Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
File: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft (raw, json)
Hash identifier: J484eXQrAGW7VWgC20f+pfVc2ubMOyF8B59BxjU6ADw=
Subject key identifier: AE:C6:8A:59:A1:C5:28:F1:32:9C:97:AA:E8:56:53:F0:2C:F0:55:D7
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 0196B890C9F35C72AF132E552ECE52F0CEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
Manifest number: 14C4
Signing time: Sat 10 May 2025 05:00:18 +0000
Manifest this update: Sat 10 May 2025 05:00:18 +0000
Manifest next update: Sun 11 May 2025 05:00:18 +0000
Files and hashes: 1: Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa (hash: 86/LxqP4QHUXPHN7MeYEfv+SmJ6UpcunDO36GSPvIQQ=)
2: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl (hash: yXLStUUfTtMu3WE+Vx3BKeeXSzxU/F+Zik4fpMbNPYo=)
3: rdMKkMaHfdWNXSGH8FsWUlQ7D6Q.roa (hash: lGvKyGfhIjanaigrkcQySpZWBGRsLu6frqamWcC0ZCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:90:c9:f3:5c:72:af:13:2e:55:2e:ce:52:f0:ce:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: May 10 05:00:18 2025 GMT
Not After : May 11 05:00:18 2025 GMT
Subject: CN=aec68a59a1c528f1329c97aae85653f02cf055d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:ee:23:83:d2:89:c2:be:11:bb:14:76:08:
ac:d4:4a:76:b4:7e:e7:2a:e0:78:e1:98:75:13:e3:
83:39:f5:3f:d3:b0:e9:2a:14:20:1a:8d:90:ed:f2:
2c:11:96:43:fd:4c:81:aa:cd:5b:9e:ae:e4:75:a4:
20:d1:f0:65:7a:c6:5d:73:c4:fb:21:d2:80:11:b6:
1f:66:f9:d5:75:c0:d8:ea:af:cb:b8:77:d2:a5:44:
bb:b7:ad:7e:fd:29:a9:ee:da:55:85:48:6b:e6:29:
47:47:d3:bf:b0:b3:e6:af:3f:8d:ec:61:0f:0a:5e:
a0:fe:43:26:5b:e6:a2:81:8d:98:8b:fd:4c:c2:ce:
94:90:31:f7:5a:e2:94:d0:2a:8a:d1:3f:fe:68:9b:
f1:53:98:81:4a:43:8a:d1:b2:6a:72:de:e5:ae:ff:
e7:2a:c1:6b:17:e2:a2:20:51:de:2a:f3:73:cc:1b:
ce:53:de:10:81:f8:19:34:eb:fb:a9:4e:91:8e:e4:
21:90:4d:5b:b6:c8:35:3b:b9:74:24:db:75:a8:09:
1e:2b:97:e0:ed:44:9c:17:04:1e:d0:b5:f7:b9:60:
a8:bc:33:1a:77:d8:76:3e:ea:10:0a:85:91:cd:52:
16:9b:8d:4f:83:6b:fb:a9:f1:67:ee:7a:c4:90:16:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:8A:59:A1:C5:28:F1:32:9C:97:AA:E8:56:53:F0:2C:F0:55:D7
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:05:2d:39:f7:94:4f:7d:8e:73:96:b3:85:d3:eb:42:04:0e:
e0:7c:bb:71:cc:b8:4a:e0:16:df:13:45:55:95:88:d1:6b:a7:
