Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: Pe8ociZvUXh7SQUE29MYSIwX7FWnOD/l6QqoVIZD20s=
Subject key identifier: F8:E1:80:C4:2C:77:69:28:60:EE:26:6C:BE:DF:B1:A2:84:94:4A:23
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 01958B4DE772A80DD2B4E6D2DFD5A0EF7BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 02B3
Signing time: Wed 12 Mar 2025 17:01:33 +0000
Manifest this update: Wed 12 Mar 2025 17:01:33 +0000
Manifest next update: Thu 13 Mar 2025 17:01:33 +0000
Files and hashes: 1: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (hash: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: 41n08v3/jElTEocmUuYWaaYJB8h4ogUTzEpuAlxbCSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:e7:72:a8:0d:d2:b4:e6:d2:df:d5:a0:ef:7b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Mar 12 17:01:33 2025 GMT
Not After : Mar 13 17:01:33 2025 GMT
Subject: CN=f8e180c42c77692860ee266cbedfb1a284944a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:ee:7c:c7:ab:fa:af:28:67:4e:ed:10:f7:
1a:83:0b:94:96:5e:92:80:68:5a:e4:02:6f:1d:86:
ec:bb:d6:47:7a:68:78:0f:66:53:62:42:9d:5e:3d:
19:61:1e:3e:74:37:d6:04:4c:e7:01:0d:75:89:3d:
7e:d9:f7:2f:26:76:e5:a9:f5:c5:97:78:86:14:55:
02:24:88:4c:07:59:93:34:2e:e7:83:8e:ef:6f:8e:
e7:fe:03:c9:52:5c:1e:d6:db:9f:18:83:30:a6:7d:
6f:77:2a:56:5f:35:df:c9:4d:a2:5f:71:6e:0e:4f:
5b:8a:8d:47:d1:ae:4c:f2:c4:85:e4:04:96:81:42:
74:e6:d3:1c:55:45:3f:ab:ff:79:c0:7a:84:34:12:
f7:ff:84:24:08:f5:a9:84:c7:0c:01:cf:31:6e:54:
24:5e:c8:c8:d5:3e:79:49:12:44:c3:cd:1e:d7:f0:
e5:84:b8:a0:ba:97:1a:55:a2:b1:a8:29:d3:54:5e:
4d:e0:72:17:42:c9:01:bf:7b:ef:d0:28:b2:0c:a0:
79:82:92:b9:d8:19:f0:b4:56:d2:67:75:94:9f:8d:
94:b6:81:a3:cf:c9:c9:88:3c:96:ae:fb:e8:93:3c:
3b:7d:e9:99:ef:89:23:84:4b:45:41:16:b4:a3:c9:
b0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E1:80:C4:2C:77:69:28:60:EE:26:6C:BE:DF:B1:A2:84:94:4A:23
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1a:8f:12:07:ec:cb:87:0b:7e:3e:04:80:d8:19:bf:7b:79:
54:72:d7:d9:21:21:be:c5:d1:e6:9f:9f:cc:22:81:2d:bd:6a:
49:dc:27:f6:8a:de:b4:51:47:45:12:e4:8b:01:a3:a6:10:ac:
49:51:40:86:11:09:af:98:a8:f8:8b:84:48:5a:f6:b6:5c:9f:
05:27:d6:ff:d9:2c:f8:ec:61:be:d3:1b:94:22:9e:39:87:c8:
0c:63:17:eb:ba:ec:27:1c:d8:94:68:f5:e4:11:7e:85:ee:9b:
ef:c8:e7:6f:d5:2d:36:6b:50:04:3b:0d:f5:97:88:94:be:6d:
ce:ac:3a:7b:78:de:7e:05:85:d4:9e:7e:81:7f:3a:41:30:d2:
f8:1c:bb:79:af:42:a6:70:53:e5:57:d4:0f:b6:c2:e8:44:60:
bb:77:5a:c0:3c:5d:8b:72:1a:5b:e5:5c:26:85:82:97:42:34:
60:05:80:cb:11:6e:73:c4:ea:11:81:f6:a5:d6:ea:64:c6:0c:
f0:55:1b:a4:ce:0a:d0:52:36:21:3a:4c:48:eb:51:04:ae:99:
95:32:bd:4a:a6:aa:93:c5:0f:32:81:20:5d:af:09:ec:83:e1:
52:26:1c:19:cb:e8:08:bf:98:c2:a6:6b:1c:68:1b:fc:12:25:
8f:1b:3e:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTedyqA3StObS39Wg73vgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzU4ZTVjNGY4MGE4MjA2Y2NjNTEwM2JmMmViZTNhNGU5
NmEwZjEwHhcNMjUwMzEyMTcwMTMzWhcNMjUwMzEzMTcwMTMzWjAzMTEwLwYDVQQD
EyhmOGUxODBjNDJjNzc2OTI4NjBlZTI2NmNiZWRmYjFhMjg0OTQ0YTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreHufMer+q8oZ07tEPcagwuUll6S
gGha5AJvHYbsu9ZHemh4D2ZTYkKdXj0ZYR4+dDfWBEznAQ11iT1+2fcvJnblqfXF
l3iGFFUCJIhMB1mTNC7ng47vb47n/gPJUlwe1tufGIMwpn1vdypWXzXfyU2iX3Fu
Dk9bio1H0a5M8sSF5ASWgUJ05tMcVUU/q/95wHqENBL3/4QkCPWphMcMAc8xblQk
XsjI1T55SRJEw80e1/DlhLigupcaVaKxqCnTVF5N4HIXQskBv3vv0CiyDKB5gpK5
2BnwtFbSZ3WUn42UtoGjz8nJiDyWrvvokzw7femZ74kjhEtFQRa0o8mwvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjhgMQsd2koYO4mbL7fsaKElEojMB8GA1UdIwQY
MBaAFMM1jlxPgKggbMxRA78uvjpOlqDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUt
MGRiYTdmYTZhNDAzLzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUtMGRiYTdmYTZhNDAz
LzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxqPEgfs
y4cLfj4EgNgZv3t5VHLX2SEhvsXR5p+fzCKBLb1qSdwn9oretFFHRRLkiwGjphCs
SVFAhhEJr5io+IuESFr2tlyfBSfW/9ks+OxhvtMblCKeOYfIDGMX67rsJxzYlGj1
5BF+he6b78jnb9UtNmtQBDsN9ZeIlL5tzqw6e3jefgWF1J5+gX86QTDS+By7ea9C
pnBT5VfUD7bC6ERgu3dawDxdi3IaW+VcJoWCl0I0YAWAyxFuc8TqEYH2pdbqZMYM
8FUbpM4K0FI2ITpMSOtRBK6ZlTK9Sqaqk8UPMoEgXa8J7IPhUiYcGcvoCL+YwqZr
HGgb/BIljxs+FA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:01 2025 by rpki-client