Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
File: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json)
Hash identifier: HZEjA6EFKWl5npQ6XSmn62zIXZnpMXRpfekQcI0J8uE=
Subject key identifier: 48:BB:AB:EB:2A:E0:7C:AB:73:7F:31:EC:AC:92:41:FB:B1:A3:01:7C
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial: 0196C2396BB9A605AC5CB3FDDB86690590CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 02:01:05 +0000
Manifest this update: Mon 12 May 2025 02:01:05 +0000
Manifest next update: Tue 13 May 2025 02:01:05 +0000
Files and hashes: 1: o0fdFP8L6ZQ9z18ph8qAlZoBEzo.roa (hash: VPAIrOk53hiaGWh79TqFrzeWPMAWo/gbrSaxlcrP+GI=)
2: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: L25pnPnLlJn7VD37HcT49S+aLnfxHl03Y3/hOaPaWhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:6b:b9:a6:05:ac:5c:b3:fd:db:86:69:05:90:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Validity
Not Before: May 12 02:01:05 2025 GMT
Not After : May 13 02:01:05 2025 GMT
Subject: CN=48bbabeb2ae07cab737f31ecac9241fbb1a3017c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:3f:ce:a0:7e:d2:1e:8d:5e:bc:84:37:e6:
ee:71:29:67:49:2c:bb:75:0f:bd:76:58:e7:af:57:
05:03:e2:31:f8:88:47:b1:d9:32:7b:66:31:66:61:
09:6f:6e:90:fa:4e:2f:6a:2e:8f:bd:68:26:31:52:
56:0d:e9:f2:fe:ad:51:96:28:37:05:75:d8:b6:c1:
ba:e1:da:2e:79:a8:4c:ca:23:de:4e:f8:75:a6:9f:
83:2c:c3:3a:5b:a1:22:d1:38:b8:58:19:65:93:c6:
a1:45:39:29:18:5f:96:39:09:9b:43:9c:b0:24:89:
43:4f:e5:49:09:6f:7d:a5:5f:18:dc:91:94:13:52:
d1:21:5a:55:1c:41:4c:c0:d3:99:1f:9f:01:75:68:
72:fd:a5:dd:30:11:e2:d3:d0:86:0c:1c:f7:28:06:
17:3d:be:56:14:a9:fa:7e:7e:11:d6:f1:bc:cd:c1:
82:cd:92:98:27:62:39:5b:43:39:58:f8:cc:05:db:
9f:b2:8d:29:0c:1b:58:d9:69:4e:fb:27:76:a0:42:
bd:56:26:55:b2:e0:19:ce:dd:6f:5c:97:09:7d:af:
53:b3:8d:e0:8b:32:1f:7f:7c:39:c3:dc:e9:e1:e4:
5d:a0:8c:33:93:ac:45:89:e4:90:a6:a7:68:97:ae:
22:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BB:AB:EB:2A:E0:7C:AB:73:7F:31:EC:AC:92:41:FB:B1:A3:01:7C
X509v3 Authority Key Identifier:
keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bc:23:a3:b8:c3:7a:90:93:3c:97:9d:87:22:44:89:ca:0f:
9b:46:50:33:91:ca:20:6d:17:84:63:ab:0c:19:e5:9f:db:fa:
22:7a:47:e5:a1:3d:ea:4d:fb:b6:68:ef:ea:8e:97:56:e5:ae:
ef:09:a7:fe:bd:97:c7:1b:4b:27:0d:73:ab:2e:ef:10:c7:1d:
91:f2:94:89:e3:02:76:8e:5e:7e:9b:75:98:b3:ab:35:f0:92:
b9:94:1c:37:fc:c2:70:c7:c6:1e:e3:11:56:56:90:97:cf:27:
ee:26:e0:f2:b0:89:28:4d:79:23:93:25:49:a0:37:25:60:25:
10:db:93:dd:a8:ed:31:da:ce:06:cf:ac:54:7d:c9:12:d2:28:
ed:c4:49:30:64:18:28:fa:b5:20:88:ce:4e:4f:9c:be:94:52:
9c:d4:9c:be:4c:83:6e:6c:cb:66:df:7a:17:40:b8:2e:26:7c:
2a:2b:59:61:11:7e:52:34:f0:a4:ee:2c:e8:84:71:3b:37:7e:
42:64:52:71:d2:7b:74:c1:bc:29:cd:a0:29:22:94:55:5b:ca:
94:02:d8:4e:01:8e:38:aa:e0:a0:af:32:bd:49:94:9c:b5:a7:
f0:81:e8:6b:03:03:bb:66:ec:a0:50:2d:2d:13:f4:24:08:8d:
cb:e4:b5:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOWu5pgWsXLP924ZpBZDPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzk2NGFhYmY0MDRkZGEzZjVlMGVjYzFjNzA2YWIzMjdj
NmY5MzEwHhcNMjUwNTEyMDIwMTA1WhcNMjUwNTEzMDIwMTA1WjAzMTEwLwYDVQQD
Eyg0OGJiYWJlYjJhZTA3Y2FiNzM3ZjMxZWNhYzkyNDFmYmIxYTMwMTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraw/zqB+0h6NXryEN+bucSlnSSy7
dQ+9dljnr1cFA+Ix+IhHsdkye2YxZmEJb26Q+k4vai6PvWgmMVJWDeny/q1Rlig3
BXXYtsG64doueahMyiPeTvh1pp+DLMM6W6Ei0Ti4WBllk8ahRTkpGF+WOQmbQ5yw
JIlDT+VJCW99pV8Y3JGUE1LRIVpVHEFMwNOZH58BdWhy/aXdMBHi09CGDBz3KAYX
Pb5WFKn6fn4R1vG8zcGCzZKYJ2I5W0M5WPjMBdufso0pDBtY2WlO+yd2oEK9ViZV
suAZzt1vXJcJfa9Ts43gizIff3w5w9zp4eRdoIwzk6xFieSQpqdol64inwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEi7q+sq4Hyrc38x7KySQfuxowF8MB8GA1UdIwQY
MBaAFMJ5ZKq/QE3aP14OzBxwarMnxvkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEt
NWViZjJhNTRlYjZkLzEvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEtNWViZjJhNTRlYjZk
LzEvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrwjo7jD
epCTPJedhyJEicoPm0ZQM5HKIG0XhGOrDBnln9v6InpH5aE96k37tmjv6o6XVuWu
7wmn/r2XxxtLJw1zqy7vEMcdkfKUieMCdo5efpt1mLOrNfCSuZQcN/zCcMfGHuMR
VlaQl88n7ibg8rCJKE15I5MlSaA3JWAlENuT3ajtMdrOBs+sVH3JEtIo7cRJMGQY
KPq1IIjOTk+cvpRSnNScvkyDbmzLZt96F0C4LiZ8KitZYRF+UjTwpO4s6IRxOzd+
QmRScdJ7dMG8Kc2gKSKUVVvKlALYTgGOOKrgoK8yvUmUnLWn8IHoawMDu2bsoFAt
LRP0JAiNy+S14g==
-----END CERTIFICATE-----
Generated at Mon May 12 06:53:09 2025 by rpki-client