Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
File: WFRbn70B0owOptCPW0cts0-tLqM.mft (raw, json)
Hash identifier: 2aTNK4vkoM3c94/2BAzYetRL83RqGm9lIqueFaczdmM=
Subject key identifier: 82:4F:BA:0F:4D:77:CA:4B:C3:22:D2:21:46:FD:81:98:83:01:57:5D
Authority key identifier: 58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3
Certificate issuer: /CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3
Certificate serial: 0196BA11E5464BB3F64FCEB0A8D328A39775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
Manifest number: 14F8
Signing time: Sat 10 May 2025 12:00:56 +0000
Manifest this update: Sat 10 May 2025 12:00:56 +0000
Manifest next update: Sun 11 May 2025 12:00:56 +0000
Files and hashes: 1: WFRbn70B0owOptCPW0cts0-tLqM.crl (hash: H6Wx1ixcZ0UAyqYxYzFDLFvLctnr6XZshYLiKGWu0B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:e5:46:4b:b3:f6:4f:ce:b0:a8:d3:28:a3:97:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3
Validity
Not Before: May 10 12:00:56 2025 GMT
Not After : May 11 12:00:56 2025 GMT
Subject: CN=824fba0f4d77ca4bc322d22146fd81988301575d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ce:20:46:4d:bf:b3:a6:a2:98:39:86:d0:8c:
3b:74:84:97:45:cc:e3:bd:93:e8:9e:2d:33:e1:4a:
7a:86:85:4a:50:68:c7:55:8d:f8:fe:11:e0:5b:46:
f2:9a:ee:08:db:f3:bb:53:03:a9:86:5f:c3:57:29:
82:c9:54:ee:19:09:ef:c1:c7:e6:ff:fc:07:e1:2c:
b7:aa:c6:d0:87:34:22:f1:df:35:3c:73:72:d9:0f:
ce:08:07:31:a1:0f:57:c6:6e:b3:51:4d:d4:3a:ec:
fa:fc:5d:39:81:7e:35:dc:42:dd:ad:02:99:ec:0e:
06:82:76:de:c9:11:69:c7:d1:6f:b5:67:2c:89:4f:
5b:fd:b0:1a:0b:86:09:dd:f6:39:f5:b3:7f:57:6f:
07:0b:b3:95:2f:6d:3f:b6:83:37:5b:94:0e:d8:b5:
a4:92:84:56:b2:3c:04:b1:cb:00:b5:2c:48:68:fa:
1c:94:9f:fd:16:b9:3d:ad:08:f0:2b:f2:3a:9b:0e:
cc:fe:e7:78:69:45:0a:64:1f:99:b0:10:e4:7f:8e:
0d:01:65:70:21:b8:a3:8f:13:78:87:9c:13:70:61:
6c:60:a7:f2:36:84:1b:cb:65:3c:7e:4b:8a:6c:0f:
67:c5:98:89:18:ea:30:94:87:4a:80:34:fe:d5:17:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4F:BA:0F:4D:77:CA:4B:C3:22:D2:21:46:FD:81:98:83:01:57:5D
X509v3 Authority Key Identifier:
keyid:58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:39:c8:9f:59:69:c1:e0:54:04:08:91:f1:fa:46:69:f4:99:
4c:a2:ab:74:64:02:83:df:d4:5d:de:7f:27:3c:94:8d:ba:71:
72:8f:5c:86:83:d6:f4:6c:94:9a:cb:80:e8:bb:eb:60:1e:d9:
