Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier: uQ8owqn9gyBOSY19++mNUo5QcxVss5Tp+R15C6UCFmw=
Subject key identifier: 85:9E:8A:72:B9:63:99:C5:7B:7B:A1:FC:D4:8A:3A:35:5B:D6:1D:5E
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 0196C72909E43EBEA5B49B1859573DB36495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number: 037A
Signing time: Tue 13 May 2025 01:01:17 +0000
Manifest this update: Tue 13 May 2025 01:01:17 +0000
Manifest next update: Wed 14 May 2025 01:01:17 +0000
Files and hashes: 1: 7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa (hash: b8AATSifx7/LvpsKfDCuwWcrOC9fgkYZg2ZM6+VpEfM=)
2: iuHoct3zHKPAQY0zJWbgQODPfEo.roa (hash: Un9DAj/KSTfz3PzRpucfMK4GqYVgsTE2tiPdLJ964Po=)
3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: 83wDuu3scWjH+7xOI6pW4k+8azO/DAAJd4WdMNrTp/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:09:e4:3e:be:a5:b4:9b:18:59:57:3d:b3:64:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: May 13 01:01:17 2025 GMT
Not After : May 14 01:01:17 2025 GMT
Subject: CN=859e8a72b96399c57b7ba1fcd48a3a355bd61d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:de:69:d7:28:88:9d:9e:b3:e0:6c:1b:9f:
f5:a6:6e:4d:aa:8a:f3:52:20:3c:1b:e3:42:7e:e3:
9b:d0:29:68:bf:b7:a5:3c:b5:8b:02:91:ef:51:c5:
1d:2f:08:a9:f7:b7:8a:13:82:17:1b:82:7c:bc:b2:
8d:0b:ba:6a:50:5d:10:31:b4:96:ca:12:1a:f2:85:
56:fd:a7:30:a6:9d:70:ed:79:cb:32:f6:52:d4:c8:
e4:eb:02:6b:bc:03:ff:c8:6c:23:f1:23:4f:3a:a4:
b0:3a:12:a1:35:4c:63:76:0f:3e:49:3a:22:27:39:
8d:e1:56:80:ff:9c:b4:82:11:34:7b:cb:fb:f4:52:
55:2f:c9:d4:56:87:06:d6:2f:c1:39:71:8c:b4:00:
50:b9:e9:66:c4:71:78:d9:d2:84:7e:15:71:ab:67:
fa:86:a6:0d:1d:f7:24:0b:bf:19:dd:d8:cf:1f:f8:
6a:80:1a:ad:e0:4e:36:cb:d0:d0:69:13:55:ac:6e:
a9:54:45:be:d2:1d:42:aa:6f:69:67:fc:dd:8b:c6:
3b:52:4c:26:b9:fa:63:3f:c3:96:01:b4:79:87:f9:
a5:bb:41:20:3d:49:5f:6b:27:58:e9:12:02:4b:2c:
d3:c8:bc:4f:01:a1:a0:85:ee:05:70:73:cc:2b:a8:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9E:8A:72:B9:63:99:C5:7B:7B:A1:FC:D4:8A:3A:35:5B:D6:1D:5E
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:90:8e:9f:73:db:a2:4b:7c:38:b2:03:ff:a2:df:07:59:3e:
8a:11:81:c6:47:cc:0d:09:ae:7e:ed:ff:6c:0e:d3:7f:5a:ea:
37:da:f6:f4:35:ea:01:ed:f2:41:a3:b4:05:bf:1e:e1:67:9e:
79:f9:60:8f:5c:6e:e0:c3:60:86:64:08:26:a5:08:60:c3:ba:
fa:f9:29:93:39:0a:46:83:7d:b3:3a:42:a7:15:06:cf:0b:19:
2c:cf:fb:4b:a8:d8:9f:f3:44:85:9f:ed:b6:02:7a:68:93:b2:
70:21:7b:1a:e6:b6:29:e6:5f:88:c0:f5:db:69:50:06:69:fe:
6c:3b:ad:21:be:c6:1b:34:0a:81:b3:59:96:52:45:50:46:21:
09:af:1b:2d:42:38:16:90:c1:73:da:0d:08:7a:4d:5a:ed:e2:
26:d3:3b:b9:04:d8:0b:10:c2:00:61:12:2e:fd:17:c7:be:7b:
22:45:01:52:df:d6:2f:96:78:4d:f8:a3:b0:b0:64:90:70:52:
dd:38:00:33:88:eb:d1:50:11:a1:99:22:54:1a:b9:88:fa:f1:
50:ea:81:c2:5f:ed:bb:f0:64:dd:1b:ac:b9:2f:8f:b5:0c:d7:
49:52:bd:41:5d:00:f7:e4:03:52:6f:98:7d:bc:b8:61:73:f5:
86:68:02:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHKQnkPr6ltJsYWVc9s2SVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZGRkMmQ0ZjAzMGZhMzYzOGMwNGJlNjM2ZWY5M2QyODky
NzE2NTIwHhcNMjUwNTEzMDEwMTE3WhcNMjUwNTE0MDEwMTE3WjAzMTEwLwYDVQQD
Eyg4NTllOGE3MmI5NjM5OWM1N2I3YmExZmNkNDhhM2EzNTViZDYxZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2zeadcoiJ2es+BsG5/1pm5Nqorz
UiA8G+NCfuOb0Clov7elPLWLApHvUcUdLwip97eKE4IXG4J8vLKNC7pqUF0QMbSW
yhIa8oVW/acwpp1w7XnLMvZS1Mjk6wJrvAP/yGwj8SNPOqSwOhKhNUxjdg8+SToi
JzmN4VaA/5y0ghE0e8v79FJVL8nUVocG1i/BOXGMtABQuelmxHF42dKEfhVxq2f6
hqYNHfckC78Z3djPH/hqgBqt4E42y9DQaRNVrG6pVEW+0h1Cqm9pZ/zdi8Y7Ukwm
ufpjP8OWAbR5h/mlu0EgPUlfaydY6RICSyzTyLxPAaGghe4FcHPMK6ioswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWeinK5Y5nFe3uh/NSKOjVb1h1eMB8GA1UdIwQY
MBaAFMDd0tTwMPo2OMBL5jbvk9KJJxZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzIt
NGZiNDA0ODVmZjdiLzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzItNGZiNDA0ODVmZjdi
LzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpCOn3Pb
okt8OLID/6LfB1k+ihGBxkfMDQmufu3/bA7Tf1rqN9r29DXqAe3yQaO0Bb8e4Wee
eflgj1xu4MNghmQIJqUIYMO6+vkpkzkKRoN9szpCpxUGzwsZLM/7S6jYn/NEhZ/t
tgJ6aJOycCF7Gua2KeZfiMD122lQBmn+bDutIb7GGzQKgbNZllJFUEYhCa8bLUI4
FpDBc9oNCHpNWu3iJtM7uQTYCxDCAGESLv0Xx757IkUBUt/WL5Z4TfijsLBkkHBS
3TgAM4jr0VARoZkiVBq5iPrxUOqBwl/tu/Bk3RusuS+PtQzXSVK9QV0A9+QDUm+Y
fby4YXP1hmgCOA==
-----END CERTIFICATE-----
Generated at Tue May 13 09:16:31 2025 by rpki-client