Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
File: wFlbbIrobPkGmro-um3fKmgjfwg.mft (raw, json)
Hash identifier: 6y7tmfKz4Jw8oj1gBxRPWjCU/cNPHtqxGTC+YxVNxE0=
Subject key identifier: 99:8B:83:72:92:71:FF:0A:61:CF:7B:6A:32:2A:61:E0:F6:87:D5:54
Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
Certificate issuer: /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Certificate serial: 0196A38A2250B64B7D18278311DE256335D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
Manifest number: 04D2
Signing time: Tue 06 May 2025 03:01:01 +0000
Manifest this update: Tue 06 May 2025 03:01:01 +0000
Manifest next update: Wed 07 May 2025 03:01:01 +0000
Files and hashes: 1: 8UgkBAZONepNyI81FukUfi25Kao.roa (hash: rpUHlCnR+nUi3dHMj1nsfDs3V156wUfOtUa+u9zdDrQ=)
2: wFlbbIrobPkGmro-um3fKmgjfwg.crl (hash: sWP45Qy8GvMeKM+C5J/VKJ8C8mu3AMx1EVQ8o6LA4Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:8a:22:50:b6:4b:7d:18:27:83:11:de:25:63:35:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Validity
Not Before: May 6 03:01:01 2025 GMT
Not After : May 7 03:01:01 2025 GMT
Subject: CN=998b83729271ff0a61cf7b6a322a61e0f687d554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:8b:31:1b:44:1a:83:e0:bf:53:51:ef:95:
62:7d:dd:37:09:48:f5:ce:6c:cd:9e:6c:af:60:df:
46:84:92:70:b6:88:95:4f:c4:c4:f0:4a:db:d8:d1:
e8:99:f7:60:fc:54:a4:66:a3:0e:85:d6:1c:af:14:
31:2d:a5:6b:cb:b0:86:df:98:8f:e9:b4:96:2d:a5:
45:79:ee:8a:19:b6:58:1d:a9:6a:42:b1:5c:9b:95:
40:31:bb:b2:0e:32:63:3e:13:3f:a8:d6:ea:b6:b7:
1b:ad:da:c5:d0:d3:44:b1:37:80:af:df:74:27:7c:
1b:62:8d:97:64:9a:cc:1b:c1:0e:4f:94:1c:d9:3a:
81:13:49:4a:1a:88:29:1e:b3:1b:1c:48:df:9f:3f:
af:97:9d:fa:ff:c8:fa:a2:1f:b2:79:16:31:05:96:
f1:46:9c:f6:ca:71:9f:60:e7:74:d2:a8:3c:43:32:
1f:90:f4:9d:64:e5:51:9a:99:1d:81:30:10:f1:1b:
86:9c:c1:66:30:d9:b6:bf:53:82:8b:11:d8:dd:75:
6f:65:1c:ad:c4:f1:31:09:f0:e1:54:50:65:40:af:
58:bd:05:95:58:69:8c:9f:57:7c:71:ad:70:9c:ec:
85:4d:43:2e:b7:d0:3a:95:9b:64:e7:b5:b8:6f:99:
31:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8B:83:72:92:71:FF:0A:61:CF:7B:6A:32:2A:61:E0:F6:87:D5:54
X509v3 Authority Key Identifier:
keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:1c:37:da:d7:c3:59:3d:4a:de:4b:82:a7:32:ad:94:a2:ba:
62:7d:ea:e2:46:b5:e3:1a:94:bf:06:0a:e3:23:d5:72:63:60:
10:f6:16:e7:63:a6:9e:34:42:9b:1c:21:d2:2d:75:4a:c7:2d:
72:c5:6c:28:31:cc:3d:a6:83:31:1a:0e:96:c1:e2:d9:37:27:
cb:8f:6b:25:df:a3:f4:79:c1:20:11:5b:9a:ed:98:0d:5e:f9:
10:3a:d7:ec:f2:64:d0:08:5a:6d:cb:bc:a3:a4:55:e7:a4:00:
4f:8f:c3:f3:af:02:53:a9:cf:32:1e:57:e6:c3:70:ad:92:b7:
cd:cf:8a:c7:61:0b:4c:2e:9f:98:b6:54:97:fe:6f:05:b0:05:
0f:4b:35:59:62:83:f8:63:bd:e4:60:b3:fd:e8:79:b4:14:ed:
4d:f8:8b:70:61:e8:3b:8e:02:0c:d5:6c:b1:dc:af:6c:92:3b:
2c:91:f8:29:0b:5e:6a:ef:63:ea:da:e8:7d:c3:a0:eb:f8:07:
52:34:0e:46:74:79:23:b5:8f:60:13:c3:cd:07:0d:5a:6d:68:
b0:88:7f:d2:c0:b8:bf:35:30:7d:4f:ea:fc:37:ba:ca:7b:dd:
64:89:17:7f:8e:8d:37:b5:eb:d9:63:f2:a2:c5:f8:36:3a:6c:
bb:a5:55:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajiiJQtkt9GCeDEd4lYzXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTk1YjZjOGFlODZjZjkwNjlhYmEzZWJhNmRkZjJhNjgy
MzdmMDgwHhcNMjUwNTA2MDMwMTAxWhcNMjUwNTA3MDMwMTAxWjAzMTEwLwYDVQQD
Eyg5OThiODM3MjkyNzFmZjBhNjFjZjdiNmEzMjJhNjFlMGY2ODdkNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBWLMRtEGoPgv1NR75Vifd03CUj1
zmzNnmyvYN9GhJJwtoiVT8TE8Erb2NHomfdg/FSkZqMOhdYcrxQxLaVry7CG35iP
6bSWLaVFee6KGbZYHalqQrFcm5VAMbuyDjJjPhM/qNbqtrcbrdrF0NNEsTeAr990
J3wbYo2XZJrMG8EOT5Qc2TqBE0lKGogpHrMbHEjfnz+vl536/8j6oh+yeRYxBZbx
Rpz2ynGfYOd00qg8QzIfkPSdZOVRmpkdgTAQ8RuGnMFmMNm2v1OCixHY3XVvZRyt
xPExCfDhVFBlQK9YvQWVWGmMn1d8ca1wnOyFTUMut9A6lZtk57W4b5kxcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmLg3KScf8KYc97ajIqYeD2h9VUMB8GA1UdIwQY
MBaAFMBZW2yK6Gz5Bpq6Prpt3ypoI38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAt
MTkxYjJhZTNmYTVhLzEvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAtMTkxYjJhZTNmYTVh
LzEvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwRw32tfD
WT1K3kuCpzKtlKK6Yn3q4ka14xqUvwYK4yPVcmNgEPYW52OmnjRCmxwh0i11Ssct
csVsKDHMPaaDMRoOlsHi2Tcny49rJd+j9HnBIBFbmu2YDV75EDrX7PJk0Ahabcu8
o6RV56QAT4/D868CU6nPMh5X5sNwrZK3zc+Kx2ELTC6fmLZUl/5vBbAFD0s1WWKD
+GO95GCz/eh5tBTtTfiLcGHoO44CDNVssdyvbJI7LJH4KQteau9j6trofcOg6/gH
UjQORnR5I7WPYBPDzQcNWm1osIh/0sC4vzUwfU/q/De6ynvdZIkXf46NN7Xr2WPy
osX4Njpsu6VVfQ==
-----END CERTIFICATE-----
Generated at Tue May 6 13:23:09 2025 by rpki-client