Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
File: Wl5msnWeULtpuwpECe6zukjEbFY.mft (raw, json)
Hash identifier: POR6/By62owoZiRawokxXRU0UHtZkdlznKcaQRKE53w=
Subject key identifier: 60:FA:63:DD:3D:AA:50:EB:A0:A2:6B:92:61:F5:9C:0A:F2:3F:E1:F9
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 0196B333DD2254036F31514A3F8614066EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
Manifest number: 091E
Signing time: Fri 09 May 2025 04:00:42 +0000
Manifest this update: Fri 09 May 2025 04:00:42 +0000
Manifest next update: Sat 10 May 2025 04:00:42 +0000
Files and hashes: 1: 4QAgbyzrWTtNFmDHZVfy8v4-TWM.roa (hash: l1Vu320yqEJQLez1ywKptqLv6GIVlLha6DdA7Wb0GGo=)
2: AdXTASjqoi8z_QIeQHQxSQxDdBM.roa (hash: N3tNUwZ7HPmZxYp3cjjvv0V/sbIAqOlAsuusMg+dgj8=)
3: Wl5msnWeULtpuwpECe6zukjEbFY.crl (hash: iDNT5/4HmJK0rgnD4sFs//hkA7ZZ97Ps2n6fTi8aNMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:dd:22:54:03:6f:31:51:4a:3f:86:14:06:6e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: May 9 04:00:42 2025 GMT
Not After : May 10 04:00:42 2025 GMT
Subject: CN=60fa63dd3daa50eba0a26b9261f59c0af23fe1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:3a:55:c5:aa:aa:95:b7:02:fe:12:51:37:
69:d3:5d:fa:53:92:bb:82:4b:e6:36:af:a5:1e:7e:
eb:d0:85:8d:4a:1f:0b:3a:13:cd:8c:83:1a:3c:3d:
6c:5c:e7:59:bd:b6:79:67:3b:d0:2c:83:78:94:16:
f5:71:dc:fa:66:51:bc:9f:4e:c4:c3:01:1f:27:5b:
c8:42:b5:13:95:95:ed:55:c0:b4:b0:95:83:fe:52:
0c:0c:68:5e:6b:77:a8:d5:c6:1e:62:0f:a6:94:31:
16:c9:60:93:68:47:d1:78:7a:5b:7e:7f:25:b8:f4:
d2:61:7c:ee:28:dc:8b:45:fa:c7:b0:37:71:4c:97:
77:e3:23:38:90:11:f3:00:50:38:4e:35:58:1b:b5:
5b:f4:c1:93:d2:65:0d:4b:45:e3:26:7f:ee:c1:61:
77:90:fc:40:9e:4b:f6:de:96:8c:76:98:65:27:f1:
da:07:6e:16:95:c8:34:b5:6e:d4:b0:9d:51:5b:5f:
8a:ae:09:bd:c5:68:2a:bf:01:ce:91:60:fc:f2:59:
fa:3f:e1:db:98:6f:52:0e:70:1e:96:56:06:25:04:
f5:15:fd:82:6f:2d:28:73:5c:5f:bc:9f:90:53:6b:
d9:fc:02:79:42:12:df:6e:36:44:9d:13:ff:d0:86:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:63:DD:3D:AA:50:EB:A0:A2:6B:92:61:F5:9C:0A:F2:3F:E1:F9
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:da:8d:ce:8e:df:4a:2e:29:af:32:b3:a9:28:d5:e0:c3:be:
53:9c:99:b3:d0:ce:08:f1:3a:9b:3c:56:2f:4d:37:13:c5:6a:
42:96:fb:9c:67:96:81:8d:1d:96:29:4a:82:88:3d:46:b3:d0:
