Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier: 9FDvpZ7aJYY1plb8WF99SkaA8wuQqQ+WjHavpQd1g1w=
Subject key identifier: 29:3E:8F:9D:EE:E2:08:43:15:37:10:ED:D6:88:A7:4B:FA:58:67:A3
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial: 0196C2DD81C0352AB2366B66B8FA523B52E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 05:00:18 +0000
Manifest this update: Mon 12 May 2025 05:00:18 +0000
Manifest next update: Tue 13 May 2025 05:00:18 +0000
Files and hashes: 1: 9Z5tAyPoNAUrhK3XQbPirY-i870.roa (hash: JYdT76bIYS9WiRnbn5ANGOhlwfQ42Z47wnU1M4quBe4=)
2: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: WHjjQyJEjnnIFgjT4wECoiDxmVI6Y5WZ1ITrKyQZV+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:81:c0:35:2a:b2:36:6b:66:b8:fa:52:3b:52:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Validity
Not Before: May 12 05:00:18 2025 GMT
Not After : May 13 05:00:18 2025 GMT
Subject: CN=293e8f9deee20843153710edd688a74bfa5867a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:65:1d:24:13:0f:13:20:6c:16:22:f3:34:
33:d0:58:30:62:81:1f:92:69:24:f2:92:77:60:e0:
3a:c3:5c:55:7e:7d:32:e8:67:ce:95:db:ca:42:e1:
0c:ea:db:0b:7e:7a:5a:80:a3:6b:50:35:82:17:b3:
0a:e1:a0:7f:72:dd:45:e4:58:65:e4:ed:26:ce:31:
09:e8:9c:d0:22:fc:a8:4b:8f:46:fe:f8:06:00:a3:
6f:0e:25:f3:de:8c:6d:15:ad:2c:76:ca:7e:81:e6:
b2:7b:03:3e:f1:a7:18:6d:31:b0:22:69:ee:53:73:
a5:5d:1c:11:81:67:99:17:1d:8c:cc:3f:66:1e:d1:
a4:d2:81:27:4c:ea:ea:a1:47:e9:ad:ae:98:33:a4:
ac:01:cd:b8:94:90:8b:d9:74:02:95:12:cc:79:dd:
03:51:92:73:5f:35:2f:2f:da:4d:49:21:c0:4a:fb:
79:2f:d7:3f:17:63:f3:ad:05:9b:98:17:6f:ed:28:
4c:80:ac:27:47:d5:c5:58:4b:97:88:26:48:32:f1:
b0:09:aa:4d:3d:1d:fc:d1:b8:9c:ce:2b:b1:6d:8a:
4f:ed:ea:7d:54:8e:3d:83:88:80:58:d5:19:cc:25:
d1:58:ea:89:0a:d4:8b:db:02:db:83:8e:35:c4:4f:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3E:8F:9D:EE:E2:08:43:15:37:10:ED:D6:88:A7:4B:FA:58:67:A3
X509v3 Authority Key Identifier:
keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f2:c0:91:2c:ff:d7:a8:5c:4d:95:6f:a2:bd:79:23:05:42:
1a:45:87:eb:46:52:fd:d6:5e:a4:da:03:b8:2e:6e:76:b7:d5:
0f:82:ae:df:bd:99:65:64:78:26:f5:7d:60:3b:57:94:82:63:
05:ea:59:47:57:1f:26:31:7f:12:5f:03:7a:c2:54:6e:12:d5:
88:0c:e9:d0:15:78:95:5f:7a:e7:1b:e3:ca:e3:cd:d7:bb:f0:
3f:57:60:bc:f3:e5:ec:50:1e:66:5b:69:74:dc:1f:33:15:59:
fe:7e:7a:c7:75:6e:b7:f6:80:ed:d6:fa:e2:fa:25:2a:38:9b:
9d:26:f3:4a:7f:97:ad:40:fe:ce:f6:10:78:e5:78:d5:93:70:
74:ae:88:95:fa:00:44:fa:da:6d:45:71:7a:82:3d:10:00:b6:
fe:e0:4b:31:d2:dd:19:c7:ea:8a:97:a9:13:c4:1f:1d:fe:20:
c6:a0:98:ef:7d:bc:4c:a5:5c:92:51:1f:41:9f:52:7a:2b:31:
c6:24:5f:67:f0:70:6b:ca:e0:6f:53:38:65:f6:49:51:b3:d0:
67:8e:64:51:95:e4:1b:b4:b7:f4:ec:33:16:68:66:90:f2:46:
50:3e:7a:b1:aa:ff:1d:27:e3:3f:9f:cb:38:81:14:99:76:f0:
12:65:2b:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbC3YHANSqyNmtmuPpSO1LlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWRiZGZlMDFlOWEzZjk2ZDUwMDIyYzNjZGFmZGMzZTFh
OGQ5ODgwHhcNMjUwNTEyMDUwMDE4WhcNMjUwNTEzMDUwMDE4WjAzMTEwLwYDVQQD
EygyOTNlOGY5ZGVlZTIwODQzMTUzNzEwZWRkNjg4YTc0YmZhNTg2N2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO5lHSQTDxMgbBYi8zQz0FgwYoEf
kmkk8pJ3YOA6w1xVfn0y6GfOldvKQuEM6tsLfnpagKNrUDWCF7MK4aB/ct1F5Fhl
5O0mzjEJ6JzQIvyoS49G/vgGAKNvDiXz3oxtFa0sdsp+geayewM+8acYbTGwImnu
U3OlXRwRgWeZFx2MzD9mHtGk0oEnTOrqoUfpra6YM6SsAc24lJCL2XQClRLMed0D
UZJzXzUvL9pNSSHASvt5L9c/F2PzrQWbmBdv7ShMgKwnR9XFWEuXiCZIMvGwCapN
PR380bicziuxbYpP7ep9VI49g4iAWNUZzCXRWOqJCtSL2wLbg441xE8jSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCk+j53u4ghDFTcQ7daIp0v6WGejMB8GA1UdIwQY
MBaAFMGtvf4B6aP5bVACLDza/cPhqNmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hNGM2ZjEtN2M5My00NWVlLThlYWYt
NDM5NDA1MmNkNjVlLzEvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hNGM2ZjEtN2M5My00NWVlLThlYWYtNDM5NDA1MmNkNjVl
LzEvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/LAkSz/
16hcTZVvor15IwVCGkWH60ZS/dZepNoDuC5udrfVD4Ku372ZZWR4JvV9YDtXlIJj
BepZR1cfJjF/El8DesJUbhLViAzp0BV4lV965xvjyuPN17vwP1dgvPPl7FAeZltp
dNwfMxVZ/n56x3Vut/aA7db64volKjibnSbzSn+XrUD+zvYQeOV41ZNwdK6IlfoA
RPrabUVxeoI9EAC2/uBLMdLdGcfqipepE8QfHf4gxqCY7328TKVcklEfQZ9Seisx
xiRfZ/Bwa8rgb1M4ZfZJUbPQZ45kUZXkG7S39OwzFmhmkPJGUD56sar/HSfjP5/L
OIEUmXbwEmUroQ==
-----END CERTIFICATE-----
Generated at Mon May 12 07:30:23 2025 by rpki-client