Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
File: WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft (raw, json)
Hash identifier: 5s25jsUUCARBidARxaAcQ6Myc4o7POr8f5t7UDfprMg=
Subject key identifier: E1:81:E6:2E:9D:9C:3C:F0:C6:22:D6:C4:47:FA:27:B8:E4:1A:9E:E4
Authority key identifier: 59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
Certificate issuer: /CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Certificate serial: 01964F6CC60DDD5F73A7635F6FB8A33EA92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
Manifest number: 134B
Signing time: Sat 19 Apr 2025 19:00:50 +0000
Manifest this update: Sat 19 Apr 2025 19:00:50 +0000
Manifest next update: Sun 20 Apr 2025 19:00:50 +0000
Files and hashes: 1: WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl (hash: AOWIh2xi1lsaM45DlLR8yExeupGbori11gPfezoNQR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:c6:0d:dd:5f:73:a7:63:5f:6f:b8:a3:3e:a9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Validity
Not Before: Apr 19 19:00:50 2025 GMT
Not After : Apr 20 19:00:50 2025 GMT
Subject: CN=e181e62e9d9c3cf0c622d6c447fa27b8e41a9ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:53:ea:2b:13:37:c9:a7:ec:eb:7e:5d:8e:
ab:14:67:e5:7d:10:64:76:89:14:91:41:59:72:4b:
dd:d3:a7:87:ee:9d:87:cc:30:1c:01:4c:1c:fc:9c:
d1:4a:f2:89:01:3e:cf:be:44:3e:db:38:61:53:39:
25:c8:a6:5c:0f:1a:10:0b:de:63:8b:e3:82:b1:47:
ce:1f:52:a2:fb:cf:40:6d:7b:e6:43:fa:6e:72:46:
37:b4:17:a4:1c:14:b0:20:cd:66:a1:39:95:42:3d:
7d:8a:48:98:fc:a1:e9:7a:17:7e:79:1d:3a:e8:06:
54:b2:06:d9:3b:18:a9:56:27:f3:5e:20:e7:b1:1d:
35:ac:c6:47:1c:f0:b0:a3:42:16:09:43:55:12:80:
0f:d1:0c:17:f7:04:51:b6:ed:c6:78:7a:89:6d:24:
cb:d9:ce:59:59:9b:d5:21:82:55:b6:3b:75:32:da:
4d:13:54:49:42:da:53:0a:61:14:27:92:13:2d:d8:
41:96:68:4b:dd:8d:83:f5:e3:07:5a:0f:58:28:d4:
31:20:68:e0:fe:c1:ea:15:4c:01:b9:7c:bb:16:5c:
5d:25:5e:7e:69:13:19:4f:83:8a:7e:be:ae:1c:2e:
93:73:ea:6a:d1:32:f9:0d:b1:df:d4:5e:c1:2b:11:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:81:E6:2E:9D:9C:3C:F0:C6:22:D6:C4:47:FA:27:B8:E4:1A:9E:E4
X509v3 Authority Key Identifier:
keyid:59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1b:cf:4e:1b:54:ea:f1:d2:7f:c7:fa:d8:d3:22:f2:3d:eb:
c9:d7:89:56:d0:4c:62:c7:1f:ee:d5:8f:d0:be:21:f5:7e:36:
c0:2d:6c:10:d7:92:0f:1e:4b:78:b5:49:9f:2b:9c:97:e1:94:
80:bc:2b:00:c5:a0:fa:4e:53:5a:d9:09:74:cd:47:9f:f6:bc:
72:89:31:ef:55:d2:d6:a7:25:80:70:f3:da:84:3d:f9:ed:f7:
c9:e6:3e:56:d8:ee:4f:5d:b9:d3:de:21:22:68:ed:9d:a3:e3:
b6:0e:63:05:e2:5e:0e:b4:99:f4:2a:7b:7c:7e:08:f9:22:c9:
98:99:bc:f4:1f:33:86:24:05:4c:c6:00:82:d7:67:02:60:27:
33:2b:4d:83:d2:58:57:ee:7d:f7:a3:a2:cd:ee:75:b2:e0:58:
35:3c:05:7f:87:63:34:00:1e:8f:a9:57:d4:25:1e:9d:1c:f1:
a5:91:10:52:52:71:31:d1:e7:c1:eb:18:b7:ce:e5:bb:33:cc:
e3:52:ba:6e:44:35:90:2c:b0:33:12:d2:66:9c:d2:17:96:7f:
2b:93:52:cc:d3:3c:8a:f5:97:f5:d0:51:0e:bd:d9:d2:ab:c9:
d5:a9:9d:79:94:34:94:c3:5e:a6:67:14:45:d0:64:63:9f:6e:
2b:14:d9:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbMYN3V9zp2Nfb7ijPqkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MWU5NTljYWI5MjEwMzQzOGFjMGY1ZjFiYWU4NzA3YWM5
Y2M2ZDMwHhcNMjUwNDE5MTkwMDUwWhcNMjUwNDIwMTkwMDUwWjAzMTEwLwYDVQQD
EyhlMTgxZTYyZTlkOWMzY2YwYzYyMmQ2YzQ0N2ZhMjdiOGU0MWE5ZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdhT6isTN8mn7Ot+XY6rFGflfRBk
dokUkUFZckvd06eH7p2HzDAcAUwc/JzRSvKJAT7PvkQ+2zhhUzklyKZcDxoQC95j
i+OCsUfOH1Ki+89AbXvmQ/puckY3tBekHBSwIM1moTmVQj19ikiY/KHpehd+eR06
6AZUsgbZOxipVifzXiDnsR01rMZHHPCwo0IWCUNVEoAP0QwX9wRRtu3GeHqJbSTL
2c5ZWZvVIYJVtjt1MtpNE1RJQtpTCmEUJ5ITLdhBlmhL3Y2D9eMHWg9YKNQxIGjg
/sHqFUwBuXy7FlxdJV5+aRMZT4OKfr6uHC6Tc+pq0TL5DbHf1F7BKxHh2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGB5i6dnDzwxiLWxEf6J7jkGp7kMB8GA1UdIwQY
MBaAFFkelZyrkhA0OKwPXxuuhwesnMbTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1I2Vm5LdVNFRFE0ckE5Zkc2NkhCNnljeHRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zYjQ4NjktOGUwMi00N2UwLWE2ZWQt
ODEzZTA5NmIzMzk1LzEvV1I2Vm5LdVNFRFE0ckE5Zkc2NkhCNnljeHRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zYjQ4NjktOGUwMi00N2UwLWE2ZWQtODEzZTA5NmIzMzk1
LzEvV1I2Vm5LdVNFRFE0ckE5Zkc2NkhCNnljeHRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBvPThtU
6vHSf8f62NMi8j3rydeJVtBMYscf7tWP0L4h9X42wC1sENeSDx5LeLVJnyucl+GU
gLwrAMWg+k5TWtkJdM1Hn/a8cokx71XS1qclgHDz2oQ9+e33yeY+VtjuT125094h
ImjtnaPjtg5jBeJeDrSZ9Cp7fH4I+SLJmJm89B8zhiQFTMYAgtdnAmAnMytNg9JY
V+5996Oize51suBYNTwFf4djNAAej6lX1CUenRzxpZEQUlJxMdHnwesYt87luzPM
41K6bkQ1kCywMxLSZpzSF5Z/K5NSzNM8ivWX9dBRDr3Z0qvJ1amdeZQ0lMNepmcU
RdBkY59uKxTZ1Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:26 2025 by rpki-client