Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
File: WnVplLspLknsxjN7f5XWnuKvYeE.mft (raw, json)
Hash identifier: vY1hApPJHladmRy97cwuIOv/E0s70U+VuHmfXIujkyY=
Subject key identifier: 21:5C:F4:2D:B8:AF:93:85:44:A7:28:32:17:73:BC:1F:43:30:5B:7D
Authority key identifier: 5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
Certificate issuer: /CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Certificate serial: 0196AB0C92589987C313ABFA9498103A3FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
Manifest number: 1530
Signing time: Wed 07 May 2025 14:00:49 +0000
Manifest this update: Wed 07 May 2025 14:00:49 +0000
Manifest next update: Thu 08 May 2025 14:00:49 +0000
Files and hashes: 1: 2GHxfiOPwbVOTy5G53i5QmAAwSg.roa (hash: iadwsn+4MKu/mlQdggoj9cx+xrbMZwAE31ck5bH3Eho=)
2: WnVplLspLknsxjN7f5XWnuKvYeE.crl (hash: 0vpfJlqug1hzjl2b76CgZeBIQ/7ixN6/C47AQPX40as=)
3: bWzRkWCt3v3bm-IZIROioFCJ8mo.roa (hash: Gh5JxyL071JSfkk/OFs2Jh7lq9MVbiHj6edZCvfMErQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:92:58:99:87:c3:13:ab:fa:94:98:10:3a:3f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Validity
Not Before: May 7 14:00:49 2025 GMT
Not After : May 8 14:00:49 2025 GMT
Subject: CN=215cf42db8af938544a728321773bc1f43305b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:45:6b:d8:1c:a1:04:86:f3:12:6a:0d:d4:
be:5d:b8:32:40:b3:3b:ff:8e:40:af:20:19:07:d9:
49:08:e6:c7:6b:7e:ee:77:1f:88:55:16:93:e8:73:
4c:bf:82:42:66:e7:61:8c:14:30:f1:63:e2:3b:d5:
73:74:84:61:75:63:28:73:bf:3f:b5:98:20:46:53:
a2:3f:67:96:13:fc:08:0f:9e:48:16:10:8d:4f:6d:
51:c5:e8:90:b6:61:21:06:69:38:68:7f:e7:5c:ce:
8e:8a:ad:8f:ef:4f:8e:2d:1a:73:e6:04:45:13:bf:
93:98:56:20:88:18:77:0a:99:3c:d0:e8:a2:f4:16:
d5:9c:6f:7b:bd:2d:9a:d6:06:21:00:d2:70:65:91:
dd:a4:87:1d:05:2c:9d:ec:56:6f:49:73:c6:2e:1d:
fc:a8:ca:2e:53:35:a2:09:54:9b:1a:04:1d:af:de:
22:0a:67:b2:fd:1b:e2:53:b1:17:6e:11:75:48:80:
ee:c1:99:2a:55:17:29:33:dc:d6:3d:da:5b:0a:7f:
a7:43:57:25:30:96:53:3d:ff:df:d4:cf:27:59:4f:
1b:6b:ac:e8:31:51:05:8d:0b:d9:e8:19:a7:eb:d3:
41:75:44:d1:b4:26:ce:1e:2c:7b:65:38:e1:06:d1:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5C:F4:2D:B8:AF:93:85:44:A7:28:32:17:73:BC:1F:43:30:5B:7D
X509v3 Authority Key Identifier:
keyid:5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:88:68:d6:bc:04:a2:cf:40:60:a9:31:51:83:03:9d:67:d5:
