Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
File: WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json)
Hash identifier: zneR47lFiueFr6PLi8Su7C/9sa61lkMAK1NLRXRYeJs=
Subject key identifier: 9D:1C:7B:DC:8A:4C:33:40:7B:1C:4E:37:DD:19:39:51:ED:5F:F5:72
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial: 0196D251037B194D1DF2EC9E7F496AFF420A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
Manifest number: 0CDE
Signing time: Thu 15 May 2025 05:00:46 +0000
Manifest this update: Thu 15 May 2025 05:00:46 +0000
Manifest next update: Fri 16 May 2025 05:00:46 +0000
Files and hashes: 1: Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa (hash: 6OpDkd4to1irtWv8vpsm2jxisQw9dR70exo6gT09Ccs=)
2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: 95Av03PrqNzV2W99gLq22NC7nwguZFNi1MujVpRapuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:51:03:7b:19:4d:1d:f2:ec:9e:7f:49:6a:ff:42:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Validity
Not Before: May 15 05:00:46 2025 GMT
Not After : May 16 05:00:46 2025 GMT
Subject: CN=9d1c7bdc8a4c33407b1c4e37dd193951ed5ff572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:3e:0a:61:52:a8:b5:29:dd:e2:f9:d0:fe:
58:34:0e:08:e5:d1:73:b0:32:59:1e:d8:e7:33:60:
24:68:5f:f1:d9:68:a4:2e:34:18:c1:45:f6:ce:a8:
f4:e6:af:44:4f:08:1e:1b:1b:75:86:35:23:01:48:
3b:32:b5:05:71:8d:4e:1a:a3:b4:a5:a4:a3:15:fb:
0b:7e:41:5c:70:69:ed:26:5d:29:e2:b7:b5:62:92:
a0:06:48:f9:69:f0:db:a5:32:31:bc:d6:f1:3d:a4:
06:96:54:c3:85:b0:ab:2e:0c:2f:b1:ff:84:73:ce:
b6:dd:7d:32:10:a6:12:70:88:db:cf:e7:fb:42:d8:
08:08:c7:a4:95:17:87:d3:7f:15:8a:1d:ce:a4:c1:
75:77:67:d7:3d:39:97:1d:6d:b9:c2:5c:db:46:99:
f1:1a:29:b8:be:be:95:2c:2e:8f:99:64:71:b2:48:
e1:24:9d:3c:15:c7:6a:0a:95:bb:9f:ff:83:67:a0:
69:b2:b9:09:70:0f:7e:87:7a:f2:6d:42:86:9f:90:
e9:63:48:e9:95:80:da:c8:0e:c0:b0:b0:5d:c7:fd:
66:1e:9b:e8:f0:b8:bc:50:0e:2c:79:03:76:c0:8b:
95:77:2c:55:8f:e5:dc:6a:bb:64:eb:6b:16:20:7b:
1b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1C:7B:DC:8A:4C:33:40:7B:1C:4E:37:DD:19:39:51:ED:5F:F5:72
X509v3 Authority Key Identifier:
keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7d:e7:6f:d2:51:07:8e:3d:13:d4:39:2b:fa:67:0f:bf:22:
89:3a:b8:13:fe:ed:95:72:72:c5:80:ef:ed:89:00:51:31:30:
22:5f:3f:cc:03:2f:47:d8:4b:93:1e:bc:66:3d:f1:bc:22:31:
7b:de:ad:25:08:91:7e:08:c8:0f:62:7b:9b:0a:1f:d4:85:4e:
5f:9c:96:b0:24:3b:80:fa:c3:01:fc:7b:0f:99:13:1a:3b:60:
2c:62:00:21:c4:5d:2c:11:df:28:0e:f4:72:0c:57:89:0e:c3:
98:cc:0e:aa:da:74:99:1d:63:7c:02:71:d2:e3:de:0a:ce:9d:
b6:41:61:64:0e:b3:0a:0e:e1:f2:ac:21:3e:1c:98:b6:2c:f7:
2e:1a:f9:17:25:82:9e:c2:d8:96:79:4e:8b:1e:86:38:05:34:
c2:f6:70:9b:dc:f3:5a:91:6a:8e:49:c6:ab:49:35:28:bc:20:
e4:88:d9:ae:70:c3:75:1d:8a:dd:b4:5e:ec:96:7c:ac:99:3f:
cd:e3:d2:1c:f5:ba:16:65:44:d4:0d:68:70:17:8c:25:6f:f4:
0d:ba:c1:70:01:1e:3d:39:3f:7d:1f:d0:84:64:6d:3a:56:f7:
bc:88:60:ee:c2:a0:f1:10:54:ee:e2:8e:ba:73:81:64:6d:e1:
5c:57:6f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbSUQN7GU0d8uyef0lq/0IKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNGM0Zjk2YWE1YTAyY2FkYTgzZDRiODhkNDllNmE3M2Fi
ZDI1ZjAwHhcNMjUwNTE1MDUwMDQ2WhcNMjUwNTE2MDUwMDQ2WjAzMTEwLwYDVQQD
Eyg5ZDFjN2JkYzhhNGMzMzQwN2IxYzRlMzdkZDE5Mzk1MWVkNWZmNTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Cs+CmFSqLUp3eL50P5YNA4I5dFz
sDJZHtjnM2AkaF/x2WikLjQYwUX2zqj05q9ETwgeGxt1hjUjAUg7MrUFcY1OGqO0
paSjFfsLfkFccGntJl0p4re1YpKgBkj5afDbpTIxvNbxPaQGllTDhbCrLgwvsf+E
c8623X0yEKYScIjbz+f7QtgICMeklReH038Vih3OpMF1d2fXPTmXHW25wlzbRpnx
Gim4vr6VLC6PmWRxskjhJJ08FcdqCpW7n/+DZ6BpsrkJcA9+h3rybUKGn5DpY0jp
lYDayA7AsLBdx/1mHpvo8Li8UA4seQN2wIuVdyxVj+Xcartk62sWIHsbdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0ce9yKTDNAexxON90ZOVHtX/VyMB8GA1UdIwQY
MBaAFFpMT5aqWgLK2oPUuI1J5qc6vSXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMt
OGE5MjEwOTk4OWVmLzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMtOGE5MjEwOTk4OWVm
LzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc33nb9JR
B449E9Q5K/pnD78iiTq4E/7tlXJyxYDv7YkAUTEwIl8/zAMvR9hLkx68Zj3xvCIx
e96tJQiRfgjID2J7mwof1IVOX5yWsCQ7gPrDAfx7D5kTGjtgLGIAIcRdLBHfKA70
cgxXiQ7DmMwOqtp0mR1jfAJx0uPeCs6dtkFhZA6zCg7h8qwhPhyYtiz3Lhr5FyWC
nsLYlnlOix6GOAU0wvZwm9zzWpFqjknGq0k1KLwg5IjZrnDDdR2K3bRe7JZ8rJk/
zePSHPW6FmVE1A1ocBeMJW/0DbrBcAEePTk/fR/QhGRtOlb3vIhg7sKg8RBU7uKO
unOBZG3hXFdvFw==
-----END CERTIFICATE-----
Generated at Thu May 15 13:24:25 2025 by rpki-client