Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
File: WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft (raw, json)
Hash identifier: 1fZN86AoovCz9OOv/bdh6GB6yU3oSka/EWPwd/XDSuQ=
Subject key identifier: C1:CF:B1:7E:4D:D1:09:51:84:B8:B7:FB:8B:EE:40:01:43:8A:1D:C9
Authority key identifier: 5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
Certificate issuer: /CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Certificate serial: 0196BC003B5C7875C4B824C851FF7C60A1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
Manifest number: 01CB
Signing time: Sat 10 May 2025 21:00:53 +0000
Manifest this update: Sat 10 May 2025 21:00:53 +0000
Manifest next update: Sun 11 May 2025 21:00:53 +0000
Files and hashes: 1: WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl (hash: eCQ28OnHRUqLabpuOiE7fth+HjJ9z2W1MjKUgcPDGDM=)
2: uKvJupUJsNWoo5ivCG67FugGN0w.roa (hash: GwajJ7n21P+w7t9dfCC8gYHu25fAVce6h/mSVAkHqyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:3b:5c:78:75:c4:b8:24:c8:51:ff:7c:60:a1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Validity
Not Before: May 10 21:00:53 2025 GMT
Not After : May 11 21:00:53 2025 GMT
Subject: CN=c1cfb17e4dd1095184b8b7fb8bee4001438a1dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:ad:61:ef:1f:9c:eb:36:48:64:93:b3:c5:
4c:1a:92:91:cf:75:e3:40:de:4d:20:17:7a:8b:92:
bd:90:93:d7:d9:a2:8d:f5:58:ba:e8:83:49:89:12:
81:3e:fe:6e:b4:f3:3e:de:25:ad:0e:ef:9f:bc:b1:
86:09:d8:9a:94:fe:1e:6f:0d:44:7f:15:65:9c:e3:
7c:b5:ef:bd:24:4e:5f:e4:77:e1:7d:6e:c7:62:05:
1d:28:88:27:38:80:22:7e:98:aa:0c:70:73:be:05:
bb:4a:b0:5b:a7:cc:67:34:a2:06:a6:96:04:91:e7:
ae:47:9e:77:1f:8d:0a:18:1c:f7:63:90:5c:96:b5:
9f:14:ce:40:16:78:45:3c:84:35:22:da:c4:6c:5e:
a3:ab:e3:e9:9f:a0:7f:17:ff:ea:55:61:07:39:cc:
2f:22:67:45:80:12:29:1c:73:03:9a:d6:1d:c2:7d:
31:b1:e5:02:f2:69:da:1b:a5:18:40:b1:23:c3:9a:
7d:85:63:05:81:24:3c:64:24:28:19:cd:fd:76:31:
ed:e1:81:7c:fa:50:a5:e1:8e:cc:68:14:7d:49:83:
b7:52:e1:df:e0:5a:f7:51:4b:46:85:e9:1d:f4:bc:
f9:65:5e:c8:aa:0d:ac:4c:66:34:5a:80:d5:22:03:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CF:B1:7E:4D:D1:09:51:84:B8:B7:FB:8B:EE:40:01:43:8A:1D:C9
X509v3 Authority Key Identifier:
keyid:5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d9:4a:2b:92:86:95:9d:ab:04:93:22:a1:d0:c4:33:83:57:
fd:2b:ca:08:6f:fb:96:d7:13:c3:bc:60:87:66:4c:06:9f:bf:
07:7a:a2:04:fc:ab:af:39:3b:b7:ee:6d:74:a3:ac:ed:f4:0f:
23:76:31:ba:a3:d1:c6:57:2d:12:ee:4b:00:d5:cc:46:45:fe:
67:8e:64:e8:fa:ed:e2:e9:47:e6:b5:ad:df:5e:db:16:6b:15:
90:45:8c:5a:71:eb:0a:09:ab:6b:1b:5a:b0:21:d2:13:f0:f6:
5f:de:a8:0b:06:26:80:e3:dc:e1:18:58:b4:f8:1b:14:30:cb:
56:be:85:11:ab:9a:24:f2:ac:e0:66:1c:42:bd:99:df:a2:04:
c2:73:cc:d6:a7:6f:79:b6:81:69:82:c0:ce:79:71:c6:c7:c6:
96:27:5d:a5:f1:4c:5c:05:f4:b9:e6:3f:8a:9f:c3:70:e3:60:
1d:06:f3:c2:a4:04:3d:1b:a8:a3:bb:68:8b:03:ef:08:1e:f4:
b8:0f:c0:78:c4:ad:d9:de:f6:b6:6c:e9:8b:5e:8a:dd:2d:10:
f1:2e:0d:c9:ab:44:27:75:c7:b6:c9:8b:71:79:61:94:5d:1f:
1b:41:7c:a8:cf:94:60:d2:fd:af:a5:84:db:98:4f:34:31:c3:
fb:a3:ff:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8ADtceHXEuCTIUf98YKHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMzUwMmNkYmQzMzI1NjI4Y2Q2MTU2MDZiN2M3NDMzZWU1
YjIyMDQwHhcNMjUwNTEwMjEwMDUzWhcNMjUwNTExMjEwMDUzWjAzMTEwLwYDVQQD
EyhjMWNmYjE3ZTRkZDEwOTUxODRiOGI3ZmI4YmVlNDAwMTQzOGExZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qytYe8fnOs2SGSTs8VMGpKRz3Xj
QN5NIBd6i5K9kJPX2aKN9Vi66INJiRKBPv5utPM+3iWtDu+fvLGGCdialP4ebw1E
fxVlnON8te+9JE5f5HfhfW7HYgUdKIgnOIAifpiqDHBzvgW7SrBbp8xnNKIGppYE
keeuR553H40KGBz3Y5BclrWfFM5AFnhFPIQ1ItrEbF6jq+Ppn6B/F//qVWEHOcwv
ImdFgBIpHHMDmtYdwn0xseUC8mnaG6UYQLEjw5p9hWMFgSQ8ZCQoGc39djHt4YF8
+lCl4Y7MaBR9SYO3UuHf4Fr3UUtGhekd9Lz5ZV7Iqg2sTGY0WoDVIgNYAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHPsX5N0QlRhLi3+4vuQAFDih3JMB8GA1UdIwQY
MBaAFFs1As29MyVijNYVYGt8dDPuWyIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mMjI4YmUtYTNhNi00OGNhLWE0MWEt
YjZiNjcwYjY4MDlhLzEvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mMjI4YmUtYTNhNi00OGNhLWE0MWEtYjZiNjcwYjY4MDlh
LzEvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9lKK5KG
lZ2rBJMiodDEM4NX/SvKCG/7ltcTw7xgh2ZMBp+/B3qiBPyrrzk7t+5tdKOs7fQP
I3YxuqPRxlctEu5LANXMRkX+Z45k6Prt4ulH5rWt317bFmsVkEWMWnHrCgmraxta
sCHSE/D2X96oCwYmgOPc4RhYtPgbFDDLVr6FEauaJPKs4GYcQr2Z36IEwnPM1qdv
ebaBaYLAznlxxsfGliddpfFMXAX0ueY/ip/DcONgHQbzwqQEPRuoo7toiwPvCB70
uA/AeMSt2d72tmzpi16K3S0Q8S4NyatEJ3XHtsmLcXlhlF0fG0F8qM+UYNL9r6WE
25hPNDHD+6P/zQ==
-----END CERTIFICATE-----
Generated at Sun May 11 06:18:34 2025 by rpki-client