Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
File: wtVzsWdwcfL9bUS4QBthISBZjM8.mft (raw, json)
Hash identifier: PUOJdWgosiN0e3nTjOvh+DL9P9ziGuOVDTuyisG52mg=
Subject key identifier: B7:F9:59:C1:69:85:79:24:1C:57:94:68:0D:78:2F:77:37:99:1B:FA
Authority key identifier: C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF
Certificate issuer: /CN=c2d573b1677071f2fd6d44b8401b612120598ccf
Certificate serial: 0196AFFCACA873DD4AD174F0059568409979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
Manifest number: 1529
Signing time: Thu 08 May 2025 13:01:34 +0000
Manifest this update: Thu 08 May 2025 13:01:34 +0000
Manifest next update: Fri 09 May 2025 13:01:34 +0000
Files and hashes: 1: wtVzsWdwcfL9bUS4QBthISBZjM8.crl (hash: gfDu6XlF6WkiPLQzhy4iA3+VQtp+a300MuUXkz4J2v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:ac:a8:73:dd:4a:d1:74:f0:05:95:68:40:99:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d573b1677071f2fd6d44b8401b612120598ccf
Validity
Not Before: May 8 13:01:34 2025 GMT
Not After : May 9 13:01:34 2025 GMT
Subject: CN=b7f959c1698579241c5794680d782f7737991bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:e6:27:cc:d4:cd:c7:62:62:34:3f:05:d1:
82:1c:3b:bc:64:51:84:b8:82:94:41:ac:96:10:6d:
1b:54:fe:60:27:de:f6:77:7d:75:da:89:ba:04:1b:
c3:2e:88:a9:74:be:5b:94:2b:5d:7e:dc:be:8a:4b:
85:31:93:e3:09:2c:6b:ee:7f:88:b9:12:fc:de:06:
69:14:a8:d7:b2:38:ad:5a:e4:37:2e:0b:f6:26:a2:
15:c6:b5:6b:26:d8:f4:38:48:95:48:5d:7c:50:1b:
32:e0:3c:32:56:a3:58:02:6c:5d:ab:49:cf:62:85:
85:5f:1c:d8:a5:a2:61:6a:f3:59:f0:2a:66:ac:0b:
6c:77:6b:96:82:9a:71:77:db:ec:d4:bf:26:fc:d0:
4c:7e:f4:09:5a:8f:a9:a2:34:7d:a6:04:c5:e5:77:
28:de:9c:c9:f8:30:fb:4d:ee:53:a9:ab:9a:5a:d8:
f7:a0:e6:2f:bb:b0:96:d1:6b:c6:31:27:7f:f3:03:
34:c0:15:7f:7d:ce:c6:60:a9:7c:55:f7:91:26:ff:
14:11:18:f3:9c:df:2a:7a:cd:28:93:18:8b:00:87:
00:6e:9c:8e:ae:63:08:85:2a:58:11:de:12:a8:41:
47:ed:af:e8:42:ca:ea:14:79:1b:28:5c:bb:8f:60:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:59:C1:69:85:79:24:1C:57:94:68:0D:78:2F:77:37:99:1B:FA
X509v3 Authority Key Identifier:
keyid:C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bd:e0:04:20:6d:16:c5:13:6f:9e:fb:81:71:ab:29:38:cd:
38:e3:f1:1d:ae:77:0e:62:2f:04:6b:41:2b:fc:d9:0e:2a:ac:
da:40:3b:70:db:21:c8:53:bf:4d:e2:5e:38:b2:a6:ba:20:31:
