Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: fTE8+ihAJaRzhp0ACdW0+pOO8b9rEBYNzziduxiIoa4=
Subject key identifier: 9D:DE:9F:ED:08:FC:C2:A3:42:A9:19:DA:73:85:DA:D5:AB:33:7B:CF
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 0196B7EC86F2C2D15A3C3413759CDFC5FF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 1362
Signing time: Sat 10 May 2025 02:00:53 +0000
Manifest this update: Sat 10 May 2025 02:00:53 +0000
Manifest next update: Sun 11 May 2025 02:00:53 +0000
Files and hashes: 1: 60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa (hash: ixHsF6czewFe6nz5GWBS6cLi+9EpZcSZ2ufhT1ecw/Y=)
2: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: W39lp3Of5B5RHWU5Eam8z/FjH5sQKvV8AuUTfkZ1U7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:86:f2:c2:d1:5a:3c:34:13:75:9c:df:c5:ff:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: May 10 02:00:53 2025 GMT
Not After : May 11 02:00:53 2025 GMT
Subject: CN=9dde9fed08fcc2a342a919da7385dad5ab337bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:97:2b:27:2f:52:b3:59:55:6c:1f:67:79:fe:
c2:02:26:f8:8e:74:3e:4b:1e:05:4c:43:2d:02:11:
82:6d:f7:87:89:f6:60:07:04:45:17:34:eb:55:eb:
8e:8b:9c:59:66:88:28:25:73:f8:0a:ec:1b:15:dd:
a4:10:3e:8f:07:5b:c1:c2:56:12:3d:84:56:27:c2:
d1:74:6e:f9:d4:43:dc:84:c5:7c:7e:8e:d1:80:27:
5c:d1:2a:af:88:5e:13:ee:c3:7b:83:06:07:e0:26:
0c:f2:90:f6:cf:bd:10:cc:3b:63:78:99:58:5c:20:
da:6c:ec:94:b4:e7:45:5c:59:ad:18:56:76:f2:3a:
f5:37:01:fc:c4:39:e6:05:6a:c3:eb:01:ee:b6:d6:
24:09:65:56:58:63:17:c3:d9:37:4b:e0:25:02:da:
a6:a2:57:5b:0c:e8:ca:92:fc:25:7b:3a:82:d8:e2:
d5:aa:9f:0d:bb:74:c4:c4:54:94:8a:a3:b7:40:24:
af:61:7d:db:03:42:f5:27:db:e9:d4:71:f7:c4:8a:
4b:39:7b:c2:e7:f2:7f:8c:8a:31:9b:72:c4:94:04:
11:cd:26:bb:f2:3f:e6:b5:6a:1d:1f:e1:1c:35:d0:
fd:04:3e:ad:98:60:59:5a:76:72:7b:19:8b:ec:3b:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DE:9F:ED:08:FC:C2:A3:42:A9:19:DA:73:85:DA:D5:AB:33:7B:CF
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:57:1b:8c:d0:25:c1:26:2d:66:de:e9:a0:40:e4:66:b3:59:
0b:85:0a:6e:53:f8:7d:bd:2c:4e:0c:04:df:fe:93:c2:33:e8:
cc:05:45:1b:33:01:7a:e7:06:56:de:c8:93:3d:79:e6:4c:16:
f5:1d:a6:1f:67:4b:ca:d7:3c:72:3e:7a:d8:44:64:d8:a2:c7:
5b:3d:8a:fc:a4:f6:97:78:6f:f1:5f:d5:32:7b:5f:e0:4b:65:
78:83:d9:a2:aa:86:c0:96:a3:24:c1:50:5c:91:63:87:d1:92:
4a:47:2c:e5:2a:8e:4f:a5:a2:b5:20:a0:12:be:a2:b5:f7:77:
45:ad:70:e3:6f:e7:d7:07:d4:fe:08:af:23:e4:0c:d6:89:71:
93:81:47:01:9f:0a:d2:b5:33:9a:71:c7:56:ae:a1:1c:aa:e0:
06:79:dd:16:95:e2:ba:e8:86:0c:c3:52:64:5c:58:bc:6f:77:
c9:1b:e9:b2:9d:64:d8:d0:c7:8e:8a:10:a1:db:4f:bc:de:bc:
7d:af:64:76:25:a8:ed:87:90:2b:18:f9:0f:2b:78:22:58:df:
75:32:7d:fa:c7:be:fb:be:aa:44:6c:55:01:88:e8:f9:a3:da:
2a:c6:bc:ff:c3:eb:68:54:b4:43:0b:05:ce:3d:9a:a0:5e:cf:
a3:ed:7f:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa37IbywtFaPDQTdZzfxf8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGRhNTM5ZmViOGY4YTM3MjUzNDI2MDA2NzBjMGMxNTRl
NGJhYWEwHhcNMjUwNTEwMDIwMDUzWhcNMjUwNTExMDIwMDUzWjAzMTEwLwYDVQQD
Eyg5ZGRlOWZlZDA4ZmNjMmEzNDJhOTE5ZGE3Mzg1ZGFkNWFiMzM3YmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65crJy9Ss1lVbB9nef7CAib4jnQ+
Sx4FTEMtAhGCbfeHifZgBwRFFzTrVeuOi5xZZogoJXP4CuwbFd2kED6PB1vBwlYS
PYRWJ8LRdG751EPchMV8fo7RgCdc0SqviF4T7sN7gwYH4CYM8pD2z70QzDtjeJlY
XCDabOyUtOdFXFmtGFZ28jr1NwH8xDnmBWrD6wHuttYkCWVWWGMXw9k3S+AlAtqm
oldbDOjKkvwlezqC2OLVqp8Nu3TExFSUiqO3QCSvYX3bA0L1J9vp1HH3xIpLOXvC
5/J/jIoxm3LElAQRzSa78j/mtWodH+EcNdD9BD6tmGBZWnZyexmL7DvSfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3en+0I/MKjQqkZ2nOF2tWrM3vPMB8GA1UdIwQY
MBaAFFndpTn+uPijclNCYAZwwMFU5LqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQt
ZmVjMjVkMmU5MThkLzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQtZmVjMjVkMmU5MThk
LzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuVcbjNAl
wSYtZt7poEDkZrNZC4UKblP4fb0sTgwE3/6TwjPozAVFGzMBeucGVt7Ikz155kwW
9R2mH2dLytc8cj562ERk2KLHWz2K/KT2l3hv8V/VMntf4EtleIPZoqqGwJajJMFQ
XJFjh9GSSkcs5SqOT6WitSCgEr6itfd3Ra1w42/n1wfU/givI+QM1olxk4FHAZ8K
0rUzmnHHVq6hHKrgBnndFpXiuuiGDMNSZFxYvG93yRvpsp1k2NDHjooQodtPvN68
fa9kdiWo7YeQKxj5Dyt4IljfdTJ9+se++76qRGxVAYjo+aPaKsa8/8PraFS0QwsF
zj2aoF7Po+1/bg==
-----END CERTIFICATE-----
Generated at Sat May 10 10:32:27 2025 by rpki-client