Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
File: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json)
Hash identifier: uxxKmMGLIEYxwmpp1jiU945OIdkAQ9qXthuRAE8ezbA=
Subject key identifier: CF:8C:C7:94:B2:B9:8E:2B:D0:6B:9D:A5:47:50:67:B4:1B:6D:41:E5
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial: 0196B3D85EE12B654EC9FD88DA09B62F63A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
Manifest number: 0770
Signing time: Fri 09 May 2025 07:00:23 +0000
Manifest this update: Fri 09 May 2025 07:00:23 +0000
Manifest next update: Sat 10 May 2025 07:00:23 +0000
Files and hashes: 1: 9VRbY37PKRH0-UJUOvI3sW7GRqg.roa (hash: JnDLn69G2OWz5ad5UI+dtO7s/dZ3uGdaBQeH20/IDXs=)
2: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: cAa3671zsQ+rP0IEsWodfjEYHUJGhqjwm1jSFMVysko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:5e:e1:2b:65:4e:c9:fd:88:da:09:b6:2f:63:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
Validity
Not Before: May 9 07:00:23 2025 GMT
Not After : May 10 07:00:23 2025 GMT
Subject: CN=cf8cc794b2b98e2bd06b9da5475067b41b6d41e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:54:c3:de:3b:17:38:3d:38:9c:2e:c7:15:45:
4e:ed:7f:0a:b0:3b:27:45:bc:83:d5:9b:45:fd:e5:
9c:69:ba:b4:ee:5b:25:3f:42:e1:07:25:cc:03:2a:
4d:08:31:05:aa:6e:f1:83:f7:84:7b:7a:f9:8d:52:
81:4e:75:47:51:4b:e0:7e:5b:1e:fe:92:4a:0f:92:
de:c8:63:2b:1b:62:e0:e5:d5:70:41:5b:2d:00:e6:
e7:6f:f2:68:25:7b:01:3c:40:95:dc:82:6b:0a:c4:
95:42:14:dd:90:43:0f:a3:69:d4:38:99:02:3d:15:
7e:aa:cb:28:bb:e4:74:06:58:e3:61:e9:65:4f:12:
37:2a:89:c8:4b:34:96:7f:d1:be:41:c3:2a:3d:ce:
54:fe:c4:81:93:f0:1a:a4:c1:b0:9b:f6:97:54:e3:
7c:c8:83:41:d6:d4:e8:38:e8:9a:82:72:49:93:92:
86:af:4f:b4:cf:b2:dc:d4:d7:9f:e3:42:a1:bc:85:
d7:80:88:5f:cb:af:aa:28:ca:04:e6:f9:b2:13:5f:
74:91:4c:66:cc:bd:20:9d:a9:6c:16:a6:59:14:3e:
17:8f:7d:4d:7b:c1:a4:50:cb:48:d7:2d:6d:51:33:
b4:ea:20:5b:58:c0:1b:90:91:0f:0b:36:e6:b3:14:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8C:C7:94:B2:B9:8E:2B:D0:6B:9D:A5:47:50:67:B4:1B:6D:41:E5
X509v3 Authority Key Identifier:
keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:92:06:b9:05:7d:fc:45:75:74:28:a3:fe:07:7c:c1:79:fc:
22:d5:96:67:b5:37:50:53:3d:92:d8:42:ad:03:21:52:22:30:
b6:f6:2b:cd:0b:6e:9d:05:f7:70:e9:6c:65:29:86:f4:e8:04:
21:7f:69:4a:9d:f4:2d:24:78:17:5c:cc:de:f9:c1:64:0b:9a:
ed:15:71:46:89:5a:d3:39:b6:1d:db:37:66:40:1c:15:59:db:
40:13:7e:7b:cc:fa:a0:91:3c:60:54:a4:24:94:f6:89:43:f4:
86:5c:12:49:4e:25:b0:e6:50:73:d6:f1:05:8f:3e:aa:d5:88:
d7:e6:c0:27:9f:74:1d:43:b0:ca:ce:46:3a:93:23:73:9e:84:
3c:e4:04:e6:13:95:cf:8e:0f:30:ee:6c:ee:fa:66:49:bd:85:
95:fe:77:43:72:11:44:ef:29:45:35:ab:4c:74:ce:b9:8a:a2:
31:47:dc:8b:d2:f1:a5:f3:f7:17:09:33:76:32:58:8c:fa:0b:
fb:11:4e:75:b9:bb:b3:ac:8b:a3:93:ff:ba:8e:14:37:37:93:
91:d2:19:60:26:22:9b:db:8e:c5:cd:e5:29:98:06:ff:90:70:
80:7d:23:ad:0c:82:f9:a0:e3:cc:78:3d:01:52:c0:3b:fa:ad:
c8:ff:72:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2F7hK2VOyf2I2gm2L2OpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNWQ0NTY1NGZhNTk3ZDM1MjJlZGExNjg4MzkxOTNlYmU3
ODJlZWYwHhcNMjUwNTA5MDcwMDIzWhcNMjUwNTEwMDcwMDIzWjAzMTEwLwYDVQQD
EyhjZjhjYzc5NGIyYjk4ZTJiZDA2YjlkYTU0NzUwNjdiNDFiNmQ0MWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01TD3jsXOD04nC7HFUVO7X8KsDsn
RbyD1ZtF/eWcabq07lslP0LhByXMAypNCDEFqm7xg/eEe3r5jVKBTnVHUUvgflse
/pJKD5LeyGMrG2Lg5dVwQVstAObnb/JoJXsBPECV3IJrCsSVQhTdkEMPo2nUOJkC
PRV+qssou+R0BljjYellTxI3KonISzSWf9G+QcMqPc5U/sSBk/AapMGwm/aXVON8
yINB1tToOOiagnJJk5KGr0+0z7Lc1Nef40KhvIXXgIhfy6+qKMoE5vmyE190kUxm
zL0gnalsFqZZFD4Xj31Ne8GkUMtI1y1tUTO06iBbWMAbkJEPCzbmsxT0lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+Mx5SyuY4r0GudpUdQZ7QbbUHlMB8GA1UdIwQY
MBaAFFpdRWVPpZfTUi7aFog5GT6+eC7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzIt
Yzk2NDBkMjUwYWZjLzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzItYzk2NDBkMjUwYWZj
LzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5IGuQV9
/EV1dCij/gd8wXn8ItWWZ7U3UFM9kthCrQMhUiIwtvYrzQtunQX3cOlsZSmG9OgE
IX9pSp30LSR4F1zM3vnBZAua7RVxRola0zm2Hds3ZkAcFVnbQBN+e8z6oJE8YFSk
JJT2iUP0hlwSSU4lsOZQc9bxBY8+qtWI1+bAJ590HUOwys5GOpMjc56EPOQE5hOV
z44PMO5s7vpmSb2Flf53Q3IRRO8pRTWrTHTOuYqiMUfci9LxpfP3FwkzdjJYjPoL
+xFOdbm7s6yLo5P/uo4UNzeTkdIZYCYim9uOxc3lKZgG/5BwgH0jrQyC+aDjzHg9
AVLAO/qtyP9yMw==
-----END CERTIFICATE-----
Generated at Fri May 9 11:22:28 2025 by rpki-client