Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
File: W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json)
Hash identifier: msDrh6H4JC8SZBGT2fJ1UnegFbFewaP2hwakTXMznGQ=
Subject key identifier: D8:7C:34:3C:2D:7C:B4:F3:FB:0E:D9:50:52:F4:FD:9B:B6:23:AD:54
Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
Certificate issuer: /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Certificate serial: 01965870050C92D401BD2DDB4E93D724C3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
Manifest number: 0349
Signing time: Mon 21 Apr 2025 13:00:58 +0000
Manifest this update: Mon 21 Apr 2025 13:00:58 +0000
Manifest next update: Tue 22 Apr 2025 13:00:58 +0000
Files and hashes: 1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: jtvLi8Hc2dfYStJcvNQT9vYzc/e/Syd8pAUDGMlh+RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:70:05:0c:92:d4:01:bd:2d:db:4e:93:d7:24:c3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Validity
Not Before: Apr 21 13:00:58 2025 GMT
Not After : Apr 22 13:00:58 2025 GMT
Subject: CN=d87c343c2d7cb4f3fb0ed95052f4fd9bb623ad54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:bc:a5:13:f0:2c:09:0d:e0:6a:ad:b1:3c:
4c:7a:b4:6e:93:1a:31:03:ee:ae:b9:ad:b7:13:38:
db:82:1e:29:17:1b:bc:33:1e:a0:ef:6c:00:1e:b4:
98:87:50:90:a6:46:13:62:8b:1e:bf:a4:d6:32:dd:
f0:e0:56:13:80:ac:6b:ac:25:1a:89:7a:f5:39:59:
de:86:da:42:36:a3:4f:8c:af:fa:21:73:3d:1a:48:
e2:2e:f8:c0:ea:6c:1c:8f:34:1a:50:15:9b:54:25:
06:b9:a5:a8:a8:40:aa:26:00:f0:cf:17:55:5a:0c:
84:29:06:02:22:5c:9c:a9:db:65:8a:3d:d8:c5:51:
c9:c9:d4:fa:0c:53:f8:0d:92:ac:df:76:0a:5f:94:
2d:80:c0:36:64:c4:2e:0b:da:85:d9:63:3b:0e:3e:
e8:fc:5f:0d:a4:31:9f:48:93:8a:6d:b3:c3:05:7a:
72:17:07:06:89:b4:c3:7a:ed:77:e8:6e:0b:74:2e:
86:b3:e0:76:c6:17:e7:36:44:48:64:1a:93:39:85:
97:c5:40:7e:e3:9d:5d:80:76:79:ce:33:b3:ef:6c:
e8:32:ed:af:27:76:c2:17:16:59:15:85:d4:89:c0:
fa:52:72:1a:b6:5b:cb:9d:30:1b:4a:32:c1:00:cb:
72:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7C:34:3C:2D:7C:B4:F3:FB:0E:D9:50:52:F4:FD:9B:B6:23:AD:54
X509v3 Authority Key Identifier:
keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:15:c4:5c:71:13:84:b4:7d:d8:6b:07:ee:21:90:2d:a2:a5:
95:e3:8c:cb:fb:6c:07:1d:e2:58:c5:bd:cb:47:d7:e6:0c:1c:
3e:74:15:73:4c:e3:af:b1:c7:e2:69:72:48:d2:ef:27:67:61:
51:bd:33:e0:13:1f:6e:7d:4a:85:be:e4:05:9f:8e:65:e0:a7:
f9:0c:26:fb:0d:df:57:9b:ce:77:d6:04:54:05:cb:08:90:30:
24:e0:cd:e3:2b:30:81:86:80:5f:ec:6c:d6:f6:55:32:99:0a:
c0:be:4c:f4:b3:90:6f:c6:72:22:df:99:4c:23:53:d6:de:f4:
12:c7:68:97:0e:3f:9f:a9:26:ef:86:93:ae:38:36:d1:9a:bb:
50:54:71:98:0a:90:6d:ac:21:54:d2:ad:35:82:4f:de:02:9d:
da:6f:d0:1e:c6:c9:12:48:90:f6:64:a8:4d:a5:d8:d8:e8:5e:
e1:cc:75:66:49:43:1b:33:51:83:50:fa:d1:70:3e:66:c0:b2:
3f:07:3a:59:5e:39:b0:fc:bc:ea:5e:2a:5f:b1:13:d6:bf:19:
62:53:68:25:dd:04:51:6c:6b:1c:d3:64:79:3f:b9:07:4d:6c:
af:f2:85:28:0f:c1:8b:b5:15:a5:be:ff:ed:52:99:33:b5:c6:
51:5f:2c:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYcAUMktQBvS3bTpPXJMO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNWI3N2Q2NDU4ZmZhZDk4NGU1MWRmMzM0ZjNlOGY5ODM4
MmFjMjQwHhcNMjUwNDIxMTMwMDU4WhcNMjUwNDIyMTMwMDU4WjAzMTEwLwYDVQQD
EyhkODdjMzQzYzJkN2NiNGYzZmIwZWQ5NTA1MmY0ZmQ5YmI2MjNhZDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02S8pRPwLAkN4GqtsTxMerRukxox
A+6uua23Ezjbgh4pFxu8Mx6g72wAHrSYh1CQpkYTYosev6TWMt3w4FYTgKxrrCUa
iXr1OVnehtpCNqNPjK/6IXM9GkjiLvjA6mwcjzQaUBWbVCUGuaWoqECqJgDwzxdV
WgyEKQYCIlycqdtlij3YxVHJydT6DFP4DZKs33YKX5QtgMA2ZMQuC9qF2WM7Dj7o
/F8NpDGfSJOKbbPDBXpyFwcGibTDeu136G4LdC6Gs+B2xhfnNkRIZBqTOYWXxUB+
451dgHZ5zjOz72zoMu2vJ3bCFxZZFYXUicD6UnIatlvLnTAbSjLBAMty/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh8NDwtfLTz+w7ZUFL0/Zu2I61UMB8GA1UdIwQY
MBaAFFtbd9ZFj/rZhOUd8zTz6PmDgqwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWIt
ZjNkOWY2M2Q1ZDk3LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWItZjNkOWY2M2Q1ZDk3
LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRXEXHET
hLR92GsH7iGQLaKlleOMy/tsBx3iWMW9y0fX5gwcPnQVc0zjr7HH4mlySNLvJ2dh
Ub0z4BMfbn1Khb7kBZ+OZeCn+Qwm+w3fV5vOd9YEVAXLCJAwJODN4yswgYaAX+xs
1vZVMpkKwL5M9LOQb8ZyIt+ZTCNT1t70Esdolw4/n6km74aTrjg20Zq7UFRxmAqQ
bawhVNKtNYJP3gKd2m/QHsbJEkiQ9mSoTaXY2Ohe4cx1ZklDGzNRg1D60XA+ZsCy
Pwc6WV45sPy86l4qX7ET1r8ZYlNoJd0EUWxrHNNkeT+5B01sr/KFKA/Bi7UVpb7/
7VKZM7XGUV8sWg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:44 2025 by rpki-client