Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: XbnQyCEyN/f0faLi+Ju2MzFGi8BnMRGGn0/BY2O2kZ0=
Subject key identifier: A0:4B:84:5C:20:61:43:3C:4E:91:C3:0F:5A:E4:CD:11:A1:EB:6F:55
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 0196B5C6F15F6829E32D8332B66875F1569A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 16:00:36 +0000
Manifest this update: Fri 09 May 2025 16:00:36 +0000
Manifest next update: Sat 10 May 2025 16:00:36 +0000
Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: ujVPIdvZqK8Yt5cNW5jJzr1Z16cbeJw5MM85SpOqaDg=)
3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c6:f1:5f:68:29:e3:2d:83:32:b6:68:75:f1:56:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: May 9 16:00:36 2025 GMT
Not After : May 10 16:00:36 2025 GMT
Subject: CN=a04b845c2061433c4e91c30f5ae4cd11a1eb6f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:a8:1c:c0:5e:a4:90:85:7d:4d:db:c6:e7:
f9:20:1d:10:df:a6:09:75:2f:c0:84:09:fa:ef:6a:
07:93:f5:40:d7:88:ba:b3:3a:4e:4b:33:88:d2:87:
ba:de:d5:3a:f9:89:9a:5f:90:cf:70:f7:15:9d:ee:
eb:94:f6:d5:b2:fe:6e:9c:7a:6e:17:60:f3:0c:c5:
71:d9:17:1f:da:08:58:96:49:8a:d0:f2:b0:eb:a9:
33:18:07:33:f1:93:13:ec:87:59:1f:42:f2:f0:3a:
43:ce:87:37:1f:f3:0d:c2:a7:b3:59:da:d4:29:bf:
33:9a:8c:eb:fa:5f:2f:77:6b:f6:2c:81:9f:f1:de:
28:2c:cf:40:82:c8:d1:8f:42:d4:cd:aa:65:8a:ff:
78:b1:f9:46:d6:38:10:33:f7:9f:84:cf:57:2e:42:
b5:66:93:88:c9:70:e8:9b:8b:25:6e:43:31:d6:a5:
a8:e0:90:43:97:29:00:8d:2c:7e:48:8d:e5:ea:e6:
d7:27:df:0e:50:c3:16:3f:87:ec:db:f6:bc:d4:5c:
9c:83:95:ae:26:fb:06:5c:6f:b1:db:17:ce:45:e5:
52:08:8e:55:dd:25:c4:4c:e8:57:60:76:5d:4a:53:
10:15:ef:00:19:01:83:6b:f3:85:a6:c4:fd:39:5f:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4B:84:5C:20:61:43:3C:4E:91:C3:0F:5A:E4:CD:11:A1:EB:6F:55
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a1:4c:b0:06:93:99:4e:79:ea:aa:73:d5:96:a1:47:65:e2:
e8:7d:9a:74:36:24:e4:46:07:00:d9:e1:f5:22:0e:fb:7e:ac:
18:d2:89:48:72:49:15:53:7f:7e:c3:1c:d4:ad:a7:a7:b4:50:
c0:e8:52:ed:bc:c6:90:29:68:99:de:1b:d1:12:8f:4f:96:96:
7a:4a:93:81:fc:c0:c2:c8:ed:33:be:0b:ea:af:b7:f5:c3:86:
e5:ea:3e:df:b8:90:ae:b1:e3:f7:01:ee:c2:c7:da:b7:49:1c:
c7:37:f4:f0:24:8a:89:f8:4c:91:5d:39:75:b9:76:ce:14:8d:
5b:11:ae:a3:2c:20:f0:b7:1e:00:97:a4:1f:78:2e:9e:3b:83:
65:4e:7c:e3:cf:c4:34:9b:60:f6:d4:57:3f:55:f2:48:0f:60:
33:ba:ed:d1:f8:c5:cd:38:92:b3:28:46:c1:05:7d:49:91:1f:
45:e1:5f:bc:87:30:d8:94:6c:0d:b0:f2:6f:0e:f9:9c:e2:41:
d3:47:44:a6:57:9f:a4:76:e8:fe:50:b7:51:d2:ef:83:0b:a7:
bc:16:13:fc:56:98:69:44:36:9c:03:cd:f5:d3:3e:e2:37:0e:
8a:0b:1c:d4:6e:72:e9:2e:a7:9c:66:1a:e1:b2:cd:87:37:f3:
2d:d0:39:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1xvFfaCnjLYMytmh18VaaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYmQyNmZlMjI5NWU0NjJiZTI2Nzg1MzNlZmE1MzFlMjNi
N2YxMDIwHhcNMjUwNTA5MTYwMDM2WhcNMjUwNTEwMTYwMDM2WjAzMTEwLwYDVQQD
EyhhMDRiODQ1YzIwNjE0MzNjNGU5MWMzMGY1YWU0Y2QxMWExZWI2ZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V6oHMBepJCFfU3bxuf5IB0Q36YJ
dS/AhAn672oHk/VA14i6szpOSzOI0oe63tU6+YmaX5DPcPcVne7rlPbVsv5unHpu
F2DzDMVx2Rcf2ghYlkmK0PKw66kzGAcz8ZMT7IdZH0Ly8DpDzoc3H/MNwqezWdrU
Kb8zmozr+l8vd2v2LIGf8d4oLM9AgsjRj0LUzapliv94sflG1jgQM/efhM9XLkK1
ZpOIyXDom4slbkMx1qWo4JBDlykAjSx+SI3l6ubXJ98OUMMWP4fs2/a81Fycg5Wu
JvsGXG+x2xfOReVSCI5V3SXETOhXYHZdSlMQFe8AGQGDa/OFpsT9OV81ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBLhFwgYUM8TpHDD1rkzRGh629VMB8GA1UdIwQY
MBaAFMO9Jv4ileRiviZ4Uz76Ux4jt/ECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgt
OGJkOTc2OTEwZGJmLzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgtOGJkOTc2OTEwZGJm
LzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKFMsAaT
mU556qpz1ZahR2Xi6H2adDYk5EYHANnh9SIO+36sGNKJSHJJFVN/fsMc1K2np7RQ
wOhS7bzGkClomd4b0RKPT5aWekqTgfzAwsjtM74L6q+39cOG5eo+37iQrrHj9wHu
wsfat0kcxzf08CSKifhMkV05dbl2zhSNWxGuoywg8LceAJekH3gunjuDZU5848/E
NJtg9tRXP1XySA9gM7rt0fjFzTiSsyhGwQV9SZEfReFfvIcw2JRsDbDybw75nOJB
00dEplefpHbo/lC3UdLvgwunvBYT/FaYaUQ2nAPN9dM+4jcOigsc1G5y6S6nnGYa
4bLNhzfzLdA5MA==
-----END CERTIFICATE-----
Generated at Sat May 10 00:28:51 2025 by rpki-client