Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier: qpISVyaqoSGShCl3/qbGdy4ey5QPwx8zXAPVbFvWFEw=
Subject key identifier: 26:23:F0:24:23:C1:D4:14:F0:12:9E:77:7C:F0:59:DE:85:42:39:C6
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial: 01969DF57D377D5682606C6FC02BC501832A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 01:00:33 +0000
Manifest this update: Mon 05 May 2025 01:00:33 +0000
Manifest next update: Tue 06 May 2025 01:00:33 +0000
Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: aoSrzv0D9D5TWQUPyI60dQNUlV8MiSfnwwO7OkM+CgI=)
2: x87acQDfo7zGs3qirjlrzwnM_hA.roa (hash: U4EKqslx/+4i2YtDzAzEmDv7ojb2iGPFBdKGnVtkCzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:7d:37:7d:56:82:60:6c:6f:c0:2b:c5:01:83:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Validity
Not Before: May 5 01:00:33 2025 GMT
Not After : May 6 01:00:33 2025 GMT
Subject: CN=2623f02423c1d414f0129e777cf059de854239c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:41:07:f5:09:7c:93:49:e7:c5:7f:cc:d7:
f7:71:1c:bb:a0:70:d0:06:12:37:3b:c3:fe:af:0d:
4a:0d:7a:eb:c6:22:85:e7:b3:df:f4:86:5e:ac:5b:
0a:0b:99:bd:82:70:89:f4:ad:bc:8f:c3:9e:dd:2e:
59:3b:28:36:fc:88:a9:b4:4e:37:9b:ef:3e:a8:6f:
ef:50:2e:17:98:64:b5:dd:ae:76:07:7d:5c:d2:7e:
77:e1:fa:07:d2:53:d7:72:47:eb:6c:5d:a8:a4:cc:
07:fe:e6:08:7f:37:7f:ed:94:f4:13:64:04:a4:95:
f7:a9:fb:8e:db:1f:2c:f7:ed:4e:97:eb:cb:ae:68:
f0:43:73:ca:e3:65:c3:47:7d:77:b9:78:79:03:26:
d8:03:42:8c:73:af:f2:7d:0d:94:45:66:06:48:b5:
f5:ca:fb:dc:eb:51:9c:8f:83:c0:cb:01:11:22:b2:
8f:f3:e8:c6:b0:82:6f:4b:33:c0:d3:c8:1e:49:7c:
16:c3:4f:e5:65:9b:0a:d0:6e:1e:5f:26:d0:4d:23:
db:76:e6:bc:9f:97:7d:6c:6a:2f:7b:58:cc:21:8f:
b2:89:31:af:47:47:be:99:c2:49:b4:85:1c:45:65:
38:a2:8d:03:e6:7f:6f:36:bb:64:d9:f3:9c:27:a8:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:23:F0:24:23:C1:D4:14:F0:12:9E:77:7C:F0:59:DE:85:42:39:C6
X509v3 Authority Key Identifier:
keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:72:2f:d0:9c:1f:a3:35:4d:14:3a:fd:48:f6:2d:4d:f3:28:
d1:40:7e:c4:04:de:b9:0d:35:bb:e5:d7:7b:68:9f:4f:2a:ce:
5d:d6:dc:59:a5:44:3e:fb:82:da:da:12:91:32:89:14:9c:ca:
2b:4b:c8:c7:72:68:68:b4:74:67:1a:b0:03:06:7c:0e:1f:6f:
5d:2f:f9:3f:a9:8a:3d:0c:63:89:07:83:c7:90:00:b3:b0:b1:
6f:2d:19:32:37:ea:c8:ca:cf:68:74:23:9a:da:b6:25:e6:d8:
2a:58:9b:31:13:02:ba:cb:5c:23:68:21:26:3a:0c:cc:06:49:
f3:27:31:a0:ca:be:02:2f:a3:35:4a:c3:7d:63:74:2f:82:54:
fe:fe:5d:26:d8:d3:e2:8e:b7:5d:16:09:13:22:c9:be:98:1d:
ca:d0:5c:56:fd:ff:21:cf:15:8f:00:ef:65:c7:15:aa:5a:d9:
48:48:b9:b3:ea:c0:d1:14:af:32:6e:32:d7:25:e7:8c:e9:40:
96:b2:78:11:dd:59:f4:43:44:c1:66:53:b2:0d:f2:f3:87:8b:
71:5e:83:ec:47:e3:fb:15:f0:11:b5:12:65:31:56:f5:43:b7:
fd:43:f4:07:12:ab:bb:bb:9e:aa:cc:18:60:f5:0c:5c:e4:76:
bd:0d:32:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZad9X03fVaCYGxvwCvFAYMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NjAxZWZiM2YwY2ZkYWEyMjk1MTg3ZDJiMDQ1NjQ5NDEx
MGUxNTcwHhcNMjUwNTA1MDEwMDMzWhcNMjUwNTA2MDEwMDMzWjAzMTEwLwYDVQQD
EygyNjIzZjAyNDIzYzFkNDE0ZjAxMjllNzc3Y2YwNTlkZTg1NDIzOWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw01BB/UJfJNJ58V/zNf3cRy7oHDQ
BhI3O8P+rw1KDXrrxiKF57Pf9IZerFsKC5m9gnCJ9K28j8Oe3S5ZOyg2/IiptE43
m+8+qG/vUC4XmGS13a52B31c0n534foH0lPXckfrbF2opMwH/uYIfzd/7ZT0E2QE
pJX3qfuO2x8s9+1Ol+vLrmjwQ3PK42XDR313uXh5AybYA0KMc6/yfQ2URWYGSLX1
yvvc61Gcj4PAywERIrKP8+jGsIJvSzPA08geSXwWw0/lZZsK0G4eXybQTSPbdua8
n5d9bGove1jMIY+yiTGvR0e+mcJJtIUcRWU4oo0D5n9vNrtk2fOcJ6gAJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYj8CQjwdQU8BKed3zwWd6FQjnGMB8GA1UdIwQY
MBaAFNlgHvs/DP2qIpUYfSsEVklBEOFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5Zjgt
NjkwYTg4NTg2ODcwLzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5ZjgtNjkwYTg4NTg2ODcw
LzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXIv0Jwf
ozVNFDr9SPYtTfMo0UB+xATeuQ01u+XXe2ifTyrOXdbcWaVEPvuC2toSkTKJFJzK
K0vIx3JoaLR0ZxqwAwZ8Dh9vXS/5P6mKPQxjiQeDx5AAs7Cxby0ZMjfqyMrPaHQj
mtq2JebYKlibMRMCustcI2ghJjoMzAZJ8ycxoMq+Ai+jNUrDfWN0L4JU/v5dJtjT
4o63XRYJEyLJvpgdytBcVv3/Ic8VjwDvZccVqlrZSEi5s+rA0RSvMm4y1yXnjOlA
lrJ4Ed1Z9ENEwWZTsg3y84eLcV6D7Efj+xXwEbUSZTFW9UO3/UP0BxKru7ueqswY
YPUMXOR2vQ0yOg==
-----END CERTIFICATE-----
Generated at Mon May 5 08:43:37 2025 by rpki-client