Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
File: w1VyK06KSCQKzfXzN4OKogaqAto.mft (raw, json)
Hash identifier: qSa50eNBZJbnBGx4d5IIcGQPdluXCKmB1Oy/u3ornaM=
Subject key identifier: A6:78:83:5D:13:99:66:EE:A5:2A:45:A0:E2:55:21:08:20:71:8D:6F
Authority key identifier: C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
Certificate issuer: /CN=c355722b4e8a48240acdf5f337838aa206aa02da
Certificate serial: 0196AF8D897F11DCDC996D606DB73E117336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
Manifest number: 152B
Signing time: Thu 08 May 2025 11:00:10 +0000
Manifest this update: Thu 08 May 2025 11:00:10 +0000
Manifest next update: Fri 09 May 2025 11:00:10 +0000
Files and hashes: 1: skK36GoSOdR0likALCjbuukKSIA.roa (hash: rM2HKFoUwc02gigzQD8leLnlbHQm3zNCncQ93i9jwp0=)
2: w1VyK06KSCQKzfXzN4OKogaqAto.crl (hash: uG84F0qwFF1zxSyJT/xBNqmsA28z3cuayZI2eP4E/gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:8d:89:7f:11:dc:dc:99:6d:60:6d:b7:3e:11:73:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c355722b4e8a48240acdf5f337838aa206aa02da
Validity
Not Before: May 8 11:00:10 2025 GMT
Not After : May 9 11:00:10 2025 GMT
Subject: CN=a678835d139966eea52a45a0e255210820718d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:df:7d:2b:5c:b8:a6:e0:82:2f:a5:3e:8c:
c0:ac:a7:8e:33:5a:35:06:87:39:f5:c6:44:e7:22:
d1:a7:b1:51:51:5c:44:08:86:78:a1:37:c4:87:73:
2b:f6:ff:8f:d3:9d:cd:36:5f:1c:72:64:69:70:eb:
37:25:58:80:fc:4a:61:f8:54:b7:51:fb:15:f8:bd:
8f:3a:6d:ba:9e:13:ff:f4:92:9d:9d:ab:49:40:ba:
81:71:00:5a:07:37:cc:f6:07:a5:de:db:b7:46:82:
f5:b1:b6:ef:01:01:2c:a4:ab:41:1d:e4:d8:82:1b:
37:85:1f:67:e9:32:21:ea:8b:e6:d2:a0:92:99:7c:
b4:39:11:01:fc:1f:ee:38:57:72:d3:51:7f:12:53:
9a:bf:33:91:32:2e:a5:24:f8:6a:09:08:a4:61:58:
5f:fd:6c:92:5e:cd:c9:33:7c:6c:aa:9f:c5:cd:f6:
75:a3:a1:07:3c:e1:8f:79:ae:b4:c7:c7:0b:26:5f:
c8:18:61:44:43:1a:48:01:7b:92:db:a7:c8:58:31:
00:6e:fc:60:0e:82:c4:6c:44:eb:ea:00:51:f2:26:
49:77:4a:e1:b8:3a:e6:ee:5c:e2:8c:4c:a6:b3:9c:
33:21:01:52:d1:a5:b9:7c:90:c2:9b:84:4c:e6:f6:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:83:5D:13:99:66:EE:A5:2A:45:A0:E2:55:21:08:20:71:8D:6F
X509v3 Authority Key Identifier:
keyid:C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:47:87:01:51:b3:51:3e:08:18:f2:ff:eb:a2:86:90:d4:6c:
d7:be:9f:97:33:97:71:2a:59:b9:ee:55:8e:7a:77:f6:55:8d:
71:4b:f1:9b:f7:23:12:66:07:7b:ad:ff:77:e0:4a:62:93:8c:
16:83:a8:b9:5e:4b:11:91:69:c8:2e:a0:45:f3:93:0d:fc:c6:
13:ac:d3:0a:3d:62:c0:f7:ce:6e:a8:c6:af:fd:7d:4e:e1:2a:
95:b2:af:d2:aa:60:03:53:fd:5f:1e:11:07:c4:b4:35:66:f6:
91:cd:58:6f:ef:11:b3:c0:2b:bc:32:16:0d:39:c1:df:e1:c3:
71:ab:ff:a1:77:13:c6:59:af:d6:ad:fa:e7:db:5a:cb:7c:8b:
32:86:ad:53:23:d7:47:c0:92:da:c6:c7:2e:59:db:67:da:bf:
5c:46:08:dd:3a:e8:05:04:b6:8f:42:aa:84:ab:70:bb:6f:3b:
1c:30:30:cb:4b:98:51:d0:ff:8d:56:ee:b1:5d:af:0c:bf:76:
a1:04:f5:a0:8e:e3:dc:26:27:5c:36:d6:65:16:ac:1d:d1:cd:
ac:42:d5:ee:16:5b:49:cd:1f:5d:e5:8c:d8:09:be:06:eb:a3:
d3:72:68:d3:a8:e3:1c:b9:06:50:94:5c:e6:a1:32:7d:48:81:
9a:7d:ec:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavjYl/EdzcmW1gbbc+EXM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNTU3MjJiNGU4YTQ4MjQwYWNkZjVmMzM3ODM4YWEyMDZh
YTAyZGEwHhcNMjUwNTA4MTEwMDEwWhcNMjUwNTA5MTEwMDEwWjAzMTEwLwYDVQQD
EyhhNjc4ODM1ZDEzOTk2NmVlYTUyYTQ1YTBlMjU1MjEwODIwNzE4ZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LvffStcuKbggi+lPozArKeOM1o1
Boc59cZE5yLRp7FRUVxECIZ4oTfEh3Mr9v+P053NNl8ccmRpcOs3JViA/Eph+FS3
UfsV+L2POm26nhP/9JKdnatJQLqBcQBaBzfM9gel3tu3RoL1sbbvAQEspKtBHeTY
ghs3hR9n6TIh6ovm0qCSmXy0OREB/B/uOFdy01F/ElOavzORMi6lJPhqCQikYVhf
/WySXs3JM3xsqp/FzfZ1o6EHPOGPea60x8cLJl/IGGFEQxpIAXuS26fIWDEAbvxg
DoLEbETr6gBR8iZJd0rhuDrm7lzijEyms5wzIQFS0aW5fJDCm4RM5vbQnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ4g10TmWbupSpFoOJVIQggcY1vMB8GA1UdIwQY
MBaAFMNVcitOikgkCs318zeDiqIGqgLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYt
YTJlZjkwYzllOTEzLzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYtYTJlZjkwYzllOTEz
LzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUeHAVGz
UT4IGPL/66KGkNRs176flzOXcSpZue5Vjnp39lWNcUvxm/cjEmYHe63/d+BKYpOM
FoOouV5LEZFpyC6gRfOTDfzGE6zTCj1iwPfObqjGr/19TuEqlbKv0qpgA1P9Xx4R
B8S0NWb2kc1Yb+8Rs8ArvDIWDTnB3+HDcav/oXcTxlmv1q3659tay3yLMoatUyPX
R8CS2sbHLlnbZ9q/XEYI3TroBQS2j0KqhKtwu287HDAwy0uYUdD/jVbusV2vDL92
oQT1oI7j3CYnXDbWZRasHdHNrELV7hZbSc0fXeWM2Am+Buuj03Jo06jjHLkGUJRc
5qEyfUiBmn3sVQ==
-----END CERTIFICATE-----
Generated at Thu May 8 20:46:53 2025 by rpki-client