar 13 15:01:04 2025 GMT
Not After : Mar 14 15:01:04 2025 GMT
Subject: CN=774a40df0354d88ea1592440d303c33982a47bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:63:f1:ae:91:09:39:42:bb:c2:f5:d2:12:
a4:54:c4:5c:20:09:11:82:b1:ee:7f:e5:a2:fb:cf:
3e:12:96:ed:54:eb:ba:8c:84:64:72:53:d3:be:d6:
5c:8c:2d:ec:af:3a:6a:7f:ae:f9:2e:95:9b:f3:b5:
58:4c:32:a7:12:86:54:28:70:16:b3:84:55:aa:0d:
76:33:c9:23:ed:58:15:c1:49:d0:16:56:c1:b5:c7:
bf:7e:e8:ed:9c:f8:36:81:28:b6:2c:b8:e8:77:7a:
cc:4c:93:64:e6:84:df:81:59:aa:dc:9f:38:12:2a:
db:7a:39:20:98:61:c7:cf:e2:a6:42:b2:41:27:b5:
85:87:e0:4e:0e:74:c6:7a:db:9e:3b:88:9c:ef:44:
e1:50:07:97:3d:a0:47:d3:ec:23:87:5b:f6:63:47:
d6:6f:dd:f8:c2:d8:dc:19:34:a7:ff:a3:ad:a7:6f:
b1:c2:1c:3c:4b:67:6a:f6:54:67:41:32:a3:db:2d:
dc:0d:7d:9a:3d:ee:60:32:0b:11:f3:06:0c:3d:ab:
3a:e5:cd:30:fe:ed:68:3d:1d:d6:f1:d0:cc:56:0f:
29:05:a3:77:53:c1:d8:d6:ad:45:6a:13:f5:01:7c:
8b:d0:81:89:5c:8f:48:df:f3:9a:88:7e:5e:06:87:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4A:40:DF:03:54:D8:8E:A1:59:24:40:D3:03:C3:39:82:A4:7B:B4
X509v3 Authority Key Identifier:
keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d3:5b:a9:2b:1c:60:c4:58:72:7b:17:77:63:11:1f:54:51:
11:0a:a1:35:a0:e8:5b:1b:94:6c:db:79:c2:ee:99:09:03:7f:
33:9d:8a:2d:b5:ea:b8:71:69:93:bc:89:ad:b3:33:64:b6:88:
62:9d:ac:a8:b1:17:72:fa:e2:2b:32:69:4d:c9:7e:d6:c5:72:
44:dd:42:49:4c:4e:77:05:b8:a2:f4:f8:5c:eb:a6:97:2d:da:
7d:ef:62:f2:c8:d6:01:83:53:30:d8:e1:52:15:31:b4:25:a0:
41:9c:5f:29:60:99:03:81:a4:7c:ad:79:50:55:a2:26:b4:c8:
26:36:cf:4f:0f:b2:f1:70:bc:fb:54:2a:c3:25:6f:56:ce:70:
76:bc:4f:ee:4e:43:7c:a0:ee:3d:73:97:30:fd:4b:f3:f6:4d:
f8:fa:62:0b:ef:df:2f:fc:2b:e5:af:66:5c:c4:2c:2d:3f:99:
0d:5a:27:94:42:0f:76:ab:fd:6d:a4:1f:a3:c5:3f:04:86:c6:
9b:8b:e5:b9:20:f8:98:62:98:03:ef:5a:29:c7:ec:f2:b3:22:
0c:08:ae:19:8b:b4:d2:d7:a1:28:9e:63:92:0e:48:2a:a4:e7:
40:ee:79:57:a0:98:b0:a6:06:30:e3:68:4a:23:67:68:08:14:
81:9a:a5:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQBfR0utoC+zTzt9z/POHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTg2YTZjNzFmYjczNGM3MDViNWU2NmU3NGFjMWM1NmJi
OTYwNWUwHhcNMjUwMzEzMTUwMTA0WhcNMjUwMzE0MTUwMTA0WjAzMTEwLwYDVQQD
Eyg3NzRhNDBkZjAzNTRkODhlYTE1OTI0NDBkMzAzYzMzOTgyYTQ3YmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP5j8a6RCTlCu8L10hKkVMRcIAkR
grHuf+Wi+88+EpbtVOu6jIRkclPTvtZcjC3srzpqf675LpWb87VYTDKnEoZUKHAW
s4RVqg12M8kj7VgVwUnQFlbBtce/fujtnPg2gSi2LLjod3rMTJNk5oTfgVmq3J84
EirbejkgmGHHz+KmQrJBJ7WFh+BODnTGetueO4ic70ThUAeXPaBH0+wjh1v2Y0fW
b934wtjcGTSn/6Otp2+xwhw8S2dq9lRnQTKj2y3cDX2aPe5gMgsR8wYMPas65c0w
/u1oPR3W8dDMVg8pBaN3U8HY1q1FahP1AXyL0IGJXI9I3/OaiH5eBoey+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdKQN8DVNiOoVkkQNMDwzmCpHu0MB8GA1UdIwQY
MBaAFFioamxx+3NMcFteZudKwcVruWBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzQzNjUtYTk4Zi00M2ZlLTk5NTAt
YTliMTNjMjgwMGFmLzEvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85YzQzNjUtYTk4Zi00M2ZlLTk5NTAtYTliMTNjMjgwMGFm
LzEvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9NbqSsc
YMRYcnsXd2MRH1RREQqhNaDoWxuUbNt5wu6ZCQN/M52KLbXquHFpk7yJrbMzZLaI
Yp2sqLEXcvriKzJpTcl+1sVyRN1CSUxOdwW4ovT4XOumly3afe9i8sjWAYNTMNjh
UhUxtCWgQZxfKWCZA4GkfK15UFWiJrTIJjbPTw+y8XC8+1QqwyVvVs5wdrxP7k5D
fKDuPXOXMP1L8/ZN+PpiC+/fL/wr5a9mXMQsLT+ZDVonlEIPdqv9baQfo8U/BIbG
m4vluSD4mGKYA+9aKcfs8rMiDAiuGYu00tehKJ5jkg5IKqTnQO55V6CYsKYGMONo
SiNnaAgUgZql0w==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:36 2025 by rpki-client