Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
File: WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json)
Hash identifier: HEHdhWsd1CZhH0G0rVYQEecUThdHXu01qweHy6Uyx9U=
Subject key identifier: 57:A9:95:43:3A:3E:16:E0:E6:70:1A:95:8B:46:42:3E:0D:8D:EF:6C
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial: 01958C60A8021D60E63C7914A44001826745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
Manifest number: 0419
Signing time: Wed 12 Mar 2025 22:01:39 +0000
Manifest this update: Wed 12 Mar 2025 22:01:39 +0000
Manifest next update: Thu 13 Mar 2025 22:01:39 +0000
Files and hashes: 1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: Y3UfsX7oJTUncwD+ClVpl/HrAwNRA5xVhSjxm0HuQVA=)
2: ibsagXyULK6_yzLYa3pXOko3XKU.roa (hash: 03/iKlKS42XpS4t49YCxIL0w2I8iyQ6yxzMTAdH/Ztc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:a8:02:1d:60:e6:3c:79:14:a4:40:01:82:67:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Validity
Not Before: Mar 12 22:01:39 2025 GMT
Not After : Mar 13 22:01:39 2025 GMT
Subject: CN=57a995433a3e16e0e6701a958b46423e0d8def6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:2e:63:0f:d0:9e:46:47:f9:e7:0e:85:2d:
0b:0c:b0:ff:b7:4a:a1:93:17:a6:25:0c:58:c5:04:
a1:f3:9b:2a:1c:bb:e3:11:30:36:d8:b4:53:6a:64:
75:07:6a:55:bd:da:6b:fd:62:01:b6:03:8d:7d:66:
49:b0:eb:42:a1:c1:45:12:55:ab:0f:5c:06:b8:a4:
37:c8:28:df:5f:47:b3:59:59:73:20:9c:6a:1b:bd:
48:53:11:fd:af:d5:4d:ef:e9:79:99:9e:4b:6f:87:
0a:0a:f9:45:87:a4:b2:b2:a6:2d:b7:e9:33:77:bc:
20:b7:4e:07:5a:2c:f2:dd:16:5c:e4:53:a6:d5:5e:
02:45:3b:9a:b8:28:c0:87:36:fd:0d:ff:d3:1d:4d:
1d:d4:b7:55:a0:b9:f0:01:05:2b:2c:26:ad:5d:e7:
3d:d7:ef:fd:85:0c:1d:85:c8:f4:b2:44:ba:96:aa:
fa:f1:25:4e:98:6d:1c:c3:f0:90:64:4b:5a:e2:3f:
43:5c:d8:4d:42:61:dd:5c:cf:b2:05:6e:a7:34:aa:
67:00:3d:d5:dc:18:e3:6a:7d:19:30:a1:32:67:0c:
ad:03:b8:12:0b:de:98:0e:2f:8d:69:2c:39:b0:ba:
f0:71:d0:01:2d:5b:fb:7b:62:b9:79:75:25:fd:8a:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A9:95:43:3A:3E:16:E0:E6:70:1A:95:8B:46:42:3E:0D:8D:EF:6C
X509v3 Authority Key Identifier:
keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:22:5e:20:11:da:f1:ed:38:b6:56:fa:b3:37:c4:0b:12:af:
25:7d:f1:28:ad:d6:69:38:b7:e9:dc:03:bb:9c:fb:71:8a:7e:
59:7f:f3:fe:a4:cc:1e:fb:9b:fb:f7:e5:8f:28:47:1d:5a:dd:
4b:a5:0a:46:61:b2:80:d3:b7:fd:85:0f:19:56:00:be:55:5e:
dd:ac:7e:0f:99:ea:e6:1c:7b:5c:04:9b:57:b9:a0:00:55:60:
ab:b7:d6:2f:5f:27:77:27:7c:c6:ab:b1:67:46:9b:ff:53:80:
e4:51:9c:3b:1b:c0:67:9d:01:02:39:68:77:f8:be:08:25:c3:
b2:17:72:ab:ff:62:92:2b:38:77:ff:24:c0:77:08:25:6d:a6:
87:d8:22:70:1e:8d:00:38:19:4e:cf:12:c9:46:bd:21:fe:6e:
78:43:34:bd:2c:dc:bf:e4:f3:2d:46:76:c5:57:7c:96:80:da:
e7:cb:08:68:97:f2:e1:15:16:d2:00:7f:a1:cd:83:29:7b:2f:
88:73:c3:33:ad:db:78:d4:c4:72:6d:ec:03:d2:87:cb:40:37:
fd:6e:5c:3a:2b:68:94:9b:eb:5f:54:a0:82:79:95:3e:57:17:
23:38:d6:1e:f3:71:9e:e7:93:63:59:8b:95:c4:eb:23:a2:d0:
c6:57:90:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYKgCHWDmPHkUpEABgmdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YjYwMjA5OTBlYjEwYjA1M2Q1NmI0N2UyYzgzNGE1YTYy
NmI1ZDMwHhcNMjUwMzEyMjIwMTM5WhcNMjUwMzEzMjIwMTM5WjAzMTEwLwYDVQQD
Eyg1N2E5OTU0MzNhM2UxNmUwZTY3MDFhOTU4YjQ2NDIzZTBkOGRlZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oMuYw/QnkZH+ecOhS0LDLD/t0qh
kxemJQxYxQSh85sqHLvjETA22LRTamR1B2pVvdpr/WIBtgONfWZJsOtCocFFElWr
D1wGuKQ3yCjfX0ezWVlzIJxqG71IUxH9r9VN7+l5mZ5Lb4cKCvlFh6SysqYtt+kz
d7wgt04HWizy3RZc5FOm1V4CRTuauCjAhzb9Df/THU0d1LdVoLnwAQUrLCatXec9
1+/9hQwdhcj0skS6lqr68SVOmG0cw/CQZEta4j9DXNhNQmHdXM+yBW6nNKpnAD3V
3Bjjan0ZMKEyZwytA7gSC96YDi+NaSw5sLrwcdABLVv7e2K5eXUl/Yq/LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeplUM6Phbg5nAalYtGQj4Nje9sMB8GA1UdIwQY
MBaAFFm2AgmQ6xCwU9VrR+LINKWmJrXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgt
OTgyM2I3ZWE0ZGIzLzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgtOTgyM2I3ZWE0ZGIz
LzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCJeIBHa
8e04tlb6szfECxKvJX3xKK3WaTi36dwDu5z7cYp+WX/z/qTMHvub+/fljyhHHVrd
S6UKRmGygNO3/YUPGVYAvlVe3ax+D5nq5hx7XASbV7mgAFVgq7fWL18ndyd8xqux
Z0ab/1OA5FGcOxvAZ50BAjlod/i+CCXDshdyq/9ikis4d/8kwHcIJW2mh9gicB6N
ADgZTs8SyUa9If5ueEM0vSzcv+TzLUZ2xVd8loDa58sIaJfy4RUW0gB/oc2DKXsv
iHPDM63beNTEcm3sA9KHy0A3/W5cOitolJvrX1SggnmVPlcXIzjWHvNxnueTY1mL
lcTrI6LQxleQyA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:05 2025 by rpki-client