Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
File: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft (raw, json)
Hash identifier: AjXmK5V4imOWZAkop7wKveoK9zetaFrbXDJqs+rZh9w=
Subject key identifier: 32:04:C0:A6:0A:97:3D:93:C7:FD:09:B7:C2:45:4B:46:9D:5F:7D:92
Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Certificate serial: 0196BD80DBBA793D62C5D06CF296610A9ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 04:01:00 +0000
Manifest this update: Sun 11 May 2025 04:01:00 +0000
Manifest next update: Mon 12 May 2025 04:01:00 +0000
Files and hashes: 1: sNmSuLPwop12596I--vLe1Fw_L8.roa (hash: rnnFcpfS8qT33aKuf/kRcr+W7tCgIM7nW6QVvMfILWQ=)
2: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl (hash: mGnm7WwbMiVn6PA25MmG9aykaeojxhZp+XdyolZad1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:db:ba:79:3d:62:c5:d0:6c:f2:96:61:0a:9a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Validity
Not Before: May 11 04:01:00 2025 GMT
Not After : May 12 04:01:00 2025 GMT
Subject: CN=3204c0a60a973d93c7fd09b7c2454b469d5f7d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:7a:41:d0:90:59:48:70:93:1d:2c:f2:ab:
07:6c:e6:67:73:87:eb:9b:1e:3a:f6:b6:f5:75:c7:
55:da:e0:5c:a9:f1:60:69:f5:12:c0:99:ab:49:7a:
33:ca:d6:90:b7:25:46:b0:99:38:0d:db:97:e4:22:
df:1d:07:57:02:56:10:bc:cd:2f:bd:1d:7b:b6:2b:
6f:7a:2f:91:e0:04:86:6f:8c:ba:ac:2e:07:67:3d:
78:7d:a4:69:90:e9:35:32:22:d5:f4:c1:4c:fb:ff:
65:df:75:3a:72:40:71:32:2a:1b:d9:97:ac:d4:9a:
11:10:fa:5c:76:b5:e3:fb:99:77:e3:f5:76:fa:0a:
e3:90:2b:9d:60:f9:1d:f3:a4:14:78:fe:5a:d7:bd:
c9:41:b6:f4:0f:f5:3c:dc:c6:89:8c:0c:48:f4:30:
57:e7:de:8c:aa:96:86:3b:c7:f1:5f:1e:ab:64:88:
b2:f2:54:e5:e4:88:d9:05:b8:dc:78:28:90:7f:c7:
2a:5a:b3:1f:a4:af:27:a3:48:e3:79:cc:80:d7:05:
b5:ee:f1:d4:5a:dc:8b:93:e2:d0:57:ee:94:b0:7c:
51:ff:99:14:6e:e3:7e:fc:55:9e:41:a1:cf:1e:43:
2c:94:b5:87:81:e8:97:48:41:44:cf:91:fc:0a:01:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:04:C0:A6:0A:97:3D:93:C7:FD:09:B7:C2:45:4B:46:9D:5F:7D:92
X509v3 Authority Key Identifier:
keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cf:c7:b7:a6:a5:07:98:1e:b2:3e:b7:f8:07:a0:b2:85:f8:
d4:15:a3:9d:e4:33:d1:64:e6:73:06:48:0a:08:cf:9c:7e:3d:
47:3b:40:33:73:14:84:58:dc:51:10:96:15:42:83:72:ef:a2:
32:06:b9:e1:ac:28:2d:18:af:39:37:ae:32:21:c0:64:09:39:
06:43:20:b7:e4:81:df:4c:64:e0:1d:b6:8c:fa:32:ac:9c:6e:
e9:c8:74:60:78:7f:68:3c:e4:ec:50:78:1e:e8:32:54:61:25:
35:61:5e:d1:61:52:98:db:30:08:4d:39:ee:93:b3:4f:cd:b0:
1e:b9:48:b4:c1:b4:4e:cc:7a:4b:5e:fa:b8:9c:c6:6e:63:60:
52:9b:65:ab:7e:2e:33:a9:d6:7e:25:9c:bc:7e:c3:51:fe:c4:
50:7c:2f:41:f0:31:db:c3:c0:17:4a:8c:b6:e9:b7:1c:dd:d4:
2d:1f:fe:4a:ce:e4:ae:bc:b2:74:8c:1b:b8:6c:4c:68:49:25:
27:f6:75:41:bd:18:54:63:aa:ca:50:97:a1:45:79:7b:86:b9:
77:94:4d:dd:30:49:2c:f4:f5:9b:76:8d:e9:a2:bb:1e:d1:4f:
20:00:90:c1:75:19:4a:12:64:c7:31:3c:d4:92:30:20:3d:98:
d4:18:03:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gNu6eT1ixdBs8pZhCprMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTQyZTVkNWNmYWE0NTIxNjZiYzdiNTVhNjU1NThmNTI0
ZDY3NTEwHhcNMjUwNTExMDQwMTAwWhcNMjUwNTEyMDQwMTAwWjAzMTEwLwYDVQQD
EygzMjA0YzBhNjBhOTczZDkzYzdmZDA5YjdjMjQ1NGI0NjlkNWY3ZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yJ6QdCQWUhwkx0s8qsHbOZnc4fr
mx469rb1dcdV2uBcqfFgafUSwJmrSXozytaQtyVGsJk4DduX5CLfHQdXAlYQvM0v
vR17titvei+R4ASGb4y6rC4HZz14faRpkOk1MiLV9MFM+/9l33U6ckBxMiob2Zes
1JoREPpcdrXj+5l34/V2+grjkCudYPkd86QUeP5a173JQbb0D/U83MaJjAxI9DBX
596MqpaGO8fxXx6rZIiy8lTl5IjZBbjceCiQf8cqWrMfpK8no0jjecyA1wW17vHU
WtyLk+LQV+6UsHxR/5kUbuN+/FWeQaHPHkMslLWHgeiXSEFEz5H8CgF+hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIEwKYKlz2Tx/0Jt8JFS0adX32SMB8GA1UdIwQY
MBaAFMAULl1c+qRSFmvHtVplVY9STWdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iN2YxZGEtNDY3YS00MzYyLThiMmUt
MTk3MGRlODRhMWYwLzEvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iN2YxZGEtNDY3YS00MzYyLThiMmUtMTk3MGRlODRhMWYw
LzEvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM/Ht6al
B5gesj63+AegsoX41BWjneQz0WTmcwZICgjPnH49RztAM3MUhFjcURCWFUKDcu+i
Mga54awoLRivOTeuMiHAZAk5BkMgt+SB30xk4B22jPoyrJxu6ch0YHh/aDzk7FB4
HugyVGElNWFe0WFSmNswCE057pOzT82wHrlItMG0Tsx6S176uJzGbmNgUptlq34u
M6nWfiWcvH7DUf7EUHwvQfAx28PAF0qMtum3HN3ULR/+Ss7krryydIwbuGxMaEkl
J/Z1Qb0YVGOqylCXoUV5e4a5d5RN3TBJLPT1m3aN6aK7HtFPIACQwXUZShJkxzE8
1JIwID2Y1BgDTg==
-----END CERTIFICATE-----
Generated at Sun May 11 14:58:28 2025 by rpki-client