Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: 0kkJ/EA3pnqukG7ndokNrCAV7b+b7cJMXJ212fbG32U=
Subject key identifier: 34:86:02:06:E9:CC:77:26:B5:20:B5:CC:4A:B5:91:4D:0F:79:3B:07
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 0196BF6F9C3EBEB5C2CC5F9FDAD93EF07F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 09AB
Signing time: Sun 11 May 2025 13:01:24 +0000
Manifest this update: Sun 11 May 2025 13:01:24 +0000
Manifest next update: Mon 12 May 2025 13:01:24 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: ahtNlDvPeaaIwX2oIbNJ2L5F4YzII/sXn9k0Ur/hYTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:9c:3e:be:b5:c2:cc:5f:9f:da:d9:3e:f0:7f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: May 11 13:01:24 2025 GMT
Not After : May 12 13:01:24 2025 GMT
Subject: CN=34860206e9cc7726b520b5cc4ab5914d0f793b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:f8:db:54:75:07:78:d0:af:9a:7e:fe:11:
0c:3a:8a:13:82:b1:64:d3:36:6a:18:a0:e6:9b:2d:
97:ae:02:80:5a:e9:eb:94:d8:5b:73:d3:bb:57:e8:
a6:ba:6a:49:eb:66:ea:93:7a:f7:4c:e5:91:ec:a6:
33:1a:b2:2f:66:1a:e5:ba:ec:85:0f:32:cd:35:bb:
20:50:07:0e:1d:64:f0:20:7c:b4:59:54:8d:ab:30:
82:ed:56:12:44:68:a4:96:eb:01:35:ad:f4:20:56:
34:a7:4c:c3:74:d3:3f:b8:c4:27:4d:63:fc:cc:a6:
6f:58:18:9f:4b:e9:f1:58:d1:27:d2:c2:5c:b6:95:
42:73:70:02:96:de:81:2d:3a:ab:c7:f8:97:16:83:
84:bc:86:d6:d3:4c:41:50:2a:cf:8f:c2:34:77:cb:
12:a4:72:bd:49:55:be:14:91:2e:ba:62:ff:0e:e5:
52:09:6c:16:60:a3:2e:63:79:68:9d:f9:19:4e:5d:
ba:65:1c:98:cd:06:48:18:bd:90:b8:42:2d:be:cc:
a3:01:95:12:b5:ea:75:2a:3a:21:ce:37:ad:8a:5c:
51:0b:5b:42:65:b3:e6:1c:8f:66:77:3b:34:58:c1:
e9:52:3b:4a:ac:ed:4e:ae:59:a7:ec:1e:94:9c:31:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:86:02:06:E9:CC:77:26:B5:20:B5:CC:4A:B5:91:4D:0F:79:3B:07
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2a:1f:ed:7f:a1:eb:ba:2a:e1:d7:4b:dc:6c:85:cd:c8:62:
01:15:68:76:03:aa:65:cb:58:1a:94:87:27:6e:5d:ce:c8:71:
0f:d0:ac:01:f0:b0:8c:d5:f3:86:b4:d8:f6:ca:76:a4:4e:84:
ff:56:8e:5e:d4:fb:14:66:b2:5d:3f:14:6b:44:2c:61:13:3f:
1d:3f:90:40:24:1b:9b:db:1e:31:e6:df:75:a1:28:95:3d:0b:
3a:71:d6:e4:ed:b7:9c:a9:ce:3b:b0:85:de:34:51:88:fd:5f:
84:4f:43:40:6c:17:c6:07:c4:8b:48:16:ae:24:0c:19:44:19:
5d:c6:c3:86:c6:5f:ed:9f:d3:e5:9a:17:ed:86:66:31:88:8b:
99:c1:13:3a:41:05:5d:41:48:cb:42:37:68:e1:6a:35:6c:72:
e1:64:49:8a:d0:0b:83:54:23:ac:60:ee:a9:15:5d:81:4f:eb:
1c:f2:c3:b6:42:d4:3e:39:ce:11:b2:ad:db:fd:0b:d9:2d:8c:
da:34:42:41:b5:57:14:c1:b9:da:79:3f:6a:81:1f:35:af:17:
1c:56:5e:e5:fb:db:d7:eb:ef:15:4a:28:3f:25:bc:15:a1:42:
1d:5a:d2:a3:48:0c:06:42:70:9d:0a:b8:19:36:87:83:2c:58:
e8:df:c3:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/b5w+vrXCzF+f2tk+8H91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWQ5MmZlNTAxMmJkNjViZTBjMzJiMGVlMzkxNzE5Yzg4
Mjk0MmMwHhcNMjUwNTExMTMwMTI0WhcNMjUwNTEyMTMwMTI0WjAzMTEwLwYDVQQD
EygzNDg2MDIwNmU5Y2M3NzI2YjUyMGI1Y2M0YWI1OTE0ZDBmNzkzYjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY3421R1B3jQr5p+/hEMOooTgrFk
0zZqGKDmmy2XrgKAWunrlNhbc9O7V+imumpJ62bqk3r3TOWR7KYzGrIvZhrluuyF
DzLNNbsgUAcOHWTwIHy0WVSNqzCC7VYSRGiklusBNa30IFY0p0zDdNM/uMQnTWP8
zKZvWBifS+nxWNEn0sJctpVCc3AClt6BLTqrx/iXFoOEvIbW00xBUCrPj8I0d8sS
pHK9SVW+FJEuumL/DuVSCWwWYKMuY3lonfkZTl26ZRyYzQZIGL2QuEItvsyjAZUS
tep1KjohzjetilxRC1tCZbPmHI9mdzs0WMHpUjtKrO1Orlmn7B6UnDFvkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSGAgbpzHcmtSC1zEq1kU0PeTsHMB8GA1UdIwQY
MBaAFFsdkv5QEr1lvgwysO45FxnIgpQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3gyU19sQVN2V1ctRERLdzdqa1hHY2lDbEN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82NTk3Y2MtOGIwMy00OWI4LWE3NjEt
ODg3MDE1YjM5NmYxLzEvV3gyU19sQVN2V1ctRERLdzdqa1hHY2lDbEN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82NTk3Y2MtOGIwMy00OWI4LWE3NjEtODg3MDE1YjM5NmYx
LzEvV3gyU19sQVN2V1ctRERLdzdqa1hHY2lDbEN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSof7X+h
67oq4ddL3GyFzchiARVodgOqZctYGpSHJ25dzshxD9CsAfCwjNXzhrTY9sp2pE6E
/1aOXtT7FGayXT8Ua0QsYRM/HT+QQCQbm9seMebfdaEolT0LOnHW5O23nKnOO7CF
3jRRiP1fhE9DQGwXxgfEi0gWriQMGUQZXcbDhsZf7Z/T5ZoX7YZmMYiLmcETOkEF
XUFIy0I3aOFqNWxy4WRJitALg1QjrGDuqRVdgU/rHPLDtkLUPjnOEbKt2/0L2S2M
2jRCQbVXFMG52nk/aoEfNa8XHFZe5fvb1+vvFUooPyW8FaFCHVrSo0gMBkJwnQq4
GTaHgyxY6N/D9Q==
-----END CERTIFICATE-----
Generated at Sun May 11 20:44:26 2025 by rpki-client