Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
File: wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json)
Hash identifier: YSv5lZzEvRB/43oBuXYJmNmlD/zkFC+jeiypAoFNPJk=
Subject key identifier: AB:49:FD:60:E0:E5:30:5D:C8:B6:8A:D5:CE:C4:88:AE:B8:76:7A:66
Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
Certificate issuer: /CN=c14d724ca59addd0f7f8108b01059795f34d3345
Certificate serial: 0196BF6EF480F2A0EE4E0BA07789972DE863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
Manifest number: 054F
Signing time: Sun 11 May 2025 13:00:41 +0000
Manifest this update: Sun 11 May 2025 13:00:41 +0000
Manifest next update: Mon 12 May 2025 13:00:41 +0000
Files and hashes: 1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: UOMs+9TXAjdHXbWiLPMX4rtaP7nC4p/4c1yoF4uCrs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:f4:80:f2:a0:ee:4e:0b:a0:77:89:97:2d:e8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345
Validity
Not Before: May 11 13:00:41 2025 GMT
Not After : May 12 13:00:41 2025 GMT
Subject: CN=ab49fd60e0e5305dc8b68ad5cec488aeb8767a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:6e:9d:e0:4c:9b:9b:63:99:ed:b0:9f:bb:
a8:4a:c7:6c:00:a1:5e:e3:57:83:6d:8f:ef:22:f6:
cd:72:74:3f:88:0d:28:f0:b2:6b:af:7d:27:a2:40:
2f:5f:57:b0:1b:21:11:4e:a9:59:b9:1e:0c:a9:8e:
94:88:e6:2d:4b:81:9d:cd:d2:71:9b:54:29:a4:9c:
00:55:5a:8a:77:6e:4c:08:1a:b9:ef:39:03:d9:c9:
b8:f3:f2:18:97:fd:41:81:8b:0b:a2:48:7b:cb:9d:
3b:9e:0e:ae:66:e9:78:37:ae:c1:2c:1a:e2:1d:7d:
5e:c8:3b:13:9a:de:b3:27:c9:db:fd:e1:b7:9c:03:
1b:0c:34:25:df:5c:a3:64:52:8b:90:cc:34:c5:fd:
56:ea:4d:a8:da:e4:b7:15:68:08:7e:ce:bf:5d:4a:
19:22:0d:41:2c:cd:d6:df:64:df:90:7c:ca:28:d9:
80:ff:32:3e:e1:50:9b:5d:c0:a2:b7:31:2e:88:cf:
53:af:ee:af:f0:9a:8b:b3:e4:bd:81:df:aa:49:c0:
76:98:11:56:f5:6e:72:23:23:aa:df:69:75:d5:09:
21:a2:12:9e:37:bc:cd:b6:c4:bc:72:cc:79:14:c9:
06:f3:28:a1:33:93:10:b0:ae:83:d5:ae:a3:22:c3:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:49:FD:60:E0:E5:30:5D:C8:B6:8A:D5:CE:C4:88:AE:B8:76:7A:66
X509v3 Authority Key Identifier:
keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ff:ca:66:a7:34:3b:56:00:40:96:90:0e:93:06:74:a2:ae:
73:31:27:fd:5a:63:f1:b3:f4:47:ad:36:cb:0e:42:34:d8:2b:
b9:c1:60:9e:15:da:5d:04:31:b5:ce:6a:5a:76:1b:f5:c6:64:
13:48:4f:87:9f:d9:d1:a0:a0:67:ce:56:a0:92:1d:e6:69:7c:
14:ee:75:8f:2d:44:0b:51:b2:97:da:07:ab:93:01:ff:23:b5:
ec:95:b6:42:dc:e1:c1:34:7a:8f:6b:ab:da:6b:e3:04:51:d2:
44:5e:7c:69:e8:4a:7c:b7:2f:b2:ca:e4:bd:9c:0c:4e:fb:2a:
e3:08:d3:33:82:01:5d:60:ed:17:0f:2d:ca:f0:87:12:4e:6f:
06:d2:b9:83:22:96:58:e3:dc:ac:7c:22:02:99:b9:84:79:4f:
cf:01:ae:46:14:3b:2b:d5:d4:47:82:ce:d3:ae:62:44:b2:6b:
6e:7f:e4:1a:84:0e:a9:f3:c0:73:40:eb:e7:9f:73:4f:8e:b4:
86:ff:d1:f6:75:da:00:83:dd:b8:04:71:07:9c:11:37:24:41:
ec:03:ba:9e:58:56:a5:f4:60:ed:75:b8:e1:a0:45:2a:96:5e:
cf:03:18:db:8d:12:a4:63:17:08:06:1c:8d:a2:9d:68:ff:56:
9e:1a:55:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/bvSA8qDuTgugd4mXLehjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNGQ3MjRjYTU5YWRkZDBmN2Y4MTA4YjAxMDU5Nzk1ZjM0
ZDMzNDUwHhcNMjUwNTExMTMwMDQxWhcNMjUwNTEyMTMwMDQxWjAzMTEwLwYDVQQD
EyhhYjQ5ZmQ2MGUwZTUzMDVkYzhiNjhhZDVjZWM0ODhhZWI4NzY3YTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlZuneBMm5tjme2wn7uoSsdsAKFe
41eDbY/vIvbNcnQ/iA0o8LJrr30nokAvX1ewGyERTqlZuR4MqY6UiOYtS4GdzdJx
m1QppJwAVVqKd25MCBq57zkD2cm48/IYl/1BgYsLokh7y507ng6uZul4N67BLBri
HX1eyDsTmt6zJ8nb/eG3nAMbDDQl31yjZFKLkMw0xf1W6k2o2uS3FWgIfs6/XUoZ
Ig1BLM3W32TfkHzKKNmA/zI+4VCbXcCitzEuiM9Tr+6v8JqLs+S9gd+qScB2mBFW
9W5yIyOq32l11QkhohKeN7zNtsS8csx5FMkG8yihM5MQsK6D1a6jIsNq5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtJ/WDg5TBdyLaK1c7EiK64dnpmMB8GA1UdIwQY
MBaAFMFNckylmt3Q9/gQiwEFl5XzTTNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNGRkZDctY2Q0MS00NmI1LWFjMzgt
NGY1NjRjZTA3MTI2LzEvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iNGRkZDctY2Q0MS00NmI1LWFjMzgtNGY1NjRjZTA3MTI2
LzEvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuv/KZqc0
O1YAQJaQDpMGdKKuczEn/Vpj8bP0R602yw5CNNgrucFgnhXaXQQxtc5qWnYb9cZk
E0hPh5/Z0aCgZ85WoJId5ml8FO51jy1EC1Gyl9oHq5MB/yO17JW2QtzhwTR6j2ur
2mvjBFHSRF58aehKfLcvssrkvZwMTvsq4wjTM4IBXWDtFw8tyvCHEk5vBtK5gyKW
WOPcrHwiApm5hHlPzwGuRhQ7K9XUR4LO065iRLJrbn/kGoQOqfPAc0Dr559zT460
hv/R9nXaAIPduARxB5wRNyRB7AO6nlhWpfRg7XW44aBFKpZezwMY240SpGMXCAYc
jaKdaP9WnhpV+w==
-----END CERTIFICATE-----
Generated at Sun May 11 15:13:17 2025 by rpki-client