f5:b3:ff:d2:0d:64:f3:79:d4:96:d7:99:4f:c4:4f:3e:24:ce:
10:f8:6a:c8:58:4b:9d:db:42:fc:eb:3a:e4:1c:26:08:29:b9:
3f:8d:34:b8:e5:b8:43:71:a2:00:ac:3c:42:4f:3b:66:36:0b:
49:52:11:bf:7c:f0:24:e7:a1:3e:58:3a:73:01:96:b9:d6:82:
ce:0a:f6:3b:94:b7:10:ae:ca:49:04:cd:9f:92:2f:60:e7:1f:
6b:1a:19:ff:e3:e4:9d:36:9b:91:f0:98:dc:6f:0d:4d:b2:d3:
e0:e6:2d:8e:ee:74:6b:90:ec:86:ba:e6:56:a7:53:39:ba:86:
d7:af:94:07:50:f7:c5:8e:61:00:97:6b:63:6a:92:00:c6:93:
62:1f:cd:14:f0:eb:e7:ef:70:bf:ba:5d:3d:c6:f8:6b:3c:f0:
3f:e6:29:8f:e6:71:56:9a:c4:7e:d5:33:8a:95:c1:07:1d:7a:
5e:a9:ff:de:ac:ab:7c:c6:19:5d:e8:fa:f4:68:bd:af:cf:0b:
d6:ff:bf:ff:75:8f:8f:18:80:de:24:29:ea:ca:c5:1a:9e:a8:
02:15:40:6d:bd:bd:eb:24:f2:8a:cc:d7:a7:5a:08:c1:79:f0:
de:b0:d6:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarDJJYmYfDE6v6lJgQOj/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNzU2OTk0YmIyOTJlNDllY2M2MzM3YjdmOTVkNjllZTJh
ZjYxZTEwHhcNMjUwNTA3MTQwMDQ5WhcNMjUwNTA4MTQwMDQ5WjAzMTEwLwYDVQQD
EygyMTVjZjQyZGI4YWY5Mzg1NDRhNzI4MzIxNzczYmMxZjQzMzA1YjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX5Fa9gcoQSG8xJqDdS+XbgyQLM7
/45AryAZB9lJCObHa37udx+IVRaT6HNMv4JCZudhjBQw8WPiO9VzdIRhdWMoc78/
tZggRlOiP2eWE/wID55IFhCNT21RxeiQtmEhBmk4aH/nXM6Oiq2P70+OLRpz5gRF
E7+TmFYgiBh3Cpk80Oii9BbVnG97vS2a1gYhANJwZZHdpIcdBSyd7FZvSXPGLh38
qMouUzWiCVSbGgQdr94iCmey/RviU7EXbhF1SIDuwZkqVRcpM9zWPdpbCn+nQ1cl
MJZTPf/f1M8nWU8ba6zoMVEFjQvZ6Bmn69NBdUTRtCbOHix7ZTjhBtF0PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFc9C24r5OFRKcoMhdzvB9DMFt9MB8GA1UdIwQY
MBaAFFp1aZS7KS5J7MYze3+V1p7ir2HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV25WcGxMc3BMa25zeGpON2Y1WFdudUt2WWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84M2IwN2YtMWQyMi00YWUwLWEyZGUt
NGUwYWE0MmExNWE4LzEvV25WcGxMc3BMa25zeGpON2Y1WFdudUt2WWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84M2IwN2YtMWQyMi00YWUwLWEyZGUtNGUwYWE0MmExNWE4
LzEvV25WcGxMc3BMa25zeGpON2Y1WFdudUt2WWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIho1rwE
os9AYKkxUYMDnWfV9bP/0g1k83nUlteZT8RPPiTOEPhqyFhLndtC/Os65BwmCCm5
P400uOW4Q3GiAKw8Qk87ZjYLSVIRv3zwJOehPlg6cwGWudaCzgr2O5S3EK7KSQTN
n5IvYOcfaxoZ/+PknTabkfCY3G8NTbLT4OYtju50a5DshrrmVqdTObqG16+UB1D3
xY5hAJdrY2qSAMaTYh/NFPDr5+9wv7pdPcb4azzwP+Ypj+ZxVprEftUzipXBBx16
Xqn/3qyrfMYZXej69Gi9r88L1v+//3WPjxiA3iQp6srFGp6oAhVAbb296yTyiszX
p1oIwXnw3rDWLA==
-----END CERTIFICATE-----
Generated at Wed May 7 16:03:42 2025 by rpki-client