6d:f8:bd:e5:db:47:00:d5:db:5b:e4:83:63:39:17:5b:e1:42:
ab:7c:d0:69:03:7e:c2:bb:84:ce:8c:39:b8:f0:16:52:6a:3e:
9f:ad:78:cf:96:3a:e5:cc:cc:d0:5b:2d:bf:b1:a5:6f:5c:bd:
f7:3a:93:c7:d8:e4:08:41:2c:28:1e:84:a8:63:cb:45:fd:ef:
0a:f2:58:8f:7f:c6:6f:5c:86:fb:29:b9:5e:99:39:32:f9:48:
0c:dd:67:42:02:41:b5:61:74:99:7f:11:1a:a3:24:61:0a:11:
36:1d:89:bd:78:3d:2c:12:b7:c1:b4:37:81:22:cf:8b:db:76:
67:fe:90:a3:3b:a8:ff:30:fc:f4:ee:b6:5a:9d:8f:2c:79:9b:
1b:28:22:1c:ee:cd:cc:28:45:bd:96:e8:8a:63:cd:6c:5f:15:
99:06:5f:0d:b8:5e:18:28:f4:e7:6c:a0:af:0e:09:6e:fd:74:
95:5b:18:98:aa:5a:9e:0c:c6:ba:b6:0b:b2:dc:25:d2:21:4e:
40:26:a2:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6EeVGS7P2T86wqNMoo5d1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NTQ1YjlmYmQwMWQyOGMwZWE2ZDA4ZjViNDcyZGIzNGZh
ZDJlYTMwHhcNMjUwNTEwMTIwMDU2WhcNMjUwNTExMTIwMDU2WjAzMTEwLwYDVQQD
Eyg4MjRmYmEwZjRkNzdjYTRiYzMyMmQyMjE0NmZkODE5ODgzMDE1NzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs4gRk2/s6aimDmG0Iw7dISXRczj
vZPoni0z4Up6hoVKUGjHVY34/hHgW0bymu4I2/O7UwOphl/DVymCyVTuGQnvwcfm
//wH4Sy3qsbQhzQi8d81PHNy2Q/OCAcxoQ9Xxm6zUU3UOuz6/F05gX413ELdrQKZ
7A4GgnbeyRFpx9FvtWcsiU9b/bAaC4YJ3fY59bN/V28HC7OVL20/toM3W5QO2LWk
koRWsjwEscsAtSxIaPoclJ/9Frk9rQjwK/I6mw7M/ud4aUUKZB+ZsBDkf44NAWVw
IbijjxN4h5wTcGFsYKfyNoQby2U8fkuKbA9nxZiJGOowlIdKgDT+1RcNNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJPug9Nd8pLwyLSIUb9gZiDAVddMB8GA1UdIwQY
MBaAFFhUW5+9AdKMDqbQj1tHLbNPrS6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0ZSYm43MEIwb3dPcHRDUFcwY3RzMC10THFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85Y2ZjNzktOGJkYS00ODYyLWE3ZDgt
NGY4ZDkzNTVkODYyLzEvV0ZSYm43MEIwb3dPcHRDUFcwY3RzMC10THFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85Y2ZjNzktOGJkYS00ODYyLWE3ZDgtNGY4ZDkzNTVkODYy
LzEvV0ZSYm43MEIwb3dPcHRDUFcwY3RzMC10THFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjnIn1lp
weBUBAiR8fpGafSZTKKrdGQCg9/UXd5/JzyUjbpxco9choPW9GyUmsuA6LvrYB7Z
bfi95dtHANXbW+SDYzkXW+FCq3zQaQN+wruEzow5uPAWUmo+n614z5Y65czM0Fst
v7Glb1y99zqTx9jkCEEsKB6EqGPLRf3vCvJYj3/Gb1yG+ym5Xpk5MvlIDN1nQgJB
tWF0mX8RGqMkYQoRNh2JvXg9LBK3wbQ3gSLPi9t2Z/6Qozuo/zD89O62Wp2PLHmb
GygiHO7NzChFvZboimPNbF8VmQZfDbheGCj052ygrw4Jbv10lVsYmKpangzGurYL
stwl0iFOQCaiEA==
-----END CERTIFICATE-----
Generated at Sat May 10 22:26:51 2025 by rpki-client