79:31:9a:6d:78:e9:65:97:90:53:fb:4c:35:09:13:16:88:26:
92:73:f1:69:82:a8:fa:43:8f:56:80:2c:0c:10:21:98:0d:aa:
60:cc:50:07:47:59:30:d1:63:7f:43:b5:da:6b:57:26:6e:b2:
2e:d4:a4:d4:88:36:e4:2c:15:e7:6f:e6:25:03:a4:c3:5d:89:
ed:f1:a6:5c:a9:2c:c1:c2:93:30:de:ae:00:a1:32:62:38:6f:
1d:66:10:40:cf:8b:79:c5:17:11:81:b7:40:36:70:29:1a:2f:
cd:15:00:a0:ac:f7:7f:f7:ca:52:f2:69:aa:17:a9:13:9b:4b:
df:39:31:4d:96:6a:6c:26:9b:4d:32:b1:24:4d:12:b3:6d:b4:
0b:b7:85:01:db:72:c1:21:2c:35:c2:d3:94:29:cc:3c:75:9c:
af:10:3c:10:b1:b1:0d:86:09:8d:cb:04:33:86:7b:64:3b:e6:
91:b8:6b:fa:8d:66:77:05:35:9f:f8:08:4f:dd:fd:c6:f9:9e:
6b:a6:94:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazM90iVANvMVFKP4YUBm6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNWU2NmIyNzU5ZTUwYmI2OWJiMGE0NDA5ZWViM2JhNDhj
NDZjNTYwHhcNMjUwNTA5MDQwMDQyWhcNMjUwNTEwMDQwMDQyWjAzMTEwLwYDVQQD
Eyg2MGZhNjNkZDNkYWE1MGViYTBhMjZiOTI2MWY1OWMwYWYyM2ZlMWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW46VcWqqpW3Av4SUTdp0136U5K7
gkvmNq+lHn7r0IWNSh8LOhPNjIMaPD1sXOdZvbZ5ZzvQLIN4lBb1cdz6ZlG8n07E
wwEfJ1vIQrUTlZXtVcC0sJWD/lIMDGhea3eo1cYeYg+mlDEWyWCTaEfReHpbfn8l
uPTSYXzuKNyLRfrHsDdxTJd34yM4kBHzAFA4TjVYG7Vb9MGT0mUNS0XjJn/uwWF3
kPxAnkv23paMdphlJ/HaB24Wlcg0tW7UsJ1RW1+Krgm9xWgqvwHOkWD88ln6P+Hb
mG9SDnAellYGJQT1Ff2Cby0oc1xfvJ+QU2vZ/AJ5QhLfbjZEnRP/0IbBlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGD6Y909qlDroKJrkmH1nAryP+H5MB8GA1UdIwQY
MBaAFFpeZrJ1nlC7absKRAnus7pIxGxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2w1bXNuV2VVTHRwdXdwRUNlNnp1a2pFYkZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80Zjc2YjQtN2Q1Ni00N2EwLWFjNWIt
NjUzZjIzOWZlOWEwLzEvV2w1bXNuV2VVTHRwdXdwRUNlNnp1a2pFYkZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi80Zjc2YjQtN2Q1Ni00N2EwLWFjNWItNjUzZjIzOWZlOWEw
LzEvV2w1bXNuV2VVTHRwdXdwRUNlNnp1a2pFYkZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNqNzo7f
Si4przKzqSjV4MO+U5yZs9DOCPE6mzxWL003E8VqQpb7nGeWgY0dlilKgog9RrPQ
eTGabXjpZZeQU/tMNQkTFogmknPxaYKo+kOPVoAsDBAhmA2qYMxQB0dZMNFjf0O1
2mtXJm6yLtSk1Ig25CwV52/mJQOkw12J7fGmXKkswcKTMN6uAKEyYjhvHWYQQM+L
ecUXEYG3QDZwKRovzRUAoKz3f/fKUvJpqhepE5tL3zkxTZZqbCabTTKxJE0Ss220
C7eFAdtywSEsNcLTlCnMPHWcrxA8ELGxDYYJjcsEM4Z7ZDvmkbhr+o1mdwU1n/gI
T939xvmea6aUeg==
-----END CERTIFICATE-----
Generated at Fri May 9 11:54:49 2025 by rpki-client