90:fc:a0:88:a0:af:dc:06:87:ee:33:11:64:99:10:a8:43:57:
02:26:c6:ea:a0:f8:6a:c1:fc:1f:7e:be:0f:83:7b:80:7c:a4:
f2:b8:a0:7b:7b:25:c6:e5:39:fd:22:b0:61:01:83:db:30:59:
18:ad:5c:6d:fb:1d:dd:a4:70:00:ff:d5:c1:ed:5a:20:4a:9e:
7e:38:5e:71:9e:d5:9b:20:e9:37:40:86:dc:fb:58:49:55:32:
f3:7c:cf:32:dc:e7:55:4c:13:11:4d:62:6c:41:cf:55:be:be:
78:f6:02:40:2f:d0:e0:f5:8f:a6:42:e7:00:ab:14:a2:5e:ff:
4a:95:08:53:04:10:be:3e:8b:4f:9d:75:a0:57:35:af:21:8a:
0c:b4:42:27:af:44:eb:38:db:fa:4f:1f:d2:06:5e:3b:da:ca:
13:a6:3c:e3:47:84:9b:ea:88:a0:69:72:60:f4:37:f7:82:39:
fe:bd:81:ef:0d:0e:5f:f8:7c:f6:53:eb:d4:c9:68:32:ef:0e:
d0:68:76:64:94:e0:d6:4f:92:b0:cf:96:59:d7:bf:34:b5:21:
f0:71:ea:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kMnzXHKvEy5VLs5S8M7dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWQyMjhiNmFjYmQxODAzY2ZmNTYwZmE0YjQyZjgzMmQy
ODMyNGYwHhcNMjUwNTEwMDUwMDE4WhcNMjUwNTExMDUwMDE4WjAzMTEwLwYDVQQD
EyhhZWM2OGE1OWExYzUyOGYxMzI5Yzk3YWFlODU2NTNmMDJjZjA1NWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PruI4PSicK+EbsUdgis1Ep2tH7n
KuB44Zh1E+ODOfU/07DpKhQgGo2Q7fIsEZZD/UyBqs1bnq7kdaQg0fBlesZdc8T7
IdKAEbYfZvnVdcDY6q/LuHfSpUS7t61+/Smp7tpVhUhr5ilHR9O/sLPmrz+N7GEP
Cl6g/kMmW+aigY2Yi/1Mws6UkDH3WuKU0CqK0T/+aJvxU5iBSkOK0bJqct7lrv/n
KsFrF+KiIFHeKvNzzBvOU94QgfgZNOv7qU6RjuQhkE1btsg1O7l0JNt1qAkeK5fg
7UScFwQe0LX3uWCovDMad9h2PuoQCoWRzVIWm41Pg2v7qfFn7nrEkBaDywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7GilmhxSjxMpyXquhWU/As8FXXMB8GA1UdIwQY
MBaAFFsdIotqy9GAPP9WD6S0L4MtKDJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3gwaWkyckwwWUE4XzFZUHBMUXZneTBvTWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZWVkMDUtMTQ3Ny00ZjA1LThhZTMt
NjE4ZTg5YjEyYzQxLzEvV3gwaWkyckwwWUE4XzFZUHBMUXZneTBvTWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85ZWVkMDUtMTQ3Ny00ZjA1LThhZTMtNjE4ZTg5YjEyYzQx
LzEvV3gwaWkyckwwWUE4XzFZUHBMUXZneTBvTWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowUtOfeU
T32Oc5azhdPrQgQO4Hy7ccy4SuAW3xNFVZWI0WunkPygiKCv3AaH7jMRZJkQqENX
AibG6qD4asH8H36+D4N7gHyk8rige3slxuU5/SKwYQGD2zBZGK1cbfsd3aRwAP/V
we1aIEqefjhecZ7VmyDpN0CG3PtYSVUy83zPMtznVUwTEU1ibEHPVb6+ePYCQC/Q
4PWPpkLnAKsUol7/SpUIUwQQvj6LT511oFc1ryGKDLRCJ69E6zjb+k8f0gZeO9rK
E6Y840eEm+qIoGlyYPQ394I5/r2B7w0OX/h89lPr1MloMu8O0Gh2ZJTg1k+SsM+W
Wde/NLUh8HHqaw==
-----END CERTIFICATE-----
Generated at Sat May 10 13:20:03 2025 by rpki-client