Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier: ijC+BckrzOARTfVqNg4evEzyuC3afFp0ixKLtd0uxzg=
Subject key identifier: BA:1E:5E:CF:7B:26:71:FF:DB:02:FD:07:F0:0C:B3:38:8F:CE:D6:0D
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 0196C26FDE4218B0D43947E84CED96D77DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number: 08E2
Signing time: Mon 12 May 2025 03:00:33 +0000
Manifest this update: Mon 12 May 2025 03:00:33 +0000
Manifest next update: Tue 13 May 2025 03:00:33 +0000
Files and hashes: 1: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: wPOg9AIWRTfTg0jz6G9VeJaINLoulPcMTmvU7kOaZuU=)
2: gS4jeqALacaf51dl93Py-I7kfls.roa (hash: OBdPPMpWE3pFYQDOuw6u5rVnnXeeNEwg98LVQA2Wi/s=)
3: gfhu0UMjPTGrZruaeirhOo04QTw.roa (hash: HYAZtY2G7JxVkFUj22KQMYwy01JLPX5+ssTDK0gFTRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:de:42:18:b0:d4:39:47:e8:4c:ed:96:d7:7d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: May 12 03:00:33 2025 GMT
Not After : May 13 03:00:33 2025 GMT
Subject: CN=ba1e5ecf7b2671ffdb02fd07f00cb3388fced60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:02:a3:09:08:af:e9:cb:11:b7:3d:47:3d:
1a:e6:26:f8:8e:d8:03:b8:dc:15:41:0c:ce:02:5b:
6c:fb:c0:ce:c0:c3:7f:de:c2:a2:0f:07:2a:9f:b0:
48:da:fe:b0:57:eb:46:69:05:c7:96:fa:30:34:c1:
74:d3:61:76:81:08:2c:95:88:0d:68:9c:4b:20:b1:
ec:0c:b2:f9:30:7b:45:35:b5:92:ea:4a:d2:49:52:
e0:00:3c:9f:26:79:d8:78:a5:d8:02:6f:ce:7f:7e:
1e:1b:99:bc:98:99:ef:2d:c9:a8:92:2c:0c:50:0f:
16:57:6f:ca:2f:70:37:32:0b:d7:19:b8:9e:11:12:
e7:80:78:54:a1:36:41:7c:58:87:00:25:06:1d:9f:
8c:12:0b:09:76:85:9c:83:e4:ba:ce:d4:4c:30:ca:
f8:16:7b:23:c0:a3:51:16:0b:e3:31:75:cd:49:a2:
98:1e:fc:24:cc:bf:3b:20:83:d6:b3:5c:37:99:5e:
1e:cd:b9:e4:b3:f5:bc:4c:bc:62:85:6a:45:bb:74:
c2:b9:7e:15:4d:e1:78:7e:fa:63:55:e9:5c:21:e0:
0e:ba:f0:bf:92:51:36:34:d8:1b:bb:a0:1e:0b:36:
40:63:b2:d9:d7:1a:0f:db:1b:e8:24:6d:5b:d3:c2:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1E:5E:CF:7B:26:71:FF:DB:02:FD:07:F0:0C:B3:38:8F:CE:D6:0D
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:74:53:5e:cf:d1:02:53:cf:76:83:9b:bd:d2:72:1c:9f:a8:
0e:b5:f1:b0:1c:c7:1a:81:b4:41:0b:1a:ee:5f:0f:3a:0b:0e:
df:17:8a:20:73:15:d2:ca:dc:6e:a3:bf:2e:c4:c1:9d:13:11:
94:df:7f:81:e0:a9:2c:99:70:70:f7:f5:77:9f:97:27:21:74:
69:e0:b8:64:93:5f:18:17:c0:46:fd:2b:70:7b:22:1d:96:01:
4d:0f:35:47:1e:ba:38:62:3f:33:62:2d:a4:2c:95:50:8a:2b:
5d:73:9a:b6:01:27:3d:3f:5c:64:b7:07:ab:e9:c3:5e:53:ba:
db:4a:f8:83:90:d9:55:10:65:45:a3:ef:11:50:b0:9c:e8:d5:
26:42:41:f1:43:68:8d:09:b4:03:9f:58:51:5e:ce:47:61:3e:
50:05:f8:d2:b2:0b:87:ec:9b:65:33:e8:3d:14:81:d3:fc:f0:
68:55:59:f2:27:23:df:a1:c9:14:ad:0b:3b:63:a8:12:d5:69:
16:14:7a:37:bc:55:af:14:75:47:1f:fe:7d:86:dc:94:89:9f:
61:bc:53:39:2e:ef:17:8b:fb:81:7e:17:f1:03:27:db:98:39:
86:eb:1d:9d:10:15:90:06:f8:6e:b1:da:03:45:86:88:56:45:
c8:da:a6:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCb95CGLDUOUfoTO2W1325MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGMzMjAyNzQ2NWEyOWZiODRmMmRkMDVmM2YwYmU4MDQy
N2IwYzkwHhcNMjUwNTEyMDMwMDMzWhcNMjUwNTEzMDMwMDMzWjAzMTEwLwYDVQQD
EyhiYTFlNWVjZjdiMjY3MWZmZGIwMmZkMDdmMDBjYjMzODhmY2VkNjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+kCowkIr+nLEbc9Rz0a5ib4jtgD
uNwVQQzOAlts+8DOwMN/3sKiDwcqn7BI2v6wV+tGaQXHlvowNMF002F2gQgslYgN
aJxLILHsDLL5MHtFNbWS6krSSVLgADyfJnnYeKXYAm/Of34eG5m8mJnvLcmokiwM
UA8WV2/KL3A3MgvXGbieERLngHhUoTZBfFiHACUGHZ+MEgsJdoWcg+S6ztRMMMr4
FnsjwKNRFgvjMXXNSaKYHvwkzL87IIPWs1w3mV4ezbnks/W8TLxihWpFu3TCuX4V
TeF4fvpjVelcIeAOuvC/klE2NNgbu6AeCzZAY7LZ1xoP2xvoJG1b08IliQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoeXs97JnH/2wL9B/AMsziPztYNMB8GA1UdIwQY
MBaAFFiMMgJ0ZaKfuE8t0F8/C+gEJ7DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMt
OWE4MDNmNzM2YzRhLzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMtOWE4MDNmNzM2YzRh
LzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHRTXs/R
AlPPdoObvdJyHJ+oDrXxsBzHGoG0QQsa7l8POgsO3xeKIHMV0srcbqO/LsTBnRMR
lN9/geCpLJlwcPf1d5+XJyF0aeC4ZJNfGBfARv0rcHsiHZYBTQ81Rx66OGI/M2It
pCyVUIorXXOatgEnPT9cZLcHq+nDXlO620r4g5DZVRBlRaPvEVCwnOjVJkJB8UNo
jQm0A59YUV7OR2E+UAX40rILh+ybZTPoPRSB0/zwaFVZ8icj36HJFK0LO2OoEtVp
FhR6N7xVrxR1Rx/+fYbclImfYbxTOS7vF4v7gX4X8QMn25g5husdnRAVkAb4brHa
A0WGiFZFyNqmRQ==
-----END CERTIFICATE-----
Generated at Mon May 12 12:20:37 2025 by rpki-client