Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: eFmSrtJH9AA7ycDOnukGa9Qr7gaqRDVDpRYqSs8BmaI=
Subject key identifier: 5F:CA:C3:37:A1:35:00:B9:A8:84:3E:5B:18:5B:FA:6F:76:78:DA:7F
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 019512477AC8F9CF8C4EC3593F5B66A26744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 05:00:29 +0000
Manifest this update: Mon 17 Feb 2025 05:00:29 +0000
Manifest next update: Tue 18 Feb 2025 05:00:29 +0000
Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: 0inXDaiVYrZkrWOfO2m58NRgd6C795En8aSdCmGU4Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:7a:c8:f9:cf:8c:4e:c3:59:3f:5b:66:a2:67:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Feb 17 05:00:29 2025 GMT
Not After : Feb 18 05:00:29 2025 GMT
Subject: CN=5fcac337a13500b9a8843e5b185bfa6f7678da7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:ea:8e:95:18:d4:7c:0f:2a:05:81:37:26:
1e:da:df:cd:ca:59:8b:90:43:91:69:a9:01:79:49:
d3:12:37:9e:13:71:60:fb:a1:67:a8:a6:a6:21:c1:
0e:48:d5:c8:f0:ac:f9:eb:df:6c:8d:92:40:2b:17:
d6:d4:84:dd:21:74:16:66:c7:24:65:ba:cc:41:b5:
1b:b3:31:3b:c7:d8:ec:39:93:06:a8:19:5d:03:6c:
49:d2:4f:fc:f9:41:94:6b:b5:46:10:58:06:28:8b:
9a:72:0f:3b:9a:f6:a7:85:1a:5f:c8:8f:31:44:3f:
28:6c:bb:53:74:de:12:36:2a:98:41:e7:f4:ae:40:
ba:62:13:bd:3d:26:79:52:66:92:4d:bd:00:3d:67:
47:90:e6:da:c7:f7:63:35:c3:ae:9f:38:51:85:54:
67:27:b5:56:72:73:f3:3d:6f:7c:45:d9:98:13:ce:
c4:cc:dc:61:f5:32:8c:69:14:3d:38:f7:eb:49:5a:
6c:82:5c:5e:3f:80:16:ee:cd:f4:89:fc:a5:20:fb:
f0:aa:f7:aa:f6:7a:77:5e:44:e6:a6:45:13:ae:21:
ab:1e:59:fe:dc:cd:58:c9:9c:a4:91:6d:16:93:2e:
be:fa:7a:47:17:d1:e1:e2:c1:f5:8f:cb:a8:d3:73:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CA:C3:37:A1:35:00:B9:A8:84:3E:5B:18:5B:FA:6F:76:78:DA:7F
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d8:71:a6:eb:bf:65:8d:f8:ff:35:93:05:97:22:a4:76:b4:
19:b8:59:3e:21:59:69:45:77:53:23:6b:e4:93:e4:fc:a7:cb:
57:68:f5:6d:5d:78:43:37:44:2e:1f:b5:16:08:6a:68:29:d8:
27:c4:d6:a6:14:4e:f3:b5:9c:63:48:4f:7a:8a:e7:c3:5c:de:
9a:51:8c:89:6c:44:db:3b:a2:ad:eb:77:20:7c:11:5d:14:2c:
8b:6f:7d:7f:e5:f9:4e:b1:4f:47:1e:f5:f8:d4:3d:d1:81:59:
67:50:7d:a7:18:b5:7e:83:0d:5b:bc:dd:4d:8b:e6:ae:2c:e6:
30:af:b0:76:78:14:cd:3d:17:d7:58:61:a7:6f:07:2f:ac:1a:
40:85:0f:ca:29:c1:7b:67:3d:f1:e4:8e:13:75:18:d9:04:af:
f1:09:7e:fd:ac:59:b6:59:84:5c:33:2c:00:f4:e0:ef:e5:57:
52:1e:99:97:79:7d:2e:24:7d:eb:f0:97:33:48:a6:fc:cc:2e:
a6:36:16:bc:cc:31:c3:6c:c9:5e:3b:a9:e4:e4:3a:a7:53:b9:
b8:45:31:cb:d9:3a:b9:0b:7a:3d:b1:fc:7c:20:ee:16:b2:fc:
65:23:9d:9d:0a:32:0d:cb:dc:bd:35:7f:5f:eb:af:ab:62:47:
3f:49:9d:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSR3rI+c+MTsNZP1tmomdEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZTNmYTg3ZWIzMTY5YTdkMmRkNzQ0NTMyODMwMjFhMjcw
M2M3NjkwHhcNMjUwMjE3MDUwMDI5WhcNMjUwMjE4MDUwMDI5WjAzMTEwLwYDVQQD
Eyg1ZmNhYzMzN2ExMzUwMGI5YTg4NDNlNWIxODViZmE2Zjc2NzhkYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRHqjpUY1HwPKgWBNyYe2t/NylmL
kEORaakBeUnTEjeeE3Fg+6FnqKamIcEOSNXI8Kz5699sjZJAKxfW1ITdIXQWZsck
ZbrMQbUbszE7x9jsOZMGqBldA2xJ0k/8+UGUa7VGEFgGKIuacg87mvanhRpfyI8x
RD8obLtTdN4SNiqYQef0rkC6YhO9PSZ5UmaSTb0APWdHkObax/djNcOunzhRhVRn
J7VWcnPzPW98RdmYE87EzNxh9TKMaRQ9OPfrSVpsglxeP4AW7s30ifylIPvwqveq
9np3XkTmpkUTriGrHln+3M1YyZykkW0Wky6++npHF9Hh4sH1j8uo03NP+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/KwzehNQC5qIQ+Wxhb+m92eNp/MB8GA1UdIwQY
MBaAFMLj+ofrMWmn0t10RTKDAhonA8dpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYt
ZGZlNTY2NDExMDE2LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYtZGZlNTY2NDExMDE2
LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9hxpuu/
ZY34/zWTBZcipHa0GbhZPiFZaUV3UyNr5JPk/KfLV2j1bV14QzdELh+1FghqaCnY
J8TWphRO87WcY0hPeornw1zemlGMiWxE2zuiret3IHwRXRQsi299f+X5TrFPRx71
+NQ90YFZZ1B9pxi1foMNW7zdTYvmrizmMK+wdngUzT0X11hhp28HL6waQIUPyinB
e2c98eSOE3UY2QSv8Ql+/axZtlmEXDMsAPTg7+VXUh6Zl3l9LiR96/CXM0im/Mwu
pjYWvMwxw2zJXjup5OQ6p1O5uEUxy9k6uQt6PbH8fCDuFrL8ZSOdnQoyDcvcvTV/
X+uvq2JHP0mdlQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:09 2025 by rpki-client