Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
File: WArULGTE9V_s54skJwcf5mhMIMk.mft (raw, json)
Hash identifier: tVtoQwLm+tq+0TDTjJPXs0L/1+Xkn0/QoPoedndhzKo=
Subject key identifier: B5:71:1A:F6:79:47:1D:09:B3:5F:51:30:E6:B7:1C:1E:C6:E8:6F:0C
Authority key identifier: 58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
Certificate issuer: /CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Certificate serial: 01969E6321DFE8F0F1190C6AD2FD1D5944EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 03:00:18 +0000
Manifest this update: Mon 05 May 2025 03:00:18 +0000
Manifest next update: Tue 06 May 2025 03:00:18 +0000
Files and hashes: 1: WArULGTE9V_s54skJwcf5mhMIMk.crl (hash: yz1M2ImK1kqxdFRGknENhDN3LB0SK9OdAWhxjQmq0Ac=)
2: oz4j6XAA3JSDTaFAUqvMD6Q_gKU.roa (hash: alaiQ7nYgvlQJD63x0493TKwZeIQqdX8mBDJEuCO9ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:21:df:e8:f0:f1:19:0c:6a:d2:fd:1d:59:44:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Validity
Not Before: May 5 03:00:18 2025 GMT
Not After : May 6 03:00:18 2025 GMT
Subject: CN=b5711af679471d09b35f5130e6b71c1ec6e86f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:e6:38:b6:d3:07:b0:e2:e9:f3:a6:28:df:
d4:64:9a:bc:3b:c4:9f:c0:da:99:79:24:65:fe:de:
c9:a3:dd:27:8a:f3:20:de:ab:fe:38:d9:3f:8d:7a:
de:ef:db:13:92:ea:cd:5b:70:37:ca:98:be:bd:c4:
b1:71:93:ef:95:75:15:a5:b7:8e:ce:14:5d:ed:e1:
79:0d:de:1e:14:f2:11:87:4f:9d:d4:91:ba:c5:99:
2a:2a:b9:8e:2c:d3:1d:90:1d:aa:95:9e:82:6c:97:
33:b4:65:4b:33:59:64:66:46:ad:0a:49:95:ac:13:
32:58:49:fb:8b:bb:9c:9d:cb:bc:15:b5:d4:41:17:
b0:36:cf:ba:81:23:80:5f:ef:1f:52:44:20:10:ab:
df:1b:c8:7a:36:0e:a2:31:7c:a0:f8:19:e5:98:4d:
3c:4f:c0:df:76:df:ae:97:e3:3a:9e:b7:f1:07:20:
89:0d:59:8b:48:cc:fb:ff:05:91:c2:19:59:c5:f3:
a8:03:bc:0e:7c:19:2d:1b:f1:78:cd:32:31:4d:52:
0a:fc:36:f2:9a:35:99:51:9b:1c:94:85:06:32:43:
ad:7a:e1:69:cf:6c:90:34:3e:91:90:a6:c2:3a:08:
c4:1a:7e:3a:04:c5:80:c0:92:85:67:94:40:6c:76:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:71:1A:F6:79:47:1D:09:B3:5F:51:30:E6:B7:1C:1E:C6:E8:6F:0C
X509v3 Authority Key Identifier:
keyid:58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:62:18:9c:3c:d6:e3:d8:8d:6a:20:ca:30:4b:f3:bb:a0:d1:
eb:eb:03:f9:b6:89:87:bd:34:cb:da:69:78:15:dc:2e:00:37:
35:42:9f:6e:01:02:06:c9:11:a7:75:4f:e8:20:89:0f:c5:d0:
59:d2:88:db:50:4f:34:53:f0:1c:80:ab:cb:e2:c8:33:bd:27:
8e:9f:e6:56:78:7e:52:b5:3c:de:9c:c2:8a:c2:d9:f3:fe:2c:
c6:5a:06:d0:6e:18:1c:02:f6:34:43:d7:9d:95:73:f3:46:b9:
4a:d0:d5:87:1b:17:1f:3b:da:f0:39:14:ef:a2:71:02:29:42:
30:46:7e:4d:27:b5:9e:a5:e1:44:7e:b1:b2:35:da:c2:f4:c2:
54:c3:59:2b:33:21:dc:ab:34:fd:b8:21:14:6f:a8:fb:5e:c2:
87:7b:0a:44:ed:e7:bd:95:49:8a:98:4d:a2:ac:45:31:b6:62:
a7:6d:e7:b0:d9:51:ed:12:a8:2f:65:b9:54:e5:e3:21:66:b1:
d4:ac:08:0e:0f:13:47:a9:e0:0d:7b:d9:b3:7a:18:f6:bd:dd:
46:0f:fe:31:db:a8:c1:12:b3:41:31:da:20:ef:e6:87:1a:23:
b9:b3:bc:90:c3:7e:d5:0e:3d:c4:1e:5d:e2:09:93:83:61:cd:
d0:44:ca:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeYyHf6PDxGQxq0v0dWUTqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MGFkNDJjNjRjNGY1NWZlY2U3OGIyNDI3MDcxZmU2Njg0
YzIwYzkwHhcNMjUwNTA1MDMwMDE4WhcNMjUwNTA2MDMwMDE4WjAzMTEwLwYDVQQD
EyhiNTcxMWFmNjc5NDcxZDA5YjM1ZjUxMzBlNmI3MWMxZWM2ZTg2ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArITmOLbTB7Di6fOmKN/UZJq8O8Sf
wNqZeSRl/t7Jo90nivMg3qv+ONk/jXre79sTkurNW3A3ypi+vcSxcZPvlXUVpbeO
zhRd7eF5Dd4eFPIRh0+d1JG6xZkqKrmOLNMdkB2qlZ6CbJcztGVLM1lkZkatCkmV
rBMyWEn7i7ucncu8FbXUQRewNs+6gSOAX+8fUkQgEKvfG8h6Ng6iMXyg+BnlmE08
T8Dfdt+ul+M6nrfxByCJDVmLSMz7/wWRwhlZxfOoA7wOfBktG/F4zTIxTVIK/Dby
mjWZUZsclIUGMkOteuFpz2yQND6RkKbCOgjEGn46BMWAwJKFZ5RAbHYwRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVxGvZ5Rx0Js19RMOa3HB7G6G8MMB8GA1UdIwQY
MBaAFFgK1CxkxPVf7OeLJCcHH+ZoTCDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84Y2IzNGQtOTRlNy00ZTU3LTk4YjEt
NzM2OWE0MjU3MDE0LzEvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84Y2IzNGQtOTRlNy00ZTU3LTk4YjEtNzM2OWE0MjU3MDE0
LzEvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2IYnDzW
49iNaiDKMEvzu6DR6+sD+baJh700y9ppeBXcLgA3NUKfbgECBskRp3VP6CCJD8XQ
WdKI21BPNFPwHICry+LIM70njp/mVnh+UrU83pzCisLZ8/4sxloG0G4YHAL2NEPX
nZVz80a5StDVhxsXHzva8DkU76JxAilCMEZ+TSe1nqXhRH6xsjXawvTCVMNZKzMh
3Ks0/bghFG+o+17Ch3sKRO3nvZVJiphNoqxFMbZip23nsNlR7RKoL2W5VOXjIWax
1KwIDg8TR6ngDXvZs3oY9r3dRg/+MduowRKzQTHaIO/mhxojubO8kMN+1Q49xB5d
4gmTg2HN0ETK9w==
-----END CERTIFICATE-----
Generated at Mon May 5 11:16:24 2025 by rpki-client