Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
File: wY3k8q-McFDm5w4IoVJXPt1C5ng.mft (raw, json)
Hash identifier: RZoTOki204y0n23sbNVYCeP+nugW9KTq0mkSZk8XVOk=
Subject key identifier: 15:DF:8E:5C:20:9E:E6:D8:F2:7A:22:3B:68:68:4A:BB:4D:C9:EB:16
Authority key identifier: C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
Certificate issuer: /CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Certificate serial: 0196BBFFBF65A04C439A8FD13618A6F6FD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
Manifest number: 087C
Signing time: Sat 10 May 2025 21:00:22 +0000
Manifest this update: Sat 10 May 2025 21:00:22 +0000
Manifest next update: Sun 11 May 2025 21:00:22 +0000
Files and hashes: 1: pFur-kbIHPtMOLrHz0LwLOKyGnk.roa (hash: CYiRhFaTrF8IsFJyFUUUj+3+nsfcKz+NgibdViBzD0s=)
2: wY3k8q-McFDm5w4IoVJXPt1C5ng.crl (hash: SnFcQ2/8NuF2v1Ny/E8VvbFsfa4rm7o73/WA2et2AvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:bf:65:a0:4c:43:9a:8f:d1:36:18:a6:f6:fd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Validity
Not Before: May 10 21:00:22 2025 GMT
Not After : May 11 21:00:22 2025 GMT
Subject: CN=15df8e5c209ee6d8f27a223b68684abb4dc9eb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:b9:f7:ad:65:b3:52:d9:8f:ff:89:82:27:
cf:9d:f0:54:10:05:83:97:87:38:34:f2:ca:4f:33:
07:17:f9:72:4f:1e:98:3f:bd:dd:6d:a9:91:f9:01:
d3:fc:a0:fa:1c:2c:63:43:c8:cb:6c:33:3a:f5:8b:
a2:bb:36:0b:ec:78:01:84:31:d5:7c:d7:12:8f:c2:
64:a9:d6:bf:1e:a8:91:d1:a9:e7:4a:8f:00:4c:c1:
f6:5b:e4:fd:18:73:95:f0:69:d9:9d:12:53:cf:47:
35:8f:6a:ef:02:f9:1b:dc:6a:b9:5f:47:23:df:c0:
2e:f1:f3:81:ea:83:f4:73:12:04:c4:33:50:d6:a9:
87:56:51:57:7b:da:d1:69:bc:15:f4:72:d9:6c:04:
aa:9a:54:5b:ad:db:37:52:1c:5f:9a:13:ab:a1:d2:
87:ee:b8:d7:57:74:79:68:81:23:ff:52:9e:bf:8e:
bf:5e:1a:b9:3f:6a:33:41:c5:34:79:67:6d:18:e5:
36:79:4f:b7:d0:18:fa:1c:f3:a2:9f:ec:96:91:cb:
ad:97:de:4a:9a:19:3d:ed:c2:85:05:49:f0:0b:e1:
03:6e:bf:e2:c1:3d:df:1d:eb:dd:4e:63:22:2f:6a:
ad:8d:8b:65:77:f3:b6:0a:7e:2a:cd:56:42:d3:71:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DF:8E:5C:20:9E:E6:D8:F2:7A:22:3B:68:68:4A:BB:4D:C9:EB:16
X509v3 Authority Key Identifier:
keyid:C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:50:45:c0:51:f3:ab:b5:cf:5a:4e:b7:76:d1:af:d3:e7:
51:70:b4:8b:b9:e1:21:cf:bd:a7:a9:85:9a:80:71:ea:80:5f:
77:6c:af:50:c4:74:82:92:42:6c:87:bd:fd:1c:a2:da:d7:96:
5a:bf:75:fb:b9:57:af:01:e9:88:fc:75:bd:68:b8:73:4a:f4:
13:e5:a0:43:e3:11:54:8c:4c:42:ff:d6:db:86:1d:57:d4:4c:
4e:5f:52:79:d0:36:b0:79:16:91:00:f8:bc:64:e8:a5:ce:76:
96:7c:84:db:fb:34:36:88:0a:95:b8:99:42:67:4e:60:b1:13:
fd:c3:1b:f5:f2:de:d7:a3:64:4b:3b:e1:ae:b1:6c:47:81:02:
93:cc:72:20:52:bf:1b:6c:51:90:e8:47:b8:59:7f:b7:45:db:
23:ce:78:c3:e4:30:2b:75:23:98:fe:ec:60:28:d0:c3:14:c8:
fb:d2:93:ea:91:31:eb:be:58:a7:aa:2b:62:0d:5f:42:ec:d6:
c7:fa:31:ab:fb:d7:82:28:d4:59:94:a3:ff:4d:33:32:90:61:
60:df:fe:16:63:ff:a2:d6:69:5c:f4:fb:10:12:f4:b5:7c:aa:
2c:8f:bc:ca:2a:ca:40:ee:50:f7:61:1d:95:6c:e0:7c:a5:1a:
bb:18:21:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7/79loExDmo/RNhim9v0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOGRlNGYyYWY4YzcwNTBlNmU3MGUwOGExNTI1NzNlZGQ0
MmU2NzgwHhcNMjUwNTEwMjEwMDIyWhcNMjUwNTExMjEwMDIyWjAzMTEwLwYDVQQD
EygxNWRmOGU1YzIwOWVlNmQ4ZjI3YTIyM2I2ODY4NGFiYjRkYzllYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsau5961ls1LZj/+JgifPnfBUEAWD
l4c4NPLKTzMHF/lyTx6YP73dbamR+QHT/KD6HCxjQ8jLbDM69YuiuzYL7HgBhDHV
fNcSj8Jkqda/HqiR0annSo8ATMH2W+T9GHOV8GnZnRJTz0c1j2rvAvkb3Gq5X0cj
38Au8fOB6oP0cxIExDNQ1qmHVlFXe9rRabwV9HLZbASqmlRbrds3UhxfmhOrodKH
7rjXV3R5aIEj/1Kev46/Xhq5P2ozQcU0eWdtGOU2eU+30Bj6HPOin+yWkcutl95K
mhk97cKFBUnwC+EDbr/iwT3fHevdTmMiL2qtjYtld/O2Cn4qzVZC03FJBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXfjlwgnubY8noiO2hoSrtNyesWMB8GA1UdIwQY
MBaAFMGN5PKvjHBQ5ucOCKFSVz7dQuZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80YWY3YzEtNTBjYi00NzlkLWEzNzct
MDA3YjQ0N2Q0YjM5LzEvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80YWY3YzEtNTBjYi00NzlkLWEzNzctMDA3YjQ0N2Q0YjM5
LzEvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3JQRcBR
86u1z1pOt3bRr9PnUXC0i7nhIc+9p6mFmoBx6oBfd2yvUMR0gpJCbIe9/Ryi2teW
Wr91+7lXrwHpiPx1vWi4c0r0E+WgQ+MRVIxMQv/W24YdV9RMTl9SedA2sHkWkQD4
vGTopc52lnyE2/s0NogKlbiZQmdOYLET/cMb9fLe16NkSzvhrrFsR4ECk8xyIFK/
G2xRkOhHuFl/t0XbI854w+QwK3UjmP7sYCjQwxTI+9KT6pEx675Yp6orYg1fQuzW
x/oxq/vXgijUWZSj/00zMpBhYN/+FmP/otZpXPT7EBL0tXyqLI+8yirKQO5Q92Ed
lWzgfKUauxghPg==
-----END CERTIFICATE-----
Generated at Sun May 11 03:44:50 2025 by rpki-client