22:7d:03:2f:70:46:70:af:ed:d6:2e:1a:2c:75:ea:6f:6d:db:
a0:a0:b9:d5:dd:fc:6d:fe:7c:a4:c1:d6:b6:af:cc:8c:ef:f3:
57:3d:25:96:bd:0a:c9:07:1b:c1:f3:50:3b:92:ea:90:9a:f8:
7f:5a:cf:9f:38:22:d3:11:54:c6:b4:27:8f:ba:ec:f1:1c:dd:
2d:ac:00:32:46:17:c9:5c:13:76:19:f1:6f:2c:a7:5d:43:77:
de:df:a1:c2:40:ec:51:ec:33:1f:aa:f9:42:07:da:59:dd:95:
83:ee:96:ac:70:72:29:f0:8b:52:06:01:df:a8:c8:b6:c4:62:
8e:56:8a:3b:76:96:e3:bd:4b:12:08:9d:d3:4c:08:eb:24:50:
08:9a:90:8d:32:21:1d:cc:82:98:e6:b4:40:a1:f6:3f:59:6f:
b7:2e:69:18:47:3f:0b:c6:10:d4:53:06:65:6a:b8:cc:41:1a:
75:c6:36:43:eb:a0:ec:78:df:a5:a5:04:11:1e:d4:b0:6c:89:
0f:07:82:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZav/Kyoc91K0XTwBZVoQJl5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDU3M2IxNjc3MDcxZjJmZDZkNDRiODQwMWI2MTIxMjA1
OThjY2YwHhcNMjUwNTA4MTMwMTM0WhcNMjUwNTA5MTMwMTM0WjAzMTEwLwYDVQQD
EyhiN2Y5NTljMTY5ODU3OTI0MWM1Nzk0NjgwZDc4MmY3NzM3OTkxYmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdnmJ8zUzcdiYjQ/BdGCHDu8ZFGE
uIKUQayWEG0bVP5gJ972d3112om6BBvDLoipdL5blCtdfty+ikuFMZPjCSxr7n+I
uRL83gZpFKjXsjitWuQ3Lgv2JqIVxrVrJtj0OEiVSF18UBsy4DwyVqNYAmxdq0nP
YoWFXxzYpaJhavNZ8CpmrAtsd2uWgppxd9vs1L8m/NBMfvQJWo+pojR9pgTF5Xco
3pzJ+DD7Te5TqauaWtj3oOYvu7CW0WvGMSd/8wM0wBV/fc7GYKl8VfeRJv8UERjz
nN8qes0okxiLAIcAbpyOrmMIhSpYEd4SqEFH7a/oQsrqFHkbKFy7j2DLIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLf5WcFphXkkHFeUaA14L3c3mRv6MB8GA1UdIwQY
MBaAFMLVc7FncHHy/W1EuEAbYSEgWYzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RWenNXZHdjZkw5YlVTNFFCdGhJU0Jaak04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iNWY1OTEtZDVlYS00N2UyLTllNjkt
MDRkMTJmMmQwNzBhLzEvd3RWenNXZHdjZkw5YlVTNFFCdGhJU0Jaak04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iNWY1OTEtZDVlYS00N2UyLTllNjktMDRkMTJmMmQwNzBh
LzEvd3RWenNXZHdjZkw5YlVTNFFCdGhJU0Jaak04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF73gBCBt
FsUTb577gXGrKTjNOOPxHa53DmIvBGtBK/zZDiqs2kA7cNshyFO/TeJeOLKmuiAx
In0DL3BGcK/t1i4aLHXqb23boKC51d38bf58pMHWtq/MjO/zVz0llr0KyQcbwfNQ
O5LqkJr4f1rPnzgi0xFUxrQnj7rs8RzdLawAMkYXyVwTdhnxbyynXUN33t+hwkDs
UewzH6r5QgfaWd2Vg+6WrHByKfCLUgYB36jItsRijlaKO3aW471LEgid00wI6yRQ
CJqQjTIhHcyCmOa0QKH2P1lvty5pGEc/C8YQ1FMGZWq4zEEadcY2Q+ug7HjfpaUE
ER7UsGyJDweC6w==
-----END CERTIFICATE-----
Generated at Thu May 8 15:32:57 2025 by rpki-client